last executing test programs: 7.664399354s ago: executing program 3 (id=1772): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) wait4(0x0, 0x0, 0x1000000, 0x0) syz_emit_vhci(&(0x7f0000001000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x7, 0xa}, {0x100, 0x804b, 0x5, 0x4, 0x4}}}}, 0x17) r0 = memfd_secret(0x0) r1 = socket$inet6(0xa, 0x6, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x1, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x14, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x5452, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r5, &(0x7f0000002980), 0x400000000000239, 0x0) openat$audio(0xffffff9c, &(0x7f00000001c0), 0x10800, 0x0) 6.558569s ago: executing program 3 (id=1776): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x300, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x7, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x573cb42fe2dd9c16, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x5, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x3, 0x0, 0x1}}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, &(0x7f0000000280), 0x240403, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000180)=0xf, 0x4) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000002000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5d, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) close(r3) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfffffd9d) socket(0x1e, 0x4, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r6, 0x0, 0xffffffffffffff3c, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 3.460919277s ago: executing program 3 (id=1792): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2b, 0x0, @loopback, @loopback, [], "1e520b4c951ee12e"}}}}}}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x400, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x4cc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x67}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000040)=0xa, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r6, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) 2.925385167s ago: executing program 1 (id=1793): bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180)={0x3, 0x5, 0x9, 0xda, 0x0, 0x16, 0x20, 0x7e, 0x3f, 0x3, 0x7f, 0x7, 0xa0, 0x6}, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14}], {0x14}}, 0x3c}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100005800c00068008"], 0x34}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x3b, 0x0, 0x0, &(0x7f0000000380)=""/7, 0x7}, 0x3fc}], 0x1, 0x40000002, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2}, 0x20) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0xfffffffffffffffd, 0x0, 0x0, 0x0, {0x40, 0x4, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x2, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, r5, {0x7, 0x29, 0x8, 0x0, 0x0, 0x48d}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x64100, 0xa1) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000ac0)={0x2bc, r7, 0x2, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x200101, @private1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x5e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xf, @rand_addr=' \x01\x00', 0xd3}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x673}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x562e}]}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff4236}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x4040}, 0x24008001) statx(r6, 0x0, 0x0, 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, 0x0) pipe(0x0) ioctl$TIOCGPTPEER(r6, 0x40480923, 0x8000000a) 2.811022578s ago: executing program 2 (id=1795): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={0x2, 0xf, 0x3, 0x2, 0x12, 0x0, 0x70bd2a, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x4, 0x4, 0x0, 0x6e6bb5, 0x5, {0x6, 0xff, 0x5, 0xc, 0x0, 0x4, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local}}, @sadb_x_policy={0x8, 0x12, 0x3, 0x4, 0x0, 0x6e6bb8, 0x6, {0x6, 0x6c, 0x9, 0x9, 0x0, 0x9acf, 0x0, @in6=@remote, @in=@multicast2}}]}, 0x90}}, 0x80) 2.810760577s ago: executing program 2 (id=1797): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) wait4(0x0, 0x0, 0x1000000, 0x0) syz_emit_vhci(&(0x7f0000001000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x7, 0xa}, {0x100, 0x804b, 0x5, 0x4, 0x4}}}}, 0x17) r1 = memfd_secret(0x0) r2 = socket$inet6(0xa, 0x6, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x1, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x14, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x5452, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r6, &(0x7f0000002980), 0x400000000000239, 0x0) openat$audio(0xffffff9c, &(0x7f00000001c0), 0x10800, 0x0) 2.719155991s ago: executing program 1 (id=1799): ioperm(0x0, 0x33, 0x3) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$video(&(0x7f0000000180), 0x3ff, 0x2000) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) ioperm(0x0, 0x9, 0x5) inotify_init1(0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x0, 0x1, 0x3, "ee0700000000000000000200"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0x4d7, &(0x7f0000000200)={0x0, 0x7a7b, 0x10000, 0x3, 0x316}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x1, 0xff, 0x5, 0xfffc, 0x0, "f682756c98cc948c"}) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000200)=0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x24044894) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0xf6, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) write$binfmt_misc(r8, &(0x7f0000000240), 0xfffffecc) splice(r7, 0x0, r9, 0x0, 0x714f, 0x0) 2.388096342s ago: executing program 0 (id=1802): syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x8, 0x0, 0x1000, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) close(r0) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x33, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c00000010000104000000000000000004000000", @ANYRES32=0x0, @ANYBLOB="76130000000000003c0012800b00010067656e65766500002c000280050004000300000005000a0001000000050003009200000005000800", @ANYRESOCT=r1], 0x5c}}, 0x40800) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000000000003f00000008000339", @ANYRES32=r5, @ANYBLOB="0c005e800800050055000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r7, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x63, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x1}], 0x1}}], 0x2, 0x4008040) openat$nullb(0xffffff9c, &(0x7f0000000100), 0x2200, 0x0) accept4(r3, &(0x7f0000000380)=@qipcrtr, &(0x7f0000000300)=0x80, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) 1.90251711s ago: executing program 2 (id=1803): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000001c0), 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='htcp\x00', 0x5) sendmsg$inet_sctp(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000484000000050000002000000000f0ffff"], 0x18, 0x2400c812}, 0xc8085) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000240)) setns(r3, 0x8000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="5400000010000d0425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000010004001280110001006272696467655f736c617665000000001c005ce5ab7b9ac3ff3394750ef4ae7099a4058005000a00010000000500090000000000050001000100000000000000c79d97af31d56496beef7eb7929d2d8f150983a84b705655fb9faed62117"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) sysfs$3(0x3) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="185000000000000000000000090000008500000011000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x107) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0xdc, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xac, 0x2, {{0xc31, 0xfffffffa, 0x4, 0x1ff, 0x401, 0xefffffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x8, 0x6, 0x7fff}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x7}, @TCA_NETEM_DELAY_DIST={0x33, 0x2, "c0bd3b1932c3b902252cdb65c879462a74e468e3120b1b10652e6df3b668bdbfc26749e7072a85168c90a3b0efbbdf"}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0xe3a, 0x76d, 0x6, 0x7, 0x6}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0xfffffffffffffff8}]}}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000600)={0x8, 0xfe1, 0x6, 0x5}, 0x8) sendto$inet6(r4, &(0x7f0000000800)="4103082ce22b480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1.902286747s ago: executing program 1 (id=1804): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x900, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) 1.897667564s ago: executing program 3 (id=1805): syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x8, 0x0, 0x1000, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) close(r0) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x33, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) openat$nullb(0xffffff9c, &(0x7f0000000100), 0x2200, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) 1.854300487s ago: executing program 2 (id=1806): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2b, 0x0, @loopback, @loopback, [], "1e520b4c951ee12e"}}}}}}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x400, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x4cc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x67}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000040)=0xa, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r6, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) 1.847687442s ago: executing program 1 (id=1814): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) r0 = socket$packet(0x11, 0xa, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='cifs\x00', 0x1200010, &(0x7f0000000100)) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x48, &(0x7f0000000a00)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) readv(r6, &(0x7f00000006c0)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1) 1.301010411s ago: executing program 0 (id=1807): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000304000480080002000100000008000100000000000400088058010c8054010b80080009"], 0x184}}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x10001, r0, 0x80000}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r1], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.300763061s ago: executing program 0 (id=1808): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffff14, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfe, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="a5fdad88000000000a000100aa"], 0x2c}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x1) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) close(r3) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'vxcan1\x00'}}, 0x1e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c000a80050009"], 0x38}}, 0x0) 1.240482713s ago: executing program 0 (id=1809): bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180)={0x3, 0x5, 0x9, 0xda, 0x0, 0x16, 0x20, 0x7e, 0x3f, 0x3, 0x7f, 0x7, 0xa0, 0x6}, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14}], {0x14}}, 0x3c}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100005800c00068008"], 0x34}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x3b, 0x0, 0x0, &(0x7f0000000380)=""/7, 0x7}, 0x3fc}], 0x1, 0x40000002, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2}, 0x20) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0xfffffffffffffffd, 0x0, 0x0, 0x0, {0x40, 0x4, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x2, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, r5, {0x7, 0x29, 0x8, 0x0, 0x0, 0x48d}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x64100, 0xa1) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000ac0)={0x2c0, r7, 0x2, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x200101, @private1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x5e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xf, @rand_addr=' \x01\x00', 0xd3}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x673}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x562e}]}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff4236}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4040}, 0x24008001) statx(r6, 0x0, 0x0, 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, 0x0) pipe(0x0) ioctl$TIOCGPTPEER(r6, 0x40480923, 0x8000000a) 1.110803537s ago: executing program 0 (id=1810): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) wait4(0x0, 0x0, 0x1000000, 0x0) syz_emit_vhci(&(0x7f0000001000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x7, 0xa}, {0x100, 0x804b, 0x5, 0x4, 0x4}}}}, 0x17) r1 = memfd_secret(0x0) r2 = socket$inet6(0xa, 0x6, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x1, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x14, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x5452, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r6, &(0x7f0000002980), 0x400000000000239, 0x0) openat$audio(0xffffff9c, &(0x7f00000001c0), 0x10800, 0x0) 878.019267ms ago: executing program 1 (id=1811): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) wait4(0x0, 0x0, 0x1000000, 0x0) syz_emit_vhci(&(0x7f0000001000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x7, 0xa}, {0x100, 0x804b, 0x5, 0x4, 0x4}}}}, 0x17) r1 = memfd_secret(0x0) r2 = socket$inet6(0xa, 0x6, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x1, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x14, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x5452, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r6, &(0x7f0000002980), 0x400000000000239, 0x0) openat$audio(0xffffff9c, &(0x7f00000001c0), 0x10800, 0x0) 600.03419ms ago: executing program 3 (id=1812): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x12c, 0x30, 0x1, 0x0, 0x0, {}, [{0x118, 0x1, [@m_ct={0xcc, 0x2, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "50870b994ae47cabd261853bf6600122"}]}, {0x90, 0x6, "952422442f9792e8284487cf9966d2174d8725879dad429784ac71ea6254d0432bea77c8b4ec21dba89e7fa38f0540cf4d55e120222d2fb2a0552c741a899b99a9fc10c576c77d13e08a010cd739c7d4fd36a556e7f1339e4bdfba69d21ee02d351fbd955b633173bb34447b5b2394bc48ea305c0b8d36cfe3836b790bd82848ccdd5145b06a5ee232fceff6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xfffffffe}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sysfs$3(0x3) 585.546061ms ago: executing program 3 (id=1813): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x9, r2, 0x265a4e34}, 0xc) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e2010203010902"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r5 = syz_usb_connect(0x6, 0x14a6, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x84, 0xb1, 0x44, 0xff, 0xaf7, 0x101, 0x9a47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1494, 0x4, 0x6, 0x0, 0x78, 0x9, [{{0x9, 0x4, 0xe9, 0xb0, 0x9, 0x9c, 0xa8, 0x8c, 0xf3, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "a585e0"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x2, 0xf979}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x2, 0xf8, 0x2}]}], [{{0x9, 0x5, 0x6, 0x8, 0x400, 0x6, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x1}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x4, 0xbc, 0x8, [@generic={0xed, 0x4, "048942aef845a8f17dfabac9ab29de31e3128d812d5e6a5340f160222d0d417ca11e7f96a49c89a832da5928d53d6b02a370117e8dd83a8f6627537441a78f63e3c0b671cd02225705dc25e2f56375019ad824f23ee2d24456da508606ff0dd3073361265b6d533f78c6316995f9ab3ab5b2111ea72e295b2c9ea839e5a26c16ec45a25b12de1e62bdf4d8ff8640237ec13dcf33d60c15fbc40aa8ca6783b23005b2ae62f6b6d99477fad11da0d087522a38081f3a88caae03c71c65ad329d98d7a441f1adb576a4cd679407ee2be8722c4c00cc2b414b361cfbf5490c858455b05c0f8fe441ef6bb9d5ba"}, @generic={0xb8, 0x24, "879957c7ba7ac1a2c0b2b8d362722fd14b3004d3cbedbbe32fa18280c2fa22fe31484e8760c7ba312776040ecf8ef5f3599c45c5dd001482dfcabe5c4e3f1ebbf050e3c4511f114ce9be7a3b3d82a0f5db88e019fe0b43472757754100dea54bdadcde037cf99121e399a6e54a157d79c92d86c2ddd2b39e2ebe1bfef5aa49fe9f73779e8a2205a50097bb90fccd1abdc5c02a25f06422a70b1d9107dac9f91ac687422baf50a9d2805102ce86fc60e049f42cfd1287"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0xff, 0x2, 0x89, [@generic={0xda, 0xd, "39d5b9ec25d4e213384e89b292275a0d8df70c0d024b4432f1d43ead75e8fadabf8f47d952e5d091089515998500f4388abd4ddf4f873e4d5269bc7e93ab5d37ebd430b441af5ac5aa10d249653e854c1cd2199f14bfc69c6edf9f2f12780bca279c8891841460a383f34bfeda4f3fcffc250c6664484d878beeaf6f77f9c7f509b735274ce9c5ee4710a9ee660b08c1468a2154432085cf8077b45bcc0c77d7c85da2ffa62798d902cf32d5cc3c00979f142adfa23cfc20d0657c2e7b3e03bd346cdf984a9efbba8c18b897e9b3adf4ea9a806ae8c9a99a"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0xc}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x4, 0xff, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x8}]}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x4, 0x2e, 0x8, [@generic={0x50, 0x22, "511985222cc649f50e90162162f625fe9312a5da389126f77968d3e6ca560afdb869d5e83c98fc617a84ac1876c604cb5c58ae4b65dd1681339fe79400bc1008024c906f2230cd29683888815851"}]}}, {{0x9, 0x5, 0xc69f759109b63809, 0x1, 0x40, 0x6, 0xfb, 0x74, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7f, 0x5}, @generic={0xcc, 0xf, "e0ef5ef5add38fe55a47c6cc2694c2ac58266ec81119e5d8ea80a5eea442068b0664cb204cbc2f2836ea5db21bee075ccbd71feefb0dfaa6d031b2d1aa1257fb4f850ba7dd6649993f9d412fa1957bffa6d93ba1d1d52fab1134100c73c715a5a05153d8916030fce4e65b91affeded2cc863e80be40b4a343fc6be006877fae83b9b32982cbc87c3bf6450a5d4c1cc43701939fb4ef8576d6310e88fcd1f6174bd13773bcf1c25dfffe47570c6072f2334b5a15a03e817f371c3e096271becb231b7f67b8fe98edc930"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xfa, 0xfd, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x10, 0x138084e4f8a808f8, 0x3, 0x4, 0x1d, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0x282}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x9, 0x4, 0x0, [@generic={0x100, 0x4, "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"}]}}]}}, {{0x9, 0x4, 0xc9, 0x0, 0xf, 0x45, 0x5d, 0xc8, 0x6, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "1e"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x126, 0x401, 0x9}, [@mdlm={0x15, 0x24, 0x12, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x6}, @country_functional={0x8, 0x24, 0x7, 0xe0, 0x7, [0x3]}]}, @generic={0xe8, 0x2, "f074b3d92b7b9aaa13e7413ec650b094cbb3fec63e7e8a178af1fb358847ece27b1932dd96e6f0dec60d2fd8248f050cf320275fbb4abdd51f199f0fb3939464fad7f7cea4f07af4c1e5dcebaa4b260817c819a54d595d61e7205fb0ac5d5be3e9377762f30179cde6c4c89b9e94c87cfc70f87e1cf3ea5a3e70281ea36466bc5fff72aeb75c2dd7b9071492f4794b9b362531a1eae997d4623318c80687bbc7dc220bb94254c8cc7be42016d489f31bef1c133a4145e98382a35308fdaf9f7abe2d127ed0999dcf343ceb78ed3e8b834a1d22f55b391e9e345f149e771c8bc19ad0b8295f51"}], [{{0x9, 0x5, 0x7, 0x1, 0x20, 0x4, 0x5, 0xa2, [@generic={0x10, 0x9, "1c05ce7fc054a058fb8de9851b42"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x2, 0xb, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1ab787510464c8aa, 0x2d}, @generic={0x6a, 0x10, "9bdadf6a372ef1a5f90c7cb9c242602fd2459a6e9732d16c80507844d0b612819b54ca0cfc8b59a2642fdc43ea3a0fef97fe62bbcca58596c954da426fd83e0d2cb65ab60cc396894a79ac132c2731e8379a0f963ed8d9108643dc7809ab51de329f49b12733dfce"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x200, 0x6, 0x7a, 0x40, [@generic={0xa3, 0x22, "a0397c167e078172df7264602f0af4928c8d86f8d0d3a5581a22672f95b2b8545e6f1196ea05c99ee6be4eb55cc3c79409516fd83474c28649a80ff8014673239b2c896df4b25184089600ff233effc88de97535f4c6969e78f74e20864890af712b43465b039d667397d9322f649211843151db2358c381ece94f9377442f7f6a4a46eec6ab75f442558ed730b88981deb9e9d08c69cdba195962cb9176ad4df9"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x9, 0x0, 0x2, [@generic={0xc3, 0x21, "21773f93f86de1af5291752dd2758b46998130f6ef85366b6a2d14f06b9f5257ff850d79c3d27497d1f264a3c640cdac16673560dac6e770f96011212b4aa17bcb202801e3282f6c3d90d8dc1e352e380edf4a97cf88f99a3941823ac336e7555902ddf1e97ae10d3e564ca8ecf99948f2943a3d0dc64e86380ce36f42972da621a3141fedb0c4d52c5a16233cce5cb9cabecc0850c8a193579ad0db675e193208eeec43ffb6967ded3c72eeffe0a12323282015bcc9747f61885f01d9ef2a43e3"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x200, 0x66, 0xe, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x81}]}}, {{0x9, 0x5, 0x6, 0x4, 0x40, 0x9, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xf7}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x4, 0x39, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xc2, 0x4}]}}, {{0x9, 0x5, 0x0, 0x3, 0x8, 0x8, 0x4, 0x0, [@generic={0x14, 0x11, "c20d2a515dc017034f98e88a75b5908b94c8"}]}}, {{0x9, 0x5, 0x0, 0xf, 0x40, 0xb, 0x10, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x40}, @generic={0xae, 0x9, "b20c6a5f1c5e7797f4cd34382737d211eb7e37b7de339d8534609d93c1ec675fdc575368b554692abdd27b0fb1d9b39a8f093fdf802f0a603b7879ebc5f54fa602d38594385ef82e362461c7f4f6c65dc4de396cba31a06e71e71ce1b567517525ab17fc5eb3c3fa485848bc0da7c7718026950d6243e88b2c1133ff9cbe8bfd770e658fc297cf1515255a791cc53b8e7f8f75984e074a779c0da7a64b796a8ba2b5cddef9680cad84ede245"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x10, 0x0, 0x7, 0x7f, [@generic={0xd5, 0x31, "734676c169fb554a45a208caab0b7c271854f92adb24dba64248f44b3bb00329bfcf182d8dbfc389623d30389cb8a7a4ea1d32afefdac719e71c449f4595d6cc7fd2a2ed53dd50eae72289c833163410ae28da4ddb37f48cd97c8a40799bef8e1261139c68f96a2363694ebcc08e2d0f4f60e8ecc6c25a9edba074de67b69899e3a445cdefd3f7d44b9e6a6d8bb1b9288efb18191d35281f2d6df80ee372493d78d23e9fdb75733ba0269d832becd9bbcb7c2f03a0fc7d992a227e829ac4c26749d18f460d90bc692f0f64d96469ad2c2f2867"}, @generic={0xae, 0x23, "46575219e9c3b5a5033f1b881a6c9f5d1d719db3e4d33a80936aef36aee1d7e2dda644e4ae93e26e61c1fd035f5dbcd63e5275e5b1412590a54d0a63dbea4fcc199b63db522701f369ac8ada9eb36c99510c53b452c2a7598ee31e4a58516f31790dab0ac72cc1f49318cce3a0e931e2921a75cfdbc00678665b48c9f015c0e41b644df032bd301705903987a846e6aa74f51d23b2c3d0ad3a324b3a033f7c18569f904cf02bdb13f45725df"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x2, 0x6, 0x0, [@generic={0xff, 0xf, "89572bcb89f22322f0136148debaf5a345016116fd17b1ce0b717f02893435dc915859a3e461b8b82ea7956e7f794bee0a9d804bf6451e157ea54d136ea100bb4915bce78f1460c0b03535cb984d7ecc03f8cb6e517039716fd0b18ff9fab1ce7df6ec08381f61aae92261fdd6594b0baad558e3e6f8c15f1bcdc746722c03cce897d4b9fbe0b37c1b8b8e581afbe6a7c7f6f8c475b4dbb2036cb10f4e392aa00e427e09eb12269b788e74ea29afe2fa58051277698e3f422237c7e161b1920e931e8a8f27e0740886b65bf2296cdfc9f03b31e525f847e281dcfe3bfaf6d49c406fb4b50e4634370d5d8b02cf1e3ec6d45a13dad6e96c5da20ee2e3a2"}]}}, {{0x9, 0x5, 0x696f49176c9a968, 0x4, 0x20, 0x1, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x1492}]}}, {{0x9, 0x5, 0x0, 0x2, 0x20, 0x10, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x5}]}}, {{0x9, 0x5, 0xf, 0x10, 0x0, 0x5, 0x3, 0x2, [@generic={0x6a, 0x22, "6de87ab21e4077de2c0c15c97731c08fcd74a3155346251369622898aeec83001cfe84e80c78f020244ecfc0ba7de6ef36e82d0f3fb62e4364ed4f408167b3dc14ebc58d7c5e5f3725f302339b09791f077d030a9336898d3e39d94b0a8adb6ae159444e260c72e9"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x3720d2cf791f2912, 0x6, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x1}]}}]}}, {{0x9, 0x4, 0x31, 0xfd, 0xc, 0xd4, 0x53, 0xb3, 0x4, [@uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x3, 0x7, 0xfc, "", "6e55fe"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x4, 0x7, 0xc, "37b3cb35af"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xa5b, 0x227, 0x93, "11e7"}, @as_header={0x7, 0x24, 0x1, 0x4, 0xfe, 0x1001}]}], [{{0x9, 0x5, 0x80, 0x3, 0x8, 0x8, 0xbb, 0xbe, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xfbd}]}}, {{0x9, 0x5, 0xa, 0x8, 0x400, 0x7f, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x181, 0xf}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xff}]}}, {{0x9, 0x5, 0x3, 0xc, 0x40, 0x2c, 0x9, 0x9, [@generic={0x16, 0x23, "e82928af6845b8d4ab6a704598ec1d34ce95f075"}, @generic={0x95, 0x6, "016620545a8f2469d89cad8b02f70d5f1ef9742514b27f469dbf78fca98ebc63de785ca4350e272ad5b366405bd3d12a6b0cf8dae3220f29c796285f37700e4223a756557119b93b543ede28d0175f3d579db746924669698178cc34a41263bac70aef8e05a188a652f19e71a98b44617cecc653cb5bf522454e715953af53c8c4cb5fbd839f36df729ce1c9f30dd2ecf26026"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x200, 0x30, 0x3, 0x14, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0x3, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x3ff}]}}, {{0x9, 0x5, 0x7, 0xc, 0x20, 0xc, 0x4f, 0x5, [@generic={0x58, 0xf, "f80beab0fc471364e721d3febaf1c647e109d9a589dc945ca2b1e8abbcff5159b9b2857fd5f449c664e24e3c2b4ebf87eb69138a200adc4558e471b66d2f284ab2fc6240c21c01f7d86e8138d2c5aa70b5a2427e2f11"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x200, 0x4, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x3}, @generic={0x1e, 0xb, "9bdf803a4d3102038b01714dc5934117e4706e99906992c447e3f47b"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x5, 0x4, 0xb7, [@generic={0x67, 0x30, "b84815e95cd2260dd713208b347444024a638379af7c4a20c2c538399116bb60c618aa026c558b83caabe2612307c09fbac2eb29cce212dc82cabeea8ee173de55d48ff17e3b9631c66cfe7bbe1fbe58bf0cd653eebd46e01377e83754afcb5fcb754d8af0"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x400, 0x7, 0x1a, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x85e}, @generic={0xc9, 0x8, "2a9bf7b4b86f16ab769d328c6ebbea62eb9679be3fe51e628a49542d7de15e2c996d02a633db88b34b906713244db0ebc90d7b9077ee4e3a940883e11824d5ca0fb00e36c0d71361625fc2ff87b8d4e6cb3fb7584e6a8c38d11c765a73e401dd426d7978e078716f43e08cdad06f390d86f48351999a8cf2028d5d8205dac2d1035e48eeb504f6a51935eb04c4b87df073da713280dbfb7ea263ee5d1cf69c2426d79654ede7ad2fad43361021b502131499fe1e03da648707a5e63c7fd030d7c939f957935d9a"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x9, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x7fff}]}}, {{0x9, 0x5, 0x9, 0x8, 0x3ff, 0x2, 0xcd, 0x98, [@generic={0x46, 0x21, "e323693e69af9bc0a40878666a997f12789d9d37e7090fe65380d469f89781685d0a267818b30644824381e3a7e8e364c9e9855b3c41861a6b90970ddaa880c309340d83"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x400, 0x96, 0x1, 0xf8, [@generic={0x78, 0x31, "73fcf7136f6d8618e652c40cf32107f5be69f485e2bff0490fa63b88d9397b1233e3c58b0d46a97756e8f1154e732874abfbef58379e5ee53ba7d532246699fb4ca731a0034adf54145abb1dcb972c2894c18a509ca143ca4939d7fec899e12a6b7684480c0e5ff499b4135d115fc5b926111da02e80"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x2, 0x5, 0x5, [@generic={0x39, 0xd, "cb46edf5c248e04cc4dff97e196c2f85b19693388928ff9412aa6fb3153abf38c6e31ea826e0056cb2c2fa996e93992bf17582c61bf2ee"}]}}]}}, {{0x9, 0x4, 0xb8, 0x3, 0x8, 0xff, 0xff, 0xff, 0x80, [@generic={0x58, 0x7, "4d69dcd92ae002034622b88ebf3e2b4942e81edd8e1972368414d7ee3c491418ddbe666870ad5b55151ce9397d36271d129c20548467b8bdf1ad59c88b2f0167f5a615120b98888d57aa8cea8917f0cec86a87bdb608"}], [{{0x9, 0x5, 0x3, 0x3, 0x40, 0x88, 0xf9, 0x8, [@generic={0xae, 0x6, "7bb9b2f9463c4419c8927ae43134368aeea2fa0a410d09f03732d2a24194c435199d0a91002203799e28844a28d21d39c3c2cd2ea0e6aa8b7ec934068d6232584db07eaa186c1fa9d1e5c48b90a044bf18040bca103c5bc660b1391aaf7aa229f84182be1cc830f97a2c77ef1d93e2f648974b78df966ab8e9ff6ea2b84eee09e97b41ed65fbb318ecab6c5b1eee8fc2c15cfd049d7e3359686ddfa1cb065cdc62314bf705300eeedb2e1c96"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x7, 0x4, 0x9, [@generic={0x78, 0xe, "256b46acc0e161c9e7b9d15d132c25fd64f2ac10c8d868c7adcfd1cdddacb939a46e4c63efdb2350e31c79e8ed3591601002e21b666fcb081d6802bdd624c4770493ec75596f28df53a0c08ea88a1f7c04f06d32b5b805df8f6a700127d06b0b4cc1702bfb6eabaa3e2bce2a7de777f5e08e645ac97b"}]}}, {{0x9, 0x5, 0x8f, 0x8, 0x3ff, 0xbd, 0x3, 0xa0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4}, @generic={0x3, 0x30, "e5"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x0, 0xf4, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xbc, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x10, 0x11}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x1, 0x2, 0x9, [@generic={0x35, 0xb, "386ccc55f61f1552a4fc305766831e2cbcb677308dedd78bba1d19a5f80ee2fd7f8ae08a4aa59858e7e68bae233bb63ed23f21"}, @generic={0xcc, 0x37, "ea86b5f4ff15bcdd13f3589bf3ea68932725e345c055d05da028a8fe2307200f299bcc7f577799bb9a9fb5a3204e091b90d963b6bbbf2028c80132dea753f098c1d5330bc6406d325b0a811ea675505c976ace81897054ef195dbc70ba260d0d8c45641fa5c3886374f83df2d1707fb43765413ff63a080418ed28c5e61e0cd1c0cf3087d743225004e6f2f9f22dfc57af813b3a133cd30c4add71e97c922a39150f88f19fc3a5e72b53878e6a4fee78a0a7b3dc89004918163e0972c60954867ef627bdb5c16f3f892d"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x1, 0xff, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0xa3}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x9, 0x77, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0xfffb}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xff}]}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0xe, 0xff, 0xb, [@generic={0x9c, 0x23, "a898441c1f379cf58a497e21639d1cfe0517f677b6a785f23f7059844b053007f6b2ca066b926aa40f1e3cd6ebeb03757c6af58e1238218225b4949d0ac9ec07949ca1818c6b8deed3754edc56c2e067157b681e62d6e5593a3f6075ae877123fa7f0b5601b64ab26ad55328c017988481eddadcec317b41aacec6b10c905a715f1e067e07a3c30df1837f12e6ae12edca27a903a49e772be1fe"}]}}]}}]}}]}}, &(0x7f0000001b80)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x2, 0x3, 0x62, 0x8}, 0xc, &(0x7f0000000140)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x9, 0x3ff}]}, 0x9, [{0xe7, &(0x7f0000001740)=@string={0xe7, 0x3, "81b4464a2bc194fc18f84441d277937112da9e7ccd2de3e58b13fc88dcdef46ba8bbcbb6b17d6d1e3ba57b67520f2176077cb0c5489da8c1a1c21cbfd793b1f68a4ad2a79f4ae328f646eceaaac6777960785fbc99b6f8f1b2edb2a972425c9b14c517979ee13db4d9594277c0cde412206c77126dbf8cf85ba08daa446c103e3c522e7b3a53149e26efd1db527c94e458caaa18dec84a9acd3768738dfcfecb80c2b3f3be9c13e37f072484859b51969697f97b1568769b813c8f3772fe4b0e8c0cc3a338a8a6b12213f12afbf9a8020654b05a91425a13eb3b45fe06a27d3d68563b62a9"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x42f}}, {0xf, &(0x7f0000001840)=@string={0xf, 0x3, "1f78dba6c831aa530029fc1f2e"}}, {0x98, &(0x7f0000001880)=@string={0x98, 0x3, "9a40e4be02d666dddb2fbe3e28bcdbb72de634c176e9c6ec9e23bd3f62b6f8532e45f491cc48a03510e6943836f06a8057030e4b8791faa7de75a3a39c24dff2055e1449f9af66d1f850fc027dc5b7940ec53bbbfa9ce6bfbb1f2efdd3a4b7229758bc1dc59e4b62649a4b31cfc8a9df51265e4438fa3cfd3bbaf04fba2e6753d65190c6fb5e72ef94ee0d6a9415d7d7b54e5a8e0466"}}, {0x4, &(0x7f0000001940)=@lang_id={0x4, 0x3, 0x402}}, {0xdb, &(0x7f0000001980)=@string={0xdb, 0x3, "9e16090c5e4823a7b5512e69d9eafff889ec9ff5108f4a817c7bf9fa7042e75c80aad1d5f86e299cda9a950148e6382848fd796260eb6350402b330fedce162d75eaacd51a6266229ccc720942c306aa658a2eecd64e4857c27b64e1dd1f150a2f4b59da394de2eff0a8b6e566d0eae7c4bbf809aebac44e2db12fe3efa213e44e6f67442185e45ba03857dfb618ddd89a3ba2f2279c386c2ade3e0505765bdfad17bab130b8565e9b6c42b67535e6054f1caa9bf274e2c22c026be7785106676315c20b85e6bc31e2d8b3636fd04a38283572f739ebf38231"}}, {0x2e, &(0x7f0000001a80)=@string={0x2e, 0x3, "0daebc15870cf115f6b5685b38e13558a2c94fde5a5202550e99063390570bcc4227c7ce620020022e4f4a4e"}}, {0xd, &(0x7f0000001ac0)=@string={0xd, 0x3, "8f266404fe8e69c9f7fe1b"}}, {0x70, &(0x7f0000001b00)=@string={0x70, 0x3, "124b2d5c939db2b68caf70873655d43c72300fcb6ea11748e8652eb695353a22ab8d5249678550a7dd9b3f77ee671a04ea404baa12cdb457edf92ab1bc6a04db7ccfbf0476e64ce1df95ea5c3b4183886663ba66a0c5e353554eb5598a71e5451cd8ce35f551c7bbace7626b004f"}}]}) syz_usb_disconnect(r5) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000010000000900010073797a3000000000e8d742cb3d4d1b3137e38ddfcf2e26975092650bb4a2"], 0x34}}, 0x0) 583.931548ms ago: executing program 2 (id=1815): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0xdc, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xac, 0x2, {{0xc31, 0xfffffffa, 0x4, 0x1ff, 0x401, 0xefffffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x8, 0x6, 0x7fff}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x7}, @TCA_NETEM_DELAY_DIST={0x33, 0x2, "c0bd3b1932c3b902252cdb65c879462a74e468e3120b1b10652e6df3b668bdbfc26749e7072a85168c90a3b0efbbdf"}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0xe3a, 0x76d, 0x6, 0x7, 0x6}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0xfffffffffffffff8}]}}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000600)={0x8, 0xfe1, 0x6, 0x5}, 0x8) sendto$inet6(r0, &(0x7f0000000800)="4103082ce22b480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 500.812372ms ago: executing program 2 (id=1816): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) wait4(0x0, 0x0, 0x1000000, 0x0) syz_emit_vhci(&(0x7f0000001000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x7, 0xa}, {0x100, 0x804b, 0x5, 0x4, 0x4}}}}, 0x17) r0 = memfd_secret(0x0) r1 = socket$inet6(0xa, 0x6, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x1, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x14, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x5452, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r5, &(0x7f0000002980), 0x400000000000239, 0x0) openat$audio(0xffffff9c, &(0x7f00000001c0), 0x10800, 0x0) 1.581057ms ago: executing program 1 (id=1817): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2b, 0x0, @loopback, @loopback, [], "1e520b4c951ee12e"}}}}}}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x400, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x4cc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x67}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000040)=0xa, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r6, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) 0s ago: executing program 0 (id=1825): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) wait4(0x0, 0x0, 0x1000000, 0x0) syz_emit_vhci(&(0x7f0000001000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x7, 0xa}, {0x100, 0x804b, 0x5, 0x4, 0x4}}}}, 0x17) r1 = memfd_secret(0x0) r2 = socket$inet6(0xa, 0x6, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x1, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x14, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x5452, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r6, &(0x7f0000002980), 0x400000000000239, 0x0) openat$audio(0xffffff9c, &(0x7f00000001c0), 0x10800, 0x0) kernel console output (not intermixed with test programs): up or the cluster is laggy [ 101.028001][ T7282] syzkaller0: entered promiscuous mode [ 101.029590][ T7282] syzkaller0: entered allmulticast mode [ 101.106686][ T7292] loop2: detected capacity change from 0 to 7 [ 101.116028][ T7292] Dev loop2: unable to read RDB block 7 [ 101.117696][ T7292] loop2: unable to read partition table [ 101.119328][ T7292] loop2: partition table beyond EOD, truncated [ 101.121092][ T7292] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 101.703174][ T7302] fuse: Bad value for 'fd' [ 101.886254][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.406'. [ 102.057665][ T7309] netlink: 24 bytes leftover after parsing attributes in process `syz.2.404'. [ 102.177985][ T7319] loop2: detected capacity change from 0 to 7 [ 102.181013][ T7319] Dev loop2: unable to read RDB block 7 [ 102.183549][ T7319] loop2: unable to read partition table [ 102.185296][ T7319] loop2: partition table beyond EOD, truncated [ 102.187092][ T7319] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 102.464289][ T5362] Dev loop2: unable to read RDB block 7 [ 102.465907][ T5362] loop2: unable to read partition table [ 102.467562][ T5362] loop2: partition table beyond EOD, truncated [ 102.827961][ T10] libceph: connect (1)[c::]:6789 error -101 [ 102.829985][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 102.833414][ T10] libceph: connect (1)[c::]:6789 error -101 [ 102.835334][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 102.973210][ T7334] ceph: No mds server is up or the cluster is laggy [ 103.188200][ T6422] libceph: connect (1)[c::]:6789 error -101 [ 103.195341][ T6422] libceph: mon0 (1)[c::]:6789 connect error [ 103.245369][ T7341] ceph: No mds server is up or the cluster is laggy [ 103.341282][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.416'. [ 104.501159][ T7366] netlink: 24 bytes leftover after parsing attributes in process `syz.2.422'. [ 105.030632][ T34] libceph: connect (1)[c::]:6789 error -101 [ 105.032613][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 105.056567][ T7382] fuse: Unknown parameter '0x0000000000000005' [ 105.090439][ T7378] ceph: No mds server is up or the cluster is laggy [ 105.146193][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'. [ 105.180517][ T7389] loop2: detected capacity change from 0 to 7 [ 105.185321][ T7389] Dev loop2: unable to read RDB block 7 [ 105.186953][ T7389] loop2: unable to read partition table [ 105.188618][ T7389] loop2: partition table beyond EOD, truncated [ 105.190321][ T7389] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 105.315525][ T5362] Dev loop2: unable to read RDB block 7 [ 105.317312][ T5362] loop2: unable to read partition table [ 105.319040][ T5362] loop2: partition table beyond EOD, truncated [ 105.340721][ T5362] Dev loop2: unable to read RDB block 7 [ 105.342506][ T5362] loop2: unable to read partition table [ 105.344219][ T5362] loop2: partition table beyond EOD, truncated [ 106.219988][ T7410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.434'. [ 106.285995][ T7412] fuse: Unknown parameter '0x0000000000000005' [ 107.238761][ T7436] fuse: Unknown parameter '0x0000000000000005' [ 107.677138][ T6422] libceph: connect (1)[c::]:6789 error -101 [ 107.678770][ T6422] libceph: mon0 (1)[c::]:6789 connect error [ 107.759346][ T7451] ceph: No mds server is up or the cluster is laggy [ 107.979083][ T7458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.450'. [ 108.537179][ T7467] loop2: detected capacity change from 0 to 7 [ 108.540284][ T7468] fuse: Unknown parameter '0x0000000000000005' [ 108.540358][ T7467] Dev loop2: unable to read RDB block 7 [ 108.552686][ T7467] loop2: unable to read partition table [ 108.555203][ T7467] loop2: partition table beyond EOD, truncated [ 108.556923][ T7467] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 108.699560][ T5362] Dev loop2: unable to read RDB block 7 [ 108.701253][ T5362] loop2: unable to read partition table [ 108.703385][ T5362] loop2: partition table beyond EOD, truncated [ 108.722725][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'. [ 108.725316][ T7476] hsr_slave_0: Device is already in use. [ 108.856297][ T34] libceph: connect (1)[c::]:6789 error -101 [ 108.860249][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 108.862697][ T34] libceph: connect (1)[c::]:6789 error -101 [ 108.864571][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 108.953102][ T7485] ceph: No mds server is up or the cluster is laggy [ 109.301515][ T7499] fuse: Unknown parameter '0x0000000000000005' [ 109.528703][ T7503] netlink: 20 bytes leftover after parsing attributes in process `syz.3.465'. [ 109.653315][ T7505] loop2: detected capacity change from 0 to 7 [ 109.655425][ T7505] Dev loop2: unable to read RDB block 7 [ 109.657029][ T7505] loop2: unable to read partition table [ 109.658651][ T7505] loop2: partition table beyond EOD, truncated [ 109.660460][ T7505] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 109.918849][ T5962] libceph: connect (1)[c::]:6789 error -101 [ 109.920688][ T5962] libceph: mon0 (1)[c::]:6789 connect error [ 110.013201][ T7509] ceph: No mds server is up or the cluster is laggy [ 110.031109][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.470'. [ 110.246988][ T7526] fuse: Unknown parameter 'fd0x0000000000000005' [ 110.623291][ T7532] loop2: detected capacity change from 0 to 7 [ 110.626257][ T7532] Dev loop2: unable to read RDB block 7 [ 110.627835][ T7532] loop2: unable to read partition table [ 110.629465][ T7532] loop2: partition table beyond EOD, truncated [ 110.631194][ T7532] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 110.754633][ T5362] Dev loop2: unable to read RDB block 7 [ 110.756442][ T5362] loop2: unable to read partition table [ 110.758196][ T5362] loop2: partition table beyond EOD, truncated [ 111.063080][ T7540] fuse: Unknown parameter '0x0000000000000005' [ 111.132702][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'. [ 111.152653][ T24] IPVS: starting estimator thread 0... [ 111.173740][ T7550] fuse: Unknown parameter 'fd0x0000000000000005' [ 111.242884][ T7548] IPVS: using max 45 ests per chain, 108000 per kthread [ 111.632000][ T7558] loop2: detected capacity change from 0 to 7 [ 111.634148][ T7558] Dev loop2: unable to read RDB block 7 [ 111.635761][ T7558] loop2: unable to read partition table [ 111.637508][ T7558] loop2: partition table beyond EOD, truncated [ 111.639229][ T7558] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 111.969472][ T7571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.489'. [ 112.017852][ T5966] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 112.201214][ T7577] fuse: Unknown parameter 'fd0x0000000000000005' [ 112.786900][ T7583] loop2: detected capacity change from 0 to 7 [ 112.790402][ T7583] Dev loop2: unable to read RDB block 7 [ 112.794489][ T7583] loop2: unable to read partition table [ 112.796959][ T7583] loop2: partition table beyond EOD, truncated [ 112.799485][ T7583] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 113.945225][ T7608] netlink: 48 bytes leftover after parsing attributes in process `syz.1.501'. [ 114.026726][ T10] libceph: connect (1)[c::]:6789 error -101 [ 114.030285][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 114.033715][ T10] libceph: connect (1)[c::]:6789 error -101 [ 114.036066][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 114.107688][ T7609] ceph: No mds server is up or the cluster is laggy [ 114.270900][ T7617] loop2: detected capacity change from 0 to 7 [ 114.278561][ T7617] Dev loop2: unable to read RDB block 7 [ 114.280661][ T7617] loop2: unable to read partition table [ 114.284521][ T7617] loop2: partition table beyond EOD, truncated [ 114.286757][ T7617] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 114.368203][ T24] libceph: connect (1)[c::]:6789 error -101 [ 114.369940][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 114.470034][ T7623] ceph: No mds server is up or the cluster is laggy [ 114.641588][ T7634] loop2: detected capacity change from 0 to 7 [ 114.643813][ T7634] Dev loop2: unable to read RDB block 7 [ 114.645283][ T7634] loop2: unable to read partition table [ 114.646987][ T7634] loop2: partition table beyond EOD, truncated [ 114.648649][ T7634] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 115.045498][ T5362] Dev loop2: unable to read RDB block 7 [ 115.047104][ T5362] loop2: unable to read partition table [ 115.048741][ T5362] loop2: partition table beyond EOD, truncated [ 115.221616][ T5966] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 115.323437][ T7645] netlink: 48 bytes leftover after parsing attributes in process `syz.2.510'. [ 116.032530][ T5966] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 116.035763][ T5966] Bluetooth: hci3: Injecting HCI hardware error event [ 116.039813][ T5963] Bluetooth: hci3: hardware error 0x00 [ 116.315763][ T7663] loop2: detected capacity change from 0 to 7 [ 116.317780][ T7663] Dev loop2: unable to read RDB block 7 [ 116.319364][ T7663] loop2: unable to read partition table [ 116.321015][ T7663] loop2: partition table beyond EOD, truncated [ 116.323038][ T7663] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 116.359900][ T7665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.518'. [ 116.487834][ T7671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.520'. [ 116.792406][ T5995] libceph: connect (1)[c::]:6789 error -101 [ 116.822760][ T5995] libceph: mon0 (1)[c::]:6789 connect error [ 116.931116][ T7672] ceph: No mds server is up or the cluster is laggy [ 117.332928][ T7695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.528'. [ 117.362821][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.529'. [ 117.534748][ T7704] process 'syz.1.531' launched './file2' with NULL argv: empty string added [ 117.891479][ T64] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 118.021534][ T64] usb 6-1: device descriptor read/64, error -71 [ 118.101955][ T5963] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 118.271546][ T64] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 118.288244][ T7716] netlink: 'syz.3.534': attribute type 11 has an invalid length. [ 118.401500][ T64] usb 6-1: device descriptor read/64, error -71 [ 118.511646][ T64] usb usb6-port1: attempt power cycle [ 118.799756][ T7721] netlink: 'syz.0.536': attribute type 1 has an invalid length. [ 118.861532][ T64] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 118.882222][ T64] usb 6-1: device descriptor read/8, error -71 [ 118.993012][ T5995] libceph: connect (1)[c::]:6789 error -101 [ 118.996591][ T5995] libceph: mon0 (1)[c::]:6789 connect error [ 118.999455][ T5995] libceph: connect (1)[c::]:6789 error -101 [ 119.002359][ T5995] libceph: mon0 (1)[c::]:6789 connect error [ 119.063190][ T7729] ceph: No mds server is up or the cluster is laggy [ 119.124500][ T64] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 119.143304][ T64] usb 6-1: device descriptor read/8, error -71 [ 119.252720][ T64] usb usb6-port1: unable to enumerate USB device [ 119.541520][ T5966] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 119.541548][ T5963] Bluetooth: hci4: command 0x1003 tx timeout [ 120.171757][ T5995] libceph: connect (1)[c::]:6789 error -101 [ 120.173694][ T5995] libceph: mon0 (1)[c::]:6789 connect error [ 120.258841][ T7746] ceph: No mds server is up or the cluster is laggy [ 121.005792][ T1015] libceph: connect (1)[c::]:6789 error -101 [ 121.007710][ T1015] libceph: mon0 (1)[c::]:6789 connect error [ 121.162200][ T7763] ceph: No mds server is up or the cluster is laggy [ 122.101058][ T7782] loop2: detected capacity change from 0 to 7 [ 122.106930][ T5362] Dev loop2: unable to read RDB block 7 [ 122.108911][ T5362] loop2: unable to read partition table [ 122.111025][ T5362] loop2: partition table beyond EOD, truncated [ 122.114943][ T7782] Dev loop2: unable to read RDB block 7 [ 122.116951][ T7782] loop2: unable to read partition table [ 122.119166][ T7782] loop2: partition table beyond EOD, truncated [ 122.120162][ T5966] Bluetooth: hci0: unexpected cc 0x2007 length: 100 > 2 [ 122.121090][ T7782] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 122.123970][ T5966] Bluetooth: hci0: unexpected event for opcode 0x2007 [ 122.138002][ T5951] Dev loop2: unable to read RDB block 7 [ 122.140700][ T5951] loop2: unable to read partition table [ 122.145727][ T5951] loop2: partition table beyond EOD, truncated [ 122.830596][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.559'. [ 124.556592][ T7827] overlayfs: missing 'workdir' [ 124.934990][ T7832] ceph: No mds server is up or the cluster is laggy [ 124.937568][ T3338] libceph: connect (1)[c::]:6789 error -101 [ 124.939691][ T3338] libceph: mon0 (1)[c::]:6789 connect error [ 125.364769][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'. [ 126.191530][ T5966] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 126.194604][ T5966] Bluetooth: hci0: Injecting HCI hardware error event [ 126.197119][ T5966] Bluetooth: hci0: hardware error 0x00 [ 126.706183][ T1142] Bluetooth: hci5: Frame reassembly failed (-84) [ 127.722216][ T7889] netlink: 36 bytes leftover after parsing attributes in process `syz.3.588'. [ 128.261645][ T5966] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 128.661544][ T5963] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 128.661601][ T5966] Bluetooth: hci4: command 0x1003 tx timeout [ 128.741620][ T5963] Bluetooth: hci5: command 0x1003 tx timeout [ 128.741640][ T5303] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 129.233817][ T1015] libceph: connect (1)[c::]:6789 error -101 [ 129.235651][ T1015] libceph: mon0 (1)[c::]:6789 connect error [ 129.337953][ T7912] ceph: No mds server is up or the cluster is laggy [ 129.539239][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'. [ 129.565395][ T7925] netlink: 36 bytes leftover after parsing attributes in process `syz.3.599'. [ 130.005642][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.609'. [ 130.034046][ T3338] libceph: connect (1)[c::]:6789 error -101 [ 130.035891][ T3338] libceph: mon0 (1)[c::]:6789 connect error [ 130.041990][ T7950] netlink: 36 bytes leftover after parsing attributes in process `syz.2.610'. [ 130.110279][ T7944] ceph: No mds server is up or the cluster is laggy [ 130.941584][ T7970] loop2: detected capacity change from 0 to 7 [ 130.944485][ T7970] Dev loop2: unable to read RDB block 7 [ 130.946593][ T7970] loop2: unable to read partition table [ 130.948244][ T7970] loop2: partition table beyond EOD, truncated [ 130.949955][ T7970] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 131.127688][ T5362] Dev loop2: unable to read RDB block 7 [ 131.129382][ T5362] loop2: unable to read partition table [ 131.131268][ T5362] loop2: partition table beyond EOD, truncated [ 131.293555][ T7985] netlink: 36 bytes leftover after parsing attributes in process `syz.0.621'. [ 131.502206][ T7989] netlink: 32 bytes leftover after parsing attributes in process `syz.0.622'. [ 131.504828][ T7989] veth0_virt_wifi: entered promiscuous mode [ 132.185355][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.187288][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.421521][ T5963] Bluetooth: hci4: command 0x1003 tx timeout [ 132.425179][ T5303] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 132.973813][ T8013] netlink: 36 bytes leftover after parsing attributes in process `syz.0.630'. [ 133.284698][ T10] libceph: connect (1)[c::]:6789 error -101 [ 133.287692][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 133.361690][ T8022] ceph: No mds server is up or the cluster is laggy [ 133.621553][ T8037] netlink: 36 bytes leftover after parsing attributes in process `syz.2.639'. [ 133.773040][ T8045] loop2: detected capacity change from 0 to 7 [ 133.775964][ T8045] Dev loop2: unable to read RDB block 7 [ 133.777542][ T8045] loop2: unable to read partition table [ 133.779286][ T8045] loop2: partition table beyond EOD, truncated [ 133.781006][ T8045] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 134.132815][ T3338] libceph: connect (1)[c::]:6789 error -101 [ 134.134633][ T3338] libceph: mon0 (1)[c::]:6789 connect error [ 134.182362][ T8050] ceph: No mds server is up or the cluster is laggy [ 134.281561][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.645'. [ 134.472889][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.648'. [ 134.516629][ T1142] Bluetooth: hci4: Frame reassembly failed (-84) [ 134.551708][ T64] libceph: connect (1)[c::]:6789 error -101 [ 134.553481][ T64] libceph: mon0 (1)[c::]:6789 connect error [ 134.555840][ T8066] netlink: 36 bytes leftover after parsing attributes in process `syz.2.649'. [ 134.643023][ T8065] ceph: No mds server is up or the cluster is laggy [ 135.866497][ T8096] loop2: detected capacity change from 0 to 7 [ 135.868754][ T8096] Dev loop2: unable to read RDB block 7 [ 135.870302][ T8096] loop2: unable to read partition table [ 135.872035][ T8096] loop2: partition table beyond EOD, truncated [ 135.873764][ T8096] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 135.929843][ T8098] netlink: 36 bytes leftover after parsing attributes in process `syz.0.661'. [ 136.581504][ T5963] Bluetooth: hci4: command 0x1003 tx timeout [ 136.583473][ T5303] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 137.475302][ T8132] loop2: detected capacity change from 0 to 7 [ 137.481087][ T8132] Dev loop2: unable to read RDB block 7 [ 137.483368][ T8132] loop2: unable to read partition table [ 137.485360][ T8132] loop2: partition table beyond EOD, truncated [ 137.487186][ T8132] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 137.495273][ T5362] Dev loop2: unable to read RDB block 7 [ 137.497049][ T5362] loop2: unable to read partition table [ 137.498766][ T5362] loop2: partition table beyond EOD, truncated [ 137.865699][ T833] libceph: connect (1)[c::]:6789 error -101 [ 137.867666][ T833] libceph: mon0 (1)[c::]:6789 connect error [ 137.936882][ T8149] ceph: No mds server is up or the cluster is laggy [ 139.267609][ T833] libceph: connect (1)[c::]:6789 error -101 [ 139.269356][ T833] libceph: mon0 (1)[c::]:6789 connect error [ 139.344414][ T8178] ceph: No mds server is up or the cluster is laggy [ 140.104139][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.691'. [ 140.160006][ T8192] xt_hashlimit: size too large, truncated to 1048576 [ 140.183242][ T8192] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 140.516595][ T24] libceph: connect (1)[c::]:6789 error -101 [ 140.518341][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 140.520265][ T24] libceph: connect (1)[c::]:6789 error -101 [ 140.522042][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 140.568427][ T8203] ceph: No mds server is up or the cluster is laggy [ 141.007147][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.703'. [ 141.097453][ T8224] netlink: 'syz.1.700': attribute type 21 has an invalid length. [ 141.099781][ T8224] netlink: 156 bytes leftover after parsing attributes in process `syz.1.700'. [ 141.129609][ T5995] libceph: connect (1)[c::]:6789 error -101 [ 141.132768][ T5995] libceph: mon0 (1)[c::]:6789 connect error [ 141.135789][ T5995] libceph: connect (1)[c::]:6789 error -101 [ 141.138371][ T5995] libceph: mon0 (1)[c::]:6789 connect error [ 141.242688][ T8225] ceph: No mds server is up or the cluster is laggy [ 141.975617][ T8257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.715'. [ 142.053913][ T8263] loop2: detected capacity change from 0 to 7 [ 142.056053][ T8263] Dev loop2: unable to read RDB block 7 [ 142.058467][ T8263] loop2: unable to read partition table [ 142.060135][ T8263] loop2: partition table beyond EOD, truncated [ 142.062129][ T8263] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 142.267472][ T8270] netlink: 48 bytes leftover after parsing attributes in process `syz.2.719'. [ 142.714996][ T8294] netlink: 'syz.2.722': attribute type 21 has an invalid length. [ 142.763898][ T8294] netlink: 156 bytes leftover after parsing attributes in process `syz.2.722'. [ 142.869484][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.725'. [ 143.223902][ T1142] Bluetooth: hci4: Frame reassembly failed (-84) [ 143.535507][ T8331] netlink: 48 bytes leftover after parsing attributes in process `syz.0.730'. [ 143.579520][ T8334] netlink: 72 bytes leftover after parsing attributes in process `syz.2.729'. [ 143.850412][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 144.115995][ T8351] loop2: detected capacity change from 0 to 7 [ 144.118925][ T8351] Dev loop2: unable to read RDB block 7 [ 144.121132][ T8351] loop2: unable to read partition table [ 144.124697][ T8351] loop2: partition table beyond EOD, truncated [ 144.126940][ T8351] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 144.489052][ T5362] Dev loop2: unable to read RDB block 7 [ 144.491256][ T5362] loop2: unable to read partition table [ 144.493772][ T5362] loop2: partition table beyond EOD, truncated [ 144.953211][ T8380] loop2: detected capacity change from 0 to 7 [ 144.956082][ T8380] Dev loop2: unable to read RDB block 7 [ 144.958160][ T8380] loop2: unable to read partition table [ 144.960348][ T8380] loop2: partition table beyond EOD, truncated [ 144.963054][ T8380] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 145.008281][ T8381] FAULT_INJECTION: forcing a failure. [ 145.008281][ T8381] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 145.012773][ T8381] CPU: 1 UID: 0 PID: 8381 Comm: syz.3.748 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 145.012804][ T8381] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 145.012814][ T8381] Call Trace: [ 145.012819][ T8381] [ 145.012824][ T8381] dump_stack_lvl+0x16c/0x1f0 [ 145.012849][ T8381] should_fail_ex+0x512/0x640 [ 145.012868][ T8381] _copy_from_user+0x2e/0xd0 [ 145.012886][ T8381] io_submit_one+0xbb/0x1da0 [ 145.012909][ T8381] ? __lock_acquire+0xaa4/0x1ba0 [ 145.012925][ T8381] ? __pfx_io_submit_one+0x10/0x10 [ 145.012952][ T8381] ? __might_fault+0xe3/0x190 [ 145.012972][ T8381] ? __might_fault+0x13b/0x190 [ 145.012997][ T8381] ? __ia32_compat_sys_io_submit+0x1ad/0x3a0 [ 145.013015][ T8381] __ia32_compat_sys_io_submit+0x1ad/0x3a0 [ 145.013031][ T8381] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 145.013045][ T8381] ? fput+0x70/0xf0 [ 145.013057][ T8381] ? rcu_is_watching+0x12/0xc0 [ 145.013071][ T8381] __do_fast_syscall_32+0x73/0x120 [ 145.013087][ T8381] do_fast_syscall_32+0x32/0x80 [ 145.013101][ T8381] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 145.013113][ T8381] RIP: 0023:0xf739e579 [ 145.013120][ T8381] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 145.013130][ T8381] RSP: 002b:00000000f4fe455c EFLAGS: 00000296 ORIG_RAX: 00000000000000f8 [ 145.013139][ T8381] RAX: ffffffffffffffda RBX: 00000000f7f00000 RCX: 0000000000000003 [ 145.013145][ T8381] RDX: 0000000080001140 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.013150][ T8381] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 145.013155][ T8381] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 145.013160][ T8381] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 145.013172][ T8381] [ 145.301660][ T5963] Bluetooth: hci4: command 0x1003 tx timeout [ 145.301839][ T5303] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 145.429936][ T8412] __nla_validate_parse: 1 callbacks suppressed [ 145.429947][ T8412] netlink: 48 bytes leftover after parsing attributes in process `syz.3.755'. [ 145.461197][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.756'. [ 145.517757][ T8422] loop2: detected capacity change from 0 to 7 [ 145.520692][ T8422] Dev loop2: unable to read RDB block 7 [ 145.523780][ T8422] loop2: unable to read partition table [ 145.526274][ T8422] loop2: partition table beyond EOD, truncated [ 145.528730][ T8422] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 145.642747][ T5362] Dev loop2: unable to read RDB block 7 [ 145.644412][ T5362] loop2: unable to read partition table [ 145.646533][ T5362] loop2: partition table beyond EOD, truncated [ 145.994909][ T8441] netlink: 'syz.3.760': attribute type 4 has an invalid length. [ 146.005546][ T8441] netlink: 'syz.3.760': attribute type 4 has an invalid length. [ 146.102256][ T8445] netlink: 48 bytes leftover after parsing attributes in process `syz.0.764'. [ 146.595915][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.767'. [ 146.976532][ T8475] block device autoloading is deprecated and will be removed. [ 147.103928][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.778'. [ 147.276209][ T1135] Bluetooth: hci4: Frame reassembly failed (-84) [ 147.278348][ T1196] Bluetooth: hci4: Frame reassembly failed (-84) [ 147.520347][ T8492] netlink: 'syz.1.780': attribute type 4 has an invalid length. [ 147.538705][ T8492] netlink: 'syz.1.780': attribute type 4 has an invalid length. [ 147.851858][ T8504] md: array md2 already initialised! [ 147.904645][ T8512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.790'. [ 148.451057][ T1135] Bluetooth: hci5: Frame reassembly failed (-84) [ 149.020772][ T8533] loop2: detected capacity change from 0 to 7 [ 149.025873][ T8533] Dev loop2: unable to read RDB block 7 [ 149.028060][ T8533] loop2: unable to read partition table [ 149.030353][ T8533] loop2: partition table beyond EOD, truncated [ 149.032811][ T8533] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 149.301699][ T5303] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 149.352023][ T8536] md: array md2 already initialised! [ 150.324345][ T8549] loop2: detected capacity change from 0 to 7 [ 150.326862][ T8549] Dev loop2: unable to read RDB block 7 [ 150.328444][ T8549] loop2: unable to read partition table [ 150.330192][ T8549] loop2: partition table beyond EOD, truncated [ 150.331997][ T8549] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 150.394436][ T5362] Dev loop2: unable to read RDB block 7 [ 150.396637][ T5362] loop2: unable to read partition table [ 150.400676][ T5362] loop2: partition table beyond EOD, truncated [ 150.502350][ T5966] Bluetooth: hci5: command 0x1003 tx timeout [ 150.504796][ T5963] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 150.708401][ T8561] netlink: 48 bytes leftover after parsing attributes in process `syz.2.805'. [ 150.851505][ T8563] md: array md2 already initialised! [ 151.608684][ T8586] loop2: detected capacity change from 0 to 7 [ 151.610805][ T8586] Dev loop2: unable to read RDB block 7 [ 151.612516][ T8586] loop2: unable to read partition table [ 151.614438][ T8586] loop2: partition table beyond EOD, truncated [ 151.616227][ T8586] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 151.655112][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.814'. [ 151.657690][ T8588] hsr_slave_0: Device is already in use. [ 151.744756][ T8592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.823'. [ 151.747269][ T8592] hsr_slave_0: Device is already in use. [ 151.779208][ T8596] netlink: 48 bytes leftover after parsing attributes in process `syz.0.816'. [ 151.784770][ T5362] Dev loop2: unable to read RDB block 7 [ 151.786395][ T5362] loop2: unable to read partition table [ 151.788040][ T5362] loop2: partition table beyond EOD, truncated [ 151.903160][ T8599] md: array md2 already initialised! [ 151.980489][ T8609] loop2: detected capacity change from 0 to 7 [ 151.983482][ T8609] Dev loop2: unable to read RDB block 7 [ 151.985236][ T8609] loop2: unable to read partition table [ 151.987067][ T8609] loop2: partition table beyond EOD, truncated [ 151.988942][ T8609] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 152.148883][ T5362] Dev loop2: unable to read RDB block 7 [ 152.150515][ T5362] loop2: unable to read partition table [ 152.153010][ T5362] loop2: partition table beyond EOD, truncated [ 152.238556][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.825'. [ 153.026533][ T8631] md: array md2 already initialised! [ 153.136216][ T8645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.836'. [ 153.169684][ T8647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.837'. [ 153.297535][ T1142] Bluetooth: hci4: Frame reassembly failed (-84) [ 154.602954][ T8673] md: array md2 already initialised! [ 155.301774][ T5966] Bluetooth: hci4: command 0x1003 tx timeout [ 155.301788][ T5963] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 156.315027][ T8712] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 156.473368][ T8725] QAT: Device 198 not found [ 156.524809][ T8730] loop2: detected capacity change from 0 to 7 [ 156.526837][ T8730] Dev loop2: unable to read RDB block 7 [ 156.528458][ T8730] loop2: unable to read partition table [ 156.530054][ T8730] loop2: partition table beyond EOD, truncated [ 156.531918][ T8730] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 156.681569][ T8732] md: array md2 already initialised! [ 156.855124][ T5362] Dev loop2: unable to read RDB block 7 [ 156.856776][ T5362] loop2: unable to read partition table [ 156.859049][ T5362] loop2: partition table beyond EOD, truncated [ 157.724726][ T70] Bluetooth: hci4: Frame reassembly failed (-84) [ 157.934897][ T8771] loop2: detected capacity change from 0 to 7 [ 157.936968][ T8771] Dev loop2: unable to read RDB block 7 [ 157.938539][ T8771] loop2: unable to read partition table [ 157.940187][ T8771] loop2: partition table beyond EOD, truncated [ 157.942331][ T8771] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 159.031963][ T8797] md: array md2 already initialised! [ 159.066275][ T8802] loop2: detected capacity change from 0 to 7 [ 159.068413][ T8802] Dev loop2: unable to read RDB block 7 [ 159.069970][ T8802] loop2: unable to read partition table [ 159.071997][ T8802] loop2: partition table beyond EOD, truncated [ 159.073700][ T8802] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 159.781564][ T5963] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 159.781589][ T5966] Bluetooth: hci4: command 0x1003 tx timeout [ 159.921482][ T8825] md: array md2 already initialised! [ 162.718921][ T8892] block nbd1: not configured, cannot reconfigure [ 162.724173][ T8892] netlink: 32 bytes leftover after parsing attributes in process `syz.1.919'. [ 162.893833][ T8913] loop2: detected capacity change from 0 to 7 [ 162.895884][ T8913] Dev loop2: unable to read RDB block 7 [ 162.897514][ T8913] loop2: unable to read partition table [ 162.899239][ T8913] loop2: partition table beyond EOD, truncated [ 162.901026][ T8913] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 163.249905][ T8933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.937'. [ 163.431471][ T8938] md: array md2 already initialised! [ 163.773508][ T8959] block nbd3: not configured, cannot reconfigure [ 163.779809][ T8959] netlink: 32 bytes leftover after parsing attributes in process `syz.3.948'. [ 163.932013][ T8962] md: array md2 already initialised! [ 164.158700][ T8984] netlink: 44 bytes leftover after parsing attributes in process `syz.0.957'. [ 164.846354][ T8991] block nbd2: not configured, cannot reconfigure [ 164.974548][ T8993] md: array md2 already initialised! [ 166.026112][ T9046] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 166.153747][ T9048] md: array md2 already initialised! [ 166.193922][ T9056] netlink: 24 bytes leftover after parsing attributes in process `syz.0.976'. [ 166.227850][ T1135] Bluetooth: hci4: Frame reassembly failed (-84) [ 166.936483][ T9069] netlink: 44 bytes leftover after parsing attributes in process `syz.0.990'. [ 167.074100][ T9073] netlink: 20 bytes leftover after parsing attributes in process `syz.2.989'. [ 167.155915][ T9066] netlink: 20 bytes leftover after parsing attributes in process `syz.1.997'. [ 168.261570][ T5963] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 168.377713][ T9095] loop2: detected capacity change from 0 to 7 [ 168.379874][ T9095] Dev loop2: unable to read RDB block 7 [ 168.381510][ T9095] loop2: unable to read partition table [ 168.383173][ T9095] loop2: partition table beyond EOD, truncated [ 168.384905][ T9095] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 168.518167][ T5362] Dev loop2: unable to read RDB block 7 [ 168.520852][ T5362] loop2: unable to read partition table [ 168.523684][ T5362] loop2: partition table beyond EOD, truncated [ 168.616305][ T9103] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1002'. [ 168.758764][ T24] libceph: connect (1)[c::]:6789 error -101 [ 168.760534][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 168.851229][ T9111] ceph: No mds server is up or the cluster is laggy [ 169.144452][ T9120] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1005'. [ 169.530208][ T9136] loop2: detected capacity change from 0 to 7 [ 169.533137][ T9136] Dev loop2: unable to read RDB block 7 [ 169.534802][ T9136] loop2: unable to read partition table [ 169.536434][ T9136] loop2: partition table beyond EOD, truncated [ 169.538190][ T9136] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 170.261574][ T9151] md: array md2 already initialised! [ 170.324674][ T9163] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1022'. [ 170.327149][ T9163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1022'. [ 171.721637][ T9187] md: array md2 already initialised! [ 171.918605][ T24] libceph: connect (1)[c::]:6789 error -101 [ 171.920977][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 171.923939][ T24] libceph: connect (1)[c::]:6789 error -101 [ 171.926260][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 171.997581][ T9194] ceph: No mds server is up or the cluster is laggy [ 172.225413][ T9212] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1036'. [ 173.191699][ T9230] md: array md2 already initialised! [ 173.267070][ T9240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1045'. [ 173.336888][ T9246] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1048'. [ 173.681571][ T9259] md: array md2 already initialised! [ 173.786733][ T9272] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1058'. [ 173.972200][ T9281] md: array md2 already initialised! [ 174.523867][ T9305] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1069'. [ 174.597665][ T9311] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 174.721615][ T9313] md: array md2 already initialised! [ 175.479536][ T9333] loop2: detected capacity change from 0 to 7 [ 175.482495][ T9333] Dev loop2: unable to read RDB block 7 [ 175.484106][ T9333] loop2: unable to read partition table [ 175.485786][ T9333] loop2: partition table beyond EOD, truncated [ 175.487795][ T9333] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 175.607527][ T9336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1079'. [ 175.811493][ T9345] md: array md2 already initialised! [ 176.011662][ T9360] md: array md2 already initialised! [ 177.794441][ T24] libceph: connect (1)[c::]:6789 error -101 [ 177.799635][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 177.802584][ T24] libceph: connect (1)[c::]:6789 error -101 [ 177.804576][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 177.874136][ T9389] ceph: No mds server is up or the cluster is laggy [ 178.421707][ T9401] md: array md2 already initialised! [ 178.565580][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1100'. [ 178.844468][ T1135] Bluetooth: hci4: Frame reassembly failed (-84) [ 179.115432][ T1196] Bluetooth: hci5: Frame reassembly failed (-84) [ 179.541793][ T9431] md: array md2 already initialised! [ 180.497086][ T5993] libceph: connect (1)[c::]:6789 error -101 [ 180.499348][ T5993] libceph: mon0 (1)[c::]:6789 connect error [ 180.503260][ T5993] libceph: connect (1)[c::]:6789 error -101 [ 180.505633][ T5993] libceph: mon0 (1)[c::]:6789 connect error [ 180.583056][ T9446] ceph: No mds server is up or the cluster is laggy [ 180.901506][ T5966] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 180.901587][ T5303] Bluetooth: hci4: command 0x1003 tx timeout [ 181.141582][ T5966] Bluetooth: hci5: command 0x1003 tx timeout [ 181.141628][ T5963] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 181.784952][ T24] libceph: connect (1)[c::]:6789 error -101 [ 181.786780][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 181.788926][ T24] libceph: connect (1)[c::]:6789 error -101 [ 181.790873][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 181.899752][ T9468] ceph: No mds server is up or the cluster is laggy [ 182.121583][ T9473] md: array md2 already initialised! [ 182.157589][ T9480] loop2: detected capacity change from 0 to 7 [ 182.159899][ T9480] Dev loop2: unable to read RDB block 7 [ 182.161652][ T9480] loop2: unable to read partition table [ 182.163421][ T9480] loop2: partition table beyond EOD, truncated [ 182.165148][ T9480] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 182.784453][ T3338] libceph: connect (1)[c::]:6789 error -101 [ 182.786343][ T3338] libceph: mon0 (1)[c::]:6789 connect error [ 182.872435][ T9507] ceph: No mds server is up or the cluster is laggy [ 182.971643][ T9514] md: array md2 already initialised! [ 183.434790][ T1196] Bluetooth: hci4: Frame reassembly failed (-84) [ 183.437350][ T83] Bluetooth: hci4: Frame reassembly failed (-84) [ 183.875917][ T9534] loop2: detected capacity change from 0 to 7 [ 183.879039][ T6233] Dev loop2: unable to read RDB block 7 [ 183.880687][ T6233] loop2: unable to read partition table [ 183.883246][ T6233] loop2: partition table beyond EOD, truncated [ 183.887394][ T9534] Dev loop2: unable to read RDB block 7 [ 183.890061][ T9534] loop2: unable to read partition table [ 183.892369][ T9534] loop2: partition table beyond EOD, truncated [ 183.894736][ T9534] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 184.361684][ T9545] md: array md2 already initialised! [ 184.441809][ T9553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1143'. [ 184.723097][ T3338] libceph: connect (1)[c::]:6789 error -101 [ 184.724885][ T3338] libceph: mon0 (1)[c::]:6789 connect error [ 184.809057][ T9561] ceph: No mds server is up or the cluster is laggy [ 184.925736][ T9569] loop2: detected capacity change from 0 to 7 [ 184.927837][ T9569] Dev loop2: unable to read RDB block 7 [ 184.929352][ T9569] loop2: unable to read partition table [ 184.932705][ T9569] loop2: partition table beyond EOD, truncated [ 184.934435][ T9569] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 185.081562][ T9573] md: array md2 already initialised! [ 185.131562][ T9577] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1152'. [ 185.169011][ T9581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1153'. [ 185.461536][ T5966] Bluetooth: hci4: command 0x1003 tx timeout [ 185.461553][ T5963] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 186.121119][ T9599] loop2: detected capacity change from 0 to 7 [ 186.126607][ T9599] Dev loop2: unable to read RDB block 7 [ 186.128964][ T9599] loop2: unable to read partition table [ 186.131209][ T9599] loop2: partition table beyond EOD, truncated [ 186.133653][ T9599] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 186.232401][ T5362] Dev loop2: unable to read RDB block 7 [ 186.234200][ T5362] loop2: unable to read partition table [ 186.235972][ T5362] loop2: partition table beyond EOD, truncated [ 186.273889][ T5362] Dev loop2: unable to read RDB block 7 [ 186.275510][ T5362] loop2: unable to read partition table [ 186.277163][ T5362] loop2: partition table beyond EOD, truncated [ 186.376423][ T9612] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 186.618812][ T3338] libceph: connect (1)[c::]:6789 error -101 [ 186.620565][ T3338] libceph: mon0 (1)[c::]:6789 connect error [ 186.622541][ T3338] libceph: connect (1)[c::]:6789 error -101 [ 186.624310][ T3338] libceph: mon0 (1)[c::]:6789 connect error [ 186.707772][ T9614] ceph: No mds server is up or the cluster is laggy [ 187.014437][ T9627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1170'. [ 187.561558][ T9645] md: array md2 already initialised! [ 187.607773][ T9653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1179'. [ 187.640881][ T9655] loop2: detected capacity change from 0 to 7 [ 187.644741][ T9655] Dev loop2: unable to read RDB block 7 [ 187.646318][ T9655] loop2: unable to read partition table [ 187.647973][ T9655] loop2: partition table beyond EOD, truncated [ 187.649746][ T9655] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 187.834830][ T9660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1190'. [ 187.859883][ T9664] loop2: detected capacity change from 0 to 7 [ 187.863198][ T9664] Dev loop2: unable to read RDB block 7 [ 187.865276][ T9666] block nbd2: not configured, cannot reconfigure [ 187.866371][ T9664] loop2: unable to read partition table [ 187.871555][ T9664] loop2: partition table beyond EOD, truncated [ 187.874146][ T9664] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 187.881032][ T5362] Dev loop2: unable to read RDB block 7 [ 187.882741][ T5362] loop2: unable to read partition table [ 187.884396][ T5362] loop2: partition table beyond EOD, truncated [ 187.940754][ T5362] Dev loop2: unable to read RDB block 7 [ 187.942692][ T5362] loop2: unable to read partition table [ 187.944866][ T5362] loop2: partition table beyond EOD, truncated [ 188.009968][ T57] libceph: connect (1)[c::]:6789 error -101 [ 188.011913][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 188.041514][ T9670] md: array md2 already initialised! [ 188.069989][ T5362] Dev loop2: unable to read RDB block 7 [ 188.071731][ T5362] loop2: unable to read partition table [ 188.073358][ T5362] loop2: partition table beyond EOD, truncated [ 188.104480][ T9671] ceph: No mds server is up or the cluster is laggy [ 188.129940][ T5362] Dev loop2: unable to read RDB block 7 [ 188.132213][ T5362] loop2: unable to read partition table [ 188.133815][ T5362] loop2: partition table beyond EOD, truncated [ 188.314447][ T9689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1194'. [ 188.322010][ T9691] loop2: detected capacity change from 0 to 7 [ 188.324661][ T9691] Dev loop2: unable to read RDB block 7 [ 188.326680][ T9691] loop2: unable to read partition table [ 188.328960][ T9691] loop2: partition table beyond EOD, truncated [ 188.331231][ T9691] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 188.336662][ T5362] Dev loop2: unable to read RDB block 7 [ 188.338720][ T5362] loop2: unable to read partition table [ 188.340834][ T5362] loop2: partition table beyond EOD, truncated [ 188.393505][ T9697] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1196'. [ 188.795606][ T9711] block nbd0: not configured, cannot reconfigure [ 188.827500][ T10] libceph: connect (1)[c::]:6789 error -101 [ 188.829432][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 188.908486][ T9721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1204'. [ 188.927353][ T9712] ceph: No mds server is up or the cluster is laggy [ 189.679744][ T5993] libceph: connect (1)[c::]:6789 error -101 [ 189.681608][ T5993] libceph: mon0 (1)[c::]:6789 connect error [ 189.684938][ T5993] libceph: connect (1)[c::]:6789 error -101 [ 189.686864][ T5993] libceph: mon0 (1)[c::]:6789 connect error [ 189.749367][ T9742] block nbd3: not configured, cannot reconfigure [ 189.762660][ T9735] ceph: No mds server is up or the cluster is laggy [ 189.938780][ T9753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1213'. [ 190.401773][ T9764] md: array md2 already initialised! [ 190.563540][ T9774] block nbd1: not configured, cannot reconfigure [ 190.649319][ T9778] loop2: detected capacity change from 0 to 7 [ 190.651372][ T9778] Dev loop2: unable to read RDB block 7 [ 190.653460][ T9778] loop2: unable to read partition table [ 190.655155][ T9778] loop2: partition table beyond EOD, truncated [ 190.656846][ T9778] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 190.774889][ T1196] Bluetooth: hci4: Frame reassembly failed (-84) [ 190.850906][ T9785] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1224'. [ 190.877746][ T9787] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 191.444642][ T9797] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1227'. [ 191.581011][ T34] libceph: connect (1)[c::]:6789 error -101 [ 191.583387][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 191.875068][ T3338] libceph: connect (1)[c::]:6789 error -101 [ 191.876778][ T3338] libceph: mon0 (1)[c::]:6789 connect error [ 191.903869][ T9808] md: array md2 already initialised! [ 191.916521][ T9800] ceph: No mds server is up or the cluster is laggy [ 192.105670][ T9819] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1233'. [ 192.121355][ T5995] libceph: connect (1)[c::]:6789 error -101 [ 192.131043][ T5995] libceph: mon0 (1)[c::]:6789 connect error [ 192.138616][ T9822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1235'. [ 192.391848][ T5995] libceph: connect (1)[c::]:6789 error -101 [ 192.393975][ T5995] libceph: mon0 (1)[c::]:6789 connect error [ 192.399577][ T9816] ceph: No mds server is up or the cluster is laggy [ 192.831604][ T5966] Bluetooth: hci4: command 0x1003 tx timeout [ 192.833532][ T5963] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 193.231613][ T9838] md: array md2 already initialised! [ 193.436756][ T9850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1244'. [ 193.612119][ T34] libceph: connect (1)[c::]:6789 error -101 [ 193.614774][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 193.635134][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.637643][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.705141][ T9853] ceph: No mds server is up or the cluster is laggy [ 193.953402][ T9860] loop2: detected capacity change from 0 to 7 [ 193.956092][ T9860] Dev loop2: unable to read RDB block 7 [ 193.960546][ T9860] loop2: unable to read partition table [ 193.964945][ T9860] loop2: partition table beyond EOD, truncated [ 193.967944][ T9860] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 194.015975][ T5362] Dev loop2: unable to read RDB block 7 [ 194.018170][ T5362] loop2: unable to read partition table [ 194.022309][ T5362] loop2: partition table beyond EOD, truncated [ 194.362950][ T9873] md: array md2 already initialised! [ 194.849847][ T9887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1255'. [ 194.899635][ T9891] block nbd2: not configured, cannot reconfigure [ 194.935067][ T9893] loop2: detected capacity change from 0 to 7 [ 194.937312][ T9893] Dev loop2: unable to read RDB block 7 [ 194.939237][ T9893] loop2: unable to read partition table [ 194.941023][ T9893] loop2: partition table beyond EOD, truncated [ 194.943274][ T9893] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 195.819997][ T9913] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 196.011913][ T9918] syz.1.1265: attempt to access beyond end of device [ 196.011913][ T9918] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 196.018896][ T9918] SQUASHFS error: Failed to read block 0x0: -5 [ 196.022915][ T9918] unable to read squashfs_super_block [ 196.964630][ T9964] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 196.966551][ T9965] loop2: detected capacity change from 0 to 7 [ 196.970483][ T9965] Dev loop2: unable to read RDB block 7 [ 196.972987][ T9965] loop2: unable to read partition table [ 196.974739][ T9965] loop2: partition table beyond EOD, truncated [ 196.976574][ T9965] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 197.111613][ T9969] md: array md2 already initialised! [ 197.456522][ T70] Bluetooth: hci4: Frame reassembly failed (-84) [ 198.504700][T10004] loop2: detected capacity change from 0 to 7 [ 198.506868][T10004] Dev loop2: unable to read RDB block 7 [ 198.508529][T10004] loop2: unable to read partition table [ 198.510350][T10004] loop2: partition table beyond EOD, truncated [ 198.512334][T10004] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 198.611607][T10006] md: array md2 already initialised! [ 199.461592][ T5966] Bluetooth: hci4: command 0x1003 tx timeout [ 199.461656][ T5963] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 200.721530][T10043] md: array md2 already initialised! [ 201.386656][T10056] loop2: detected capacity change from 0 to 7 [ 201.389573][T10056] Dev loop2: unable to read RDB block 7 [ 201.391764][T10056] loop2: unable to read partition table [ 201.400536][T10056] loop2: partition table beyond EOD, truncated [ 201.403789][T10056] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 201.445803][ T5362] Dev loop2: unable to read RDB block 7 [ 201.447884][ T5362] loop2: unable to read partition table [ 201.450174][ T5362] loop2: partition table beyond EOD, truncated [ 202.421646][T10078] md: array md2 already initialised! [ 202.551839][T10090] loop2: detected capacity change from 0 to 7 [ 202.554377][T10090] Dev loop2: unable to read RDB block 7 [ 202.556528][T10090] loop2: unable to read partition table [ 202.558887][T10090] loop2: partition table beyond EOD, truncated [ 202.561203][T10090] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 202.818863][T10097] loop2: detected capacity change from 0 to 7 [ 202.820961][T10097] Dev loop2: unable to read RDB block 7 [ 202.822835][T10097] loop2: unable to read partition table [ 202.824511][T10097] loop2: partition table beyond EOD, truncated [ 202.826241][T10097] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 203.501662][T10119] md: array md2 already initialised! [ 203.536577][T10122] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1316'. [ 203.643652][T10130] loop2: detected capacity change from 0 to 7 [ 203.645811][T10130] Dev loop2: unable to read RDB block 7 [ 203.647485][T10130] loop2: unable to read partition table [ 203.649137][T10130] loop2: partition table beyond EOD, truncated [ 203.650954][T10130] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 203.861272][T10140] loop2: detected capacity change from 0 to 7 [ 203.870967][T10140] Dev loop2: unable to read RDB block 7 [ 203.872768][T10140] loop2: unable to read partition table [ 203.875682][T10140] loop2: partition table beyond EOD, truncated [ 203.878570][T10140] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 204.231658][T10145] md: array md2 already initialised! [ 205.213815][T10166] loop2: detected capacity change from 0 to 7 [ 205.216081][T10166] Dev loop2: unable to read RDB block 7 [ 205.217618][T10166] loop2: unable to read partition table [ 205.219702][T10166] loop2: partition table beyond EOD, truncated [ 205.222489][T10166] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 205.280319][T10170] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1334'. [ 205.421623][T10173] md: array md2 already initialised! [ 205.972561][ T83] Bluetooth: hci4: Frame reassembly failed (-84) [ 206.772246][T10204] loop2: detected capacity change from 0 to 7 [ 206.774395][T10204] Dev loop2: unable to read RDB block 7 [ 206.776013][T10204] loop2: unable to read partition table [ 206.777781][T10204] loop2: partition table beyond EOD, truncated [ 206.779566][T10204] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 207.071541][T10211] md: array md2 already initialised! [ 207.137092][T10215] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1346'. [ 208.021508][ T5963] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 208.021520][ T5966] Bluetooth: hci4: command 0x1003 tx timeout [ 208.163750][T10236] loop2: detected capacity change from 0 to 7 [ 208.167212][ T5951] Dev loop2: unable to read RDB block 7 [ 208.168720][ T5951] loop2: unable to read partition table [ 208.170710][ T5951] loop2: partition table beyond EOD, truncated [ 208.179022][T10236] Dev loop2: unable to read RDB block 7 [ 208.180630][T10236] loop2: unable to read partition table [ 208.182702][T10236] loop2: partition table beyond EOD, truncated [ 208.184422][T10236] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 208.188495][ T5362] Dev loop2: unable to read RDB block 7 [ 208.190177][ T5362] loop2: unable to read partition table [ 208.192504][ T5362] loop2: partition table beyond EOD, truncated [ 209.057318][T10244] loop2: detected capacity change from 0 to 7 [ 209.060896][T10244] Dev loop2: unable to read RDB block 7 [ 209.064115][T10244] loop2: unable to read partition table [ 209.065880][T10244] loop2: partition table beyond EOD, truncated [ 209.068153][T10244] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 209.426896][ T5362] Dev loop2: unable to read RDB block 7 [ 209.436016][ T5362] loop2: unable to read partition table [ 209.449186][ T5362] loop2: partition table beyond EOD, truncated [ 209.454845][ T1142] Bluetooth: hci4: Frame reassembly failed (-84) [ 209.591591][T10256] md: array md2 already initialised! [ 209.652104][T10264] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1358'. [ 209.679160][T10268] loop2: detected capacity change from 0 to 7 [ 209.686744][T10268] Dev loop2: unable to read RDB block 7 [ 209.689419][T10268] loop2: unable to read partition table [ 209.693991][T10268] loop2: partition table beyond EOD, truncated [ 209.696420][T10268] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 209.746672][ T5362] Dev loop2: unable to read RDB block 7 [ 209.748812][ T5362] loop2: unable to read partition table [ 209.751094][ T5362] loop2: partition table beyond EOD, truncated [ 211.335301][T10297] loop2: detected capacity change from 0 to 7 [ 211.337314][T10297] Dev loop2: unable to read RDB block 7 [ 211.338806][T10297] loop2: unable to read partition table [ 211.340418][T10297] loop2: partition table beyond EOD, truncated [ 211.342668][T10297] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 211.461546][ T5963] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 211.462522][ T5966] Bluetooth: hci4: command 0x1003 tx timeout [ 211.671510][T10307] md: array md2 already initialised! [ 211.688869][ T1142] Bluetooth: hci4: Frame reassembly failed (-84) [ 212.847951][T10334] loop2: detected capacity change from 0 to 7 [ 212.850108][T10334] Dev loop2: unable to read RDB block 7 [ 212.852306][T10334] loop2: unable to read partition table [ 212.854124][T10334] loop2: partition table beyond EOD, truncated [ 212.856243][T10334] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 212.896159][T10338] 9pnet_fd: Insufficient options for proto=fd [ 212.903196][T10340] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 213.013586][ T5362] Dev loop2: unable to read RDB block 7 [ 213.015238][ T5362] loop2: unable to read partition table [ 213.016855][ T5362] loop2: partition table beyond EOD, truncated [ 213.056894][T10348] fuse: Bad value for 'fd' [ 213.701539][ T5966] Bluetooth: hci4: command 0x1003 tx timeout [ 213.703374][ T5963] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 214.019584][T10368] 9pnet_fd: Insufficient options for proto=fd [ 214.711527][T10378] fuse: Bad value for 'fd' [ 215.637261][T10402] 9pnet_fd: Insufficient options for proto=fd [ 215.722513][T10413] fuse: Bad value for 'fd' [ 215.751806][T10408] md: array md2 already initialised! [ 215.941770][T10420] md: array md2 already initialised! [ 216.246518][T10432] 9pnet_fd: Insufficient options for proto=fd [ 216.274747][T10434] nbd: must specify a device to reconfigure [ 216.310040][T10425] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.314015][T10425] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.316551][ T40] audit: type=1804 audit(2000000134.151:96): pid=10436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1414" name="/newroot/355/file0" dev="tmpfs" ino=1861 res=1 errno=0 [ 216.414175][T10425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.423998][T10425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.476841][T10425] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.479495][T10425] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.483395][T10425] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.486035][T10425] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.672636][T10460] loop2: detected capacity change from 0 to 7 [ 217.674886][T10460] Dev loop2: unable to read RDB block 7 [ 217.677121][T10460] loop2: unable to read partition table [ 217.679517][T10460] loop2: partition table beyond EOD, truncated [ 217.681908][T10452] md: array md2 already initialised! [ 217.685008][T10460] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 217.700171][ T5362] Dev loop2: unable to read RDB block 7 [ 217.702489][ T5362] loop2: unable to read partition table [ 217.704813][ T5362] loop2: partition table beyond EOD, truncated [ 217.859444][T10471] FAULT_INJECTION: forcing a failure. [ 217.859444][T10471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.861456][T10464] md: array md2 already initialised! [ 217.863993][T10471] CPU: 1 UID: 0 PID: 10471 Comm: syz.3.1424 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 217.864008][T10471] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 217.864017][T10471] Call Trace: [ 217.864023][T10471] [ 217.864028][T10471] dump_stack_lvl+0x16c/0x1f0 [ 217.864053][T10471] should_fail_ex+0x512/0x640 [ 217.864073][T10471] _copy_to_user+0x32/0xd0 [ 217.864088][T10471] kvm_arch_vcpu_ioctl+0x7ad/0x4f00 [ 217.864109][T10471] ? is_bpf_text_address+0x94/0x1a0 [ 217.864124][T10471] ? kernel_text_address+0x8d/0x100 [ 217.864141][T10471] ? __kernel_text_address+0xd/0x40 [ 217.864160][T10471] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 217.864183][T10471] ? stack_trace_save+0x8e/0xc0 [ 217.864205][T10471] ? __lock_acquire+0xaa4/0x1ba0 [ 217.864222][T10471] ? kasan_save_stack+0x42/0x60 [ 217.864242][T10471] ? kasan_save_track+0x14/0x30 [ 217.864259][T10471] ? __mutex_trylock_common+0xe9/0x250 [ 217.864275][T10471] ? __pfx___mutex_trylock_common+0x10/0x10 [ 217.864290][T10471] ? __pfx___might_resched+0x10/0x10 [ 217.864311][T10471] ? rcu_is_watching+0x12/0xc0 [ 217.864328][T10471] ? trace_contention_end+0xdd/0x130 [ 217.864337][T10471] ? __mutex_lock+0x1ca/0xb90 [ 217.864359][T10471] ? kvm_vcpu_ioctl+0x27e/0x1680 [ 217.864383][T10471] ? __pfx___mutex_lock+0x10/0x10 [ 217.864411][T10471] ? kasan_quarantine_put+0x10a/0x240 [ 217.864430][T10471] ? kvm_vcpu_ioctl+0x1232/0x1680 [ 217.864451][T10471] kvm_vcpu_ioctl+0x1232/0x1680 [ 217.864475][T10471] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 217.864496][T10471] ? tomoyo_path_number_perm+0x18d/0x580 [ 217.864512][T10471] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 217.864529][T10471] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 217.864546][T10471] ? do_vfs_ioctl+0x512/0x1990 [ 217.864563][T10471] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 217.864591][T10471] kvm_vcpu_compat_ioctl+0x20f/0x3d0 [ 217.864614][T10471] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 217.864638][T10471] ? __fget_files+0x20e/0x3c0 [ 217.864661][T10471] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 217.864680][T10471] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 217.864699][T10471] __do_fast_syscall_32+0x73/0x120 [ 217.864722][T10471] do_fast_syscall_32+0x32/0x80 [ 217.864746][T10471] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.864761][T10471] RIP: 0023:0xf739e579 [ 217.864772][T10471] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 217.864785][T10471] RSP: 002b:00000000f502655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 217.864798][T10471] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000008188aea6 [ 217.864807][T10471] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 217.864815][T10471] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 217.864823][T10471] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 217.864829][T10471] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 217.864841][T10471] [ 217.932615][T10475] nbd: must specify a device to reconfigure [ 218.181717][T10483] md: array md2 already initialised! [ 218.560709][T10500] loop2: detected capacity change from 0 to 7 [ 218.564674][T10500] Dev loop2: unable to read RDB block 7 [ 218.566397][T10500] loop2: unable to read partition table [ 218.568552][T10500] loop2: partition table beyond EOD, truncated [ 218.570372][T10500] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 219.763046][T10538] md: array md2 already initialised! [ 220.647221][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1447'. [ 220.981669][T10584] md: array md2 already initialised! [ 221.473424][T10603] netlink: 'syz.2.1455': attribute type 3 has an invalid length. [ 221.475684][T10603] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1455'. [ 221.509450][T10587] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.512938][T10587] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.700535][T10587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.714417][T10587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.828924][T10587] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.834030][T10587] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.836443][T10587] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.842698][T10587] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.879447][T10606] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1454'. [ 222.029522][T10618] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 222.032099][T10618] overlayfs: missing 'lowerdir' [ 222.058143][ T40] audit: type=1800 audit(2000000139.891:97): pid=10618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1457" name="/" dev="9p" ino=154 res=0 errno=0 [ 222.348797][T10627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1459'. [ 222.393043][T10624] md: array md2 already initialised! [ 222.408143][T10630] 9pnet_fd: Insufficient options for proto=fd [ 222.562546][T10643] netlink: 'syz.2.1468': attribute type 1 has an invalid length. [ 222.776064][T10654] FAULT_INJECTION: forcing a failure. [ 222.776064][T10654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.780109][T10654] CPU: 2 UID: 0 PID: 10654 Comm: syz.2.1470 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 222.780122][T10654] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 222.780129][T10654] Call Trace: [ 222.780134][T10654] [ 222.780138][T10654] dump_stack_lvl+0x16c/0x1f0 [ 222.780155][T10654] should_fail_ex+0x512/0x640 [ 222.780169][T10654] _copy_from_user+0x2e/0xd0 [ 222.780182][T10654] kstrtouint_from_user+0xd6/0x1d0 [ 222.780197][T10654] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 222.780212][T10654] ? __lock_acquire+0xaa4/0x1ba0 [ 222.780227][T10654] proc_fail_nth_write+0x83/0x250 [ 222.780242][T10654] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 222.780259][T10654] vfs_write+0x25c/0x1180 [ 222.780272][T10654] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 222.780287][T10654] ? __pfx___mutex_lock+0x10/0x10 [ 222.780301][T10654] ? __pfx_vfs_write+0x10/0x10 [ 222.780317][T10654] ? __fget_files+0x20e/0x3c0 [ 222.780335][T10654] ksys_write+0x12a/0x240 [ 222.780348][T10654] ? __pfx_ksys_write+0x10/0x10 [ 222.780362][T10654] ? rcu_is_watching+0x12/0xc0 [ 222.780377][T10654] __do_fast_syscall_32+0x73/0x120 [ 222.780392][T10654] do_fast_syscall_32+0x32/0x80 [ 222.780406][T10654] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.780418][T10654] RIP: 0023:0xf7f25579 [ 222.780426][T10654] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 222.780436][T10654] RSP: 002b:00000000f5046590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 222.780445][T10654] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f5046620 [ 222.780451][T10654] RDX: 0000000000000001 RSI: 00000000f73acff4 RDI: 0000000000000000 [ 222.780457][T10654] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 222.780462][T10654] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 222.780468][T10654] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.780480][T10654] [ 223.073132][T10661] FAULT_INJECTION: forcing a failure. [ 223.073132][T10661] name failslab, interval 1, probability 0, space 0, times 1 [ 223.076947][T10661] CPU: 0 UID: 0 PID: 10661 Comm: syz.2.1471 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 223.076960][T10661] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 223.076967][T10661] Call Trace: [ 223.076971][T10661] [ 223.076975][T10661] dump_stack_lvl+0x16c/0x1f0 [ 223.076992][T10661] should_fail_ex+0x512/0x640 [ 223.077004][T10661] ? fs_reclaim_acquire+0xae/0x150 [ 223.077017][T10661] ? tomoyo_init_log+0x1385/0x2140 [ 223.077029][T10661] should_failslab+0xc2/0x120 [ 223.077039][T10661] __kmalloc_noprof+0xd2/0x510 [ 223.077052][T10661] ? __pfx_from_kuid+0x10/0x10 [ 223.077066][T10661] tomoyo_init_log+0x1385/0x2140 [ 223.077085][T10661] ? __pfx_tomoyo_init_log+0x10/0x10 [ 223.077098][T10661] ? tomoyo_profile+0x47/0x60 [ 223.077112][T10661] ? tomoyo_domain_quota_is_ok+0x2f6/0x5a0 [ 223.077125][T10661] tomoyo_supervisor+0x302/0x13b0 [ 223.077142][T10661] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 223.077165][T10661] ? tomoyo_check_path_acl+0xad/0x210 [ 223.077177][T10661] ? tomoyo_check_acl+0x1f7/0x410 [ 223.077188][T10661] tomoyo_path_permission+0x270/0x3b0 [ 223.077201][T10661] tomoyo_check_open_permission+0x37b/0x3c0 [ 223.077213][T10661] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 223.077237][T10661] ? do_raw_spin_lock+0x12c/0x2b0 [ 223.077252][T10661] tomoyo_file_open+0x6b/0x90 [ 223.077268][T10661] security_file_open+0x84/0x1e0 [ 223.077282][T10661] do_dentry_open+0x596/0x1c10 [ 223.077308][T10661] vfs_open+0x82/0x3f0 [ 223.077327][T10661] path_openat+0x1e5e/0x2d40 [ 223.077357][T10661] ? __pfx_path_openat+0x10/0x10 [ 223.077382][T10661] do_filp_open+0x20b/0x470 [ 223.077397][T10661] ? __pfx_do_filp_open+0x10/0x10 [ 223.077420][T10661] ? alloc_fd+0x471/0x7d0 [ 223.077438][T10661] do_sys_openat2+0x11b/0x1d0 [ 223.077447][T10661] ? __pfx_do_sys_openat2+0x10/0x10 [ 223.077463][T10661] __ia32_compat_sys_openat+0x16d/0x210 [ 223.077474][T10661] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 223.077488][T10661] ? rcu_is_watching+0x12/0xc0 [ 223.077502][T10661] __do_fast_syscall_32+0x73/0x120 [ 223.077517][T10661] do_fast_syscall_32+0x32/0x80 [ 223.077531][T10661] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 223.077543][T10661] RIP: 0023:0xf7f25579 [ 223.077551][T10661] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 223.077560][T10661] RSP: 002b:00000000f5025100 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 223.077570][T10661] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5025150 [ 223.077576][T10661] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f73acff4 [ 223.077582][T10661] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 223.077587][T10661] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 223.077592][T10661] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.077604][T10661] [ 223.084210][T10661] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 223.105257][T10664] 9pnet_fd: Insufficient options for proto=fd [ 224.417639][T10714] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1479'. [ 224.774574][T10721] 9pnet_fd: Insufficient options for proto=fd [ 224.871199][T10725] loop6: detected capacity change from 0 to 524287999 [ 224.878134][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.880673][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 224.883808][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.886758][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 224.891017][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.893523][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 224.895750][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.898210][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 224.901760][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.904180][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 224.906430][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.908930][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 224.911166][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.913671][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 224.917271][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.919744][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 224.921893][T10725] ldm_validate_partition_table(): Disk read failed. [ 224.925461][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.927930][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 224.930101][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.932552][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 224.935434][T10725] Dev loop6: unable to read RDB block 0 [ 224.937691][T10725] loop6: unable to read partition table [ 224.939419][T10725] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 225.025637][T10730] sctp: [Deprecated]: syz.2.1483 (pid 10730) Use of int in max_burst socket option deprecated. [ 225.025637][T10730] Use struct sctp_assoc_value instead [ 225.033441][T10728] ldm_validate_partition_table(): Disk read failed. [ 225.036327][T10728] Dev loop6: unable to read RDB block 0 [ 225.042811][T10728] loop6: unable to read partition table [ 225.044443][T10728] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 226.458653][T10797] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1493'. [ 226.467328][T10797] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1493'. [ 226.991547][T10811] md: array md2 already initialised! [ 228.631796][T10886] md: array md2 already initialised! [ 228.658428][T10893] dummy0: entered promiscuous mode [ 228.740204][T10896] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 228.742686][T10896] overlayfs: missing 'lowerdir' [ 228.755027][T10896] FAULT_INJECTION: forcing a failure. [ 228.755027][T10896] name failslab, interval 1, probability 0, space 0, times 0 [ 228.759491][T10896] CPU: 2 UID: 0 PID: 10896 Comm: syz.0.1510 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 228.759513][T10896] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 228.759520][T10896] Call Trace: [ 228.759524][T10896] [ 228.759528][T10896] dump_stack_lvl+0x16c/0x1f0 [ 228.759546][T10896] should_fail_ex+0x512/0x640 [ 228.759558][T10896] ? fs_reclaim_acquire+0xae/0x150 [ 228.759571][T10896] ? p9_fcall_init+0x97/0x260 [ 228.759584][T10896] should_failslab+0xc2/0x120 [ 228.759593][T10896] __kmalloc_noprof+0xd2/0x510 [ 228.759608][T10896] ? __sanitizer_cov_trace_switch+0x40/0x90 [ 228.759621][T10896] p9_fcall_init+0x97/0x260 [ 228.759634][T10896] p9_tag_alloc+0x161/0x640 [ 228.759649][T10896] ? __pfx_p9_tag_alloc+0x10/0x10 [ 228.759661][T10896] ? stack_depot_save_flags+0x28/0xa50 [ 228.759678][T10896] p9_client_prepare_req+0x19b/0x4d0 [ 228.759692][T10896] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 228.759708][T10896] ? __lock_acquire+0xaa4/0x1ba0 [ 228.759723][T10896] p9_client_rpc+0x1c4/0xc50 [ 228.759737][T10896] ? node_tag_clear+0x105/0x290 [ 228.759748][T10896] ? __pfx_p9_client_rpc+0x10/0x10 [ 228.759763][T10896] ? idr_alloc_u32+0x20f/0x2f0 [ 228.759778][T10896] ? idr_preload_end+0xc2/0x230 [ 228.759792][T10896] ? rcu_is_watching+0x12/0xc0 [ 228.759807][T10896] p9_client_walk+0x1ab/0x530 [ 228.759816][T10896] ? __pfx_p9_client_walk+0x10/0x10 [ 228.759827][T10896] ? v9fs_fid_lookup+0xe9/0xeb0 [ 228.759839][T10896] v9fs_file_open+0x599/0xab0 [ 228.759854][T10896] ? __pfx_apparmor_file_open+0x10/0x10 [ 228.759866][T10896] ? __pfx_v9fs_file_open+0x10/0x10 [ 228.759882][T10896] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 228.759899][T10896] do_dentry_open+0x741/0x1c10 [ 228.759913][T10896] ? __pfx_v9fs_file_open+0x10/0x10 [ 228.759930][T10896] vfs_open+0x82/0x3f0 [ 228.759941][T10896] path_openat+0x1e5e/0x2d40 [ 228.759960][T10896] ? __pfx_path_openat+0x10/0x10 [ 228.759979][T10896] do_filp_open+0x20b/0x470 [ 228.759993][T10896] ? __pfx_do_filp_open+0x10/0x10 [ 228.760016][T10896] ? alloc_fd+0x471/0x7d0 [ 228.760033][T10896] do_sys_openat2+0x11b/0x1d0 [ 228.760043][T10896] ? __pfx_do_sys_openat2+0x10/0x10 [ 228.760059][T10896] __ia32_compat_sys_openat+0x16d/0x210 [ 228.760070][T10896] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 228.760084][T10896] ? rcu_is_watching+0x12/0xc0 [ 228.760098][T10896] __do_fast_syscall_32+0x73/0x120 [ 228.760113][T10896] do_fast_syscall_32+0x32/0x80 [ 228.760126][T10896] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 228.760139][T10896] RIP: 0023:0xf744e579 [ 228.760147][T10896] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 228.760156][T10896] RSP: 002b:00000000f50b555c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 228.760166][T10896] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 000000008000c380 [ 228.760172][T10896] RDX: 0000000000020842 RSI: 0000000000000000 RDI: 0000000000000000 [ 228.760178][T10896] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 228.760183][T10896] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 228.760189][T10896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 228.760201][T10896] [ 229.491555][T10917] md: array md2 already initialised! [ 229.560231][ T10] kernel write not supported for file /input/mouse0 (pid: 10 comm: kworker/0:1) [ 229.904060][T10946] FAULT_INJECTION: forcing a failure. [ 229.904060][T10946] name failslab, interval 1, probability 0, space 0, times 0 [ 229.907486][T10946] CPU: 3 UID: 0 PID: 10946 Comm: syz.3.1523 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 229.907499][T10946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 229.907505][T10946] Call Trace: [ 229.907509][T10946] [ 229.907513][T10946] dump_stack_lvl+0x16c/0x1f0 [ 229.907531][T10946] should_fail_ex+0x512/0x640 [ 229.907542][T10946] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 229.907558][T10946] should_failslab+0xc2/0x120 [ 229.907568][T10946] __kmalloc_cache_node_noprof+0x6d/0x420 [ 229.907582][T10946] ? __get_vm_area_node+0x101/0x300 [ 229.907596][T10946] __get_vm_area_node+0x101/0x300 [ 229.907609][T10946] __vmalloc_node_range_noprof+0x277/0x1540 [ 229.907622][T10946] ? bpf_check+0x1e4/0xb460 [ 229.907636][T10946] ? find_held_lock+0x2b/0x80 [ 229.907655][T10946] ? bpf_check+0x1e4/0xb460 [ 229.907671][T10946] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 229.907684][T10946] ? rcu_is_watching+0x12/0xc0 [ 229.907696][T10946] ? trace_kmalloc+0x2b/0xd0 [ 229.907706][T10946] ? __kvmalloc_node_noprof.cold+0x60/0x65 [ 229.907719][T10946] ? rcu_is_watching+0x12/0xc0 [ 229.907730][T10946] ? ktime_get+0x200/0x310 [ 229.907744][T10946] ? bpf_check+0x1e4/0xb460 [ 229.907758][T10946] vzalloc_noprof+0x6b/0x90 [ 229.907771][T10946] ? bpf_check+0x1e4/0xb460 [ 229.907784][T10946] bpf_check+0x1e4/0xb460 [ 229.907797][T10946] ? __mutex_trylock_common+0xe9/0x250 [ 229.907808][T10946] ? __mutex_trylock_common+0xe9/0x250 [ 229.907821][T10946] ? __lock_acquire+0x5ca/0x1ba0 [ 229.907831][T10946] ? __pfx_bpf_check+0x10/0x10 [ 229.907844][T10946] ? pcpu_alloc_noprof+0x949/0x1470 [ 229.907863][T10946] ? __lock_acquire+0xaa4/0x1ba0 [ 229.907878][T10946] ? find_held_lock+0x2b/0x80 [ 229.907891][T10946] ? rcu_is_watching+0x12/0xc0 [ 229.907902][T10946] ? ktime_get_with_offset+0x26e/0x3b0 [ 229.907916][T10946] ? __asan_memset+0x23/0x50 [ 229.907929][T10946] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 229.907940][T10946] bpf_prog_load+0xe41/0x2490 [ 229.907953][T10946] ? __pfx_bpf_prog_load+0x10/0x10 [ 229.907973][T10946] ? bpf_lsm_bpf+0x9/0x10 [ 229.907987][T10946] __sys_bpf+0x433c/0x4d80 [ 229.907999][T10946] ? __pfx___sys_bpf+0x10/0x10 [ 229.908010][T10946] ? ksys_write+0x190/0x240 [ 229.908025][T10946] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 229.908046][T10946] ? fput+0x70/0xf0 [ 229.908055][T10946] ? ksys_write+0x1b9/0x240 [ 229.908068][T10946] ? __pfx_ksys_write+0x10/0x10 [ 229.908083][T10946] __ia32_sys_bpf+0x76/0xe0 [ 229.908095][T10946] __do_fast_syscall_32+0x73/0x120 [ 229.908110][T10946] do_fast_syscall_32+0x32/0x80 [ 229.908124][T10946] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 229.908135][T10946] RIP: 0023:0xf739e579 [ 229.908143][T10946] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 229.908153][T10946] RSP: 002b:00000000f502655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 229.908162][T10946] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000008000e000 [ 229.908168][T10946] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 229.908174][T10946] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 229.908179][T10946] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 229.908185][T10946] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 229.908196][T10946] [ 229.908330][T10946] syz.3.1523: vmalloc error: size 320, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 230.027879][T10946] CPU: 3 UID: 0 PID: 10946 Comm: syz.3.1523 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 230.027892][T10946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 230.027899][T10946] Call Trace: [ 230.027903][T10946] [ 230.027907][T10946] dump_stack_lvl+0x16c/0x1f0 [ 230.027924][T10946] warn_alloc+0x248/0x3a0 [ 230.027941][T10946] ? __pfx_warn_alloc+0x10/0x10 [ 230.027955][T10946] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 230.027971][T10946] ? __kasan_kmalloc+0x8a/0xb0 [ 230.027986][T10946] ? __get_vm_area_node+0x1e5/0x300 [ 230.028000][T10946] __vmalloc_node_range_noprof+0xd31/0x1540 [ 230.028013][T10946] ? find_held_lock+0x2b/0x80 [ 230.028028][T10946] ? bpf_check+0x1e4/0xb460 [ 230.028045][T10946] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 230.028058][T10946] ? rcu_is_watching+0x12/0xc0 [ 230.028070][T10946] ? trace_kmalloc+0x2b/0xd0 [ 230.028079][T10946] ? __kvmalloc_node_noprof.cold+0x60/0x65 [ 230.028092][T10946] ? rcu_is_watching+0x12/0xc0 [ 230.028103][T10946] ? ktime_get+0x200/0x310 [ 230.028117][T10946] ? bpf_check+0x1e4/0xb460 [ 230.028130][T10946] vzalloc_noprof+0x6b/0x90 [ 230.028143][T10946] ? bpf_check+0x1e4/0xb460 [ 230.028156][T10946] bpf_check+0x1e4/0xb460 [ 230.028169][T10946] ? __mutex_trylock_common+0xe9/0x250 [ 230.028180][T10946] ? __mutex_trylock_common+0xe9/0x250 [ 230.028193][T10946] ? __lock_acquire+0x5ca/0x1ba0 [ 230.028202][T10946] ? __pfx_bpf_check+0x10/0x10 [ 230.028215][T10946] ? pcpu_alloc_noprof+0x949/0x1470 [ 230.028234][T10946] ? __lock_acquire+0xaa4/0x1ba0 [ 230.028249][T10946] ? find_held_lock+0x2b/0x80 [ 230.028262][T10946] ? rcu_is_watching+0x12/0xc0 [ 230.028273][T10946] ? ktime_get_with_offset+0x26e/0x3b0 [ 230.028287][T10946] ? __asan_memset+0x23/0x50 [ 230.028300][T10946] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 230.028311][T10946] bpf_prog_load+0xe41/0x2490 [ 230.028324][T10946] ? __pfx_bpf_prog_load+0x10/0x10 [ 230.028344][T10946] ? bpf_lsm_bpf+0x9/0x10 [ 230.028358][T10946] __sys_bpf+0x433c/0x4d80 [ 230.028370][T10946] ? __pfx___sys_bpf+0x10/0x10 [ 230.028381][T10946] ? ksys_write+0x190/0x240 [ 230.028396][T10946] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 230.028418][T10946] ? fput+0x70/0xf0 [ 230.028427][T10946] ? ksys_write+0x1b9/0x240 [ 230.028439][T10946] ? __pfx_ksys_write+0x10/0x10 [ 230.028454][T10946] __ia32_sys_bpf+0x76/0xe0 [ 230.028466][T10946] __do_fast_syscall_32+0x73/0x120 [ 230.028481][T10946] do_fast_syscall_32+0x32/0x80 [ 230.028495][T10946] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 230.028506][T10946] RIP: 0023:0xf739e579 [ 230.028515][T10946] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 230.028524][T10946] RSP: 002b:00000000f502655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 230.028533][T10946] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000008000e000 [ 230.028539][T10946] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 230.028545][T10946] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 230.028550][T10946] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 230.028555][T10946] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 230.028567][T10946] [ 230.028570][T10946] Mem-Info: [ 230.161578][T10946] active_anon:12592 inactive_anon:72 isolated_anon:0 [ 230.161578][T10946] active_file:4812 inactive_file:43899 isolated_file:0 [ 230.161578][T10946] unevictable:1768 dirty:282 writeback:0 [ 230.161578][T10946] slab_reclaimable:9757 slab_unreclaimable:55680 [ 230.161578][T10946] mapped:30825 shmem:8223 pagetables:884 [ 230.161578][T10946] sec_pagetables:298 bounce:0 [ 230.161578][T10946] kernel_misc_reclaimable:0 [ 230.161578][T10946] free:37814 free_pcp:6456 free_cma:0 [ 230.197740][T10946] Node 0 active_anon:4052kB inactive_anon:0kB active_file:4164kB inactive_file:14420kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:6000kB dirty:0kB writeback:0kB shmem:4024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8856kB pagetables:800kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB [ 230.225257][T10946] Node 1 active_anon:46316kB inactive_anon:288kB active_file:15084kB inactive_file:161176kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:117260kB dirty:1128kB writeback:0kB shmem:28872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3492kB pagetables:2824kB sec_pagetables:52kB all_unreclaimable? no Balloon:0kB [ 230.237062][T10946] Node 0 DMA free:2940kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:444kB local_pcp:20kB free_cma:0kB [ 230.250436][T10946] lowmem_reserve[]: 0 290 290 290 290 [ 230.256669][T10946] Node 0 DMA32 free:21040kB boost:30000kB min:43336kB low:46668kB high:50000kB reserved_highatomic:4096KB active_anon:4052kB inactive_anon:0kB active_file:4164kB inactive_file:14420kB unevictable:3536kB writepending:0kB present:1032196kB managed:297492kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3492kB free_cma:0kB [ 230.286097][T10946] lowmem_reserve[]: 0 0 0 0 0 [ 230.289885][T10946] Node 1 DMA32 free:134660kB boost:0kB min:47148kB low:58932kB high:70716kB reserved_highatomic:6144KB active_anon:34512kB inactive_anon:288kB active_file:15084kB inactive_file:161176kB unevictable:3536kB writepending:1128kB present:1048432kB managed:948284kB mlocked:0kB bounce:0kB free_pcp:25488kB local_pcp:736kB free_cma:0kB [ 230.316387][T10946] lowmem_reserve[]: 0 0 0 0 0 [ 230.321149][T10946] Node 0 DMA: 47*4kB (U) 26*8kB (U) 11*16kB (U) 10*32kB (U) 4*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 2940kB [ 230.357738][T10946] Node 0 DMA32: 474*4kB (UMH) 153*8kB (UMH) 52*16kB (UMH) 94*32kB (UMEH) 64*64kB (UMH) 24*128kB (UMH) 11*256kB (UMH) 6*512kB (UMH) 1*1024kB (H) 0*2048kB 0*4096kB = 21040kB [ 230.371529][T10963] netlink: 'syz.1.1527': attribute type 8 has an invalid length. [ 230.381544][T10946] Node 1 DMA32: 305*4kB (UMEH) 134*8kB (UMEH) 20*16kB (MEH) 65*32kB (UMEH) 439*64kB (UMEH) 84*128kB (UMEH) 36*256kB (UMEH) 36*512kB (UMEH) 19*1024kB (UMEH) 11*2048kB (UME) 5*4096kB (UM) = 133652kB [ 230.399552][ T40] audit: type=1326 audit(2000000148.231:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10962 comm="syz.1.1527" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x0 [ 230.406694][T10946] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 230.413941][T10946] Node 0 hugepages_total=24 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 230.418915][T10946] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 230.425567][T10946] Node 1 hugepages_total=4294967276 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 230.431618][T10946] 54054 total pagecache pages [ 230.432979][T10946] 0 pages in swap cache [ 230.434237][T10946] Free swap = 124996kB [ 230.435394][T10946] Total swap = 124996kB [ 230.436726][T10946] 524155 pages RAM [ 230.437871][T10946] 0 pages HighMem/MovableOnly [ 230.439190][T10946] 208871 pages reserved [ 230.440383][T10946] 0 pages cma reserved [ 230.622139][T10969] md: array md2 already initialised! [ 230.712240][T10981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1529'. [ 230.714784][T10981] bridge_slave_1: left allmulticast mode [ 230.716341][T10981] bridge_slave_1: left promiscuous mode [ 230.718060][T10981] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.723909][T10981] bridge_slave_0: left allmulticast mode [ 230.725573][T10981] bridge_slave_0: left promiscuous mode [ 230.727754][T10981] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.491796][T11004] md: array md2 already initialised! [ 232.182218][T11040] FAULT_INJECTION: forcing a failure. [ 232.182218][T11040] name failslab, interval 1, probability 0, space 0, times 0 [ 232.185847][T11040] CPU: 3 UID: 0 PID: 11040 Comm: syz.1.1548 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 232.185861][T11040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 232.185867][T11040] Call Trace: [ 232.185871][T11040] [ 232.185875][T11040] dump_stack_lvl+0x16c/0x1f0 [ 232.185897][T11040] should_fail_ex+0x512/0x640 [ 232.185909][T11040] ? __kmalloc_noprof+0xbf/0x510 [ 232.185925][T11040] ? nft_trans_alloc_gfp+0x26/0x2e0 [ 232.185936][T11040] should_failslab+0xc2/0x120 [ 232.185946][T11040] __kmalloc_noprof+0xd2/0x510 [ 232.185959][T11040] ? lockdep_init_map_type+0x5c/0x280 [ 232.185972][T11040] nft_trans_alloc_gfp+0x26/0x2e0 [ 232.185984][T11040] nf_tables_newtable+0x1387/0x1b40 [ 232.186004][T11040] ? __pfx_nf_tables_newtable+0x10/0x10 [ 232.186023][T11040] ? __nla_parse+0x40/0x60 [ 232.186038][T11040] nfnetlink_rcv_batch+0x1908/0x2350 [ 232.186061][T11040] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 232.186075][T11040] ? consume_skb+0xcc/0x100 [ 232.186090][T11040] ? find_held_lock+0x2b/0x80 [ 232.186104][T11040] ? __local_bh_enable_ip+0xa4/0x120 [ 232.186117][T11040] ? lockdep_hardirqs_on+0x7c/0x110 [ 232.186138][T11040] ? __pfx___dev_queue_xmit+0x10/0x10 [ 232.186161][T11040] ? __nla_parse+0x40/0x60 [ 232.186175][T11040] nfnetlink_rcv+0x3c1/0x430 [ 232.186190][T11040] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 232.186209][T11040] netlink_unicast+0x53a/0x7f0 [ 232.186224][T11040] ? __pfx_netlink_unicast+0x10/0x10 [ 232.186237][T11040] ? __build_skb_around+0x278/0x3b0 [ 232.186248][T11040] ? __build_skb+0x6e/0x90 [ 232.186258][T11040] ? is_vmalloc_addr+0x30/0x40 [ 232.186274][T11040] netlink_sendmsg+0x8d1/0xdd0 [ 232.186290][T11040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.186305][T11040] ? __import_iovec+0x1c8/0x660 [ 232.186321][T11040] ____sys_sendmsg+0xa95/0xc70 [ 232.186338][T11040] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.186352][T11040] ? get_compat_msghdr+0x11a/0x170 [ 232.186369][T11040] ___sys_sendmsg+0x134/0x1d0 [ 232.186383][T11040] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.186411][T11040] __sys_sendmsg+0x16d/0x220 [ 232.186423][T11040] ? __pfx___sys_sendmsg+0x10/0x10 [ 232.186449][T11040] ? rcu_is_watching+0x12/0xc0 [ 232.186465][T11040] __do_fast_syscall_32+0x73/0x120 [ 232.186480][T11040] do_fast_syscall_32+0x32/0x80 [ 232.186494][T11040] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 232.186506][T11040] RIP: 0023:0xf747e579 [ 232.186514][T11040] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 232.186523][T11040] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 232.186533][T11040] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 232.186539][T11040] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 232.186544][T11040] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 232.186550][T11040] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 232.186555][T11040] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 232.186567][T11040] [ 232.276116][T11037] md: array md2 already initialised! [ 232.549109][T11061] loop2: detected capacity change from 0 to 7 [ 232.552345][T11061] Dev loop2: unable to read RDB block 7 [ 232.554018][T11061] loop2: unable to read partition table [ 232.555820][T11061] loop2: partition table beyond EOD, truncated [ 232.557612][T11061] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 232.981103][ T5362] Dev loop2: unable to read RDB block 7 [ 232.982844][ T5362] loop2: unable to read partition table [ 232.984487][ T5362] loop2: partition table beyond EOD, truncated [ 233.121686][T11075] md: array md2 already initialised! [ 233.127811][T11085] program syz.3.1565 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.282530][T11097] loop2: detected capacity change from 0 to 7 [ 233.284598][T11097] Dev loop2: unable to read RDB block 7 [ 233.286179][T11097] loop2: unable to read partition table [ 233.287825][T11097] loop2: partition table beyond EOD, truncated [ 233.289624][T11097] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 234.161887][T11122] program syz.2.1577 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.211637][T11119] md: array md2 already initialised! [ 234.242599][T11129] FAULT_INJECTION: forcing a failure. [ 234.242599][T11129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.246273][T11129] CPU: 2 UID: 0 PID: 11129 Comm: syz.3.1580 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 234.246286][T11129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 234.246292][T11129] Call Trace: [ 234.246296][T11129] [ 234.246300][T11129] dump_stack_lvl+0x16c/0x1f0 [ 234.246318][T11129] should_fail_ex+0x512/0x640 [ 234.246331][T11129] _copy_to_user+0x32/0xd0 [ 234.246345][T11129] simple_read_from_buffer+0xcb/0x170 [ 234.246360][T11129] proc_fail_nth_read+0x197/0x270 [ 234.246374][T11129] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 234.246388][T11129] ? rw_verify_area+0xcf/0x680 [ 234.246400][T11129] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 234.246413][T11129] vfs_read+0x1de/0xc70 [ 234.246442][T11129] ? __pfx___mutex_lock+0x10/0x10 [ 234.246456][T11129] ? __pfx_vfs_read+0x10/0x10 [ 234.246472][T11129] ? __fget_files+0x20e/0x3c0 [ 234.246490][T11129] ksys_read+0x12a/0x240 [ 234.246502][T11129] ? __pfx_ksys_read+0x10/0x10 [ 234.246517][T11129] ? rcu_is_watching+0x12/0xc0 [ 234.246530][T11129] __do_fast_syscall_32+0x73/0x120 [ 234.246546][T11129] do_fast_syscall_32+0x32/0x80 [ 234.246563][T11129] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 234.246575][T11129] RIP: 0023:0xf739e579 [ 234.246583][T11129] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 234.246593][T11129] RSP: 002b:00000000f5026590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 234.246603][T11129] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f5026620 [ 234.246609][T11129] RDX: 000000000000000f RSI: 00000000f738cff4 RDI: 0000000000000000 [ 234.246614][T11129] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 234.246620][T11129] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 234.246625][T11129] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 234.246637][T11129] [ 234.493067][T11145] program syz.2.1587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.520339][T11148] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1588'. [ 234.711836][ T6422] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 234.731602][T11155] md: array md2 already initialised! [ 234.863019][ T6422] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 234.865625][ T6422] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 234.869568][ T6422] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 234.873696][ T6422] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 234.878011][ T6422] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 234.887138][ T6422] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 234.890163][ T6422] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 234.894475][ T6422] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 234.901663][ T6422] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 234.904916][ T6422] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 234.910456][ T6422] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 234.917022][ T6422] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 234.920185][ T6422] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 234.923311][ T6422] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 234.926481][ T6422] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 234.936215][ T6422] usb 5-1: string descriptor 0 read error: -22 [ 234.943210][ T6422] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 234.946523][ T6422] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.954270][ T6422] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 235.105386][T11183] loop2: detected capacity change from 0 to 7 [ 235.107529][T11183] Dev loop2: unable to read RDB block 7 [ 235.109216][T11183] loop2: unable to read partition table [ 235.110979][T11183] loop2: partition table beyond EOD, truncated [ 235.112908][T11183] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 235.158921][ T5962] usb 5-1: USB disconnect, device number 4 [ 235.323218][T11191] loop2: detected capacity change from 0 to 7 [ 235.325462][T11191] Dev loop2: unable to read RDB block 7 [ 235.327053][T11191] loop2: unable to read partition table [ 235.328717][T11191] loop2: partition table beyond EOD, truncated [ 235.330537][T11191] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 235.493953][ T5362] Dev loop2: unable to read RDB block 7 [ 235.495831][ T5362] loop2: unable to read partition table [ 235.497532][ T5362] loop2: partition table beyond EOD, truncated [ 235.839564][T11208] 9pnet_fd: Insufficient options for proto=fd [ 235.856275][T11207] overlayfs: missing 'lowerdir' [ 236.734214][T11227] loop2: detected capacity change from 0 to 7 [ 236.736404][T11227] Dev loop2: unable to read RDB block 7 [ 236.738232][T11227] loop2: unable to read partition table [ 236.740065][T11227] loop2: partition table beyond EOD, truncated [ 236.742022][T11227] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 236.804238][ T5362] Dev loop2: unable to read RDB block 7 [ 236.805966][ T5362] loop2: unable to read partition table [ 236.807631][ T5362] loop2: partition table beyond EOD, truncated [ 236.862835][ T5362] Dev loop2: unable to read RDB block 7 [ 236.864556][ T5362] loop2: unable to read partition table [ 236.866167][ T5362] loop2: partition table beyond EOD, truncated [ 236.916449][T11229] md: array md2 already initialised! [ 237.057638][T11250] 9pnet_fd: Insufficient options for proto=fd [ 237.579050][T11280] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1632'. [ 237.658448][T11280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.663086][T11280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.667319][T11280] bond0 (unregistering): Released all slaves [ 237.709202][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1633'. [ 237.774822][T11289] loop2: detected capacity change from 0 to 7 [ 237.776863][T11289] Dev loop2: unable to read RDB block 7 [ 237.778429][T11289] loop2: unable to read partition table [ 237.780065][T11289] loop2: partition table beyond EOD, truncated [ 237.782391][T11289] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 238.080221][T11304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1638'. [ 238.145229][T11317] loop2: detected capacity change from 0 to 7 [ 238.147506][T11317] Dev loop2: unable to read RDB block 7 [ 238.149688][T11317] loop2: unable to read partition table [ 238.153651][T11317] loop2: partition table beyond EOD, truncated [ 238.156118][T11317] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 238.194601][ T5362] Dev loop2: unable to read RDB block 7 [ 238.196382][ T5362] loop2: unable to read partition table [ 238.198063][ T5362] loop2: partition table beyond EOD, truncated [ 238.214641][T11320] program syz.2.1644 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.232746][ T5362] Dev loop2: unable to read RDB block 7 [ 238.234371][ T5362] loop2: unable to read partition table [ 238.236047][ T5362] loop2: partition table beyond EOD, truncated [ 238.271591][ T64] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 238.325936][ T5362] Dev loop2: unable to read RDB block 7 [ 238.327541][ T5362] loop2: unable to read partition table [ 238.329285][ T5362] loop2: partition table beyond EOD, truncated [ 238.443464][ T64] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 238.445571][ T64] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 238.448278][ T64] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 238.450937][ T64] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 238.454388][ T64] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 238.457853][ T64] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 238.460064][ T64] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 238.463062][ T64] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 238.465834][ T64] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 238.468946][ T64] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 238.480457][ T64] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 238.482695][ T64] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 238.485457][ T64] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 238.488136][ T64] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 238.501913][ T64] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 238.508359][ T64] usb 6-1: string descriptor 0 read error: -22 [ 238.510132][ T64] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 238.513288][ T64] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.523949][ T64] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 238.825095][ T833] usb 6-1: USB disconnect, device number 8 [ 239.480165][T11357] loop2: detected capacity change from 0 to 7 [ 239.482401][T11357] Dev loop2: unable to read RDB block 7 [ 239.483981][T11357] loop2: unable to read partition table [ 239.485623][T11357] loop2: partition table beyond EOD, truncated [ 239.487373][T11357] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 239.651606][ T833] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 239.804474][ T833] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 239.831788][ T833] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 239.836006][ T833] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.846239][ T833] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 239.848816][ T833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.851036][ T833] usb 8-1: Product: syz [ 239.855132][ T833] usb 8-1: Manufacturer: syz [ 239.858642][ T833] usb 8-1: SerialNumber: syz [ 240.143819][ T833] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 240.151653][ T833] usb 8-1: USB disconnect, device number 3 [ 240.156447][ T833] usblp0: removed [ 240.507019][T11372] FAULT_INJECTION: forcing a failure. [ 240.507019][T11372] name failslab, interval 1, probability 0, space 0, times 0 [ 240.511001][T11372] CPU: 3 UID: 0 PID: 11372 Comm: syz.2.1657 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 240.511017][T11372] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 240.511026][T11372] Call Trace: [ 240.511032][T11372] [ 240.511038][T11372] dump_stack_lvl+0x16c/0x1f0 [ 240.511062][T11372] should_fail_ex+0x512/0x640 [ 240.511079][T11372] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 240.511099][T11372] should_failslab+0xc2/0x120 [ 240.511114][T11372] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 240.511136][T11372] ? security_file_alloc+0x34/0x2b0 [ 240.511158][T11372] security_file_alloc+0x34/0x2b0 [ 240.511174][T11372] init_file+0x93/0x4c0 [ 240.511189][T11372] alloc_empty_file+0x73/0x1e0 [ 240.511205][T11372] alloc_file_pseudo+0x13a/0x230 [ 240.511222][T11372] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 240.511244][T11372] __shmem_file_setup+0x210/0x300 [ 240.511263][T11372] shmem_zero_setup+0x93/0x1a0 [ 240.511279][T11372] __mmap_region+0x2036/0x27c0 [ 240.511303][T11372] ? __pfx___mmap_region+0x10/0x10 [ 240.511352][T11372] ? mm_get_unmapped_area+0x95/0xe0 [ 240.511367][T11372] mmap_region+0x1ab/0x3f0 [ 240.511384][T11372] do_mmap+0xd8e/0x11b0 [ 240.511407][T11372] ? __pfx_do_mmap+0x10/0x10 [ 240.511421][T11372] ? __pfx_down_write_killable+0x10/0x10 [ 240.511440][T11372] vm_mmap_pgoff+0x281/0x450 [ 240.511454][T11372] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 240.511467][T11372] ? fput+0x70/0xf0 [ 240.511476][T11372] ? ksys_write+0x1b9/0x240 [ 240.511491][T11372] ksys_mmap_pgoff+0x7d/0x5c0 [ 240.511501][T11372] ? rcu_is_watching+0x12/0xc0 [ 240.511513][T11372] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 240.511525][T11372] __do_fast_syscall_32+0x73/0x120 [ 240.511551][T11372] do_fast_syscall_32+0x32/0x80 [ 240.511565][T11372] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 240.511578][T11372] RIP: 0023:0xf7f25579 [ 240.511586][T11372] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 240.511600][T11372] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 240.511610][T11372] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000b36000 [ 240.511616][T11372] RDX: 0000000006ebbeee RSI: 0000000000008031 RDI: 00000000ffffffff [ 240.511622][T11372] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 240.511627][T11372] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 240.511633][T11372] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 240.511644][T11372] [ 240.616993][T11375] 9pnet_fd: Insufficient options for proto=fd [ 240.808975][T11383] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1661'. [ 241.098465][T11390] loop2: detected capacity change from 0 to 7 [ 241.100554][T11390] Dev loop2: unable to read RDB block 7 [ 241.102219][T11390] loop2: unable to read partition table [ 241.103862][T11390] loop2: partition table beyond EOD, truncated [ 241.105563][T11390] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 241.554204][T11399] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1666'. [ 241.645859][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1668'. [ 241.795846][T11408] 9pnet_fd: Insufficient options for proto=fd [ 242.671573][ T83] Bluetooth: hci5: Frame reassembly failed (-84) [ 242.677663][T11424] loop2: detected capacity change from 0 to 7 [ 242.679766][T11424] Dev loop2: unable to read RDB block 7 [ 242.681522][T11424] loop2: unable to read partition table [ 242.683234][T11424] loop2: partition table beyond EOD, truncated [ 242.685473][T11424] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 243.536969][T11464] FAULT_INJECTION: forcing a failure. [ 243.536969][T11464] name failslab, interval 1, probability 0, space 0, times 0 [ 243.540457][T11464] CPU: 2 UID: 0 PID: 11464 Comm: syz.2.1686 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 243.540472][T11464] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 243.540478][T11464] Call Trace: [ 243.540483][T11464] [ 243.540487][T11464] dump_stack_lvl+0x16c/0x1f0 [ 243.540505][T11464] should_fail_ex+0x512/0x640 [ 243.540516][T11464] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 243.540533][T11464] should_failslab+0xc2/0x120 [ 243.540542][T11464] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 243.540560][T11464] ? kvm_sched_clock_read+0x11/0x20 [ 243.540572][T11464] ? sched_clock+0x38/0x60 [ 243.540581][T11464] ? vm_area_dup+0x25/0x760 [ 243.540595][T11464] vm_area_dup+0x25/0x760 [ 243.540608][T11464] __split_vma+0x17f/0x1030 [ 243.540622][T11464] ? vma_merge_existing_range+0x578/0x1c80 [ 243.540637][T11464] ? __pfx___split_vma+0x10/0x10 [ 243.540657][T11464] vma_modify+0x33f/0x410 [ 243.540672][T11464] vma_modify_flags_name+0x228/0x330 [ 243.540687][T11464] ? __pfx_vma_modify_flags_name+0x10/0x10 [ 243.540710][T11464] madvise_update_vma+0x14b/0xae0 [ 243.540722][T11464] ? __pfx_madvise_update_vma+0x10/0x10 [ 243.540732][T11464] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 243.540752][T11464] madvise_vma_behavior+0x759/0x1d50 [ 243.540765][T11464] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 243.540776][T11464] ? find_vma_prev+0xda/0x160 [ 243.540788][T11464] ? __pfx_find_vma_prev+0x10/0x10 [ 243.540799][T11464] ? get_pid_task+0xfc/0x250 [ 243.540812][T11464] ? proc_fail_nth_write+0x9f/0x250 [ 243.540828][T11464] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 243.540838][T11464] madvise_walk_vmas+0x1ce/0x2c0 [ 243.540848][T11464] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 243.540861][T11464] madvise_do_behavior+0x12b/0x3b0 [ 243.540872][T11464] ? __pfx_madvise_do_behavior+0x10/0x10 [ 243.540887][T11464] ? fput+0x70/0xf0 [ 243.540896][T11464] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 243.540909][T11464] do_madvise+0x10b/0x170 [ 243.540920][T11464] __ia32_sys_madvise+0xa7/0x110 [ 243.540931][T11464] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 243.540945][T11464] __do_fast_syscall_32+0x73/0x120 [ 243.540961][T11464] do_fast_syscall_32+0x32/0x80 [ 243.540975][T11464] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 243.540987][T11464] RIP: 0023:0xf7f25579 [ 243.540995][T11464] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 243.541005][T11464] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 00000000000000db [ 243.541015][T11464] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000800000 [ 243.541021][T11464] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000000 [ 243.541026][T11464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 243.541031][T11464] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 243.541037][T11464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 243.541049][T11464] [ 244.021489][ T5963] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 244.021693][ T5303] Bluetooth: hci4: command 0x1003 tx timeout [ 244.715317][T11480] FAULT_INJECTION: forcing a failure. [ 244.715317][T11480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.718956][T11480] CPU: 2 UID: 0 PID: 11480 Comm: syz.3.1690 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 244.718969][T11480] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 244.718975][T11480] Call Trace: [ 244.718979][T11480] [ 244.718983][T11480] dump_stack_lvl+0x16c/0x1f0 [ 244.719001][T11480] should_fail_ex+0x512/0x640 [ 244.719015][T11480] _copy_from_user+0x2e/0xd0 [ 244.719028][T11480] get_compat_msghdr+0xa7/0x170 [ 244.719041][T11480] ? __pfx_get_compat_msghdr+0x10/0x10 [ 244.719054][T11480] ? __lock_acquire+0x5ca/0x1ba0 [ 244.719066][T11480] ___sys_recvmsg+0x191/0x1a0 [ 244.719079][T11480] ? __pfx____sys_recvmsg+0x10/0x10 [ 244.719098][T11480] ? get_pid_task+0x40/0x250 [ 244.719108][T11480] ? __pfx___might_resched+0x10/0x10 [ 244.719124][T11480] do_recvmmsg+0x568/0x740 [ 244.719138][T11480] ? __pfx_do_recvmmsg+0x10/0x10 [ 244.719153][T11480] ? from_kuid+0x8d/0xd0 [ 244.719171][T11480] __sys_recvmmsg+0x21c/0x280 [ 244.719184][T11480] ? __pfx___sys_recvmmsg+0x10/0x10 [ 244.719196][T11480] ? __might_fault+0xe3/0x190 [ 244.719214][T11480] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 244.719228][T11480] ? syscall_trace_enter+0xee/0x260 [ 244.719239][T11480] __do_fast_syscall_32+0x73/0x120 [ 244.719254][T11480] do_fast_syscall_32+0x32/0x80 [ 244.719268][T11480] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 244.719280][T11480] RIP: 0023:0xf739e579 [ 244.719289][T11480] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 244.719298][T11480] RSP: 002b:00000000f500555c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 244.719308][T11480] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 244.719314][T11480] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 244.719319][T11480] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 244.719325][T11480] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 244.719330][T11480] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.719342][T11480] [ 244.732342][T11481] FAULT_INJECTION: forcing a failure. [ 244.732342][T11481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.751558][ T5966] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 244.784830][ T5963] Bluetooth: hci5: command 0x1003 tx timeout [ 244.822492][T11481] CPU: 1 UID: 0 PID: 11481 Comm: syz.2.1689 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 244.822516][T11481] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 244.822523][T11481] Call Trace: [ 244.822526][T11481] [ 244.822530][T11481] dump_stack_lvl+0x16c/0x1f0 [ 244.822548][T11481] should_fail_ex+0x512/0x640 [ 244.822562][T11481] _copy_from_user+0x2e/0xd0 [ 244.822580][T11481] get_compat_msghdr+0xa7/0x170 [ 244.822593][T11481] ? __pfx_get_compat_msghdr+0x10/0x10 [ 244.822606][T11481] ? __lock_acquire+0x5ca/0x1ba0 [ 244.822617][T11481] ___sys_recvmsg+0x191/0x1a0 [ 244.822631][T11481] ? __pfx____sys_recvmsg+0x10/0x10 [ 244.822654][T11481] ? get_pid_task+0x40/0x250 [ 244.822663][T11481] ? __pfx___might_resched+0x10/0x10 [ 244.822686][T11481] do_recvmmsg+0x568/0x740 [ 244.822706][T11481] ? __pfx_do_recvmmsg+0x10/0x10 [ 244.822721][T11481] ? from_kuid+0x8d/0xd0 [ 244.822740][T11481] __sys_recvmmsg+0x21c/0x280 [ 244.822753][T11481] ? __pfx___sys_recvmmsg+0x10/0x10 [ 244.822776][T11481] ? __might_fault+0xe3/0x190 [ 244.822797][T11481] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 244.822811][T11481] ? syscall_trace_enter+0xee/0x260 [ 244.822822][T11481] __do_fast_syscall_32+0x73/0x120 [ 244.822837][T11481] do_fast_syscall_32+0x32/0x80 [ 244.822851][T11481] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 244.822863][T11481] RIP: 0023:0xf7f25579 [ 244.822871][T11481] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 244.822881][T11481] RSP: 002b:00000000f500455c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 244.822891][T11481] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000b40 [ 244.822897][T11481] RDX: 00000000000005df RSI: 0000000000000002 RDI: 0000000000000000 [ 244.822903][T11481] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 244.822910][T11481] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 244.822916][T11481] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.822931][T11481] [ 245.400507][T11492] lo speed is unknown, defaulting to 1000 [ 245.407106][T11492] lo speed is unknown, defaulting to 1000 [ 245.413939][T11492] lo speed is unknown, defaulting to 1000 [ 245.524693][T11494] Scaler: ================= START STATUS ================= [ 245.526798][T11494] Scaler: ================== END STATUS ================== [ 245.607867][T11492] infiniband sz1: set active [ 245.609443][T11492] infiniband sz1: added lo [ 245.642105][T11492] RDS/IB: sz1: added [ 245.643935][T11492] smc: adding ib device sz1 with port count 1 [ 245.646231][T11492] smc: ib device sz1 port 1 has pnetid [ 245.650188][T11492] lo speed is unknown, defaulting to 1000 [ 245.754618][T11492] lo speed is unknown, defaulting to 1000 [ 245.834224][T11492] lo speed is unknown, defaulting to 1000 [ 245.911904][T11492] lo speed is unknown, defaulting to 1000 [ 245.998273][ T5995] lo speed is unknown, defaulting to 1000 [ 246.004557][ T5995] lo speed is unknown, defaulting to 1000 [ 246.909647][T11519] macsec0: entered promiscuous mode [ 246.911277][T11519] macsec0: entered allmulticast mode [ 246.912920][T11519] veth1_macvtap: entered allmulticast mode [ 247.330875][T11534] macsec0: entered promiscuous mode [ 247.343558][T11534] macsec0: entered allmulticast mode [ 247.353576][T11534] veth1_macvtap: entered allmulticast mode [ 248.341525][ T5963] Bluetooth: hci4: command 0x1003 tx timeout [ 248.341555][ T5966] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 249.861549][ T5966] Bluetooth: hci2: command 0x0c1a tx timeout [ 249.861593][T11550] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 250.614936][T11550] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 250.623268][T11550] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 250.672195][T11569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1717'. [ 250.841843][T11581] 9pnet_fd: Insufficient options for proto=fd [ 251.073819][T11589] fuse: Bad value for 'group_id' [ 251.075252][T11589] fuse: Bad value for 'group_id' [ 251.808095][ T1134] Bluetooth: hci4: Frame reassembly failed (-84) [ 251.906171][T11607] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 251.913405][T11607] CIFS mount error: No usable UNC path provided in device string! [ 251.913405][T11607] [ 251.916266][T11607] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 251.941600][ T5963] Bluetooth: hci2: command 0x0c1a tx timeout [ 252.215179][T11617] 9pnet_fd: Insufficient options for proto=fd [ 252.342111][T11619] md: array md2 already initialised! [ 252.371706][T11622] fuse: Bad value for 'group_id' [ 252.373247][T11622] fuse: Bad value for 'group_id' [ 253.657504][T11644] 9pnet_fd: Insufficient options for proto=fd [ 253.821530][T11647] md: array md2 already initialised! [ 253.878645][ T5966] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 253.973189][T11653] CIFS mount error: No usable UNC path provided in device string! [ 253.973189][T11653] [ 253.976738][T11653] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 254.021560][ T5963] Bluetooth: hci2: command 0x0c1a tx timeout [ 254.479475][ T5963] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 255.065643][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.067612][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.469328][ T5963] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 255.720602][T11682] CIFS mount error: No usable UNC path provided in device string! [ 255.720602][T11682] [ 255.740003][T11682] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 255.834121][T11687] 9pnet_fd: Insufficient options for proto=fd [ 255.981554][T11689] md: array md2 already initialised! [ 256.008097][T11693] 9pnet_fd: Insufficient options for proto=fd [ 256.598883][T11715] FAULT_INJECTION: forcing a failure. [ 256.598883][T11715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.604099][T11715] CPU: 2 UID: 0 PID: 11715 Comm: syz.0.1754 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 256.604112][T11715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 256.604119][T11715] Call Trace: [ 256.604123][T11715] [ 256.604126][T11715] dump_stack_lvl+0x16c/0x1f0 [ 256.604143][T11715] should_fail_ex+0x512/0x640 [ 256.604157][T11715] _copy_from_user+0x2e/0xd0 [ 256.604170][T11715] move_addr_to_kernel+0x65/0x170 [ 256.604181][T11715] __sys_bind+0x11b/0x260 [ 256.604191][T11715] ? __pfx___sys_bind+0x10/0x10 [ 256.604199][T11715] ? __fget_files+0x20e/0x3c0 [ 256.604218][T11715] ? __pfx_ksys_write+0x10/0x10 [ 256.604233][T11715] __ia32_sys_bind+0x71/0xb0 [ 256.604243][T11715] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 256.604257][T11715] __do_fast_syscall_32+0x73/0x120 [ 256.604272][T11715] do_fast_syscall_32+0x32/0x80 [ 256.604286][T11715] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 256.604298][T11715] RIP: 0023:0xf744e579 [ 256.604306][T11715] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 256.604315][T11715] RSP: 002b:00000000f50b555c EFLAGS: 00000296 ORIG_RAX: 0000000000000169 [ 256.604325][T11715] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000700 [ 256.604331][T11715] RDX: 0000000000000058 RSI: 0000000000000000 RDI: 0000000000000000 [ 256.604337][T11715] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 256.604342][T11715] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 256.604348][T11715] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 256.604360][T11715] [ 256.693085][ T5966] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 257.153643][T11733] rdma_rxe: rxe_newlink: failed to add lo [ 257.731567][T11740] md: array md2 already initialised! [ 258.183155][ T5963] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 259.021832][T11755] CIFS mount error: No usable UNC path provided in device string! [ 259.021832][T11755] [ 259.024566][T11755] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 259.675712][ T40] audit: type=1800 audit(2000000177.511:99): pid=11777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1774" name="bus" dev="9p" ino=36831586 res=0 errno=0 [ 260.833689][T11798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1779'. [ 260.931770][T11802] input: syz0 as /devices/virtual/input/input9 [ 260.998860][T11802] capability: warning: `syz.0.1781' uses deprecated v2 capabilities in a way that may be insecure [ 262.051023][ T40] audit: type=1800 audit(2000000179.881:100): pid=11823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1786" name="bus" dev="9p" ino=36831586 res=0 errno=0 [ 262.421546][ T5966] Bluetooth: hci4: command 0x1003 tx timeout [ 262.421617][ T5963] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 262.728448][T11834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1790'. [ 262.799233][T11830] CIFS mount error: No usable UNC path provided in device string! [ 262.799233][T11830] [ 262.802966][T11830] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 263.851002][T11848] fuse: Unknown parameter 'grou00000000000000000000' [ 263.921907][T11846] md: array md2 already initialised! [ 264.010444][ T5963] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 264.353338][T11868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1802'. [ 264.362307][T11868] geneve2: entered promiscuous mode [ 264.364409][T11868] geneve2: entered allmulticast mode [ 264.827572][T11873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1803'. [ 264.846527][T11877] smc: net device bond0 applied user defined pnetid SYZ0 [ 264.974714][T11879] CIFS mount error: No usable UNC path provided in device string! [ 264.974714][T11879] [ 264.977192][T11879] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 265.385407][T11895] netlink: 328 bytes leftover after parsing attributes in process `syz.0.1807'. [ 265.551604][T11899] md: array md2 already initialised! [ 265.583898][ T5963] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.145122][T11912] vxcan1: entered allmulticast mode [ 266.156119][T11914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1815'. [ 266.381553][ T64] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 266.533160][ T64] usb 8-1: config 0 has no interfaces? [ 266.536786][ T64] usb 8-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 266.539400][ T64] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.545553][ T64] usb 8-1: Product: syz [ 266.547201][ T64] usb 8-1: Manufacturer: syz [ 266.549003][ T64] usb 8-1: SerialNumber: syz [ 266.557763][ T64] usb 8-1: config 0 descriptor?? [ 266.734691][ T5963] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.765816][T11912] [ 266.766558][T11912] ====================================================== [ 266.768486][T11912] WARNING: possible circular locking dependency detected [ 266.770432][T11912] 6.15.0-rc1-syzkaller #0 Not tainted [ 266.772173][T11912] ------------------------------------------------------ [ 266.775653][T11912] syz.3.1813/11912 is trying to acquire lock: [ 266.777363][T11912] ffff88804e954058 (sk_lock-AF_INET){+.+.}-{0:0}, at: sockopt_lock_sock+0x54/0x70 [ 266.779965][T11912] [ 266.779965][T11912] but task is already holding lock: [ 266.782020][T11912] ffffffff9012d9a8 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xf6/0x3240 [ 266.784947][T11912] [ 266.784947][T11912] which lock already depends on the new lock. [ 266.784947][T11912] [ 266.788202][T11912] [ 266.788202][T11912] the existing dependency chain (in reverse order) is: [ 266.790674][T11912] [ 266.790674][T11912] -> #2 (rtnl_mutex){+.+.}-{4:4}: [ 266.792664][T11912] __mutex_lock+0x199/0xb90 [ 266.794105][T11912] do_ip_setsockopt+0xf6/0x3240 [ 266.795627][T11912] ip_setsockopt+0x59/0xf0 [ 266.797003][T11912] tcp_setsockopt+0xa4/0x100 [ 266.798452][T11912] smc_setsockopt+0x1b3/0xa00 [ 266.800259][T11912] do_sock_setsockopt+0x221/0x470 [ 266.802404][T11912] __sys_setsockopt+0x1a0/0x230 [ 266.804463][T11912] __ia32_sys_setsockopt+0xbc/0x160 [ 266.806645][T11912] __do_fast_syscall_32+0x73/0x120 [ 266.808797][T11912] do_fast_syscall_32+0x32/0x80 [ 266.810862][T11912] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 266.813410][T11912] [ 266.813410][T11912] -> #1 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 266.816650][T11912] __mutex_lock+0x199/0xb90 [ 266.818604][T11912] smc_switch_to_fallback+0x2d/0x9f0 [ 266.820823][T11912] smc_sendmsg+0x13d/0x520 [ 266.822780][T11912] __sys_sendto+0x495/0x510 [ 266.824728][T11912] __ia32_sys_sendto+0xdd/0x1b0 [ 266.826785][T11912] __do_fast_syscall_32+0x73/0x120 [ 266.828732][T11912] do_fast_syscall_32+0x32/0x80 [ 266.830246][T11912] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 266.832110][T11912] [ 266.832110][T11912] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 266.834224][T11912] __lock_acquire+0x1173/0x1ba0 [ 266.835814][T11912] lock_acquire+0x179/0x350 [ 266.837424][T11912] lock_sock_nested+0x41/0xf0 [ 266.839001][T11912] sockopt_lock_sock+0x54/0x70 [ 266.840511][T11912] do_ip_setsockopt+0xfe/0x3240 [ 266.842013][T11912] ip_setsockopt+0x59/0xf0 [ 266.843418][T11912] udp_setsockopt+0x7d/0xd0 [ 266.844945][T11912] do_sock_setsockopt+0x221/0x470 [ 266.846535][T11912] __sys_setsockopt+0x1a0/0x230 [ 266.848067][T11912] __ia32_sys_setsockopt+0xbc/0x160 [ 266.849745][T11912] __do_fast_syscall_32+0x73/0x120 [ 266.851360][T11912] do_fast_syscall_32+0x32/0x80 [ 266.852876][T11912] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 266.855169][T11912] [ 266.855169][T11912] other info that might help us debug this: [ 266.855169][T11912] [ 266.858895][T11912] Chain exists of: [ 266.858895][T11912] sk_lock-AF_INET --> &smc->clcsock_release_lock --> rtnl_mutex [ 266.858895][T11912] [ 266.863932][T11912] Possible unsafe locking scenario: [ 266.863932][T11912] [ 266.866746][T11912] CPU0 CPU1 [ 266.868784][T11912] ---- ---- [ 266.870828][T11912] lock(rtnl_mutex); [ 266.872330][T11912] lock(&smc->clcsock_release_lock); [ 266.874540][T11912] lock(rtnl_mutex); [ 266.876360][T11912] lock(sk_lock-AF_INET); [ 266.877607][T11912] [ 266.877607][T11912] *** DEADLOCK *** [ 266.877607][T11912] [ 266.879799][T11912] 1 lock held by syz.3.1813/11912: [ 266.881201][T11912] #0: ffffffff9012d9a8 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xf6/0x3240 [ 266.883800][T11912] [ 266.883800][T11912] stack backtrace: [ 266.885533][T11912] CPU: 3 UID: 0 PID: 11912 Comm: syz.3.1813 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 266.885546][T11912] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 266.885553][T11912] Call Trace: [ 266.885558][T11912] [ 266.885563][T11912] dump_stack_lvl+0x116/0x1f0 [ 266.885580][T11912] print_circular_bug+0x275/0x350 [ 266.885598][T11912] check_noncircular+0x14c/0x170 [ 266.885614][T11912] __lock_acquire+0x1173/0x1ba0 [ 266.885624][T11912] ? do_ip_setsockopt+0xf6/0x3240 [ 266.885634][T11912] lock_acquire+0x179/0x350 [ 266.885642][T11912] ? sockopt_lock_sock+0x54/0x70 [ 266.885656][T11912] lock_sock_nested+0x41/0xf0 [ 266.885669][T11912] ? sockopt_lock_sock+0x54/0x70 [ 266.885680][T11912] sockopt_lock_sock+0x54/0x70 [ 266.885692][T11912] do_ip_setsockopt+0xfe/0x3240 [ 266.885701][T11912] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 266.885712][T11912] ? aa_sk_perm+0x2f4/0xb10 [ 266.885724][T11912] ip_setsockopt+0x59/0xf0 [ 266.885733][T11912] udp_setsockopt+0x7d/0xd0 [ 266.885746][T11912] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 266.885761][T11912] do_sock_setsockopt+0x221/0x470 [ 266.885775][T11912] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 266.885791][T11912] __sys_setsockopt+0x1a0/0x230 [ 266.885803][T11912] __ia32_sys_setsockopt+0xbc/0x160 [ 266.885814][T11912] ? syscall_trace_enter+0xee/0x260 [ 266.885825][T11912] __do_fast_syscall_32+0x73/0x120 [ 266.885839][T11912] do_fast_syscall_32+0x32/0x80 [ 266.885852][T11912] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 266.885864][T11912] RIP: 0023:0xf739e579 [ 266.885872][T11912] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 266.885882][T11912] RSP: 002b:00000000f502655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 266.885891][T11912] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 266.885897][T11912] RDX: 0000000000000023 RSI: 0000000080000740 RDI: 000000000000000c [ 266.885902][T11912] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 266.885908][T11912] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 266.885913][T11912] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 266.885921][T11912] [ 267.163051][ T64] usb 8-1: USB disconnect, device number 4 VM DIAGNOSIS: 16:28:07 Registers: info registers vcpu 0 CPU#0 RAX=0000000000940fc4 RBX=0000000000000000 RCX=ffffffff8b6ff439 RDX=ffffed10056465be RSI=ffffffff8bf45080 RDI=ffffffff8191a7f1 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000000 R9 =ffffed10056465bd R10=ffff88802b232deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90867310 R15=0000000000000000 RIP=ffffffff8b6fdccf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73d983c CR3=0000000012580000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffffffff93a79de8 RCX=0000000000000000 RDX=1ffffffff1b9eda1 RSI=ffffffff8bf45080 RDI=ffffffff8dcf6d08 RBP=0000000000000001 RSP=ffffc90023aaf0e0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000010444 R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81a0e821 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880978b9000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73d8e14 CR3=000000002ed24000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000200 RBX=0000000000000200 RCX=fffff52004630f2d RDX=0000000000080000 RSI=ffffffff82083d85 RDI=0000000000000005 RBP=0000000000000014 RSP=ffffc90023187ab8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000010444 R12=0000000000000000 R13=ffff888023f60650 R14=ffff888023f60660 R15=ffff88802a342440 RIP=ffffffff81bb3d18 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880979b9000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe600924ba0 CR3=0000000012580000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f747cff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854bd145 RDI=ffffffff9ae12bc0 RBP=ffffffff9ae12b80 RSP=ffffc9000ff874c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff9ae12b80 R15=ffffffff854bd0e0 RIP=ffffffff854bd16f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097ab9000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000800017c0 CR3=0000000012542000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000