last executing test programs: 10.237272393s ago: executing program 1 (id=31): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000600)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}}], 0x1, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r7, &(0x7f0000003100)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x28}}], 0x1, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 8.582607902s ago: executing program 1 (id=35): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r2, 0x7323, 0x0, 0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=@deltaction={0x14c, 0x31, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5a2}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf088}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4af9}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x48000}, 0x88) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x7, 0xeff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r7 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0185647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f909, 0x8000000, '\x00', @string=&(0x7f0000000340)=0xfe}}) r8 = dup(r6) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 6.970505376s ago: executing program 1 (id=39): r0 = socket(0x1c, 0x803, 0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2], &(0x7f0000000280)={0x0, 0x0, 0xfffffdbe, 0x0, 0x3, [{0x0, 0x0}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x457}}, {0x2, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00']}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x7, 0x0, 0x0, 0xff, "d4e9002b2c000000ff00"}) r5 = syz_open_pts(r4, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000080)=0x6) ioctl$TCFLSH(r5, 0x540b, 0x2) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) write$dsp(r3, &(0x7f0000000100)="97", 0x1) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000040)={0x8}) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 6.4625477s ago: executing program 3 (id=42): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb0100", 0x25}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfb", 0x26}], 0x2) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000140)="1c430c615b2d1cd00007197cd942fc", 0xf}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2062) openat$uinput(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0x70bd2c, 0x25dfdbfc, {0x2, 0x38, 0x0, 0xff, r5}, [@IFA_LABEL={0x14, 0x3, 'gre0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r6, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/53, 0x35, 0x0, 0x7f, 0xfffffffe, 0x0, 0x803}}, 0x11c) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$dsp(0xffffff9c, &(0x7f0000000280), 0x28000, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r8, 0x80044df9, &(0x7f0000000480)) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffff1e00ff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f0000000180)=""/39, 0x27}, {&(0x7f00000005c0)=""/97, 0x61}, {&(0x7f0000000640)=""/148, 0x94}, {&(0x7f0000000700)=""/246, 0xf6}, {&(0x7f00000001c0)=""/64, 0x40}, {&(0x7f0000000880)=""/242, 0xf2}, {&(0x7f0000000980)=""/84, 0x54}], 0x8, &(0x7f0000000d00)=[@rdma_args={0x48, 0x114, 0x1, {{0x2a, 0x3fffff}, {&(0x7f0000000a00)=""/197, 0xc5}, &(0x7f0000000440)=[{&(0x7f0000000b00)=""/224, 0xe0}, {&(0x7f0000000c00)=""/183, 0xb7}], 0x2, 0x44, 0x4}}, @rdma_dest={0x18, 0x114, 0x2, {0x400, 0x81}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0xc}, &(0x7f0000000800)=0x3, &(0x7f0000000cc0)=0x5, 0x7, 0x578d, 0x8, 0x5, 0x58, 0x8001}}], 0xb8, 0x40008080}, 0x20040080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) 5.183901638s ago: executing program 3 (id=45): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x1000) ppoll(&(0x7f0000000040)=[{r4, 0x9620}], 0x1, 0x0, 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) syz_io_uring_setup(0x275c, &(0x7f0000001280)={0x0, 0x5bce, 0x8, 0xffffffff, 0xc0001c8}, &(0x7f0000001300), &(0x7f0000001180)) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r6, &(0x7f0000000240)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0xfd, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 4.820114756s ago: executing program 2 (id=47): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0xfffffffffffffff8, 0x1, 0x100000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'vlan0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) unshare(0x62040200) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000100001042cbd70000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000800110000180012800b000100697036746e6c00000800028001000000"], 0x38}}, 0x4000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000008500)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x100, 0xac}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) inotify_add_watch(0xffffffffffffffff, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000805, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x9, 0x2) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) r8 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r8, &(0x7f0000001f00)=[{&(0x7f0000001ac0)="4df069d64970996b9472d4", 0xb}], 0x1) ioctl$VIDIOC_DQEVENT(r7, 0x80885659, &(0x7f0000000240)={0x0, @src_change}) r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r9, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) r10 = syz_io_uring_setup(0x111, &(0x7f0000000b00)={0x0, 0x35da, 0x2, 0x7, 0x367}, &(0x7f0000000140)=0x0, &(0x7f0000000400)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r10, 0x66a8, 0x4000, 0xf, 0x0, 0x18) 3.753937317s ago: executing program 2 (id=49): ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000440)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000480)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000020940)=0x0, &(0x7f00000001c0)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, 0x0, 0x27) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002fc0)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet(0x2, 0x4, 0x6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000380)={0x0, 'bridge_slave_0\x00', {}, 0x1ff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x8, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) pipe(&(0x7f00000000c0)) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x0) getsockopt$inet_mreqsrc(r6, 0x0, 0x28, 0x0, &(0x7f0000000240)) 3.645920517s ago: executing program 1 (id=50): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000000000/0x3000)=nil) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r2, 0x90004) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 2.909185255s ago: executing program 2 (id=52): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000003c0)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_dev$dri(0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x3, 0x0, 0xe, 0x60a00, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, r0, 0x4, 0x5, 0x4, 0x7}, 0x50) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f00000000c0)='io#harset', 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tcp_congestion(0xffffff9c, &(0x7f0000000280), 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1316}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) sendmsg$nl_xfrm(r4, 0x0, 0x20000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r8 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x1, 0x0) fchdir(r9) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r7}, 0x18) 2.589712192s ago: executing program 1 (id=54): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x1000) ppoll(&(0x7f0000000040)=[{r3, 0x9620}], 0x1, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) syz_io_uring_setup(0x275c, &(0x7f0000001280)={0x0, 0x5bce, 0x8, 0xffffffff, 0xc0001c8}, &(0x7f0000001300), &(0x7f0000001180)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r5, &(0x7f0000000240)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfd, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 2.298664521s ago: executing program 3 (id=55): ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000440)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000480)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000020940)=0x0, &(0x7f00000001c0)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, 0x0, 0x27) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002fc0)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet(0x2, 0x4, 0x6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000380)={0x0, 'bridge_slave_0\x00', {}, 0x1ff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x8, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) pipe(&(0x7f00000000c0)) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000002c0)}, 0x0) getsockopt$inet_mreqsrc(r6, 0x0, 0x28, &(0x7f0000000280)={@local, @empty, @loopback}, &(0x7f0000000240)=0xc) 1.817671626s ago: executing program 2 (id=56): r0 = io_uring_setup(0x2cef, &(0x7f0000000200)={0x0, 0x93b0, 0x3, 0x0, 0x315}) io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000000000)={0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, &(0x7f0000000040)={0x5}, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x40200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010000008000"/20, @ANYRES32=0x0, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x1c85) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xfd70, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098e00000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000180)=@default_ibss_ssid, 0x6, 0x0) r4 = syz_open_dev$vim2m(0x0, 0x6, 0x2) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r5, &(0x7f0000000040)=[{&(0x7f0000001340)=""/4097, 0x1001}], 0x1, 0x300, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc04c5611, &(0x7f00000000c0)=@overlay={0xff, 0x1, 0x4, 0xe000, 0xd3a, {0x77359400}, {0x3, 0x1, 0x80, 0x37, 0x9, 0x0, "e94edfa3"}, 0x4, 0x3, {}, 0x3, 0x0, r5}) socket(0x1f, 0x5, 0xb37a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe80, 0x30, 0x25, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x1}, [], [{}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0) 1.490856202s ago: executing program 0 (id=59): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r2, 0x7323, 0x0, 0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=@deltaction={0x14c, 0x31, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5a2}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf088}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4af9}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x48000}, 0x88) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x7, 0xeff}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r7 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0185647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f909, 0x8000000, '\x00', @string=&(0x7f0000000340)=0xfe}}) r8 = dup(r6) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 1.411163946s ago: executing program 1 (id=60): socket$kcm(0x11, 0x3, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x80842, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r1, &(0x7f0000009500)=[{&(0x7f00000092c0)=""/71, 0x47}], 0x1) socket$can_raw(0x1d, 0x3, 0x1) memfd_secret(0x80000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000240)) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b11, 0x0, 0x401, 0x2}, 0xe, [0x2, 0x1, 0x704d, 0x1, 0x3, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x200001, 0x8100, 0xfe, 0x4a, 0x7, 0x5, 0x400d5b6, 0x8, 0x76, 0x8, 0x0, 0x200, 0x3e, 0x19b2, 0x8000, 0x7, 0xc9, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x2, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xb, 0x4, 0x6, 0x20000040, 0x7f, 0x9, 0x1, 0x6, 0x4, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x3, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xfffffed2, 0x7fffffff, 0xfffd, 0x7, 0xe62, 0x3, 0xdfa, 0x9, 0xc33, 0xf, 0x7, 0x800, 0x6c368000, 0x4, 0x1000007, 0x0, 0x10, 0x5, 0x8, 0x8081, 0x3, 0x7fff, 0x9, 0x0, 0x5, 0x4, 0x4, 0x8, 0x40, 0xc14, 0x80000001, 0xffffffff, 0x3, 0x7, 0x7, 0x2000008, 0x0, 0x5, 0x4, 0x9, 0x5, 0x1, 0x2, 0x4, 0x0, 0xfff, 0xa4, 0x4, 0x5, 0xd6a, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0xffffffff, 0x6, 0x0, 0x0, 0x6, 0x8, 0x9, 0x3, 0x1000068], [0x1, 0x3, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x405, 0x9, 0x2, 0x0, 0x7, 0x4, 0xc, 0x7, 0x7fff, 0xa, 0x6, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x6, 0xfffffffd, 0x7, 0x10000, 0x7c, 0x7ff, 0xffff, 0x400, 0x4, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0xfffffffc, 0x2, 0x5d9fff6, 0x3ff, 0xff, 0x4, 0x8, 0x10000, 0xe6, 0x200, 0x7af5, 0x4bbffe95, 0x9, 0x0, 0x10002, 0x7, 0x6, 0x0, 0x81, 0x9, 0x2000002, 0x3, 0x100, 0x8, 0x0, 0x2, 0x10], [0xffefff80, 0xd5800000, 0x0, 0x4, 0x1, 0x62a, 0x6, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x7, 0x8, 0xffffff7d, 0x800000, 0x5, 0x3, 0x201, 0xfff, 0x3, 0x1, 0x3c65, 0xa, 0xfffffff7, 0x84, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x4, 0x7, 0x8, 0x1, 0x0, 0x8000009, 0x17ce, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13b, 0xfff, 0x8, 0x5a, 0x2, 0x117, 0x996, 0x8, 0x8c2, 0x0, 0x5, 0x5, 0xf, 0x100, 0x10000400, 0x9, 0x5, 0x41, 0xfffffffb, 0xc, 0x2]}, 0x45c) syz_io_uring_setup(0x53d4, &(0x7f0000000500)={0x0, 0x1fffffd, 0x800, 0x0, 0xc4}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x108, &(0x7f0000000180)=0x7ffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 561.371245ms ago: executing program 2 (id=61): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff}, 0x20000, 0x0, 0x4000007, 0x8, 0x101, 0x14, 0x0, 0x0, 0x0, 0x2000, {0x1, 0x0, 0x0, 0x0, 0x5}}}}]}, 0x78}}, 0x4080) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, 0x0, 0x0, r5], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000480)=r9) accept4$alg(r0, 0x0, 0x0, 0x80000) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r11 = dup(r10) sendmsg$inet(r11, &(0x7f0000000780)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f00000007c0)="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", 0x5a9}], 0x1, &(0x7f0000001f00)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0xc2, 0x0, 0xa, [0x6, 0x5, 0xfffffff9, 0x0, 0x8, 0xd, 0xffffffff]}]}}}], 0x2c}, 0x20000011) 488.906094ms ago: executing program 2 (id=62): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) getrlimit(0x3, &(0x7f0000000280)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCGSERIAL(r6, 0x541e, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r7, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) 387.43357ms ago: executing program 3 (id=63): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) write$cgroup_int(r1, &(0x7f0000000040), 0x12) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r4, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) lseek(r0, 0x101, 0x2) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000840)={0x20c, 0x1, 0x2, 0x905, 0x0, 0x0, {0xe186ff70aadc171d, 0x0, 0x8}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x70}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8000}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}, @CTA_EXPECT_NAT={0x174, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x44}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x33}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x20c}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, r6, 0xc4fc9e906872338b, 0x70bd2d, 0x0, {{0x15}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x000', @ANYRES16=r6, @ANYBLOB="00022abd7000fbdbdf25620000000600b300000000000600b300020000000600b4008d0900000600b400060e00000600b4008a0b00000600b400161000000600b4008d120000"], 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0x45) 206.059671ms ago: executing program 3 (id=64): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f00000023c0)=0x5) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x224402, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x0, 0x1, 0x0, 0x2, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0x8000000, 0x49340}) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 153.516627ms ago: executing program 0 (id=65): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x37, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0x4, 0x0, 0x1ff, [{0x7, 0x5, 0x9}]}]}, {0x0, [0x5f, 0x30, 0x5f, 0x30, 0x2e]}}, &(0x7f0000000f40)=""/4089, 0x37, 0xff9, 0x8}, 0x28) 87.906076ms ago: executing program 0 (id=66): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000040)="1203", 0xfffffe83, 0x44010, &(0x7f0000000080)={0x2, 0x14, @multicast2}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f0000000000)=0x9, 0x3fffff) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x0, @tick=0x4, 0x6, {0x6, 0x7}, 0x1, 0x2, 0x64}) 87.665772ms ago: executing program 0 (id=67): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0xd18, 0x2, 0x0, 0x3, 0xff, 0xff3b}, 0x1f) 25.132322ms ago: executing program 0 (id=68): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00', r1}, 0x10) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0xffffffff, {0x7, 0x0, 0x0, r4, 0x0, 0xd420}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x48090) 536.229µs ago: executing program 3 (id=69): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00'}) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x3001, 0x0) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000180)={0x1}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0xc, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r6, &(0x7f0000000800)="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", 0x102) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) close(r2) r8 = open(&(0x7f0000000000)='./file0\x00', 0x502, 0x98) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000240)=0x0) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e24, 0x9, 0x2, 0x80, 0xa0, 0x32, 0x0, r9}, {0xfffffffffffffff8, 0x75, 0xa, 0x7, 0x8000000000000005, 0x0, 0x8000000000000000, 0x8}, {0x40, 0x20000000000004, 0xd64c, 0x81}, 0x9, 0x6e6bb8, 0x2, 0x1, 0x3, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x4d6, 0x33}, 0xa, @in=@rand_addr=0x64010100, 0x34ff, 0x0, 0x0, 0x5, 0xffffff80, 0xabd, 0x3}}, 0xe4) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000049c0)=@newchain={0x1a24, 0x64, 0x800, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x9}, {0xf, 0xd}, {0x4, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x19dc, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}, @TCA_FLOW_ACT={0x19c0, 0x9, 0x0, 0x1, [@m_police={0x15a0, 0xc, 0x0, 0x0, {{0xb}, {0x150c, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fff, 0x80, 0x9, 0x5, 0x1, 0x5, 0x9, 0x6, 0x7, 0x5, 0xfffffff8, 0x7fff, 0x3, 0x2, 0xb21, 0xfffffffb, 0xc0, 0x81, 0x401, 0x80000001, 0xffffffff, 0x8, 0x10001, 0xffffffff, 0x57, 0x0, 0xfffffffa, 0xd592, 0x5, 0x10001, 0xfff, 0x1, 0xa83, 0x73dd, 0xfffffff6, 0xc3b, 0x5, 0x6a, 0x161, 0xef, 0x3, 0x1000, 0xfffff2f8, 0x4, 0xeb, 0x6, 0x3, 0x7ff, 0x200000, 0xfffffffc, 0x4, 0x4ccd652c, 0x400, 0x8, 0x0, 0xffff, 0x0, 0x1ff, 0x1, 0xdee, 0xfffffff9, 0x0, 0x72a, 0x9, 0xfffffff7, 0x0, 0x400, 0x3, 0x5, 0x6, 0x2, 0x4, 0xfff, 0x0, 0x1, 0xfff, 0x4, 0xc4d, 0xc, 0x9, 0x2, 0x4, 0x6, 0x1, 0x7, 0xb, 0x7, 0x5, 0x1, 0x2, 0x6, 0x9, 0x40, 0x9, 0x6, 0x7ff, 0x64c0, 0x401, 0x4, 0xd6d1, 0x800, 0xfffffffa, 0x1, 0x4, 0x30deb9f4, 0x8, 0x2, 0x9, 0x20000, 0xfffffffe, 0xffff8000, 0x3, 0x3, 0x5, 0x8000, 0x9, 0x7, 0x7, 0x4, 0x7, 0x8000, 0x6, 0x4, 0x7f, 0x0, 0x400, 0x14ccaec1, 0x3, 0x4, 0x20, 0x5, 0x340e, 0xfffffffd, 0x4, 0x0, 0x1311, 0x268, 0xffffff7f, 0x400, 0xff, 0x1, 0x8, 0x101, 0x9, 0xb, 0x75, 0x401, 0xbd0, 0xfffffff9, 0x5, 0xffff, 0xdf, 0x73, 0x3, 0x3, 0xd, 0x3, 0x7, 0x8d, 0x1, 0x1, 0xf, 0x9, 0x7, 0x3, 0x3, 0x5, 0x6, 0x9, 0xc, 0x1, 0xffffffff, 0xb, 0x7, 0x0, 0x900000, 0x6, 0x2c, 0x3, 0x2f, 0x2, 0xd, 0x400, 0x8, 0x0, 0x400, 0x6, 0xd, 0x10, 0x8, 0x1, 0x401, 0xb85, 0x8, 0x37b2, 0x1000, 0xffffffff, 0x6, 0x6, 0xffff, 0x6, 0x2e20, 0x5, 0x7, 0x7, 0x2, 0x2, 0x7f, 0x2, 0x0, 0x3, 0x0, 0x7f, 0x80000001, 0x0, 0x1, 0xc, 0x314b50cc, 0x1, 0x1, 0x101, 0x6, 0x0, 0x3, 0x3, 0x5, 0x5, 0x4, 0xfffffffa, 0x10000, 0x9, 0x6, 0x0, 0xfffffff9, 0x5a, 0x0, 0x8, 0x0, 0x8, 0xb, 0xfffffffd, 0x7ff, 0xffff, 0x2, 0x42cc, 0xb17e, 0x8, 0x403, 0x80000001, 0x7f, 0xfff, 0x10001, 0x7, 0x5, 0x4, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x8, 0xe6c, 0x5, 0x3, {0x80, 0x1, 0x8, 0x1, 0x5c10, 0x2}, {0x9, 0x0, 0x5, 0x8, 0xfff7, 0x3}, 0x9, 0x1, 0x5383}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xff80000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8001, 0xfff, 0x1c0, 0x3, 0x7, 0x4, 0x2, 0x30bf, 0x8, 0x6, 0x8001, 0xae28, 0x1, 0x9a, 0x8, 0xd7, 0xfffffff8, 0x1, 0x7, 0x3, 0x7, 0x200, 0x0, 0xe4, 0xd77a, 0x2, 0x5c, 0x6, 0x7, 0x5, 0x8001, 0x1, 0xd, 0x7, 0x8, 0x100, 0x1ff, 0x0, 0x9, 0x8, 0x9, 0x5, 0x0, 0x9, 0x7, 0x5c, 0x3, 0xb, 0x6, 0xffff, 0x1, 0x5, 0x2, 0x9, 0x1020, 0x8, 0x77, 0x2, 0x8, 0x9, 0x3, 0xfffff000, 0x10, 0x8, 0x8, 0x401, 0x4, 0x4, 0x5, 0x4, 0x401, 0x1, 0x3, 0x79d7, 0xffffffff, 0x0, 0x3, 0x8, 0x9, 0x64b9, 0x3, 0x9, 0x2, 0x81, 0x9, 0xfff, 0xe, 0x9, 0xd, 0xb, 0xb, 0x3, 0xc4e, 0x89, 0x3, 0x80000001, 0x10000, 0x3f5bd205, 0xf1c, 0x3, 0x6, 0x40000000, 0x576a, 0xf85, 0x0, 0x0, 0x200, 0x6, 0x7ff, 0x1, 0x2, 0x100, 0x3ff, 0x401, 0xfff, 0x10000, 0xfff, 0x4, 0xff, 0xfffffffb, 0x8, 0x43, 0x80000000, 0x41b3c467, 0x8, 0x1, 0x9, 0xb8, 0x609, 0x11000000, 0x1, 0x713, 0x1, 0x7, 0x10000, 0x7, 0x10, 0x6, 0x5, 0x0, 0x3, 0x7ff, 0x9, 0x0, 0x5, 0x6, 0x7fff, 0x0, 0x8, 0x3ff, 0x1, 0x9, 0xfffffffb, 0x6, 0xf, 0x8, 0x9, 0x6, 0x8, 0x3, 0x1, 0x1, 0x4, 0x2, 0x6, 0x7, 0xffffff80, 0x8, 0x2, 0x6, 0x8, 0x1, 0x6, 0x100, 0x0, 0x8, 0x1, 0xfffffffc, 0x7, 0x0, 0x6, 0xffff, 0x5, 0x9, 0x2, 0x80, 0x21c5, 0x7, 0xfffffffa, 0x37a5, 0x2, 0x800, 0x100, 0x2, 0x9, 0x1, 0xffffffff, 0x7, 0x3, 0x5, 0x401, 0x5, 0x4, 0x5b, 0xfffffffa, 0x7, 0x4141, 0x7, 0x0, 0x2, 0x6, 0x778, 0x3, 0x61, 0x10000, 0x200, 0x9, 0xb, 0x9, 0x6, 0x14, 0x7, 0x3c6, 0x77, 0x0, 0x4, 0x8, 0x1ff, 0xffffffff, 0x6, 0x6, 0x800, 0x9, 0x5e, 0x7, 0x7, 0x7, 0x4, 0x9, 0xb4, 0x401, 0x2, 0x0, 0x4, 0x8, 0x1eec, 0x1000, 0x9de9, 0x2, 0x8, 0x7, 0xcb, 0x3281, 0x80000000, 0x6, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000000}], [@TCA_POLICE_RATE={0x404, 0x2, [0x80000000, 0x4, 0x9, 0xfc, 0x6, 0x6cc, 0x5ad7, 0x6, 0x6, 0x4, 0x0, 0x4, 0x2, 0x5, 0x200, 0x59, 0x7ff, 0xf8c, 0x9, 0x2, 0x2, 0x4, 0x7, 0xe1, 0x6, 0x7fffffff, 0x4e, 0x7fffffff, 0x6, 0x3, 0x2, 0x9, 0x6, 0x9, 0x5, 0x1, 0x400, 0x4, 0x3, 0x3, 0x4, 0x2, 0xb85, 0xd, 0x3, 0x5, 0x0, 0x2, 0x5, 0x4, 0x800, 0xc, 0x4, 0x5, 0x1, 0x714, 0x0, 0x2, 0xc, 0x3, 0x7, 0x379, 0xe0000, 0x9, 0x80000001, 0x2, 0x6, 0x6, 0x7, 0x1, 0xffff, 0x5, 0x6a999580, 0x1ff, 0x6, 0x4, 0x200, 0x37f7, 0x9, 0xfd, 0x5, 0x2, 0x6, 0x7, 0x3, 0x5b, 0x1, 0xc, 0x1, 0x6, 0x400, 0x6, 0x1, 0xe959, 0x7fff, 0x1, 0x2, 0x3, 0x6, 0x2ee, 0xfffffff9, 0x6, 0x3, 0x81, 0x8, 0xb27, 0x7fffffff, 0x6, 0x5, 0x5, 0x2, 0x2, 0xffff2f6e, 0x1ff, 0x81, 0xa, 0x4, 0x101, 0x8, 0x1, 0x638b, 0x100, 0x2, 0x1, 0x1, 0x3ff, 0x6, 0x7, 0x400, 0xc, 0x9, 0x0, 0xfff, 0x0, 0x5, 0x7fff, 0x3d0, 0x2, 0x3, 0x3140, 0x8, 0x7, 0x1, 0x5, 0x7, 0x3, 0x1, 0x8000, 0x7, 0x0, 0x2, 0x6, 0x2, 0x7, 0x80000001, 0x8001, 0x5, 0x9, 0x7f, 0x0, 0x3, 0x44, 0xc3be, 0xba, 0x0, 0x50, 0x4, 0xb, 0x9, 0x9, 0x7, 0xfe, 0xb, 0x4, 0x7, 0x0, 0x27c7, 0xc8, 0x0, 0xff, 0x7699, 0x3, 0x2, 0x9, 0xffffff86, 0x66000000, 0xfffffffb, 0x72, 0x824f, 0xff, 0x2, 0x8, 0x4, 0x8, 0x5, 0x9, 0xe, 0x2, 0xb, 0x76b3, 0x8, 0x5, 0x2, 0xe, 0x5fe, 0x3, 0x5, 0x80000000, 0x77980000, 0x8, 0x400, 0x7, 0x5, 0x7fff, 0x4, 0x9, 0x8a, 0x0, 0x8, 0xc47, 0xfff, 0x3ff, 0x224c, 0x0, 0x7, 0x7, 0x2, 0x9, 0x6, 0x2, 0xfffffff9, 0x0, 0x2, 0x5df, 0x6, 0xfffffffc, 0xd, 0x7, 0x7fff, 0x28, 0x4, 0xfffffff5, 0x40, 0x1, 0xd19, 0x7, 0x8, 0xc64, 0x5, 0x1, 0x7, 0x3, 0x8, 0xe342f0a, 0x3, 0x10001]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xf}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8b5c, 0x1, 0x2, 0x5, 0x0, 0x1, 0x207, 0xffff, 0xfffffff4, 0x6, 0x7, 0xe7e0, 0x7fff, 0xffff8efc, 0x4, 0x0, 0x7, 0x3, 0x3, 0x4, 0x400, 0xfffffff8, 0x4, 0x12e0, 0xb516, 0x401, 0x400, 0x0, 0x70, 0x2, 0x7fff, 0xfffffff4, 0x0, 0xffff5206, 0x81, 0x200, 0x4, 0x8, 0xe423, 0x2f51, 0x7fff, 0xffffffff, 0x4, 0x0, 0x4, 0x1, 0xd, 0x10000, 0x5, 0x5, 0x0, 0xff, 0xf0000000, 0x6df4, 0x9e, 0xfffffff9, 0x6, 0x1, 0x9, 0xf18, 0x3, 0x8, 0x4, 0x0, 0x5, 0x43dd, 0x7, 0x2, 0x0, 0x83a, 0x3, 0x7, 0x9, 0x1, 0x0, 0x9, 0xff, 0x5, 0x200, 0x8, 0x80000000, 0x70000, 0x8a, 0x200, 0x41b, 0xa, 0x1, 0xffff, 0x10000, 0x7c4, 0x1, 0x6, 0x5, 0xfff80000, 0xbb, 0xfb2, 0x8, 0x0, 0x10, 0x7, 0x0, 0x2, 0x3613, 0x4, 0xea, 0x2, 0x7fffffff, 0xad, 0x5, 0x4, 0x9, 0x7e1, 0xf, 0xff, 0x9, 0xd, 0x7, 0x1, 0xfffffff7, 0x1, 0x7fff, 0x4, 0x5, 0x5, 0xe4, 0x5, 0x401, 0xffff5268, 0x6, 0xffff, 0x3, 0x1000, 0x400, 0x0, 0x7, 0x10000, 0x7, 0xeb, 0x1, 0xffffffff, 0x80, 0x2, 0x401, 0x9, 0x6, 0x1800, 0x0, 0x5, 0xfff, 0x80, 0xfffffffd, 0x2, 0x8, 0xffab, 0x3, 0x0, 0x1000, 0x4, 0x4, 0x1, 0x5, 0x1, 0x7fff, 0x9, 0x80000000, 0x0, 0x4, 0x99b, 0x9, 0x0, 0xe, 0x80, 0x3, 0xffffffff, 0x8000, 0x20c, 0xb75, 0x6, 0x8324, 0x727fdee8, 0x8, 0x7, 0x14, 0x80, 0x6dd, 0x5f, 0x6, 0x2, 0x10001, 0x1, 0x7f, 0x5, 0x8, 0x0, 0x80000000, 0xb, 0x400, 0x3, 0x3, 0x3, 0x7, 0x7, 0x0, 0xe, 0x9, 0xc8, 0x6, 0x2, 0xfffffffc, 0x4, 0x3, 0xed, 0x44, 0x18, 0x2, 0x2, 0x1, 0xffffffff, 0x400, 0x0, 0x7, 0x10000, 0x5, 0x8, 0x452e, 0x9, 0x7, 0x200, 0x2, 0x3ff, 0x100, 0x3, 0xdaf, 0x336, 0x80000001, 0xff, 0xa, 0x6, 0xc43, 0x4136, 0xd0, 0x100, 0x5, 0xfffffff7, 0x3, 0x4, 0x7, 0x3, 0xffffffff, 0xc3, 0x9, 0xff, 0x40, 0x5, 0x7fff, 0xab0f]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x5, 0xb, 0x53d, 0x440, 0x80000001, 0x1000, 0x1, 0x6, 0x401, 0x2, 0x4, 0x40000000, 0x3b0, 0xde, 0x24e, 0x10eda043, 0x5, 0x5e0, 0x1b3e4b8f, 0x7, 0x7ff, 0xf7, 0x1ff, 0x4, 0x9, 0xffff, 0x6, 0x3, 0x10, 0x9, 0x2, 0x3, 0x3dab, 0x9, 0x4, 0x6, 0x8, 0x3, 0x3, 0x3, 0x9, 0x3, 0x7, 0xe8ef, 0x1, 0x2, 0x3, 0x9, 0x1, 0x5, 0x0, 0x80000000, 0x81, 0x3, 0x0, 0x5, 0x9, 0x9, 0x6, 0x3, 0x10, 0x800, 0xd, 0x0, 0x6, 0x9, 0xbf6, 0x5eba, 0x2, 0x7, 0x8, 0x1, 0x59, 0x7, 0x8, 0x2, 0x9, 0x6, 0x6, 0xfe000000, 0x400, 0x6, 0x2, 0x40c5, 0x5, 0xb08, 0x3, 0x0, 0x5, 0x4, 0x6, 0x3, 0x5, 0x9, 0x8000, 0x7, 0x4, 0x6, 0xfffff3b1, 0x2, 0x10, 0x3, 0x3, 0x1, 0x8, 0x3, 0x8c56, 0x6, 0x1, 0xccc9, 0x9, 0x2, 0x8001, 0x1c00000, 0x81, 0x800, 0x8, 0x3, 0x6, 0x0, 0x6, 0xb547, 0xfffffff6, 0x6, 0x800, 0x7, 0xd, 0xfffffffb, 0x24470000, 0x1000000, 0xfffffffd, 0x1, 0x1, 0x0, 0x7, 0xd49, 0x7fffffff, 0x3, 0x7, 0x9, 0x800, 0x2, 0x7fff, 0x7, 0x0, 0x3, 0x3, 0x650, 0x2, 0x4a4, 0xddf, 0x8, 0x7ff, 0xffff9406, 0x1, 0x0, 0x401, 0x1, 0x3, 0x7ff, 0x3, 0x8, 0x8, 0x0, 0x3d8b, 0x7f, 0x7d4, 0xd02, 0x1ff, 0x7, 0x4, 0xf2d0, 0x3, 0x8, 0x2fe, 0x6, 0x9ba1, 0x8, 0xfff, 0xffffff4b, 0x5, 0x1, 0x8000, 0x8, 0x1, 0x5, 0x6, 0x800, 0x1, 0x735c8233, 0x3, 0x3, 0x5, 0x71, 0x6, 0x1ff, 0x9, 0x80000, 0x8e, 0x24, 0x0, 0xf63, 0x101, 0x5, 0x6, 0x2, 0xcefc, 0x9, 0xfffff800, 0x6, 0x8, 0x7, 0x20000000, 0x401, 0x0, 0x2, 0x40, 0x0, 0x3, 0x8, 0x9, 0x4a, 0xbb0c, 0x1, 0x1e4, 0x7, 0xf, 0x8bee, 0x2f, 0xf93, 0x19, 0x6, 0x4ee, 0x800, 0xe, 0x81, 0x5, 0xc6, 0x7, 0x5, 0x0, 0x9, 0x8, 0x7fff, 0x9, 0xba6c, 0x3, 0x5, 0x3, 0x1fb5, 0xebd, 0x9e9a, 0xffff8000, 0x1, 0x1ff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x8, 0x80000001, 0x1, {0x2, 0x1, 0x17, 0x7ff, 0x0, 0x4}, {0x10, 0x2, 0x1000, 0x74, 0x81, 0x8}, 0xfffffff7, 0xb8d, 0x40}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}]]}, {0x6a, 0x6, "7754e9381006b88281eadf6a0e38d53dbe92ccb4f4302b2cb1abff2d33cbb282af5a9ea5edb40fdfcf462e9f0bdac52a65d0d6d5bb7eb92d7f3bf74911f47b06af981cf9903f1048bdfab614809d07647db556dec9a4bc865dcf63819d115ed026305b578e1d"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbedit={0xdc, 0x18, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x3, 0x4, 0x8, 0x1}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x200, 0x0, 0xffff, 0x7}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xb}]}, {0x6f, 0x6, "4571a4bd2862bdb17b8a94a92165cd01b19a005fa0ef0f202d937067a12fd508f8877a7fd1672bf798644c5d7e9a7fff73544bc0dd956138a3a507389c1b0c9ac070d3aa16b9521d849bcea7134a8670d3d1b519f137aa54281b53c3f0876da7059cb8d6a8aa3bce06bf1b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0xe0, 0x16, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1b2a, 0x6}}]}, {0xa6, 0x6, "cbbb41980d7294b8a8ee955aebfbbcbb51ca37b1c68b5e24b1343076a02dfeaa0fdef5738fc81f9bc492702e51aca89c4ec831f1a2eebee7091a6e0ac3dff25b78722a0b7551d45246d28eb7053ccc88606a2df9f56082ca4c165a09f8c2b00fbf9db0c0b5377659746238ce2cbe96adfbdee564f79671bfd6bed95ae7059accef3848445441016ad65467743077643352f97fae1cfbf330f8719f58b99f4caedd27"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x9c, 0x18, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0xd}, @TCA_CT_ACTION={0x6, 0x3, 0x20}]}, {0x63, 0x6, "3d5f702ad1c3ec42f0ceeabb6a2f238dac43d148c0efbc95d1c034d56e382f151ecf231dd9eadef32bcf7d6740c5403d473a58483300d8afcc9a20106651d266234f1705064c5bacb7d78f19edbca1bd9aa1742a8d28e1ecb8e50cc3e80623"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0xa4, 0x4, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @broadcast}]}, {0x6d, 0x6, "824d647353a453d586ca17b75809c3ef19a7a426a44a56abd909c6ccd1adf9669d4c7e0c948ec069668861a49c1db274d9c2a302d16004493f7013ec72b7a3680f9fdd722a7b2876cf67b761285412dbaaff02c639879ad69475059d02abc0214a89aae397221f3c0a"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbedit={0x120, 0xd, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0x1}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0x8}}]}, {0xda, 0x6, "1c41209fa274dae4c64fb5f15159bcb987e82f506b226e4eff21cb0b20b7c8eee5cb4fab75eb703842154c3d7b8f6c22d71d16e115723ad0646c355aaa3ee2208fc206d0169665f59212bc8fe485c21be9b64b911ace321a9b2afd20dc5484d7eac5effeb7ab0689ef4334b39fbbad95df6383986054c286987aa2b4d24cba9e753a150b7ec2d722129a35a52690bb0f5aaca799384b0b8dc99b406bca6d12332324549d822a91b31e136c03762dd3fcfa0f121720d6a60be8aa40d67ed0c93ef5fddb637d2e135836576326483398abde9838c09dfd"}, {0xc, 0x7, {0x8507da9cb2033cfe}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xa}]}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x5b1b}]}}]}, 0x1a24}}, 0x48010) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) fcntl$setlease(r8, 0x400, 0x1) 0s ago: executing program 0 (id=70): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='tlb_flush\x00', r4, 0x0, 0x9}, 0x18) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) inotify_init1(0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, 0x0, 0x0) syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0), &(0x7f0000000140)) (async) r6 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r5, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r6, 0x47f5, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002ac0)=@polexpire={0xc4, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@empty, @in6=@private1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xc4}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:53912' (ED25519) to the list of known hosts. [ 40.853562][ T5890] cgroup: Unknown subsys name 'net' [ 41.041221][ T5890] cgroup: Unknown subsys name 'cpuset' [ 41.046193][ T5890] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.070198][ T5890] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.687634][ T5981] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.689059][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.691318][ T5982] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.693163][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.698097][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.700550][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.703034][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.705657][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.706162][ T5986] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.708120][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.708903][ T5984] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.711510][ T5989] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.711945][ T5984] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.712479][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.717297][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.719189][ T5984] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.721972][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.723810][ T5984] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.729815][ T5984] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.732292][ T5984] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.935466][ T5987] chnl_net:caif_netlink_parms(): no params data found [ 46.008583][ T5975] chnl_net:caif_netlink_parms(): no params data found [ 46.097545][ T5983] chnl_net:caif_netlink_parms(): no params data found [ 46.131930][ T5987] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.134897][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.137906][ T5987] bridge_slave_0: entered allmulticast mode [ 46.142055][ T5987] bridge_slave_0: entered promiscuous mode [ 46.196979][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.200792][ T5975] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.203820][ T5975] bridge_slave_0: entered allmulticast mode [ 46.207686][ T5975] bridge_slave_0: entered promiscuous mode [ 46.211796][ T5987] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.214403][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.216733][ T5987] bridge_slave_1: entered allmulticast mode [ 46.220573][ T5987] bridge_slave_1: entered promiscuous mode [ 46.278471][ T5975] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.281004][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.283172][ T5975] bridge_slave_1: entered allmulticast mode [ 46.286033][ T5975] bridge_slave_1: entered promiscuous mode [ 46.309621][ T5987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.322695][ T5979] chnl_net:caif_netlink_parms(): no params data found [ 46.351032][ T5975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.355990][ T5987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.442478][ T5975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.508062][ T5987] team0: Port device team_slave_0 added [ 46.510644][ T5983] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.513620][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.515971][ T5983] bridge_slave_0: entered allmulticast mode [ 46.518727][ T5983] bridge_slave_0: entered promiscuous mode [ 46.569737][ T5975] team0: Port device team_slave_0 added [ 46.574003][ T5987] team0: Port device team_slave_1 added [ 46.600737][ T5983] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.603684][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.606692][ T5983] bridge_slave_1: entered allmulticast mode [ 46.610723][ T5983] bridge_slave_1: entered promiscuous mode [ 46.620135][ T5975] team0: Port device team_slave_1 added [ 46.685355][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.687555][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.695737][ T5987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.734333][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.736680][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.745019][ T5987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.750103][ T5983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.768802][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.771143][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.779515][ T5975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.786910][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.789178][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.799372][ T5975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.805981][ T5983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.849215][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.852395][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.854873][ T5979] bridge_slave_0: entered allmulticast mode [ 46.857785][ T5979] bridge_slave_0: entered promiscuous mode [ 46.884121][ T5983] team0: Port device team_slave_0 added [ 46.913470][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.917043][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.920254][ T5979] bridge_slave_1: entered allmulticast mode [ 46.924223][ T5979] bridge_slave_1: entered promiscuous mode [ 46.960965][ T5983] team0: Port device team_slave_1 added [ 46.991545][ T5987] hsr_slave_0: entered promiscuous mode [ 46.994224][ T5987] hsr_slave_1: entered promiscuous mode [ 46.999010][ T5979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.075645][ T5979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.100619][ T5983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.102872][ T5983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.111196][ T5983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.144128][ T5975] hsr_slave_0: entered promiscuous mode [ 47.147100][ T5975] hsr_slave_1: entered promiscuous mode [ 47.149978][ T5975] debugfs: 'hsr0' already exists in 'hsr' [ 47.152263][ T5975] Cannot create hsr debugfs directory [ 47.170141][ T5983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.172546][ T5983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.181730][ T5983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.252546][ T5979] team0: Port device team_slave_0 added [ 47.290635][ T5979] team0: Port device team_slave_1 added [ 47.379680][ T5983] hsr_slave_0: entered promiscuous mode [ 47.381974][ T5983] hsr_slave_1: entered promiscuous mode [ 47.384044][ T5983] debugfs: 'hsr0' already exists in 'hsr' [ 47.385883][ T5983] Cannot create hsr debugfs directory [ 47.416215][ T5979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.420085][ T5979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.428175][ T5979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.470650][ T5979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.473067][ T5979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.483821][ T5979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.636847][ T5979] hsr_slave_0: entered promiscuous mode [ 47.639587][ T5979] hsr_slave_1: entered promiscuous mode [ 47.641832][ T5979] debugfs: 'hsr0' already exists in 'hsr' [ 47.644249][ T5979] Cannot create hsr debugfs directory [ 47.773889][ T5987] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.779360][ T5978] Bluetooth: hci0: command tx timeout [ 47.783984][ T5987] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.789359][ T5978] Bluetooth: hci3: command tx timeout [ 47.789796][ T5984] Bluetooth: hci1: command tx timeout [ 47.789838][ T5982] Bluetooth: hci2: command tx timeout [ 47.810382][ T5987] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.828446][ T5987] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.870889][ T5975] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.875860][ T5975] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.881303][ T5975] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.885843][ T5975] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.937060][ T5979] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.943245][ T5979] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.947546][ T5979] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.951838][ T5979] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.036251][ T5983] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.040758][ T5983] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.048736][ T5983] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.053821][ T5983] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.072286][ T5987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.090012][ T5975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.104517][ T5979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.113325][ T5987] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.124281][ T5975] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.132140][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.135223][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.144190][ T5979] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.160541][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.163477][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.168084][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.171059][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.187897][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.190636][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.195197][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.198335][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.217305][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.220089][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.261920][ T5983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.303237][ T5983] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.327918][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.330501][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.334949][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.338002][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.393745][ T5987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.415957][ T5975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.442837][ T5987] veth0_vlan: entered promiscuous mode [ 48.460631][ T5979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.466619][ T5987] veth1_vlan: entered promiscuous mode [ 48.483075][ T5975] veth0_vlan: entered promiscuous mode [ 48.503037][ T5975] veth1_vlan: entered promiscuous mode [ 48.514727][ T5983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.534108][ T5979] veth0_vlan: entered promiscuous mode [ 48.542753][ T5987] veth0_macvtap: entered promiscuous mode [ 48.550542][ T5979] veth1_vlan: entered promiscuous mode [ 48.555100][ T5987] veth1_macvtap: entered promiscuous mode [ 48.581230][ T5983] veth0_vlan: entered promiscuous mode [ 48.594241][ T5983] veth1_vlan: entered promiscuous mode [ 48.602480][ T5987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.618488][ T5987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.628320][ T5983] veth0_macvtap: entered promiscuous mode [ 48.631950][ T5975] veth0_macvtap: entered promiscuous mode [ 48.643031][ T5983] veth1_macvtap: entered promiscuous mode [ 48.653108][ T5975] veth1_macvtap: entered promiscuous mode [ 48.656272][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.660757][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.674810][ T5979] veth0_macvtap: entered promiscuous mode [ 48.678061][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.681169][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.690350][ T5979] veth1_macvtap: entered promiscuous mode [ 48.702564][ T5983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.706337][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.717025][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.732923][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.735597][ T5983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.735935][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.745763][ T5979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.748331][ T1142] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.754132][ T1142] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.763493][ T5979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.772848][ T1142] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.784971][ T1142] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.789609][ T1142] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.795517][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.798058][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.800912][ T1142] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.804490][ T1142] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.816157][ T1142] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.821825][ T1142] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.824621][ T1142] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.843739][ T1142] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.846670][ T1142] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.859355][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.861990][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.873635][ T5987] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.882596][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.885809][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.905440][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.907850][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.936903][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.940239][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.977192][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.983677][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.001255][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.006126][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.087056][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 49.178602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.182304][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.288472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.428486][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.434321][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.879033][ T5984] Bluetooth: hci2: command tx timeout [ 49.881392][ T5984] Bluetooth: hci3: command tx timeout [ 49.881465][ T5982] Bluetooth: hci1: command tx timeout [ 49.885781][ T5978] Bluetooth: hci0: command tx timeout [ 49.891924][ T6061] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.894503][ T6061] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.897197][ T6061] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.904067][ T6061] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.907274][ T6061] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.926222][ T6081] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3'. [ 49.947274][ T6081] batadv1: entered allmulticast mode [ 49.952790][ T6061] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.957222][ T6061] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.961224][ T6061] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 49.999278][ T6061] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 50.004512][ T6061] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 50.008068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 50.020599][ T6061] hid-generic 0000:007F:FFFFFFFE.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 50.187761][ T6079] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 50.198699][ T6079] batman_adv: batadv0: Adding interface: team0 [ 50.200765][ T6079] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.238472][ T6079] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 50.269453][ T6085] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 50.271959][ T6085] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4'. [ 50.275195][ T6085] team0: entered promiscuous mode [ 50.277049][ T6085] team_slave_0: entered promiscuous mode [ 50.280610][ T6085] team_slave_1: entered promiscuous mode [ 50.286533][ T6085] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.289187][ T6085] batman_adv: batadv0: Interface activated: team0 [ 50.291282][ T6085] batman_adv: batadv0: Interface deactivated: team0 [ 50.293502][ T6085] batman_adv: batadv0: Removing interface: team0 [ 50.297993][ T6085] bridge0: port 3(team0) entered blocking state [ 50.300451][ T6085] bridge0: port 3(team0) entered disabled state [ 50.303106][ T6085] team0: entered allmulticast mode [ 50.304804][ T6085] team_slave_0: entered allmulticast mode [ 50.306635][ T6085] team_slave_1: entered allmulticast mode [ 50.315803][ T6085] bridge0: port 3(team0) entered blocking state [ 50.318079][ T6085] bridge0: port 3(team0) entered forwarding state [ 50.459155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.518434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 50.538982][ T6092] netlink: 'syz.1.6': attribute type 10 has an invalid length. [ 50.566691][ T6092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.576308][ T6092] team0: Port device bond0 added [ 50.599860][ T6092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 50.670350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 50.757478][ T6092] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.788616][ T6096] hub 1-0:1.0: USB hub found [ 50.790747][ T6096] hub 1-0:1.0: 2 ports detected [ 51.166105][ T6101] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9'. [ 51.199354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.390055][ T6103] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 51.393760][ T6103] block device autoloading is deprecated and will be removed. [ 51.435283][ T6102] md: md2 stopped. [ 51.938577][ T5978] Bluetooth: hci1: command tx timeout [ 51.941363][ T63] Bluetooth: hci0: command tx timeout [ 51.941718][ T5982] Bluetooth: hci3: command tx timeout [ 51.944010][ T5984] Bluetooth: hci2: command tx timeout [ 53.368077][ T6114] process 'syz.2.12' launched './file1' with NULL argv: empty string added [ 53.548850][ T6092] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.673380][ T6092] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.822865][ T6092] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.909263][ T6132] netlink: 'syz.0.13': attribute type 10 has an invalid length. [ 54.018858][ T63] Bluetooth: hci2: command tx timeout [ 54.019310][ T5978] Bluetooth: hci0: command tx timeout [ 54.021527][ T63] Bluetooth: hci1: command tx timeout [ 54.026278][ T5984] Bluetooth: hci3: command tx timeout [ 54.070664][ T6132] batman_adv: batadv0: Adding interface: team0 [ 54.080000][ T6132] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.080653][ T6136] netlink: 'syz.0.13': attribute type 10 has an invalid length. [ 54.088185][ T6132] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 54.095849][ T6136] netlink: 2 bytes leftover after parsing attributes in process `syz.0.13'. [ 54.099372][ T6136] team0: entered promiscuous mode [ 54.101091][ T6136] team_slave_0: entered promiscuous mode [ 54.109726][ T6136] team_slave_1: entered promiscuous mode [ 54.115335][ T6136] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.117880][ T6136] batman_adv: batadv0: Interface activated: team0 [ 54.120473][ T6136] batman_adv: batadv0: Interface deactivated: team0 [ 54.139426][ T6136] batman_adv: batadv0: Removing interface: team0 [ 54.147506][ T6136] bridge0: port 3(team0) entered blocking state [ 54.152446][ T6136] bridge0: port 3(team0) entered disabled state [ 54.210187][ T6136] team0: entered allmulticast mode [ 54.212471][ T6136] team_slave_0: entered allmulticast mode [ 54.214780][ T6136] team_slave_1: entered allmulticast mode [ 54.221089][ T6136] bridge0: port 3(team0) entered blocking state [ 54.224444][ T6136] bridge0: port 3(team0) entered forwarding state [ 54.285356][ T217] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.295219][ T217] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.306848][ T217] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.316818][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.514613][ T6142] netlink: 'syz.3.16': attribute type 10 has an invalid length. [ 54.533460][ T6142] bridge0: port 3(team0) entered disabled state [ 54.538317][ T6142] team0: left allmulticast mode [ 54.540831][ T6142] team_slave_0: left allmulticast mode [ 54.542620][ T6142] team_slave_1: left allmulticast mode [ 54.544563][ T6142] team0: left promiscuous mode [ 54.546188][ T6142] team_slave_0: left promiscuous mode [ 54.580283][ T6142] team_slave_1: left promiscuous mode [ 54.586424][ T6142] bridge0: port 3(team0) entered disabled state [ 54.653343][ T6146] netlink: 'syz.3.16': attribute type 10 has an invalid length. [ 54.655961][ T6146] netlink: 2 bytes leftover after parsing attributes in process `syz.3.16'. [ 54.692869][ T6142] batman_adv: batadv0: Adding interface: team0 [ 54.694933][ T6142] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.707045][ T6142] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 54.720293][ T6146] team0: entered promiscuous mode [ 54.721963][ T6146] team_slave_0: entered promiscuous mode [ 54.723828][ T6146] team_slave_1: entered promiscuous mode [ 54.727686][ T6146] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.730536][ T6146] batman_adv: batadv0: Interface activated: team0 [ 54.732691][ T6146] batman_adv: batadv0: Interface deactivated: team0 [ 54.734949][ T6146] batman_adv: batadv0: Removing interface: team0 [ 54.743402][ T6146] bridge0: port 3(team0) entered blocking state [ 54.745546][ T6146] bridge0: port 3(team0) entered disabled state [ 54.747654][ T6146] team0: entered allmulticast mode [ 54.749420][ T6146] team_slave_0: entered allmulticast mode [ 54.751285][ T6146] team_slave_1: entered allmulticast mode [ 54.754667][ T6146] bridge0: port 3(team0) entered blocking state [ 54.756841][ T6146] bridge0: port 3(team0) entered forwarding state [ 54.999003][ T6156] netlink: 'syz.1.17': attribute type 10 has an invalid length. [ 55.009492][ T6156] batman_adv: batadv0: Adding interface: team0 [ 55.011968][ T6156] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.020523][ T6156] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 55.093926][ T6156] netlink: 'syz.1.17': attribute type 10 has an invalid length. [ 55.097181][ T6156] netlink: 2 bytes leftover after parsing attributes in process `syz.1.17'. [ 55.101634][ T6156] team0: entered promiscuous mode [ 55.103827][ T6156] team_slave_0: entered promiscuous mode [ 55.106445][ T6156] team_slave_1: entered promiscuous mode [ 55.109370][ T6156] bond0: entered promiscuous mode [ 55.111473][ T6156] bond_slave_0: entered promiscuous mode [ 55.113450][ T6156] bond_slave_1: entered promiscuous mode [ 55.116490][ T6156] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.119343][ T6156] batman_adv: batadv0: Interface activated: team0 [ 55.123071][ T6156] batman_adv: batadv0: Interface deactivated: team0 [ 55.125968][ T6156] batman_adv: batadv0: Removing interface: team0 [ 55.385582][ T6156] bridge0: port 3(team0) entered blocking state [ 55.395087][ T6156] bridge0: port 3(team0) entered disabled state [ 55.398120][ T6156] team0: entered allmulticast mode [ 55.416933][ T6156] team_slave_0: entered allmulticast mode [ 55.419640][ T6156] team_slave_1: entered allmulticast mode [ 55.422247][ T6156] bond0: entered allmulticast mode [ 55.424365][ T6156] bond_slave_0: entered allmulticast mode [ 55.426545][ T6156] bond_slave_1: entered allmulticast mode [ 55.433724][ T6156] bridge0: port 3(team0) entered blocking state [ 55.436306][ T6156] bridge0: port 3(team0) entered forwarding state [ 55.808709][ T6166] netlink: 'syz.3.20': attribute type 10 has an invalid length. [ 55.833653][ T6166] bridge0: port 3(team0) entered disabled state [ 55.835903][ T6166] team0: left allmulticast mode [ 55.837400][ T6166] team_slave_0: left allmulticast mode [ 55.839384][ T6166] team_slave_1: left allmulticast mode [ 55.841148][ T6166] team0: left promiscuous mode [ 55.842922][ T6166] team_slave_0: left promiscuous mode [ 55.844931][ T6166] team_slave_1: left promiscuous mode [ 55.846965][ T6166] bridge0: port 3(team0) entered disabled state [ 55.860537][ T6167] netlink: 'syz.3.20': attribute type 10 has an invalid length. [ 55.863001][ T6167] netlink: 2 bytes leftover after parsing attributes in process `syz.3.20'. [ 55.904089][ T6166] batman_adv: batadv0: Adding interface: team0 [ 55.906105][ T6166] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.915694][ T6166] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 55.931164][ T6167] team0: entered promiscuous mode [ 55.933394][ T6167] team_slave_0: entered promiscuous mode [ 55.935931][ T6167] team_slave_1: entered promiscuous mode [ 55.979574][ T6167] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.983406][ T6167] batman_adv: batadv0: Interface activated: team0 [ 55.986150][ T6167] batman_adv: batadv0: Interface deactivated: team0 [ 55.993946][ T6167] batman_adv: batadv0: Removing interface: team0 [ 56.008572][ T6167] bridge0: port 3(team0) entered blocking state [ 56.010965][ T6167] bridge0: port 3(team0) entered disabled state [ 56.013781][ T6167] team0: entered allmulticast mode [ 56.016227][ T6167] team_slave_0: entered allmulticast mode [ 56.020334][ T6167] team_slave_1: entered allmulticast mode [ 56.027604][ T6167] bridge0: port 3(team0) entered blocking state [ 56.029756][ T6167] bridge0: port 3(team0) entered forwarding state [ 56.245386][ T6174] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 56.687034][ T6182] netlink: 'syz.2.21': attribute type 10 has an invalid length. [ 56.694322][ T6182] batman_adv: batadv0: Adding interface: team0 [ 56.696346][ T6182] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.731913][ T6182] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 56.745847][ T6182] netlink: 'syz.2.21': attribute type 10 has an invalid length. [ 56.748715][ T6182] netlink: 2 bytes leftover after parsing attributes in process `syz.2.21'. [ 56.751579][ T6182] team0: entered promiscuous mode [ 56.753195][ T6182] team_slave_0: entered promiscuous mode [ 56.755425][ T6182] team_slave_1: entered promiscuous mode [ 56.769537][ T6182] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.792011][ T6185] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 56.803272][ T6182] batman_adv: batadv0: Interface activated: team0 [ 56.806677][ T6182] batman_adv: batadv0: Interface deactivated: team0 [ 56.811315][ T6182] batman_adv: batadv0: Removing interface: team0 [ 56.818344][ T6182] bridge0: port 3(team0) entered blocking state [ 56.842370][ T6182] bridge0: port 3(team0) entered disabled state [ 56.858571][ T6186] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 56.861008][ T6186] netlink: 2 bytes leftover after parsing attributes in process `syz.0.22'. [ 56.864493][ T6182] team0: entered allmulticast mode [ 56.866612][ T6182] team_slave_0: entered allmulticast mode [ 56.868914][ T6182] team_slave_1: entered allmulticast mode [ 56.882118][ T6182] bridge0: port 3(team0) entered blocking state [ 56.884237][ T6182] bridge0: port 3(team0) entered forwarding state [ 56.893445][ T6185] bridge0: port 3(team0) entered disabled state [ 56.896502][ T6185] team0: left allmulticast mode [ 56.898176][ T6185] team_slave_0: left allmulticast mode [ 56.900178][ T6185] team_slave_1: left allmulticast mode [ 56.902029][ T6185] team0: left promiscuous mode [ 56.903782][ T6185] team_slave_0: left promiscuous mode [ 56.906265][ T6185] team_slave_1: left promiscuous mode [ 56.909894][ T6185] bridge0: port 3(team0) entered disabled state [ 56.990194][ T6185] batman_adv: batadv0: Adding interface: team0 [ 56.992215][ T6185] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.000161][ T6185] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 57.041738][ T6186] team0: entered promiscuous mode [ 57.043472][ T6186] team_slave_0: entered promiscuous mode [ 57.045894][ T6186] team_slave_1: entered promiscuous mode [ 57.121807][ T6186] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.126659][ T6186] batman_adv: batadv0: Interface activated: team0 [ 57.140567][ T6188] netlink: 'syz.1.24': attribute type 10 has an invalid length. [ 57.144227][ T6188] netlink: 2 bytes leftover after parsing attributes in process `syz.1.24'. [ 57.148221][ T6186] batman_adv: batadv0: Interface deactivated: team0 [ 57.150871][ T6186] batman_adv: batadv0: Removing interface: team0 [ 57.170552][ T6186] bridge0: port 3(team0) entered blocking state [ 57.172861][ T6186] bridge0: port 3(team0) entered disabled state [ 57.175294][ T6186] team0: entered allmulticast mode [ 57.176969][ T6186] team_slave_0: entered allmulticast mode [ 57.181388][ T6186] team_slave_1: entered allmulticast mode [ 57.192744][ T6186] bridge0: port 3(team0) entered blocking state [ 57.194847][ T6186] bridge0: port 3(team0) entered forwarding state [ 57.782681][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25'. [ 58.399524][ T6222] netlink: 'syz.1.30': attribute type 13 has an invalid length. [ 58.404036][ T6222] netlink: 'syz.1.30': attribute type 17 has an invalid length. [ 58.473542][ T6222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 58.826675][ T6225] netlink: 'syz.3.29': attribute type 10 has an invalid length. [ 58.840316][ T6225] bridge0: port 3(team0) entered disabled state [ 58.844356][ T6225] team0: left allmulticast mode [ 58.846427][ T6225] team_slave_0: left allmulticast mode [ 58.849528][ T6225] team_slave_1: left allmulticast mode [ 58.851775][ T6225] team0: left promiscuous mode [ 58.853752][ T6225] team_slave_0: left promiscuous mode [ 58.856758][ T6225] team_slave_1: left promiscuous mode [ 58.860772][ T6225] bridge0: port 3(team0) entered disabled state [ 58.894451][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'. [ 58.901247][ T6225] batman_adv: batadv0: Adding interface: team0 [ 58.905015][ T6230] netlink: 2 bytes leftover after parsing attributes in process `syz.3.29'. [ 58.908399][ T6225] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.908427][ T6225] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 58.956786][ T6229] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 58.978671][ T6230] team0: entered promiscuous mode [ 58.980253][ T6230] team_slave_0: entered promiscuous mode [ 58.982165][ T6230] team_slave_1: entered promiscuous mode [ 58.985426][ T6230] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.987566][ T6230] batman_adv: batadv0: Interface activated: team0 [ 58.990316][ T6230] batman_adv: batadv0: Interface deactivated: team0 [ 58.992470][ T6230] batman_adv: batadv0: Removing interface: team0 [ 59.011746][ T6230] bridge0: port 3(team0) entered blocking state [ 59.015007][ T6230] bridge0: port 3(team0) entered disabled state [ 59.017273][ T6230] team0: entered allmulticast mode [ 59.019269][ T6230] team_slave_0: entered allmulticast mode [ 59.021252][ T6230] team_slave_1: entered allmulticast mode [ 59.132666][ T6230] bridge0: port 3(team0) entered blocking state [ 59.135219][ T6230] bridge0: port 3(team0) entered forwarding state [ 59.412843][ T40] audit: type=1326 audit(1756995943.760:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.2.33" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 59.427415][ T40] audit: type=1326 audit(1756995943.770:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.2.33" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 59.500214][ T40] audit: type=1326 audit(1756995943.770:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.2.33" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 59.508333][ T40] audit: type=1326 audit(1756995943.770:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.2.33" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 59.515069][ T40] audit: type=1326 audit(1756995943.770:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.2.33" exe="/syz-executor" sig=0 arch=40000003 syscall=338 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 59.547296][ T40] audit: type=1326 audit(1756995943.770:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.2.33" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 59.556749][ T40] audit: type=1326 audit(1756995943.770:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.2.33" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 59.566678][ T40] audit: type=1326 audit(1756995943.780:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.2.33" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 59.573943][ T40] audit: type=1326 audit(1756995943.780:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.2.33" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 59.583317][ T40] audit: type=1326 audit(1756995943.780:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.2.33" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 59.966160][ T6242] bridge0: port 3(team0) entered disabled state [ 59.969610][ T6242] team0: left allmulticast mode [ 59.971649][ T6242] team_slave_0: left allmulticast mode [ 59.973829][ T6242] team_slave_1: left allmulticast mode [ 59.975770][ T6242] team0: left promiscuous mode [ 59.977449][ T6242] team_slave_0: left promiscuous mode [ 59.981500][ T6242] team_slave_1: left promiscuous mode [ 60.002307][ T6242] bridge0: port 3(team0) entered disabled state [ 60.016536][ T6244] netlink: 2 bytes leftover after parsing attributes in process `syz.0.32'. [ 60.051626][ T6242] batman_adv: batadv0: Adding interface: team0 [ 60.056112][ T6242] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.066393][ T6242] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 60.071590][ T6244] team0: entered promiscuous mode [ 60.073207][ T6244] team_slave_0: entered promiscuous mode [ 60.075345][ T6244] team_slave_1: entered promiscuous mode [ 60.080634][ T6244] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.083127][ T6244] batman_adv: batadv0: Interface activated: team0 [ 60.085173][ T6244] batman_adv: batadv0: Interface deactivated: team0 [ 60.087262][ T6244] batman_adv: batadv0: Removing interface: team0 [ 60.133418][ T6244] bridge0: port 3(team0) entered blocking state [ 60.136594][ T6244] bridge0: port 3(team0) entered disabled state [ 60.139889][ T6244] team0: entered allmulticast mode [ 60.142146][ T6244] team_slave_0: entered allmulticast mode [ 60.144564][ T6244] team_slave_1: entered allmulticast mode [ 60.157524][ T6244] bridge0: port 3(team0) entered blocking state [ 60.159963][ T6244] bridge0: port 3(team0) entered forwarding state [ 60.283513][ T6249] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 60.286746][ T6249] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 60.291537][ T6249] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 60.298406][ T6249] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 61.293854][ T6270] [U]  [ 61.294836][ T6270] [U] K{ [ 61.295862][ T6270] [U] t 1ŠFfˊ`GJgo/mC [ 61.298064][ T6270] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 61.303605][ T6270] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 61.306982][ T6270] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 61.318087][ T6270] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 61.325828][ T6270] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 61.329303][ T6270] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 61.333012][ T6270] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 61.360054][ T6270] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 61.362685][ T6270] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 61.366770][ T6270] [U] 22Ʃx?0;3u [ 61.368182][ T6270] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 61.375546][ T6270] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 61.378512][ T6270] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 61.381090][ T6270] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 61.383001][ T6270] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 61.386837][ T6270] [U] ec [ 61.387839][ T6270] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 61.810533][ T6264] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 62.474993][ T6297] validate_nla: 3 callbacks suppressed [ 62.475004][ T6297] netlink: 'syz.2.40': attribute type 10 has an invalid length. [ 62.482878][ T6297] bridge0: port 3(team0) entered disabled state [ 62.486550][ T6297] team0: left allmulticast mode [ 62.488308][ T6297] team_slave_0: left allmulticast mode [ 62.490101][ T6297] team_slave_1: left allmulticast mode [ 62.491818][ T6297] team0: left promiscuous mode [ 62.493372][ T6297] team_slave_0: left promiscuous mode [ 62.495352][ T6297] team_slave_1: left promiscuous mode [ 62.497845][ T6297] bridge0: port 3(team0) entered disabled state [ 62.548464][ T6298] netlink: 'syz.2.40': attribute type 10 has an invalid length. [ 62.552077][ T6298] netlink: 2 bytes leftover after parsing attributes in process `syz.2.40'. [ 62.605978][ T6297] batman_adv: batadv0: Adding interface: team0 [ 62.612947][ T6297] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.621238][ T6297] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 62.628686][ T6298] team0: entered promiscuous mode [ 62.630868][ T6298] team_slave_0: entered promiscuous mode [ 62.635922][ T6298] team_slave_1: entered promiscuous mode [ 62.669118][ T6298] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.671970][ T6298] batman_adv: batadv0: Interface activated: team0 [ 62.674669][ T6298] batman_adv: batadv0: Interface deactivated: team0 [ 62.677635][ T6298] batman_adv: batadv0: Removing interface: team0 [ 62.734156][ T6298] bridge0: port 3(team0) entered blocking state [ 62.737266][ T6298] bridge0: port 3(team0) entered disabled state [ 62.758544][ T6298] team0: entered allmulticast mode [ 62.763262][ T6298] team_slave_0: entered allmulticast mode [ 62.767530][ T6298] team_slave_1: entered allmulticast mode [ 62.776432][ T6298] bridge0: port 3(team0) entered blocking state [ 62.778606][ T6298] bridge0: port 3(team0) entered forwarding state [ 63.134648][ T6301] netlink: 3 bytes leftover after parsing attributes in process `syz.3.42'. [ 63.146866][ T6301] batadv1: entered allmulticast mode [ 63.152328][ T842] hid_parser_main: 43 callbacks suppressed [ 63.152339][ T842] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 63.157255][ T842] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 63.164623][ T842] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 63.167798][ T842] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 63.170828][ T842] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 63.173936][ T842] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 63.177079][ T842] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 63.180207][ T842] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 63.182959][ T842] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 63.191227][ T842] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 63.199639][ T842] hid-generic 0000:007F:FFFFFFFE.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 63.555370][ T6307] Zero length message leads to an empty skb [ 63.681994][ T6314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 64.071082][ T6318] netlink: 'syz.3.45': attribute type 10 has an invalid length. [ 64.081877][ T6318] bridge0: port 3(team0) entered disabled state [ 64.085363][ T6318] team0: left allmulticast mode [ 64.086945][ T6318] team_slave_0: left allmulticast mode [ 64.089330][ T6318] team_slave_1: left allmulticast mode [ 64.091030][ T6318] team0: left promiscuous mode [ 64.098436][ T6318] team_slave_0: left promiscuous mode [ 64.100712][ T6318] team_slave_1: left promiscuous mode [ 64.103467][ T6318] bridge0: port 3(team0) entered disabled state [ 64.119909][ T6318] batman_adv: batadv0: Adding interface: team0 [ 64.121927][ T6318] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.172212][ T6318] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 64.426757][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.47'. [ 65.752306][ T6347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.51'. [ 66.536071][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.53'. [ 68.448363][ T5947] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 68.624020][ T5947] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 68.627907][ T5947] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.648393][ T5947] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.651761][ T5947] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 68.668401][ T6403] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 68.721700][ T5947] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 68.728808][ T5947] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 68.732388][ T6411] capability: warning: `syz.0.67' uses deprecated v2 capabilities in a way that may be insecure [ 68.734455][ T5947] usb 6-1: Manufacturer: syz [ 68.759949][ T6401] binder: 6394:6401 ioctl 541e 80000300 returned -22 [ 68.771738][ T5947] usb 6-1: config 0 descriptor?? [ 68.777667][ T6413] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.781826][ T6413] netlink: 'syz.0.68': attribute type 28 has an invalid length. [ 68.846666][ T6417] ================================================================== [ 68.846675][ T6417] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 68.846691][ T6417] Write of size 8 at addr ffffc90004c99000 by task syz.3.69/6417 [ 68.846700][ T6417] [ 68.846705][ T6417] CPU: 3 UID: 0 PID: 6417 Comm: syz.3.69 Not tainted syzkaller #0 PREEMPT(full) [ 68.846718][ T6417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.846725][ T6417] Call Trace: [ 68.846729][ T6417] [ 68.846733][ T6417] dump_stack_lvl+0x116/0x1f0 [ 68.846748][ T6417] print_report+0xcd/0x630 [ 68.846761][ T6417] ? __virt_addr_valid+0x81/0x610 [ 68.846776][ T6417] ? sys_imageblit+0x1a6f/0x1e60 [ 68.846786][ T6417] kasan_report+0xe0/0x110 [ 68.846800][ T6417] ? sys_imageblit+0x1a6f/0x1e60 [ 68.846811][ T6417] sys_imageblit+0x1a6f/0x1e60 [ 68.846821][ T6417] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 68.846837][ T6417] ? __pfx_sys_imageblit+0x10/0x10 [ 68.846846][ T6417] ? find_held_lock+0x2b/0x80 [ 68.846857][ T6417] ? __queue_work+0x431/0x1160 [ 68.846867][ T6417] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 68.846882][ T6417] ? queue_work_on+0x12a/0x1f0 [ 68.846891][ T6417] ? lockdep_hardirqs_on+0x7c/0x110 [ 68.846903][ T6417] ? queue_work_on+0x8b/0x1f0 [ 68.846912][ T6417] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 68.846926][ T6417] bit_putcs+0x90f/0xde0 [ 68.846948][ T6417] ? __pfx_bit_putcs+0x10/0x10 [ 68.846964][ T6417] ? fb_get_color_depth+0x120/0x250 [ 68.846977][ T6417] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.846996][ T6417] ? __pfx_bit_putcs+0x10/0x10 [ 68.847009][ T6417] fbcon_putcs+0x384/0x4a0 [ 68.847022][ T6417] do_update_region+0x2e6/0x3f0 [ 68.847033][ T6417] invert_screen+0x1e4/0x590 [ 68.847047][ T6417] ? __pfx_invert_screen+0x10/0x10 [ 68.847059][ T6417] ? __pfx_complement_pos+0x10/0x10 [ 68.847073][ T6417] ? trace_kmalloc+0x2b/0xd0 [ 68.847086][ T6417] ? __kmalloc_noprof.cold+0x5c/0x61 [ 68.847099][ T6417] ? find_held_lock+0x2b/0x80 [ 68.847109][ T6417] clear_selection+0x59/0x70 [ 68.847120][ T6417] vc_do_resize+0xd9b/0x10e0 [ 68.847134][ T6417] ? __pfx_vc_do_resize+0x10/0x10 [ 68.847147][ T6417] fbcon_set_disp+0x7ad/0xe50 [ 68.847159][ T6417] set_con2fb_map+0x703/0x1080 [ 68.847172][ T6417] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 68.847185][ T6417] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 68.847199][ T6417] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.847213][ T6417] do_fb_ioctl+0x328/0x7e0 [ 68.847228][ T6417] ? __pfx_do_fb_ioctl+0x10/0x10 [ 68.847241][ T6417] ? lockdep_hardirqs_on+0x7c/0x110 [ 68.847254][ T6417] ? find_held_lock+0x2b/0x80 [ 68.847269][ T6417] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 68.847286][ T6417] fb_compat_ioctl+0x55e/0x670 [ 68.847301][ T6417] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 68.847315][ T6417] ? hook_file_ioctl_common+0x145/0x410 [ 68.847329][ T6417] ? __fget_files+0x20e/0x3c0 [ 68.847339][ T6417] ? __ia32_compat_sys_openat+0xb0/0x210 [ 68.847350][ T6417] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 68.847364][ T6417] __ia32_compat_sys_ioctl+0x23f/0x370 [ 68.847380][ T6417] __do_fast_syscall_32+0x7c/0x3a0 [ 68.847394][ T6417] do_fast_syscall_32+0x32/0x80 [ 68.847407][ T6417] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 68.847419][ T6417] RIP: 0023:0xf70be579 [ 68.847427][ T6417] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 68.847436][ T6417] RSP: 002b:00000000f54ae55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 68.847446][ T6417] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000004610 [ 68.847453][ T6417] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.847458][ T6417] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 68.847464][ T6417] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 68.847469][ T6417] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.847478][ T6417] [ 68.847481][ T6417] [ 68.847484][ T6417] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90004999000 allocated at drm_gem_shmem_vmap_locked+0x561/0x7e0 [ 68.847505][ T6417] Memory state around the buggy address: [ 68.847510][ T6417] ffffc90004c98f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 68.847517][ T6417] ffffc90004c98f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 68.847524][ T6417] >ffffc90004c99000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 68.847530][ T6417] ^ [ 68.847535][ T6417] ffffc90004c99080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 68.847542][ T6417] ffffc90004c99100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 68.847548][ T6417] ================================================================== [ 68.847570][ T6417] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 68.847577][ T6417] CPU: 3 UID: 0 PID: 6417 Comm: syz.3.69 Not tainted syzkaller #0 PREEMPT(full) [ 68.847590][ T6417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.847597][ T6417] Call Trace: [ 68.847600][ T6417] [ 68.847605][ T6417] dump_stack_lvl+0x3d/0x1f0 [ 68.847620][ T6417] vpanic+0x6e8/0x7a0 [ 68.847635][ T6417] ? __pfx_vpanic+0x10/0x10 [ 68.847650][ T6417] ? __pfx_vprintk_emit+0x10/0x10 [ 68.847661][ T6417] ? sys_imageblit+0x1a6f/0x1e60 [ 68.847670][ T6417] panic+0xca/0xd0 [ 68.847684][ T6417] ? __pfx_panic+0x10/0x10 [ 68.847700][ T6417] ? sys_imageblit+0x1a6f/0x1e60 [ 68.847711][ T6417] ? preempt_schedule_common+0x44/0xc0 [ 68.847723][ T6417] ? preempt_schedule_thunk+0x16/0x30 [ 68.847738][ T6417] check_panic_on_warn+0xab/0xb0 [ 68.847752][ T6417] end_report+0x107/0x170 [ 68.847765][ T6417] kasan_report+0xee/0x110 [ 68.847777][ T6417] ? sys_imageblit+0x1a6f/0x1e60 [ 68.847788][ T6417] sys_imageblit+0x1a6f/0x1e60 [ 68.847798][ T6417] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 68.847813][ T6417] ? __pfx_sys_imageblit+0x10/0x10 [ 68.847821][ T6417] ? find_held_lock+0x2b/0x80 [ 68.847831][ T6417] ? __queue_work+0x431/0x1160 [ 68.847841][ T6417] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 68.847856][ T6417] ? queue_work_on+0x12a/0x1f0 [ 68.847864][ T6417] ? lockdep_hardirqs_on+0x7c/0x110 [ 68.847876][ T6417] ? queue_work_on+0x8b/0x1f0 [ 68.847886][ T6417] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 68.847899][ T6417] bit_putcs+0x90f/0xde0 [ 68.847915][ T6417] ? __pfx_bit_putcs+0x10/0x10 [ 68.847929][ T6417] ? fb_get_color_depth+0x120/0x250 [ 68.847940][ T6417] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.847962][ T6417] ? __pfx_bit_putcs+0x10/0x10 [ 68.847974][ T6417] fbcon_putcs+0x384/0x4a0 [ 68.847986][ T6417] do_update_region+0x2e6/0x3f0 [ 68.847997][ T6417] invert_screen+0x1e4/0x590 [ 68.848009][ T6417] ? __pfx_invert_screen+0x10/0x10 [ 68.848021][ T6417] ? __pfx_complement_pos+0x10/0x10 [ 68.848033][ T6417] ? trace_kmalloc+0x2b/0xd0 [ 68.848046][ T6417] ? __kmalloc_noprof.cold+0x5c/0x61 [ 68.848060][ T6417] ? find_held_lock+0x2b/0x80 [ 68.848070][ T6417] clear_selection+0x59/0x70 [ 68.848080][ T6417] vc_do_resize+0xd9b/0x10e0 [ 68.848095][ T6417] ? __pfx_vc_do_resize+0x10/0x10 [ 68.848109][ T6417] fbcon_set_disp+0x7ad/0xe50 [ 68.848120][ T6417] set_con2fb_map+0x703/0x1080 [ 68.848134][ T6417] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 68.848147][ T6417] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 68.848161][ T6417] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.848176][ T6417] do_fb_ioctl+0x328/0x7e0 [ 68.848190][ T6417] ? __pfx_do_fb_ioctl+0x10/0x10 [ 68.848204][ T6417] ? lockdep_hardirqs_on+0x7c/0x110 [ 68.848217][ T6417] ? find_held_lock+0x2b/0x80 [ 68.848250][ T6417] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 68.848267][ T6417] fb_compat_ioctl+0x55e/0x670 [ 68.848281][ T6417] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 68.848296][ T6417] ? hook_file_ioctl_common+0x145/0x410 [ 68.848310][ T6417] ? __fget_files+0x20e/0x3c0 [ 68.848320][ T6417] ? __ia32_compat_sys_openat+0xb0/0x210 [ 68.848332][ T6417] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 68.848346][ T6417] __ia32_compat_sys_ioctl+0x23f/0x370 [ 68.848362][ T6417] __do_fast_syscall_32+0x7c/0x3a0 [ 68.848376][ T6417] do_fast_syscall_32+0x32/0x80 [ 68.848389][ T6417] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 68.848401][ T6417] RIP: 0023:0xf70be579 [ 68.848409][ T6417] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 68.848418][ T6417] RSP: 002b:00000000f54ae55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 68.848428][ T6417] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000004610 [ 68.848435][ T6417] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.848441][ T6417] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 68.848446][ T6417] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 68.848452][ T6417] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.848461][ T6417] [ 68.849132][ T6417] Kernel Offset: disabled VM DIAGNOSIS: 14:25:53 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81605750 RDX=ffff888024ec2440 RSI=ffffffff81605798 RDI=ffffffff93db1fe0 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff27b63fc R10=ffffffff93db1fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81605799 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880974c0000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000800bd01c CR3=000000006e203000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000010001 RBX=0000000000000000 RCX=ffffffff81605750 RDX=ffff88801deda440 RSI=ffffffff81605798 RDI=ffffffff93db1fe0 RBP=0000000000000001 RSP=ffffc90000590fd0 R8 =0000000000000001 R9 =fffffbfff27b63fc R10=ffffffff93db1fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81605799 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000032701ffc CR3=000000006e203000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81605750 RDX=ffff88801dae8000 RSI=ffffffff81605798 RDI=ffffffff93db1fe0 RBP=0000000000000002 RSP=ffffc90000538fd0 R8 =0000000000000001 R9 =fffffbfff27b63fc R10=ffffffff93db1fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81605799 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f71b3b20 CR3=0000000065361000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85617ab0 RDI=ffffffff9b0fc700 RBP=ffffffff9b0fc6c0 RSP=ffffc90004e5edd8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000031343654 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff361f932 R15=dffffc0000000000 RIP=ffffffff85617ad7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977c0000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000003281bffc CR3=000000006e9f7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000