last executing test programs: 6.872471294s ago: executing program 1 (id=358): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) r4 = getpgrp(0x0) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000200)=r4) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x8001, 0x401514}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000030601010000dd06445b0000010000450900020073797a32000000000900020073797a3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20d5}, 0x40000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r6, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x4008001) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f00000003c0)={0x0, 0x3}, 0x8) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) 6.021740488s ago: executing program 1 (id=361): bind$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x401000}, 0xc, &(0x7f0000000140)={&(0x7f0000000680)={0x148, r2, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x297}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff80}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x24e}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x75a}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x180}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[]) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[], 0x0, 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001cc0)={r3, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1}, 0x0, 0x0}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x200, 0xfffffffe}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syslog(0x3, &(0x7f00000004c0)=""/194, 0xc2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x2f, 0x97, 0x0, 0x69f3, 0x10, @local, @remote, 0x80, 0x7, 0x8}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000580)=""/100, 0x64, 0x0, 0x0}}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20800}, 0x0) 4.681182154s ago: executing program 1 (id=368): socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6(0xa, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60443, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fe00}], 0x1, 0x0, 0x0, 0x2b) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x5, @empty}, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000140)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$UFFDIO_CONTINUE(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) ioctl$KVM_CAP_PMU_CAPABILITY(r2, 0x4068aea3, &(0x7f0000000180)={0xd4, 0x0, 0x100}) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) read$hiddev(r5, &(0x7f0000000740)=""/43, 0x2b) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4000000013000100"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100)) r7 = dup3(r1, r4, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES64=r0], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00200000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYRESOCT=0x0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x5, 0x0, 0x280d0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$NS_GET_PARENT(r7, 0xb702, 0x0) 3.042431903s ago: executing program 1 (id=381): socket$kcm(0x10, 0x400000002, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0xffffffffffffff46) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) iopl(0x3) r2 = socket(0x8, 0x80000, 0x104) connect$inet(r2, 0x0, 0x0) pwritev2(r2, &(0x7f0000000180)=[{&(0x7f0000000040)="d0600b080000007bf93ecf49759e94b4519a0de2f87e5c417273a5dce55efb335b22dce602ca972f116438489fdab766171401f130eb1c9e78ec70db15755f97ca19ffc3dae556200b85ea0d2f7bdffc72489f5c7ac15d912063ffdd271b457181924a3d4dbfdfee93a14379adfe7c1effdacb", 0x73}], 0x1, 0xa, 0x6e6f2b53, 0x10) syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0001, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x800) pipe(&(0x7f0000000140)) keyctl$session_to_parent(0x12) 2.712565644s ago: executing program 0 (id=384): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000240)={0x0, 0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081140000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000007110a800000000001d300500000000004704000001ed00000f030000000000001d44020000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000040)=0x6) 2.670010345s ago: executing program 0 (id=386): sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400f0ffffffffffff00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket(0x11, 0x3, 0x0) 2.601993886s ago: executing program 3 (id=387): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x10e, 0x10100, 0x1}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000540)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x4866, 0x0, 0x0, 0x0, 0x0) 2.601473963s ago: executing program 3 (id=388): r0 = eventfd2(0x2, 0x1) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000000)="eadc20653c6f8800f887aacf8760ed23559045e08df3dea412b47e5d7618650ab425a222fae13a0764de468bf5089772fc8d9df83a16ba5f7c86ced653f45f08b7ae6d8d45c408b4b647724959541d2a74d74204572793f583d71c46d779bb36159e13b8f621f0fa36d762df3ee9f2a8abeeaa41eb7abdd21575092c2ce853424d11716eb80c7f1679ca8eb87fb244476d53771968c82d334bb7e7eb696b835b8b8e7101b90477978ca0d3ff2883175a96f77eb0f704d5cee07f1590fc2eec17d291831ef0e541193fb2ccad05fe55282193acd80a35b6f571e3cce84390f97db11fb6181f5fc8e0b86ed6974e7f4063e6ec5a5c6e7f11adea67d6cf714a3259") (async) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x7, 0x0) read$msr(r1, &(0x7f0000000140)=""/14, 0xe) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x20001, 0x109) execveat(r3, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)={[&(0x7f0000000200)='\'@@\x00', &(0x7f0000000240)='/dev/cpu/#/msr\x00', &(0x7f0000000280)='/dev/cpu/#/msr\x00', &(0x7f00000002c0)='[#[\xa3\xf1\x00', &(0x7f0000000300)=')([-/\x00']}, &(0x7f00000004c0)={[&(0x7f0000000380)='\x00', &(0x7f00000003c0)='/dev/cpu/#/msr\x00', &(0x7f0000000400)='/dev/cpu/#/msr\x00', &(0x7f0000000440)='/dev/cpu/#/msr\x00', &(0x7f0000000480)='{[*){,^!#!,\\\'[\x00']}, 0x800) msgget$private(0x0, 0x1) (async) close_range(r0, r0, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan0\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000540)={0xb, 0x1, 0x8803b841cfe4d9c1, 0x1f85, 0x6, [{0x9, 0x9, 0x3, '\x00', 0x1000}, {0x8, 0x80, 0x2, '\x00', 0x200}, {0x59, 0x8, 0x142f, '\x00', 0x4}, {0xdf06, 0x8, 0x8, '\x00', 0x2805}, {0xc2, 0xfff, 0x0, '\x00', 0xd82}, {0x2, 0x7, 0x4}]}) (async) r4 = syz_open_dev$audion(&(0x7f00000006c0), 0x2394, 0x40a182) ioctl$RTC_IRQP_READ(r4, 0x8004700b, &(0x7f0000000700)) (async) r5 = gettid() r6 = syz_open_procfs(r5, &(0x7f0000000740)='timers\x00') tee(r2, r6, 0xaa, 0x4) sendfile(r6, r0, &(0x7f0000000780)=0xf9, 0x81) (async) ioctl$HIDIOCGSTRING(r6, 0x81044804, &(0x7f00000007c0)={0x51, "0f719b1e027e5b198ec1cbf6c1b92f86f956a4f3ae199c954acae14c2f8dafa2fe2ebc6fa1152e9bbb1dafb4f38d559f565a04d5e9f9debbdc8c108b5b8a64ca100ed13b074b848b7f8bf90b880efb0f04"}) read$dsp(r6, &(0x7f0000000840)=""/51, 0x33) (async) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff0000/0xf000)=nil, 0xf000, 0x8, 0x8010, r6, 0x0) r8 = syz_open_dev$midi(&(0x7f00000008c0), 0x7, 0x1c5140) syz_io_uring_submit(r7, 0x0, &(0x7f0000000900)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x11, 0x0, r6, &(0x7f0000000880)={0x10000001}, r8, 0x1, 0x0, 0x1}) (async) socket$nl_generic(0x10, 0x3, 0x10) fcntl$getownex(r6, 0x10, &(0x7f0000000940)={0x0, 0x0}) prlimit64(r9, 0xb, &(0x7f0000000980)={0x80, 0x6}, 0x0) syz_open_dev$video4linux(&(0x7f00000009c0), 0x9, 0x800) openat$audio(0xffffff9c, &(0x7f0000000a00), 0x200, 0x0) (async) sendmsg$nl_netfilter(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, 0x13, 0xb, 0x801, 0x70bd26, 0x25dfdbff, {0x3, 0x0, 0x6}, [@generic="2a6349079eaa96d762a625f2b6204501c79773927172e568dc80e0778e019831c3988de90116c5c2258896d4dc276d5fa15bec66e4c60c1e6141e1"]}, 0x50}, 0x1, 0x0, 0x0, 0x4070}, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) setuid(0x0) 2.530873022s ago: executing program 3 (id=389): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x38) 2.302193929s ago: executing program 0 (id=390): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0xff90, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.242568188s ago: executing program 0 (id=391): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c20000005003f3d6d3fda77428000028000000000002907800000000ffffffff120006000000a859557a78e00000020000000000"], 0x0) gettid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in=@remote, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0xe4) setresuid(r2, 0xee00, r2) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) (async) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$UHID_INPUT(r4, &(0x7f0000001140)={0x8, {"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", 0x1000}}, 0x1006) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_getoverrun(r3) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) fsopen(&(0x7f0000000000)='pipefs\x00', 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001100)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001100)={0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x200000000000017d, 0x0, 0x0, 0x10}, 0x40) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r10, 0x4004ae99, &(0x7f0000000280)=0x3) ioctl$KVM_RUN(r10, 0xae80, 0x0) io_uring_setup(0x5b82, &(0x7f0000000300)={0x0, 0xaa51, 0x200, 0x2, 0xf8, 0x0, r4}) (async) io_uring_setup(0x5b82, &(0x7f0000000300)={0x0, 0xaa51, 0x200, 0x2, 0xf8, 0x0, r4}) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {r5, r6+60000000}}, 0x0) (async) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {r5, r6+60000000}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 1.662343213s ago: executing program 3 (id=392): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r1, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0x11) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB, @ANYRESDEC=0x0]) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x1000, r4}, 0x38) io_submit(0x0, 0x1, &(0x7f0000000780)=[0x0]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5b, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_getevents(r8, 0x1, 0x800000000000116, &(0x7f0000004600), 0x0) io_submit(r8, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r7, 0x0}]) dup3(0xffffffffffffffff, r3, 0x0) 1.468974262s ago: executing program 2 (id=393): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r1, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0x11) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB, @ANYRESDEC=0x0]) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r4}, 0x38) (fail_nth: 1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x1000, r4}, 0x38) io_submit(0x0, 0x1, &(0x7f0000000780)=[0x0]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5b, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_getevents(r8, 0x1, 0x800000000000116, &(0x7f0000004600), 0x0) io_submit(r8, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r7, 0x0}]) dup3(0xffffffffffffffff, r3, 0x0) 1.46852443s ago: executing program 1 (id=394): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r1, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = creat(0x0, 0x11) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB, @ANYRESDEC=0x0]) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001bc0)="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", &(0x7f0000001f80), 0xfffffffb, r5}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x1000, r5}, 0x38) io_submit(0x0, 0x1, &(0x7f0000000780)=[0x0]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r6) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002100)="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", 0x2000, &(0x7f0000002040)={&(0x7f00000002c0)={0x50, 0x0, 0x5, {0x7, 0x28, 0x4, 0x400, 0x0, 0xbcd, 0x6, 0x7}}, &(0x7f0000000340)={0x18, 0x0, 0x0, {0x9}}, &(0x7f0000000380)={0x18, 0x0, 0x1, {0x5}}, &(0x7f00000003c0)={0x18, 0xfffffffffffffffe, 0x5, {0xa}}, &(0x7f0000000400)={0x18, 0xfffffffffffffffe, 0x1, {0x1}}, &(0x7f00000004c0)={0x28, 0xffffffffffffffda, 0x5, {{0x8, 0x8, 0x2, r0}}}, &(0x7f0000000540)={0x60, 0xffffffffffffffda, 0x3, {{0x3, 0x4, 0x7fffffffffffffff, 0x4, 0x9, 0x400, 0x4, 0x689935f0}}}, &(0x7f00000005c0)={0x18, 0x0, 0x0, {0x1}}, &(0x7f0000000600)=ANY=[@ANYBLOB="4d3b11000000f5ffffff05000000000000"], &(0x7f0000000640)={0x20, 0x0, 0x4, {0x0, 0x10}}, &(0x7f0000000700)={0x78, 0x0, 0x2, {0x2d5c, 0x3741, 0x0, {0x0, 0x7, 0x1, 0x8, 0x4, 0x0, 0x9, 0x11ac, 0x1, 0x8000, 0x7f, 0x0, 0xee01, 0x2, 0x2}}}, &(0x7f0000001a00)={0x90, 0x0, 0x9, {0x5, 0x0, 0xffffffff80000000, 0x1, 0xfffff6ee, 0x2, {0x0, 0xa1, 0x18, 0x4, 0x7fffffffffffffff, 0x9f, 0x17, 0x1000, 0x5, 0x6000, 0x5, 0x0, 0xffffffffffffffff, 0x8, 0x3}}}, &(0x7f0000001ac0)={0xe0, 0x0, 0x3a4f9266, [{0x6, 0x7, 0x2, 0xffff0000, ')-'}, {0x5, 0x7aae, 0xd, 0x6, 'sched_switch\x00'}, {0x3, 0x9, 0xa, 0xfffffff7, '/dev/ptp0\x00'}, {0x5, 0x6f4, 0x2, 0xbf3, ')('}, {0x4, 0x98, 0x1, 0xa, '\x00'}, {0x2, 0xffffffffffffffff, 0x3, 0x80000001, '\b\','}]}, &(0x7f0000001d40)={0x208, 0x0, 0x40, [{{0x2, 0x1, 0x4, 0x5000000, 0xc3d, 0x1b6a, {0x0, 0x200, 0x7, 0x7, 0x10, 0x78, 0x1d8e, 0x3, 0x400, 0x2000, 0x0, 0x0, 0x0, 0x9, 0x7fffffff}}, {0x4, 0x6, 0xd, 0x9, 'sched_switch\x00'}}, {{0x0, 0x3, 0x4, 0x400, 0x53af, 0x1812, {0x1, 0x4, 0x0, 0xcd, 0xe, 0x7ff, 0x2, 0x6, 0x8, 0x2000, 0x1000, 0x0, 0x0, 0xfffffff0, 0x6}}, {0x2, 0x4, 0xd, 0x6, 'sched_switch\x00'}}, {{0x3, 0x3, 0x2, 0x7737, 0x0, 0x8, {0x2, 0x4, 0x0, 0x9b80000000000000, 0x1, 0x1601, 0x180000, 0x0, 0x2, 0x6000, 0x6, 0x0, 0x0, 0x4, 0x100}}, {0x4, 0x921, 0xd, 0x8000, 'sched_switch\x00'}}]}, &(0x7f0000004100)={0xa0, 0x0, 0xcd, {{0x5, 0x0, 0xffffffff80000000, 0x4, 0x3d1, 0x5, {0x6, 0x800, 0x0, 0x100, 0x5adb, 0x6, 0x1000, 0x2, 0x18, 0xa000, 0x8fe3, 0x0, r6, 0x7f31, 0xfffffffa}}, {0x0, 0x10}}}, &(0x7f0000002000)={0x20, 0xfffffffffffffffe, 0x7, {0x5, 0x0, 0xf, 0x6a4b4810}}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0xa79a, 0xfffffffb, 0x8000, 0x2000, r3, 0x101, '\x00', 0x0, r3, 0x5, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5b, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='gpio_direction\x00', r7, 0x0, 0x80000}, 0x18) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_getevents(r10, 0x1, 0x800000000000116, &(0x7f0000004600), 0x0) io_submit(r10, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r9, 0x0}]) dup3(0xffffffffffffffff, r4, 0x0) 1.022677562s ago: executing program 2 (id=395): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) fcntl$dupfd(r0, 0xda53a1418d9ed6bb, r2) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000180001801400020067656e657665310000000000000000001c000380"], 0x48}}, 0x0) 882.33926ms ago: executing program 2 (id=396): sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000170a0000000000000000000000000000240003800800014000000000180003"], 0x38}}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f7000280050001000000000030"], 0x58}}, 0x0) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000006"], 0x24d8}], 0x1}, 0x0) (async) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 882.042236ms ago: executing program 2 (id=397): msgget(0x2, 0x209) socket$nl_route(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 742.586596ms ago: executing program 2 (id=398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) r4 = socket(0x10, 0x3, 0xc) write(r4, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) 742.332491ms ago: executing program 0 (id=399): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0xff95, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 667.369701ms ago: executing program 0 (id=400): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x22000c0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r4 = open(&(0x7f0000000300)='./file0\x00', 0x42042, 0x81) ftruncate(r0, 0x2008002) sendfile(r3, r4, 0x0, 0x80000001) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r2], 0x0}, 0x0) syz_usb_ep_write(r5, 0x81, 0x1, &(0x7f0000000000)='B') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 470.722696ms ago: executing program 3 (id=401): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x10, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0xfff, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@acquire={0x128, 0x16, 0x1, 0x0, 0x0, {{@in6=@empty}, @in6=@loopback, {@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x3200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in6=@private1, @in=@multicast2}, {}, {}, 0x0, 0x6e6bbe}, 0x0, 0xfffffffc}}, 0x128}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@acquire={0x128, 0x16, 0x1, 0x0, 0x0, {{@in6=@mcast1}, @in6=@loopback, {@in6=@empty, @in=@empty, 0x0, 0x0, 0x3200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@private1, @in=@multicast2}}}}, 0x128}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r2 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r7, 0x5607, 0x38) 382.261642ms ago: executing program 1 (id=402): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x9, 0x0, 0xfffffff, 0x715f3157, 0x11, "78e1fdf10985a77080000000880d1f00"}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f00000007c0)=[{&(0x7f00000003c0)="b248e2c4fa308aff7ecee3347cc471a0f0be8c61a311875cd29ca0dff315bf2f642a800e99e07f65ee56f74d3c3eaa1815b0bb449f0dd1a485a6f414c77ab9a1b6127d57899a3e4348cd2829cafa7b8e0283656708e4ded3350af5001e3a146da627a6028d5fcee14e21143e376ebefa50dde3e13ed36524136366a800338ef452b3212bffc1ea", 0x87}, {&(0x7f0000000480), 0x58}, {0x0}], 0x3) write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0xa) socket$inet_tcp(0x2, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f0000000400000008000000da00000080020000", @ANYRESOCT, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 V\x00\x00\x00'], 0x48) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, &(0x7f0000000180)=0x6, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x40) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) mknodat(r0, &(0x7f00000000c0)='./file1/file2\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r4 = io_uring_setup(0x25474, &(0x7f0000000580)={0x0, 0xffffffff, 0x1000, 0x0, 0x3df}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r7, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 222.46483ms ago: executing program 3 (id=403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x149) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80020, &(0x7f0000000040)={[{@huge_within_size}]}) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x6, 0x6, 0x80, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$rxrpc(0x21, 0x2, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05000000000000e000000600000008000300", @ANYRES32=r5, @ANYBLOB="080005000200"], 0x24}}, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) write$binfmt_script(r6, &(0x7f00000025c0)={'#! ', './file0'}, 0xb) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0xfffffffffffffe89, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES8=r6, @ANYBLOB="050000000000000000002e00390008000300", @ANYRES32=r5, @ANYBLOB="0a00340002020202020200000a0006000802110000000000080026006c090000"], 0x3c}}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) socketpair(0x29, 0x2, 0x0, &(0x7f0000000a40)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x28) r7 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r7, &(0x7f0000000300)="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", 0xffffff6d, 0x4048041, 0x0, 0x0) socket(0x21, 0x2, 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e4001020303090224002af62300000904000002ca744d0009053f034d00ff99090805848f"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 0s ago: executing program 2 (id=404): write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x40) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) eventfd(0x5) bind$alg(r2, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f00000000c0), 0xae2, 0x8600) sendmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000005240)=[{&(0x7f0000000000)="03d1"}], 0x1}}], 0x1, 0x14) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x80044d76, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') open(0x0, 0x3430c2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000004c0), 0xb) dup3(r4, r3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:14853' (ED25519) to the list of known hosts. [ 35.168303][ T5311] cgroup: Unknown subsys name 'net' [ 35.402697][ T5311] cgroup: Unknown subsys name 'cpuset' [ 35.405926][ T5311] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 36.532871][ T5311] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 40.202136][ T5349] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 40.202444][ T5356] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 40.208524][ T5357] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 40.208956][ T5356] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 40.211051][ T5357] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 40.212982][ T5356] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 40.214615][ T5357] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 40.216830][ T5356] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 40.218969][ T5357] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 40.220748][ T5358] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 40.222575][ T5357] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 40.224914][ T5356] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 40.225229][ T5362] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 40.226528][ T5362] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 40.226643][ T5357] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 40.232477][ T5356] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 40.234322][ T5362] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 40.237611][ T5356] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 40.239792][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 40.242727][ T5356] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 40.246037][ T64] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 40.246295][ T5356] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 40.250668][ T5356] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 40.250672][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 40.426498][ T5345] chnl_net:caif_netlink_parms(): no params data found [ 40.443441][ T5346] chnl_net:caif_netlink_parms(): no params data found [ 40.491590][ T5350] chnl_net:caif_netlink_parms(): no params data found [ 40.508617][ T5359] chnl_net:caif_netlink_parms(): no params data found [ 40.596898][ T5345] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.599260][ T5345] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.601837][ T5345] bridge_slave_0: entered allmulticast mode [ 40.604730][ T5345] bridge_slave_0: entered promiscuous mode [ 40.661325][ T5345] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.663322][ T5345] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.665426][ T5345] bridge_slave_1: entered allmulticast mode [ 40.667413][ T5345] bridge_slave_1: entered promiscuous mode [ 40.687798][ T5346] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.690226][ T5346] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.692695][ T5346] bridge_slave_0: entered allmulticast mode [ 40.695487][ T5346] bridge_slave_0: entered promiscuous mode [ 40.747305][ T5346] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.749425][ T5346] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.751569][ T5346] bridge_slave_1: entered allmulticast mode [ 40.753577][ T5346] bridge_slave_1: entered promiscuous mode [ 40.801516][ T5345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.805754][ T5345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.820622][ T5346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.823592][ T5350] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.827516][ T5350] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.829877][ T5350] bridge_slave_0: entered allmulticast mode [ 40.832390][ T5350] bridge_slave_0: entered promiscuous mode [ 40.834980][ T5359] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.837793][ T5359] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.840477][ T5359] bridge_slave_0: entered allmulticast mode [ 40.843341][ T5359] bridge_slave_0: entered promiscuous mode [ 40.869085][ T5346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.871803][ T5350] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.874182][ T5350] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.877019][ T5350] bridge_slave_1: entered allmulticast mode [ 40.879180][ T5350] bridge_slave_1: entered promiscuous mode [ 40.890232][ T5359] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.892533][ T5359] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.894537][ T5359] bridge_slave_1: entered allmulticast mode [ 40.896557][ T5359] bridge_slave_1: entered promiscuous mode [ 40.911529][ T5345] team0: Port device team_slave_0 added [ 40.932956][ T5350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.947358][ T5345] team0: Port device team_slave_1 added [ 40.958070][ T5350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.961559][ T5359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.976380][ T5346] team0: Port device team_slave_0 added [ 40.991133][ T5359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.003292][ T5346] team0: Port device team_slave_1 added [ 41.027527][ T5345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.029410][ T5345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.036968][ T5345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.052665][ T5350] team0: Port device team_slave_0 added [ 41.062776][ T5345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.065203][ T5345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.072645][ T5345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.090007][ T5350] team0: Port device team_slave_1 added [ 41.093750][ T5359] team0: Port device team_slave_0 added [ 41.099678][ T5359] team0: Port device team_slave_1 added [ 41.102306][ T5346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.104886][ T5346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.113916][ T5346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.141416][ T5350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.143323][ T5350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.150324][ T5350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.169342][ T5346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.171705][ T5346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.178588][ T5346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.202317][ T5350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.204194][ T5350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.211987][ T5350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.215934][ T5359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.218274][ T5359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.227151][ T5359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.251391][ T5346] hsr_slave_0: entered promiscuous mode [ 41.253370][ T5346] hsr_slave_1: entered promiscuous mode [ 41.256391][ T5359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.258220][ T5359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.264865][ T5359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.279298][ T5345] hsr_slave_0: entered promiscuous mode [ 41.282289][ T5345] hsr_slave_1: entered promiscuous mode [ 41.284245][ T5345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.287052][ T5345] Cannot create hsr debugfs directory [ 41.362496][ T5350] hsr_slave_0: entered promiscuous mode [ 41.365046][ T5350] hsr_slave_1: entered promiscuous mode [ 41.367381][ T5350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.369958][ T5350] Cannot create hsr debugfs directory [ 41.374037][ T5359] hsr_slave_0: entered promiscuous mode [ 41.376344][ T5359] hsr_slave_1: entered promiscuous mode [ 41.378114][ T5359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.380117][ T5359] Cannot create hsr debugfs directory [ 41.666726][ T5346] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 41.674334][ T5346] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 41.679006][ T5346] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 41.683827][ T5346] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 41.704308][ T5345] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 41.712624][ T5345] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 41.718059][ T5345] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 41.722143][ T5345] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 41.748658][ T5359] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 41.755517][ T5359] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 41.760848][ T5359] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 41.767339][ T5359] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 41.794139][ T5350] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 41.799887][ T5350] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 41.803772][ T5350] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 41.808059][ T5350] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 41.872905][ T5345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.877440][ T5346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.895305][ T5345] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.903719][ T5346] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.916709][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.918665][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.921961][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.923818][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.927070][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.929021][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.932001][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.934285][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.943808][ T5359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.992481][ T5350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.000618][ T5359] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.019446][ T5350] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.026839][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.029454][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.043218][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.045282][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.048988][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.050934][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.053951][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.055928][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.114298][ T5350] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.132714][ T5345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.162778][ T5345] veth0_vlan: entered promiscuous mode [ 42.170586][ T5346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.180340][ T5345] veth1_vlan: entered promiscuous mode [ 42.209092][ T5345] veth0_macvtap: entered promiscuous mode [ 42.216384][ T5345] veth1_macvtap: entered promiscuous mode [ 42.226909][ T5346] veth0_vlan: entered promiscuous mode [ 42.232500][ T5359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.239074][ T5345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.246709][ T5345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.250069][ T5350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.254741][ T5346] veth1_vlan: entered promiscuous mode [ 42.258932][ T5345] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.261387][ T5345] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.263740][ T5345] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.267245][ T5345] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.275190][ T5356] Bluetooth: hci0: command tx timeout [ 42.275506][ T5348] Bluetooth: hci3: command tx timeout [ 42.275898][ T5349] Bluetooth: hci1: command tx timeout [ 42.353655][ T5346] veth0_macvtap: entered promiscuous mode [ 42.355722][ T5348] Bluetooth: hci2: command tx timeout [ 42.368631][ T5359] veth0_vlan: entered promiscuous mode [ 42.377968][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.378049][ T5350] veth0_vlan: entered promiscuous mode [ 42.380151][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.383959][ T5346] veth1_macvtap: entered promiscuous mode [ 42.394275][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.400091][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.404015][ T5346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.409833][ T5359] veth1_vlan: entered promiscuous mode [ 42.422803][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.426106][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.429607][ T5346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.433708][ T5350] veth1_vlan: entered promiscuous mode [ 42.443613][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.448160][ T5346] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.448255][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.450622][ T5346] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.457527][ T5346] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.459953][ T5346] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.480547][ T5359] veth0_macvtap: entered promiscuous mode [ 42.490069][ T5350] veth0_macvtap: entered promiscuous mode [ 42.493045][ T5359] veth1_macvtap: entered promiscuous mode [ 42.502496][ T5350] veth1_macvtap: entered promiscuous mode [ 42.504410][ T5345] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 42.542642][ T5350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.546221][ T5350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.549610][ T5350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.552500][ T5350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.556621][ T5350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.565910][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.568346][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.568619][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.571444][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.571452][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.580548][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.583831][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.588743][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.592368][ T5359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.603082][ T5350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.606023][ T5350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.608654][ T5350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.611520][ T5350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.615372][ T5350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.619365][ T5350] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.621827][ T5350] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.625018][ T5350] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.628200][ T5350] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.642983][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.647895][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.651470][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.655288][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.658845][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.663433][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.668305][ T5359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.672876][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.675601][ T5359] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.678862][ T5359] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.679047][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.682149][ T5359] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.686981][ T5359] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.768582][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.775644][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.803573][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.803592][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.842692][ T1022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.845991][ T1022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.860920][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.864049][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.197942][ T5423] mkiss: ax0: crc mode is auto. [ 43.512480][ T5420] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'. [ 43.554354][ T5434] netlink: 'syz.0.6': attribute type 5 has an invalid length. [ 43.557087][ T5434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 43.596548][ T5434] syz.0.6 uses obsolete (PF_INET,SOCK_PACKET) [ 43.857097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 44.345508][ T5348] Bluetooth: hci3: command tx timeout [ 44.345792][ T5356] Bluetooth: hci1: command tx timeout [ 44.355792][ T5356] Bluetooth: hci0: command tx timeout [ 44.426168][ T5356] Bluetooth: hci2: command tx timeout [ 45.067459][ T5452] ata3.00: invalid multi_count 1 ignored [ 45.149340][ T5451] dccp_close: ABORT with 5120 bytes unread [ 45.156164][ T5455] process 'syz.3.10' launched './file2' with NULL argv: empty string added [ 45.509023][ T35] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 45.679359][ T35] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 45.681681][ T35] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 45.684025][ T35] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 45.688427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 45.701314][ T35] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 45.704067][ T35] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 45.706515][ T35] usb 7-1: Product: syz [ 45.707678][ T35] usb 7-1: Manufacturer: syz [ 45.718519][ T35] cdc_wdm 7-1:1.0: skipping garbage [ 45.720345][ T35] cdc_wdm 7-1:1.0: skipping garbage [ 45.721964][ T35] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 45.843386][ T5466] Zero length message leads to an empty skb [ 45.931699][ T5458] 9pnet_fd: Insufficient options for proto=fd [ 45.997377][ T5472] vcan0 speed is unknown, defaulting to 1000 [ 46.000098][ T5472] vcan0 speed is unknown, defaulting to 1000 [ 46.002562][ T5472] vcan0 speed is unknown, defaulting to 1000 [ 46.101567][ T72] vcan0 speed is unknown, defaulting to 1000 [ 46.103455][ T5472] infiniband syz1: set active [ 46.113572][ T5472] infiniband syz1: added vcan0 [ 46.128733][ T5472] RDS/IB: syz1: added [ 46.130496][ T5472] smc: adding ib device syz1 with port count 1 [ 46.132691][ T5472] smc: ib device syz1 port 1 has pnetid [ 46.136536][ T72] vcan0 speed is unknown, defaulting to 1000 [ 46.139724][ T5472] vcan0 speed is unknown, defaulting to 1000 [ 46.184081][ T5472] vcan0 speed is unknown, defaulting to 1000 [ 46.226255][ T5472] vcan0 speed is unknown, defaulting to 1000 [ 46.271744][ T5472] vcan0 speed is unknown, defaulting to 1000 [ 46.334049][ T25] usb 7-1: USB disconnect, device number 2 [ 46.426443][ T5356] Bluetooth: hci0: command tx timeout [ 46.426469][ T5348] Bluetooth: hci1: command tx timeout [ 46.427530][ T5349] Bluetooth: hci3: command tx timeout [ 46.515695][ T5348] Bluetooth: hci2: command tx timeout [ 47.151276][ T5490] kernel profiling enabled (shift: 0) [ 47.251641][ T5494] trusted_key: encrypted_key: insufficient parameters specified [ 47.385079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 47.482324][ T39] audit: type=1326 audit(1727731573.630:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5497 comm="syz.0.21" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x0 [ 47.885811][ T5505] veth1_vlan: entered allmulticast mode [ 48.091206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.101796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.105559][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 48.109076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 48.111413][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 48.113948][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 48.119792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.151568][ T5510] 9pnet_virtio: no channels available for device syz [ 48.504979][ T5348] Bluetooth: hci0: command tx timeout [ 48.514764][ T5348] Bluetooth: hci1: command tx timeout [ 48.516309][ T5356] Bluetooth: hci3: command tx timeout [ 48.543766][ T5513] vcan0 speed is unknown, defaulting to 1000 [ 48.595629][ T5356] Bluetooth: hci2: command tx timeout [ 48.768220][ T5490] syz.2.18: vmalloc error: size 687865856, failed to allocated page array size 1343488, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 48.775297][ T5490] CPU: 0 UID: 0 PID: 5490 Comm: syz.2.18 Not tainted 6.12.0-rc1-syzkaller #0 [ 48.778499][ T5490] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 48.782369][ T5490] Call Trace: [ 48.783597][ T5490] [ 48.784711][ T5490] dump_stack_lvl+0x16c/0x1f0 [ 48.786445][ T5490] warn_alloc+0x24d/0x3a0 [ 48.788048][ T5490] ? __pfx_warn_alloc+0x10/0x10 [ 48.789838][ T5490] ? __get_vm_area_node+0x190/0x2d0 [ 48.791704][ T5490] ? __get_vm_area_node+0x1bc/0x2d0 [ 48.793621][ T5490] __vmalloc_node_range_noprof+0x114a/0x15a0 [ 48.795805][ T5490] ? profile_init+0xd5/0x130 [ 48.797494][ T5490] ? policy_nodemask+0xea/0x4e0 [ 48.799283][ T5490] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 48.801616][ T5490] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 48.803818][ T5490] ? trace_kmalloc+0x2d/0xe0 [ 48.805537][ T5490] ? profile_init+0xd5/0x130 [ 48.807224][ T5490] ? __pfx_profiling_store+0x10/0x10 [ 48.809192][ T5490] vzalloc_noprof+0x6b/0x90 [ 48.810868][ T5490] ? profile_init+0xd5/0x130 [ 48.812570][ T5490] profile_init+0xd5/0x130 [ 48.814200][ T5490] profiling_store+0x73/0xf0 [ 48.815898][ T5490] kobj_attr_store+0x55/0x80 [ 48.817595][ T5490] ? __pfx_kobj_attr_store+0x10/0x10 [ 48.819520][ T5490] sysfs_kf_write+0x117/0x170 [ 48.821272][ T5490] kernfs_fop_write_iter+0x33d/0x500 [ 48.823198][ T5490] ? __pfx_sysfs_kf_write+0x10/0x10 [ 48.825104][ T5490] vfs_write+0x6b5/0x1140 [ 48.826691][ T5490] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 48.828829][ T5490] ? __pfx_vfs_write+0x10/0x10 [ 48.830560][ T5490] ? __pfx___mutex_lock+0x10/0x10 [ 48.832351][ T5490] ? __rcu_read_unlock+0x2b4/0x580 [ 48.834207][ T5490] ksys_write+0x12f/0x260 [ 48.835715][ T5490] ? __pfx_ksys_write+0x10/0x10 [ 48.837442][ T5490] __do_fast_syscall_32+0x73/0x120 [ 48.839329][ T5490] do_fast_syscall_32+0x32/0x80 [ 48.841164][ T5490] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 48.843482][ T5490] RIP: 0023:0xf7ff7579 [ 48.844988][ T5490] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 48.851869][ T5490] RSP: 002b:00000000f575556c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 48.854945][ T5490] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000280 [ 48.857811][ T5490] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 48.860696][ T5490] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 48.863698][ T5490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.866616][ T5490] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 48.869489][ T5490] [ 48.872391][ T5490] Mem-Info: [ 48.873276][ T5490] active_anon:2815 inactive_anon:3 isolated_anon:0 [ 48.873276][ T5490] active_file:10113 inactive_file:30441 isolated_file:0 [ 48.873276][ T5490] unevictable:768 dirty:1701 writeback:0 [ 48.873276][ T5490] slab_reclaimable:5609 slab_unreclaimable:52223 [ 48.873276][ T5490] mapped:17688 shmem:883 pagetables:643 [ 48.873276][ T5490] sec_pagetables:308 bounce:0 [ 48.873276][ T5490] kernel_misc_reclaimable:0 [ 48.873276][ T5490] free:76025 free_pcp:2519 free_cma:0 [ 48.886779][ T5490] Node 0 active_anon:0kB inactive_anon:4kB active_file:3420kB inactive_file:56kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:6140kB dirty:3472kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9424kB pagetables:1268kB sec_pagetables:1192kB all_unreclaimable? no [ 48.895308][ T5490] Node 1 active_anon:11332kB inactive_anon:8kB active_file:40176kB inactive_file:118564kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:64612kB dirty:3332kB writeback:0kB shmem:1996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:1720kB pagetables:1368kB sec_pagetables:40kB all_unreclaimable? no [ 48.903363][ T5490] Node 0 DMA free:900kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:196kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:276kB local_pcp:124kB free_cma:0kB [ 48.911115][ T5490] lowmem_reserve[]: 0 273 0 0 0 [ 48.912527][ T5490] Node 0 DMA32 free:21084kB boost:0kB min:13904kB low:17380kB high:20856kB reserved_highatomic:4096KB active_anon:0kB inactive_anon:4kB active_file:4kB inactive_file:3276kB unevictable:1536kB writepending:3276kB present:1032196kB managed:306284kB mlocked:0kB bounce:0kB free_pcp:1140kB local_pcp:448kB free_cma:0kB [ 48.921578][ T5490] lowmem_reserve[]: 0 0 0 0 0 [ 48.923267][ T5490] Node 1 DMA32 free:281760kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:11332kB inactive_anon:8kB active_file:40176kB inactive_file:118564kB unevictable:1536kB writepending:3332kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:8880kB local_pcp:128kB free_cma:0kB [ 48.931604][ T5490] lowmem_reserve[]: 0 0 0 0 0 [ 48.933109][ T5490] Node 0 DMA: 1*4kB (U) 48*8kB (U) 8*16kB (U) 12*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 900kB [ 48.937209][ T5490] Node 0 DMA32: 103*4kB (UMEH) 62*8kB (UMEH) 115*16kB (UMEH) 165*32kB (UMEH) 82*64kB (UMEH) 35*128kB (UMEH) 11*256kB (MH) 1*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 21084kB [ 48.942376][ T5490] Node 1 DMA32: 175*4kB (UME) 349*8kB (UME) 322*16kB (M) 278*32kB (UME) 228*64kB (UME) 17*128kB (ME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 4*2048kB (UM) 57*4096kB (M) = 281348kB [ 48.947902][ T5490] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 48.950415][ T5490] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 48.952927][ T5490] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 48.955696][ T5490] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 48.958217][ T5490] 41924 total pagecache pages [ 48.959424][ T5490] 486 pages in swap cache [ 48.960605][ T5490] Free swap = 112920kB [ 48.961745][ T5490] Total swap = 124996kB [ 48.962897][ T5490] 524155 pages RAM [ 48.963939][ T5490] 0 pages HighMem/MovableOnly [ 48.965594][ T5490] 206681 pages reserved [ 48.966728][ T5490] 0 pages cma reserved [ 49.405028][ T5517] ata3.00: invalid multi_count 1 ignored [ 49.527927][ T5516] dccp_close: ABORT with 5229 bytes unread [ 49.733678][ T5533] netlink: 40 bytes leftover after parsing attributes in process `syz.0.29'. [ 49.805801][ T5538] vcan0 speed is unknown, defaulting to 1000 [ 49.810457][ T5536] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 49.997090][ T5543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'. [ 50.008312][ T5543] netlink: 44 bytes leftover after parsing attributes in process `syz.1.33'. [ 50.014698][ T5543] netlink: 43 bytes leftover after parsing attributes in process `syz.1.33'. [ 50.017386][ T5543] netlink: 'syz.1.33': attribute type 5 has an invalid length. [ 50.019711][ T5543] netlink: 43 bytes leftover after parsing attributes in process `syz.1.33'. [ 50.187376][ T5553] netlink: 'syz.1.36': attribute type 14 has an invalid length. [ 50.486945][ T5575] tipc: Started in network mode [ 50.489192][ T5575] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 50.492586][ T5575] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 50.512897][ T5575] tipc: Enabled bearer , priority 10 [ 50.746891][ T5595] vcan0 speed is unknown, defaulting to 1000 [ 51.636041][ T5475] tipc: Node number set to 1 [ 52.411932][ T5649] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.574592][ T1292] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.728544][ T1292] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 52.732509][ T1292] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 52.736347][ T1292] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 52.739434][ T1292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.758149][ T5652] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 52.776642][ T1292] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 52.942570][ T5661] netlink: 'syz.0.55': attribute type 1 has an invalid length. [ 52.946358][ T5661] netlink: 'syz.0.55': attribute type 3 has an invalid length. [ 52.953421][ T5661] netlink: 224 bytes leftover after parsing attributes in process `syz.0.55'. [ 52.957113][ T5661] NCSI netlink: No device for ifindex 0 [ 53.053640][ T1292] usb 6-1: USB disconnect, device number 2 [ 54.356667][ T5348] Bluetooth: hci2: command 0x0406 tx timeout [ 54.619280][ T5682] netlink: 24 bytes leftover after parsing attributes in process `syz.2.60'. [ 55.157241][ T5690] capability: warning: `syz.3.62' uses deprecated v2 capabilities in a way that may be insecure [ 55.559281][ T5705] vcan0 speed is unknown, defaulting to 1000 [ 55.652796][ T5707] netlink: 32 bytes leftover after parsing attributes in process `syz.3.65'. [ 55.772191][ T5706] vcan0 speed is unknown, defaulting to 1000 [ 56.345901][ T5356] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 56.349207][ T5356] Bluetooth: hci2: Injecting HCI hardware error event [ 56.353179][ T5356] Bluetooth: hci2: hardware error 0x00 [ 56.966777][ T5722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'. [ 56.969164][ T5722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.971133][ T5722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.974079][ T5722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.978198][ T5722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.350154][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 57.477660][ T5742] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 57.584434][ T9] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 57.587733][ T9] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 57.588561][ T5745] vcan0 speed is unknown, defaulting to 1000 [ 57.590715][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 57.590742][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 57.590756][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 57.607049][ T9] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 57.609991][ T9] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 57.612820][ T9] usb 8-1: Product: syz [ 57.614208][ T9] usb 8-1: Manufacturer: syz [ 57.621555][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 57.623015][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 57.630172][ T9] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 57.631923][ T9] cdc_wdm 8-1:1.0: Unknown control protocol [ 57.779549][ T5746] vcan0 speed is unknown, defaulting to 1000 [ 57.912303][ T5729] 9pnet_fd: Insufficient options for proto=fd [ 57.976172][ T5729] rdma_rxe: rxe_newlink: failed to add vcan0 [ 57.986251][ T5475] usb 8-1: USB disconnect, device number 2 [ 58.397151][ T5752] vcan0 speed is unknown, defaulting to 1000 [ 58.424722][ T5356] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 59.352538][ T5772] pim6reg527: entered allmulticast mode [ 59.357311][ T5770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 59.413986][ T5775] vcan0 speed is unknown, defaulting to 1000 [ 59.431567][ T5777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'. [ 59.506293][ T5779] netlink: 16 bytes leftover after parsing attributes in process `syz.3.81'. [ 60.111514][ T5795] tmpfs: Unknown parameter 'usrquota_abort' [ 60.557217][ T35] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 60.627124][ T1070] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 60.628938][ T1070] ata1: failed to read log page 10h (errno=-5) [ 60.635584][ T1070] ata1.00: exception Emask 0x1 SAct 0x8 SErr 0x0 action 0x0 [ 60.638326][ T1070] ata1.00: irq_stat 0x40000000 [ 60.639979][ T1070] ata1.00: failed command: WRITE FPDMA QUEUED [ 60.643431][ T1070] ata1.00: cmd 61/10:18:8a:c5:08/00:00:00:00:00/40 tag 3 ncq dma 8192 out [ 60.643431][ T1070] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 60.650525][ T1070] ata1.00: status: { DRDY } [ 60.667030][ T1070] ata1.00: configured for UDMA/100 [ 60.669215][ T1070] ata1: EH complete [ 60.708322][ T35] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 60.714655][ T35] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 60.718304][ T35] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 60.721062][ T35] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 60.725325][ T35] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 60.731010][ T35] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 60.734023][ T35] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 60.737333][ T35] usb 8-1: Product: syz [ 60.738914][ T35] usb 8-1: Manufacturer: syz [ 60.748652][ T35] cdc_wdm 8-1:1.0: skipping garbage [ 60.750414][ T35] cdc_wdm 8-1:1.0: skipping garbage [ 60.761014][ T35] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 60.763482][ T35] cdc_wdm 8-1:1.0: Unknown control protocol [ 60.951723][ T5798] 9pnet_fd: Insufficient options for proto=fd [ 61.000050][ T5798] rdma_rxe: rxe_newlink: failed to add vcan0 [ 61.008532][ T5408] usb 8-1: USB disconnect, device number 3 [ 61.599635][ T5802] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 61.602307][ T5802] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 61.605471][ T39] audit: type=1326 audit(1727731587.760:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5801 comm="syz.2.87" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x0 [ 61.614145][ T5802] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 61.620614][ T5802] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 61.622246][ T5802] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 61.627200][ T5802] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 61.631309][ T5802] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 61.632997][ T5802] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 61.635910][ T5802] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 61.650779][ T5808] usb usb8: usbfs: process 5808 (syz.3.89) did not claim interface 0 before use [ 61.722184][ T5809] netlink: 60 bytes leftover after parsing attributes in process `syz.3.89'. [ 61.731117][ T5809] Êü: entered promiscuous mode [ 61.966681][ T5816] macvlan0: entered allmulticast mode [ 61.968358][ T5816] veth1_vlan: entered allmulticast mode [ 62.191662][ T5819] input: syz1 as /devices/virtual/input/input6 [ 62.941336][ T5836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.97'. [ 62.962564][ T5836] sp0: Synchronizing with TNC [ 62.976252][ T5840] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 63.385365][ T5348] Bluetooth: hci0: command 0x0c1a tx timeout [ 63.487423][ T5849] fuse: Bad value for 'rootmode' [ 63.544228][ T5851] netlink: 'syz.3.101': attribute type 3 has an invalid length. [ 63.547251][ T5851] netlink: 'syz.3.101': attribute type 1 has an invalid length. [ 63.549281][ T5851] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.101'. [ 63.624670][ T5348] Bluetooth: hci1: command 0x0c1a tx timeout [ 63.688868][ T5855] devtmpfs: Cannot change global quota limit on remount [ 63.704622][ T5348] Bluetooth: hci3: command 0x0c1a tx timeout [ 63.788856][ T5857] netlink: 'syz.2.103': attribute type 27 has an invalid length. [ 63.817569][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.820289][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.834655][ T5857] infiniband syz1: set down [ 63.844060][ T39] audit: type=1326 audit(1727731589.990:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.1.104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7ffc0000 [ 63.854258][ T39] audit: type=1326 audit(1727731590.000:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.1.104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7ffc0000 [ 63.870296][ T39] audit: type=1326 audit(1727731590.000:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.1.104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7ffc0000 [ 63.876688][ T39] audit: type=1326 audit(1727731590.000:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.1.104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7ffc0000 [ 63.884262][ T39] audit: type=1326 audit(1727731590.000:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.1.104" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f03579 code=0x7ffc0000 [ 63.891102][ T39] audit: type=1326 audit(1727731590.000:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.1.104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7ffc0000 [ 63.898049][ T39] audit: type=1326 audit(1727731590.000:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.1.104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7ffc0000 [ 63.903511][ T39] audit: type=1326 audit(1727731590.000:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.1.104" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f03579 code=0x7ffc0000 [ 63.909184][ T39] audit: type=1326 audit(1727731590.000:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.1.104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7ffc0000 [ 63.944815][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.952760][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.032735][ T5857] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.035964][ T5857] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.039220][ T5857] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.042429][ T5857] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.083589][ T981] vcan0 speed is unknown, defaulting to 1000 [ 64.112174][ T5860] infiniband syz1: set active [ 64.118696][ T5860] infiniband syz1: set active [ 64.120777][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.123138][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.128787][ T5860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 64.135822][ T981] vcan0 speed is unknown, defaulting to 1000 [ 64.138988][ T25] vcan0 speed is unknown, defaulting to 1000 [ 64.141698][ T62] vcan0 speed is unknown, defaulting to 1000 [ 64.344559][ T5408] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 64.504679][ T5408] usb 8-1: Using ep0 maxpacket: 32 [ 64.512983][ T5408] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 64.515499][ T5408] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 64.518955][ T5408] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 64.522125][ T5408] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 64.525822][ T5408] usb 8-1: config 0 interface 0 has no altsetting 0 [ 64.534876][ T5408] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 64.537924][ T5408] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 64.540550][ T5408] usb 8-1: Product: syz [ 64.541764][ T5408] usb 8-1: Manufacturer: syz [ 64.543243][ T5408] usb 8-1: SerialNumber: syz [ 64.546746][ T5408] usb 8-1: config 0 descriptor?? [ 64.552792][ T5408] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 64.558385][ T5408] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 64.704394][ T5875] ata3.00: invalid multi_count 1 ignored [ 64.759763][ T72] usb 8-1: USB disconnect, device number 4 [ 64.770948][ T72] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 65.464650][ T5356] Bluetooth: hci0: command 0x0c1a tx timeout [ 65.570520][ T5886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 65.706821][ T5356] Bluetooth: hci1: command 0x0c1a tx timeout [ 65.783330][ T5905] xt_addrtype: ipv6 does not support BROADCAST matching [ 65.783797][ T5906] xt_addrtype: ipv6 does not support BROADCAST matching [ 65.784682][ T5356] Bluetooth: hci3: command 0x0c1a tx timeout [ 65.865361][ T11] syzkaller0: tun_net_xmit 76 [ 65.867621][ T5906] syzkaller0: create flow: hash 49122525 index 3 [ 65.871740][ T11] syzkaller0: tun_net_xmit 48 [ 65.894694][ T56] syzkaller0: tun_net_xmit 76 [ 65.922851][ T5906] syzkaller0: delete flow: hash 49122525 index 3 [ 67.182366][ T5926] 9pnet_fd: Insufficient options for proto=fd [ 67.485276][ T5929] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.544948][ T5356] Bluetooth: hci0: command 0x0c1a tx timeout [ 67.804645][ T5356] Bluetooth: hci1: command 0x0c1a tx timeout [ 67.864756][ T5356] Bluetooth: hci3: command 0x0c1a tx timeout [ 68.625841][ T5935] ata3.00: invalid multi_count 1 ignored [ 69.297271][ T5951] libceph: resolve '. [ 69.297271][ T5951] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 69.297271][ T5951] ' (ret=-3): failed [ 69.944726][ T5356] Bluetooth: hci3: command 0x0c1a tx timeout [ 70.468687][ T5961] syz.3.129 (5961) used greatest stack depth: 20992 bytes left [ 70.707935][ T5980] ata3.00: invalid multi_count 1 ignored [ 70.736290][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 70.760695][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.877165][ T5986] autofs: Unknown parameter './file1' [ 70.877174][ T5987] autofs: Unknown parameter './file1' [ 71.672663][ T6007] netfs: Couldn't get user pages (rc=-14) [ 71.675312][ T6007] netfs: Zero-sized read [R=2] [ 72.821480][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.152'. [ 72.826918][ T6039] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 73.108182][ T6044] vcan0 speed is unknown, defaulting to 1000 [ 73.837946][ T6052] netlink: 'syz.2.155': attribute type 3 has an invalid length. [ 74.284908][ T5408] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 74.424626][ T5408] usb 7-1: device descriptor read/64, error -71 [ 74.580497][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.159'. [ 74.582751][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.591714][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.597612][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.599592][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.607401][ T6073] capability: warning: `syz.1.160' uses 32-bit capabilities (legacy support in use) [ 74.610126][ T6073] netlink: 36 bytes leftover after parsing attributes in process `syz.1.160'. [ 74.675026][ T5408] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 74.805097][ T5408] usb 7-1: device descriptor read/64, error -71 [ 74.879427][ T6078] vcan0 speed is unknown, defaulting to 1000 [ 74.914794][ T5408] usb usb7-port1: attempt power cycle [ 74.989915][ T6082] Process accounting resumed [ 75.177974][ T6092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.164'. [ 75.284647][ T5408] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 75.299741][ T6095] netlink: 32 bytes leftover after parsing attributes in process `syz.3.165'. [ 75.303303][ T6095] ipvlan0: entered allmulticast mode [ 75.305647][ T6095] veth0_vlan: entered allmulticast mode [ 75.309684][ T5408] usb 7-1: device descriptor read/8, error -71 [ 75.554636][ T5408] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 75.576077][ T5408] usb 7-1: device descriptor read/8, error -71 [ 75.685215][ T5408] usb usb7-port1: unable to enumerate USB device [ 75.751948][ T39] kauditd_printk_skb: 54 callbacks suppressed [ 75.751960][ T39] audit: type=1326 audit(1727731601.900:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6099 comm="syz.1.167" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x0 [ 75.759165][ T6100] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 75.762083][ T6100] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 75.763735][ T6100] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 75.876162][ T831] cfg80211: failed to load regulatory.db [ 75.906398][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.170'. [ 75.909173][ T6110] tmpfs: Unknown parameter 'usrquotM' [ 77.079733][ T6121] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 77.083322][ T6121] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 77.085711][ T6121] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 77.087836][ T6121] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 77.532754][ T6129] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 77.624616][ T5356] Bluetooth: hci0: command 0x0c1a tx timeout [ 77.784674][ T5356] Bluetooth: hci3: command 0x0c1a tx timeout [ 77.784756][ T5348] Bluetooth: hci1: command 0x0c1a tx timeout [ 78.033153][ T6135] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 78.034206][ T39] audit: type=1326 audit(1727731604.180:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.1.178" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x0 [ 78.037331][ T6135] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 78.044915][ T6135] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 78.180879][ T6139] sp0: Synchronizing with TNC [ 78.187739][ T6139] trusted_key: encrypted_key: keylen parameter is missing [ 78.190934][ T6139] trusted_key: encrypted_key: keylen parameter is missing [ 78.193481][ T6139] ubi0: attaching mtd0 [ 78.201055][ T6139] ubi0: scanning is finished [ 78.202664][ T6139] ubi0: empty MTD device detected [ 78.403805][ T6139] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 78.407325][ T6139] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 78.409687][ T6139] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 78.411997][ T6139] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 78.414461][ T6139] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 78.416786][ T6139] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 78.419782][ T6139] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 352087390 [ 78.422976][ T6139] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 78.428700][ T6145] ubi0: background thread "ubi_bgt0d" started, PID 6145 [ 78.434664][ T6140] ubi0: detaching mtd0 [ 78.440372][ T6140] ubi0: mtd0 is detached [ 78.571783][ T5408] IPVS: starting estimator thread 0... [ 78.638672][ T6152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.183'. [ 78.644601][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 78.674948][ T6150] IPVS: using max 35 ests per chain, 84000 per kthread [ 78.716901][ T6155] 9pnet_fd: Insufficient options for proto=fd [ 78.750043][ T6161] netlink: 'syz.1.186': attribute type 3 has an invalid length. [ 78.752895][ T6161] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.186'. [ 78.801487][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.804241][ T9] usb 7-1: config 0 has no interfaces? [ 78.806083][ T9] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 78.811116][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.820156][ T9] usb 7-1: config 0 descriptor?? [ 78.862347][ T6171] ALSA: mixer_oss: invalid OSS volume '' [ 79.041337][ T39] audit: type=1326 audit(1727731605.200:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6144 comm="syz.2.181" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x0 [ 79.139193][ T6168] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 79.139319][ T6168] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 79.143316][ T6168] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 79.151848][ T6180] : entered promiscuous mode [ 79.156198][ T39] audit: type=1326 audit(1727731605.310:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6167 comm="syz.1.187" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x0 [ 79.901221][ T6188] fuse: Bad value for 'fd' [ 79.913910][ T6189] @: renamed from vcan0 (while UP) [ 80.904884][ T5348] Bluetooth: hci0: command 0x0c1a tx timeout [ 81.144677][ T5349] Bluetooth: hci1: command 0x0c1a tx timeout [ 81.147058][ T5356] Bluetooth: hci3: command 0x0c1a tx timeout [ 81.416687][ T1292] usb 7-1: USB disconnect, device number 7 [ 81.578986][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.202'. [ 81.582843][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.202'. [ 82.144122][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.209'. [ 82.272437][ T39] audit: type=1800 audit(1727731608.420:71): pid=6245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.207" name="file0" dev="overlay" ino=314 res=0 errno=0 [ 82.885256][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.211'. [ 83.015545][ T6261] team_slave_1: mtu greater than device maximum [ 83.017423][ T6261] team0: Device team_slave_1 failed to change mtu [ 83.040996][ T6265] vlan2: entered promiscuous mode [ 83.044872][ T6265] vlan2: entered allmulticast mode [ 83.047874][ T6265] vlan0: entered allmulticast mode [ 83.049511][ T6265] vlan0: entered promiscuous mode [ 83.062246][ T6265] team0: Port device vlan2 added [ 83.244794][ T5356] Bluetooth: hci3: command 0x0c1a tx timeout [ 83.318091][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.218'. [ 84.672866][ T6288] Bluetooth: MGMT ver 1.23 [ 86.817847][ T6312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.384653][ T35] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 87.514571][ T35] usb 6-1: device descriptor read/64, error -71 [ 87.764645][ T35] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 87.895002][ T35] usb 6-1: device descriptor read/64, error -71 [ 88.014712][ T35] usb usb6-port1: attempt power cycle [ 88.020076][ T39] audit: type=1326 audit(1727731614.170:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.2.232" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff7579 code=0x0 [ 88.267353][ T6360] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 88.270212][ T39] audit: type=1326 audit(1727731614.420:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.0.233" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x0 [ 88.270545][ T6360] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 88.278006][ T6360] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 88.374585][ T35] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 88.408663][ T35] usb 6-1: device descriptor read/8, error -71 [ 88.662719][ T6384] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 88.663795][ T39] audit: type=1326 audit(1727731614.810:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.0.234" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x0 [ 88.666774][ T6384] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 88.671362][ T35] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 88.673632][ T6384] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 88.696168][ T35] usb 6-1: device descriptor read/8, error -71 [ 88.775709][ T6397] netlink: 224 bytes leftover after parsing attributes in process `syz.3.237'. [ 88.784030][ T6397] netlink: 16 bytes leftover after parsing attributes in process `syz.3.237'. [ 88.786932][ T6397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.237'. [ 88.805006][ T35] usb usb6-port1: unable to enumerate USB device [ 89.133828][ T6410] warning: `syz.3.239' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.149302][ T6414] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 90.150185][ T39] audit: type=1326 audit(1727731616.300:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6413 comm="syz.2.242" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x0 [ 90.151519][ T6414] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 90.175345][ T6414] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 90.180424][ T6414] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 90.208692][ T6425] netlink: 44 bytes leftover after parsing attributes in process `syz.1.245'. [ 90.212950][ T6425] netlink: 43 bytes leftover after parsing attributes in process `syz.1.245'. [ 90.219940][ T6425] netlink: 43 bytes leftover after parsing attributes in process `syz.1.245'. [ 90.329543][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.246'. [ 90.460351][ T6442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.248'. [ 90.466062][ T6442] netlink: 'syz.2.248': attribute type 25 has an invalid length. [ 90.478706][ T6442] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.481298][ T6442] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.483961][ T6442] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.486757][ T6442] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.723251][ T6446] netfs: Couldn't get user pages (rc=-14) [ 91.819538][ T6455] netlink: 16 bytes leftover after parsing attributes in process `syz.1.253'. [ 91.822834][ T6455] netlink: 16 bytes leftover after parsing attributes in process `syz.1.253'. [ 92.024658][ T5356] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.186143][ T5356] Bluetooth: hci3: command 0x0c1a tx timeout [ 92.186399][ T5348] Bluetooth: hci1: command 0x0c1a tx timeout [ 92.274919][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 92.441374][ T39] audit: type=1326 audit(1727731618.590:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6470 comm="syz.3.257" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f42579 code=0x0 [ 92.632841][ T6478] ata3.00: invalid multi_count 1 ignored [ 93.061488][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 93.407998][ T39] audit: type=1326 audit(1727731619.560:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.3.267" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 93.420750][ T39] audit: type=1326 audit(1727731619.560:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.3.267" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 93.429060][ T39] audit: type=1326 audit(1727731619.560:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.3.267" exe="/syz-executor" sig=0 arch=40000003 syscall=290 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 93.435285][ T39] audit: type=1326 audit(1727731619.560:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.3.267" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 93.441444][ T39] audit: type=1326 audit(1727731619.560:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.3.267" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 93.447468][ T39] audit: type=1326 audit(1727731619.560:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.3.267" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 93.453095][ T39] audit: type=1326 audit(1727731619.560:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.3.267" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 93.458744][ T39] audit: type=1326 audit(1727731619.560:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.3.267" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 93.464683][ T39] audit: type=1326 audit(1727731619.560:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.3.267" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 93.470216][ T39] audit: type=1326 audit(1727731619.560:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.3.267" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 93.770987][ T6514] netlink: 'syz.1.268': attribute type 10 has an invalid length. [ 93.842961][ T6514] team0: Port device wlan1 added [ 94.114614][ T5348] Bluetooth: hci0: command 0x0c1a tx timeout [ 94.901244][ T6531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.106833][ T6537] can0: slcan on ptm0. [ 95.387966][ T6548] ata3.00: invalid multi_count 1 ignored [ 95.729945][ T6552] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 95.734852][ T6552] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 95.739346][ T6552] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 95.866262][ T6532] can0 (unregistered): slcan off ptm0. [ 97.455419][ T6611] mkiss: ax0: crc mode is auto. [ 97.588926][ T6621] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 97.734316][ T6614] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 97.746048][ T6614] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 97.748333][ T6614] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 97.758827][ T6626] ata3.00: invalid multi_count 1 ignored [ 98.257270][ T6647] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 98.423335][ T6654] syzkaller0: entered allmulticast mode [ 98.439700][ T6654] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 98.445251][ T6654] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 98.820303][ T6660] tty tty24: ldisc open failed (-12), clearing slot 23 [ 98.832284][ T6661] tty tty24: ldisc open failed (-12), clearing slot 23 [ 98.874344][ T6665] vcan0 speed is unknown, defaulting to 1000 [ 98.927555][ T6666] afs: Unknown parameter 'dont_hash' [ 99.474581][ T5348] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.784748][ T5348] Bluetooth: hci3: command 0x0c1a tx timeout [ 99.784782][ T5356] Bluetooth: hci1: command 0x0c1a tx timeout [ 99.807585][ T6690] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 99.809286][ T6690] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 99.810903][ T6690] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 99.820207][ T39] kauditd_printk_skb: 38 callbacks suppressed [ 99.820216][ T39] audit: type=1326 audit(1727731625.970:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6689 comm="syz.3.304" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x0 [ 99.837177][ T6694] netlink: 24 bytes leftover after parsing attributes in process `syz.1.305'. [ 99.866467][ T6694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'. [ 99.940315][ T6696] ata3.00: invalid multi_count 1 ignored [ 100.836930][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.311'. [ 100.839429][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.311'. [ 101.478835][ T6726] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 101.479587][ T39] audit: type=1326 audit(1727731627.630:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6724 comm="syz.1.316" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x0 [ 101.482305][ T6726] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 101.495418][ T6726] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 102.105689][ T6746] ceph: No mds server is up or the cluster is laggy [ 102.659730][ T6771] ata3.00: invalid multi_count 1 ignored [ 102.999194][ T6779] netlink: 'syz.3.326': attribute type 21 has an invalid length. [ 103.135222][ T6776] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 103.137307][ T39] audit: type=1326 audit(1727731629.290:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.2.325" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x0 [ 103.143023][ T6776] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 103.144910][ T6776] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 103.295887][ T6787] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 103.594662][ T831] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 103.658240][ T6789] syzkaller0: entered promiscuous mode [ 103.660308][ T6789] syzkaller0: entered allmulticast mode [ 103.744630][ T831] usb 7-1: Using ep0 maxpacket: 16 [ 103.745375][ T6793] sp0: Synchronizing with TNC [ 103.747851][ T831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 134, changing to 11 [ 103.749128][ T6793] sp0: Found TNC [ 103.750710][ T831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59144, setting to 1024 [ 103.757206][ T831] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 103.761881][ T831] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 103.765424][ T831] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.772779][ T831] usb 7-1: config 0 descriptor?? [ 103.778115][ T6787] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 103.937037][ T6797] vcan0 speed is unknown, defaulting to 1000 [ 103.989123][ T831] usbhid 7-1:0.0: can't add hid device: -71 [ 103.990760][ T831] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 103.995583][ T831] usb 7-1: USB disconnect, device number 8 [ 104.009320][ T6796] vcan0 speed is unknown, defaulting to 1000 [ 104.922650][ T6809] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 104.925172][ T6809] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 104.926568][ T39] audit: type=1326 audit(1727731631.080:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.2.335" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x0 [ 104.926780][ T6809] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 105.613864][ T6820] netlink: 20 bytes leftover after parsing attributes in process `syz.1.338'. [ 105.917288][ T6822] team0: entered promiscuous mode [ 105.919110][ T6822] team_slave_0: entered promiscuous mode [ 105.921279][ T6822] team_slave_1: entered promiscuous mode [ 105.955840][ T6824] team0: left promiscuous mode [ 105.958527][ T6824] team_slave_0: left promiscuous mode [ 105.960668][ T6824] team_slave_1: left promiscuous mode [ 106.236931][ T6837] mmap: syz.1.343 (6837): VmData 37515264 exceed data ulimit 65536. Update limits or use boot option ignore_rlimit_data. [ 106.243102][ T6838] bridge2: entered promiscuous mode [ 106.247955][ T6838] bridge2: entered allmulticast mode [ 106.267328][ T6837] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.609756][ T6843] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 106.611443][ T6843] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 106.611825][ T39] audit: type=1326 audit(1727731632.760:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.1.344" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x0 [ 106.613034][ T6843] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 107.081882][ T6887] ata3.00: invalid multi_count 1 ignored [ 107.750372][ T6899] vcan0 speed is unknown, defaulting to 1000 [ 108.504998][ T5356] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.590732][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'. [ 108.664594][ T5356] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.664635][ T5348] Bluetooth: hci1: command 0x0c1a tx timeout [ 109.145496][ T35] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 109.232740][ T6920] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 109.237653][ T6920] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 109.296214][ T35] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 109.298885][ T35] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 109.301633][ T35] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 109.304053][ T35] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 109.307764][ T35] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 109.312196][ T35] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 109.315168][ T35] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 109.317574][ T35] usb 6-1: Product: syz [ 109.318724][ T35] usb 6-1: Manufacturer: syz [ 109.323334][ T35] cdc_wdm 6-1:1.0: skipping garbage [ 109.325011][ T35] cdc_wdm 6-1:1.0: skipping garbage [ 109.327136][ T35] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 109.328984][ T35] cdc_wdm 6-1:1.0: Unknown control protocol [ 109.614990][ T6928] rdma_rxe: rxe_newlink: failed to add vcan0 [ 109.625305][ T9] usb 6-1: USB disconnect, device number 7 [ 109.847099][ T6931] vcan0 speed is unknown, defaulting to 1000 [ 109.917444][ T6934] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 109.919756][ T6935] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 109.923560][ T6935] netlink: 'syz.2.365': attribute type 1 has an invalid length. [ 109.927448][ T6935] netlink: 224 bytes leftover after parsing attributes in process `syz.2.365'. [ 109.983928][ T6936] netlink: 'syz.2.365': attribute type 1 has an invalid length. [ 109.986591][ T6936] netlink: 224 bytes leftover after parsing attributes in process `syz.2.365'. [ 110.092923][ T6940] KVM: debugfs: duplicate directory 6940-4 [ 110.513246][ T6957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.744606][ T5348] Bluetooth: hci3: command 0x0c1a tx timeout [ 110.834715][ T5475] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 110.985894][ T5475] usb 7-1: config 1 interface 0 has no altsetting 0 [ 110.989723][ T5475] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 110.992549][ T5475] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.994961][ T5475] usb 7-1: Product: syz [ 110.996342][ T5475] usb 7-1: Manufacturer: syz [ 110.997918][ T5475] usb 7-1: SerialNumber: syz [ 111.124894][ T6965] netlink: 'syz.3.374': attribute type 11 has an invalid length. [ 112.070932][ T6997] ceph: No mds server is up or the cluster is laggy [ 112.854113][ T5475] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 112.861146][ T5475] usb 7-1: USB disconnect, device number 9 [ 112.870372][ T5475] usblp0: removed [ 113.568760][ T7038] FAULT_INJECTION: forcing a failure. [ 113.568760][ T7038] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 113.576431][ T7038] CPU: 1 UID: 0 PID: 7038 Comm: syz.2.393 Not tainted 6.12.0-rc1-syzkaller #0 [ 113.579194][ T7038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 113.582665][ T7038] Call Trace: [ 113.583793][ T7038] [ 113.584811][ T7038] dump_stack_lvl+0x16c/0x1f0 [ 113.586569][ T7038] should_fail_ex+0x497/0x5b0 [ 113.588201][ T7038] _copy_from_user+0x30/0xf0 [ 113.589744][ T7038] __sys_bpf+0x215/0x5780 [ 113.591197][ T7038] ? ksys_write+0x21e/0x260 [ 113.592856][ T7038] ? __pfx___sys_bpf+0x10/0x10 [ 113.594397][ T7038] ? vfs_write+0x14d/0x1140 [ 113.595654][ T7038] ? __mutex_unlock_slowpath+0x164/0x650 [ 113.597533][ T7038] ? fput+0x30/0x390 [ 113.598944][ T7038] ? ksys_write+0x1ad/0x260 [ 113.600548][ T7038] ? __pfx_ksys_write+0x10/0x10 [ 113.602240][ T7038] __ia32_sys_bpf+0x76/0xe0 [ 113.603578][ T7038] __do_fast_syscall_32+0x73/0x120 [ 113.604903][ T7038] do_fast_syscall_32+0x32/0x80 [ 113.606185][ T7038] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 113.607981][ T7038] RIP: 0023:0xf7ff7579 [ 113.609373][ T7038] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 113.614723][ T7038] RSP: 002b:00000000f573456c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 113.616978][ T7038] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 00000000200006c0 [ 113.619040][ T7038] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.621259][ T7038] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 113.623775][ T7038] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 113.625839][ T7038] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 113.627933][ T7038] [ 113.628841][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.897988][ T7045] netlink: 24 bytes leftover after parsing attributes in process `syz.2.395'. [ 113.997949][ T7049] netlink: 'syz.2.396': attribute type 1 has an invalid length. [ 114.000122][ T7049] netlink: 9312 bytes leftover after parsing attributes in process `syz.2.396'. [ 114.002514][ T7049] netlink: 'syz.2.396': attribute type 1 has an invalid length. [ 114.184861][ T7059] netlink: 'syz.2.398': attribute type 1 has an invalid length. [ 114.307961][ T7062] ======================================================= [ 114.307961][ T7062] WARNING: The mand mount option has been deprecated and [ 114.307961][ T7062] and is ignored by this kernel. Remove the mand [ 114.307961][ T7062] option from the mount to silence this warning. [ 114.307961][ T7062] ======================================================= [ 114.948263][ T7071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.102767][ T7076] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7fffffffe pfn:0x4b1f0 [ 115.107009][ T7076] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 115.109684][ T7076] raw: 04fff00000000000 ffffea00012c7d08 ffffea0001b70408 0000000000000000 [ 115.112798][ T7076] raw: 00000007fffffffe 0000000000000000 00000000ffffffff 0000000000000000 [ 115.116098][ T7076] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 115.124726][ T7076] page_owner tracks the page as freed [ 115.127567][ T7076] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 5359, tgid 5359 (syz-executor), ts 113427309184, free_ts 113971450953 [ 115.133977][ T7076] post_alloc_hook+0x2d1/0x350 [ 115.137284][ T7076] get_page_from_freelist+0x101e/0x3070 [ 115.139552][ T7076] __alloc_pages_noprof+0x223/0x25c0 [ 115.141571][ T7076] alloc_pages_mpol_noprof+0x2c9/0x610 [ 115.143756][ T7076] folio_alloc_mpol_noprof+0x36/0xd0 [ 115.226825][ T7076] vma_alloc_folio_noprof+0xee/0x1b0 [ 115.254784][ T7076] do_wp_page+0x2012/0x4930 [ 115.256551][ T7076] __handle_mm_fault+0x1a93/0x2a10 [ 115.258470][ T7076] handle_mm_fault+0x3fa/0xaa0 [ 115.260245][ T7076] do_user_addr_fault+0x60d/0x13f0 [ 115.262162][ T7076] exc_page_fault+0x5c/0xc0 [ 115.263905][ T7076] asm_exc_page_fault+0x26/0x30 [ 115.274736][ T7076] page last free pid 7046 tgid 7043 stack trace: [ 115.278783][ T7076] free_unref_folios+0x956/0x1310 [ 115.287552][ T7076] folios_put_refs+0x551/0x750 [ 115.289550][ T7076] free_pages_and_swap_cache+0x45f/0x510 [ 115.314795][ T7076] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 115.317170][ T7076] tlb_finish_mmu+0x168/0x7b0 [ 115.318969][ T7076] exit_mmap+0x3df/0xb30 [ 115.320609][ T7076] __mmput+0x12a/0x480 [ 115.326137][ T7076] mmput+0x62/0x70 [ 115.327600][ T7076] do_exit+0x9bf/0x2d70 [ 115.329194][ T7076] do_group_exit+0xd3/0x2a0 [ 115.330918][ T7076] get_signal+0x2658/0x26d0 [ 115.332649][ T7076] arch_do_signal_or_restart+0x90/0x7e0 [ 115.334963][ T7076] syscall_exit_to_user_mode+0x150/0x2a0 [ 115.337467][ T7076] __do_fast_syscall_32+0x80/0x120 [ 115.456209][ T7076] do_fast_syscall_32+0x32/0x80 [ 115.458101][ T7076] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 115.462752][ T7076] ------------[ cut here ]------------ [ 115.465012][ T7076] kernel BUG at include/linux/mm.h:1444! [ 115.473940][ T7076] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 115.476591][ T7076] CPU: 2 UID: 0 PID: 7076 Comm: syz.2.404 Not tainted 6.12.0-rc1-syzkaller #0 [ 115.479747][ T7076] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 115.483632][ T7076] RIP: 0010:__iov_iter_get_pages_alloc+0x1d10/0x2230 [ 115.486178][ T7076] Code: b0 8b 48 89 df e8 90 25 4b fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 e0 76 05 fd 48 c7 c6 60 c6 b0 8b 4c 89 e7 e8 71 25 4b fd 90 <0f> 0b e8 c9 76 05 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 115.493101][ T7076] RSP: 0018:ffffc90003166010 EFLAGS: 00010283 [ 115.495351][ T7076] RAX: 000000000002a0b6 RBX: 0000000000000001 RCX: ffffc90007c51000 [ 115.498212][ T7076] RDX: 0000000000040000 RSI: ffffffff8487389f RDI: ffff88801e7c4cc4 [ 115.501108][ T7076] RBP: ffffea00012c7c34 R08: 0000000000000001 R09: fffffbfff2d315bd [ 115.503989][ T7076] R10: ffffffff9698adef R11: 0000000000000000 R12: ffffea00012c7c00 [ 115.506841][ T7076] R13: ffff888000bca800 R14: 0000000000001000 R15: 0000000000001000 [ 115.509688][ T7076] FS: 0000000000000000(0000) GS:ffff88802b600000(0063) knlGS:00000000f5755b40 [ 115.512932][ T7076] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 115.515317][ T7076] CR2: 00000000207a5000 CR3: 000000006187e000 CR4: 0000000000352ef0 [ 115.518205][ T7076] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 115.521116][ T7076] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 115.523982][ T7076] Call Trace: [ 115.525200][ T7076] [ 115.526272][ T7076] ? die+0x31/0x80 [ 115.527661][ T7076] ? do_trap+0x232/0x430 [ 115.529174][ T7076] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 115.531405][ T7076] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 115.533610][ T7076] ? do_error_trap+0xf4/0x230 [ 115.535391][ T7076] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 115.537616][ T7076] ? handle_invalid_op+0x34/0x40 [ 115.539474][ T7076] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 115.541704][ T7076] ? exc_invalid_op+0x2e/0x50 [ 115.543455][ T7076] ? asm_exc_invalid_op+0x1a/0x20 [ 115.545282][ T7076] ? __iov_iter_get_pages_alloc+0x1d0f/0x2230 [ 115.547517][ T7076] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 115.549843][ T7076] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 115.552109][ T7076] ? delete_node+0x207/0x8e0 [ 115.553799][ T7076] iov_iter_get_pages_alloc2+0x53/0xf0 [ 115.555755][ T7076] p9_get_mapped_pages.part.0.constprop.0+0x4ca/0x7d0 [ 115.558192][ T7076] ? p9pdu_vwritef+0x368/0x21d0 [ 115.559988][ T7076] ? __pfx_p9_get_mapped_pages.part.0.constprop.0+0x10/0x10 [ 115.562613][ T7076] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 115.564462][ T7076] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 115.566493][ T7076] ? p9_tag_alloc+0x4cc/0x870 [ 115.568245][ T7076] ? reacquire_held_locks+0x464/0x4c0 [ 115.570208][ T7076] p9_virtio_zc_request+0x991/0x1460 [ 115.572059][ T7076] ? p9pdu_writef+0xc4/0x100 [ 115.573615][ T7076] ? __pfx_p9pdu_writef+0x10/0x10 [ 115.575456][ T7076] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 115.577322][ T7076] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 115.579424][ T7076] ? rcu_is_watching+0x12/0xc0 [ 115.581177][ T7076] ? trace_9p_protocol_dump+0x192/0x220 [ 115.583195][ T7076] ? rcu_is_watching+0x12/0xc0 [ 115.584966][ T7076] ? p9_client_prepare_req+0x111/0x4d0 [ 115.586754][ T7076] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 115.588827][ T7076] ? hlock_class+0x4e/0x130 [ 115.590435][ T7076] ? mark_lock+0xb5/0xc60 [ 115.591981][ T7076] p9_client_zc_rpc.constprop.0+0x29a/0x880 [ 115.594103][ T7076] ? __pfx_p9_client_zc_rpc.constprop.0+0x10/0x10 [ 115.596207][ T7076] ? lock_acquire.part.0+0x11b/0x380 [ 115.598139][ T7076] ? hlock_class+0x4e/0x130 [ 115.599826][ T7076] ? mark_lock+0xb5/0xc60 [ 115.601416][ T7076] ? __lock_acquire+0x163e/0x3ce0 [ 115.603254][ T7076] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 115.605287][ T7076] p9_client_read_once+0x443/0x820 [ 115.607125][ T7076] ? __pfx_p9_client_read_once+0x10/0x10 [ 115.609168][ T7076] ? lockdep_hardirqs_on+0x7c/0x110 [ 115.611069][ T7076] ? __pfx_mark_lock+0x10/0x10 [ 115.612827][ T7076] ? __debug_object_init+0x34a/0x480 [ 115.614738][ T7076] p9_client_read+0x13f/0x1b0 [ 115.616470][ T7076] v9fs_issue_read+0x115/0x310 [ 115.618210][ T7076] ? __pfx_v9fs_issue_read+0x10/0x10 [ 115.620174][ T7076] netfs_read_to_pagecache+0x5c9/0x9a0 [ 115.622156][ T7076] netfs_readahead+0x7fa/0xaa0 [ 115.623909][ T7076] ? __pfx_netfs_readahead+0x10/0x10 [ 115.625809][ T7076] read_pages+0x1a8/0xd80 [ 115.627402][ T7076] ? __folio_batch_add_and_move+0x689/0xc60 [ 115.629566][ T7076] ? __folio_batch_add_and_move+0x612/0xc60 [ 115.631730][ T7076] ? __pfx_read_pages+0x10/0x10 [ 115.633517][ T7076] ? find_held_lock+0x2d/0x110 [ 115.635268][ T7076] page_cache_ra_unbounded+0x3c0/0x6c0 [ 115.637278][ T7076] page_cache_ra_order+0x7d9/0xc90 [ 115.639243][ T7076] page_cache_async_ra+0x5cb/0x820 [ 115.641120][ T7076] filemap_get_pages+0x367/0x1be0 [ 115.642974][ T7076] ? ktime_get_coarse_real_ts64+0x1b7/0x200 [ 115.645160][ T7076] ? ktime_get_coarse_real_ts64+0x147/0x200 [ 115.647328][ T7076] ? atime_needs_update+0xd1/0x7c0 [ 115.649187][ T7076] ? __pfx_filemap_get_pages+0x10/0x10 [ 115.651175][ T7076] ? __pfx___might_resched+0x10/0x10 [ 115.653095][ T7076] filemap_read+0x3a9/0xd00 [ 115.654755][ T7076] ? __pfx___lock_acquire+0x10/0x10 [ 115.656683][ T7076] ? __pfx_filemap_read+0x10/0x10 [ 115.658526][ T7076] ? __pfx___up_read+0x10/0x10 [ 115.660294][ T7076] ? mark_lock+0xb5/0xc60 [ 115.661888][ T7076] netfs_buffered_read_iter+0x117/0x190 [ 115.663909][ T7076] netfs_file_read_iter+0x10f/0x190 [ 115.665786][ T7076] v9fs_file_read_iter+0x9b/0x100 [ 115.667644][ T7076] __kernel_read+0x3f1/0xb50 [ 115.669338][ T7076] ? __pfx___kernel_read+0x10/0x10 [ 115.671197][ T7076] ? irqentry_exit+0x3b/0x90 [ 115.672910][ T7076] ? kernel_fpu_begin_mask+0x168/0x270 [ 115.674857][ T7076] integrity_kernel_read+0x7f/0xb0 [ 115.676430][ T7076] ? __pfx_integrity_kernel_read+0x10/0x10 [ 115.678341][ T7076] ? _sha256_update+0x93/0x220 [ 115.679719][ T7076] ? __pfx_sha256_ni_transform+0x10/0x10 [ 115.681168][ T7076] ? kasan_save_track+0x14/0x30 [ 115.682444][ T7076] ima_calc_file_hash_tfm+0x2c9/0x3e0 [ 115.683855][ T7076] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 115.685792][ T7076] ? generic_fillattr+0x663/0x8c0 [ 115.687641][ T7076] ? ima_alloc_tfm+0x21d/0x2d0 [ 115.689372][ T7076] ima_calc_file_hash+0x1ba/0x490 [ 115.691207][ T7076] ima_collect_measurement+0x8a7/0xa10 [ 115.693124][ T7076] ? __pfx_ima_collect_measurement+0x10/0x10 [ 115.695304][ T7076] ? lock_acquire.part.0+0x155/0x380 [ 115.697233][ T7076] ? rcu_is_watching+0x12/0xc0 [ 115.698984][ T7076] ? trace_contention_end+0xea/0x140 [ 115.700444][ T7076] ? is_bad_inode+0xd/0x40 [ 115.701603][ T7076] ? xattr_resolve_name+0x27b/0x3f0 [ 115.702949][ T7076] ? vfs_getxattr_alloc+0xf1/0x340 [ 115.704305][ T7076] ? ima_get_hash_algo+0x27d/0x410 [ 115.705658][ T7076] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 115.707357][ T7076] ? process_measurement+0x1271/0x2370 [ 115.709355][ T7076] process_measurement+0x1271/0x2370 [ 115.711282][ T7076] ? __pfx_process_measurement+0x10/0x10 [ 115.713338][ T7076] ? find_held_lock+0x2d/0x110 [ 115.715051][ T7076] ? v9fs_open_fid_add+0x102/0x190 [ 115.716940][ T7076] ? __pfx_lock_release+0x10/0x10 [ 115.718810][ T7076] ? do_raw_spin_lock+0x12d/0x2c0 [ 115.720684][ T7076] ? __pfx_v9fs_file_open+0x10/0x10 [ 115.722581][ T7076] ? bpf_lsm_file_open+0x9/0x10 [ 115.724364][ T7076] ? inode_to_bdi+0x9e/0x160 [ 115.726058][ T7076] ima_file_check+0xc1/0x110 [ 115.727634][ T7076] ? __pfx_ima_file_check+0x10/0x10 [ 115.728985][ T7076] ? inode_permission+0xdd/0x5f0 [ 115.730274][ T7076] security_file_post_open+0x8e/0x210 [ 115.731685][ T7076] path_openat+0x1419/0x2d60 [ 115.732893][ T7076] ? __pfx_path_openat+0x10/0x10 [ 115.734186][ T7076] ? __pfx___lock_acquire+0x10/0x10 [ 115.735548][ T7076] do_filp_open+0x1dc/0x430 [ 115.736735][ T7076] ? __pfx_do_filp_open+0x10/0x10 [ 115.738042][ T7076] ? find_held_lock+0x2d/0x110 [ 115.739300][ T7076] ? _raw_spin_unlock+0x28/0x50 [ 115.740571][ T7076] ? alloc_fd+0x2d7/0x6c0 [ 115.741701][ T7076] do_sys_openat2+0x17a/0x1e0 [ 115.742935][ T7076] ? __pfx_do_sys_openat2+0x10/0x10 [ 115.744304][ T7076] ? __pfx_do_sys_openat2+0x10/0x10 [ 115.745676][ T7076] ? __pfx___schedule+0x10/0x10 [ 115.746967][ T7076] __ia32_compat_sys_openat+0x16e/0x210 [ 115.748431][ T7076] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 115.750027][ T7076] __do_fast_syscall_32+0x73/0x120 [ 115.751385][ T7076] do_fast_syscall_32+0x32/0x80 [ 115.752669][ T7076] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 115.754315][ T7076] RIP: 0023:0xf7ff7579 [ 115.755375][ T7076] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 115.760306][ T7076] RSP: 002b:00000000f575556c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 115.762466][ T7076] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000280 [ 115.764513][ T7076] RDX: 000000000000275a RSI: 0000000000000000 RDI: 0000000000000000 [ 115.766567][ T7076] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 115.768621][ T7076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.770669][ T7076] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 115.772745][ T7076] [ 115.773570][ T7076] Modules linked in: [ 115.774871][ T7076] ---[ end trace 0000000000000000 ]--- [ 115.784621][ T7076] RIP: 0010:__iov_iter_get_pages_alloc+0x1d10/0x2230 [ 115.786426][ T7076] Code: b0 8b 48 89 df e8 90 25 4b fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 e0 76 05 fd 48 c7 c6 60 c6 b0 8b 4c 89 e7 e8 71 25 4b fd 90 <0f> 0b e8 c9 76 05 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 115.791462][ T7076] RSP: 0018:ffffc90003166010 EFLAGS: 00010283 [ 115.793069][ T7076] RAX: 000000000002a0b6 RBX: 0000000000000001 RCX: ffffc90007c51000 [ 115.795900][ T7076] RDX: 0000000000040000 RSI: ffffffff8487389f RDI: ffff88801e7c4cc4 [ 115.798375][ T7076] RBP: ffffea00012c7c34 R08: 0000000000000001 R09: fffffbfff2d315bd [ 115.800497][ T7076] R10: ffffffff9698adef R11: 0000000000000000 R12: ffffea00012c7c00 [ 115.802735][ T7076] R13: ffff888000bca800 R14: 0000000000001000 R15: 0000000000001000 [ 115.810489][ T7076] FS: 0000000000000000(0000) GS:ffff88802b700000(0063) knlGS:00000000f5755b40 [ 115.816414][ T7076] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 115.818358][ T7076] CR2: 00000000207e9000 CR3: 000000006187e000 CR4: 0000000000352ef0 [ 115.824635][ T7076] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 115.826823][ T7076] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 115.832407][ T7076] Kernel panic - not syncing: Fatal exception [ 115.834464][ T7076] Kernel Offset: disabled [ 115.835606][ T7076] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:27:21 Registers: info registers vcpu 0 CPU#0 RAX=ffff8880633937bc RBX=ffffc900032d7538 RCX=0000000000000003 RDX=0000000000000004 RSI=ffff8880633937b5 RDI=ffff8880633937bd RBP=0000000000000004 RSP=ffffc900032d7320 R8 =0000000000000001 R9 =0000000000000008 R10=0000000000000004 R11=0000000000000000 R12=0000000000000004 R13=0000000000000004 R14=00000000000007b4 R15=00000000000007b8 RIP=ffffffff8b1306ec RFL=00010246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ff00c5b2d00 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055e5b54d8000 CR3=000000002a92c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=62f81c4862f81c48 62f81c4862f81c48 62f81c4862f81c48 62f81c4862f81c48 62f81c4862f81c48 62f81c4862f81c48 62f81c4862f81c48 62f81c4862f81c48 ZMM22=419bb63a419bb63a 419bb63a419bb63a 419bb63a419bb63a 419bb63a419bb63a 419bb63a419bb63a 419bb63a419bb63a 419bb63a419bb63a 419bb63a419bb63a ZMM23=6861787668617876 6861787668617876 6861787668617876 6861787668617876 6861787668617876 6861787668617876 6861787668617876 6861787668617876 ZMM24=fcceb59cfcceb59c fcceb59cfcceb59c fcceb59cfcceb59c fcceb59cfcceb59c fcceb59cfcceb59c fcceb59cfcceb59c fcceb59cfcceb59c fcceb59cfcceb59c ZMM25=ac568af2ac568af2 ac568af2ac568af2 ac568af2ac568af2 ac568af2ac568af2 ac568af2ac568af2 ac568af2ac568af2 ac568af2ac568af2 ac568af2ac568af2 ZMM26=47e41f9b47e41f9b 47e41f9b47e41f9b 47e41f9b47e41f9b 47e41f9b47e41f9b 47e41f9b47e41f9b 47e41f9b47e41f9b 47e41f9b47e41f9b 47e41f9b47e41f9b ZMM27=86c5ef9d86c5ef9d 86c5ef9d86c5ef9d 86c5ef9d86c5ef9d 86c5ef9d86c5ef9d 86c5ef9d86c5ef9d 86c5ef9d86c5ef9d 86c5ef9d86c5ef9d 86c5ef9d86c5ef9d ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=3c0400003c040000 3c0400003c040000 3c0400003c040000 3c0400003c040000 3c0400003c040000 3c0400003c040000 3c0400003c040000 3c0400003c040000 info registers vcpu 1 CPU#1 RAX=00000000004463bd RBX=0000000000000001 RCX=ffffffff8b12f739 RDX=0000000000000000 RSI=ffffffff8b4cc8c0 RDI=ffffffff8bb12020 RBP=ffffed10036e9910 RSP=ffffc90000477e08 R8 =0000000000000001 R9 =ffffed10056a7025 R10=ffff88802b53812b R11=0000000000000000 R12=0000000000000001 R13=ffff88801b74c880 R14=ffffffff901cc608 R15=0000000000000000 RIP=ffffffff8b130b1f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020029000 CR3=000000005dd3a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88802b63ee80 RCX=0000000000000001 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000001 RBP=ffffed10056c7f94 RSP=ffffc900074cf718 R8 =0000000000000000 R9 =fffffbfff20398c1 R10=ffffffff901cc60f R11=0000000000000000 R12=ffffffff8b140dd7 R13=0000000000000000 R14=ffff88802b63fca0 R15=ffff88802b63ee80 RIP=ffffffff815c4a6c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000207a5000 CR3=000000005d316000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000080001 Opmask01=0000000000100002 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000fffffffb Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc73762e20 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 36322e3531312020 5b3e343c00306378 302f633578302b74 6c7561665f656700 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3632243531312020 5134343600306372 3025633572302174 6675616655656700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030302f30303030 302b303030205f63 666666615f663730 30202030000a3035 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3020302530303030 3020263030202020 3337323400313120 3020202600003031 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3b2a797e556f6f78 6c2a263e323b333a 393d383e393b3b2a 797e2a262378657e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 39723a253b6e3872 3a21616565625569 6566666b557e7965 7a2a2a573c3d3a3d ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000152701 RBX=0000000000000003 RCX=ffffffff8b12f739 RDX=0000000000000000 RSI=ffffffff8b4cc8c0 RDI=ffffffff8bb12020 RBP=ffffed10036ec488 RSP=ffffc90000497e08 R8 =0000000000000001 R9 =ffffed10056e7025 R10=ffff88802b73812b R11=0000000000000000 R12=0000000000000003 R13=ffff88801b762440 R14=ffffffff901cc608 R15=0000000000000000 RIP=ffffffff8b130b1f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000207e5000 CR3=000000006187e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000