last executing test programs: 2.361485156s ago: executing program 1 (id=244): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2b4, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x150, 0xffffffce, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d, 0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x310) 2.27232606s ago: executing program 1 (id=245): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x6}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioperm(0x2, 0x6d, 0x80000000) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xffffffff, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000440)=@gcm_128={{0x303}, "053200", "1ec2c224d78682576ec2d9e13dad1018", "993161e3"}, 0x28) write$binfmt_script(r3, 0x0, 0x0) writev(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) syz_open_dev$sndmidi(&(0x7f0000000380), 0x4, 0x640a00) 2.08204448s ago: executing program 3 (id=247): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000940)={0x1, 0x1, 0x2, 0x80, @vifc_lcl_addr=@loopback, @broadcast}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000300}, @address_request={0x11, 0x0, 0x0, 0xff97}}}}}, 0x0) 2.081207744s ago: executing program 3 (id=248): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=@newtaction={0x1794, 0x30, 0x1, 0x0, 0x0, {}, [{0x1f0, 0x1, [@m_vlan={0x114, 0x4, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x7, 0x20000000, 0x400, 0x7}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcee}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x905}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x5f3}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x92, 0x6, "da14baab773108f2d8aeb1ce64894f7f439e6c804aae94837faf6679e7f15554eecdec91a7d40cbfee79b7a432c61eb024509b538ffea73de283913daf8f9006996f8495998ad3dce271befd4d05a8ce6f2d7d414277e618c8f41370c8049ca02f3eddb2621b592199a432d778d68a49ed9bce7a7dac5a3ed15d9dc1fb132537886b10c0af4ab0749db1fac2ef2f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_gact={0xd8, 0xd, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0xc2b, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x7, 0x7, 0x2, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0xa3, 0x4, 0x8, 0x4, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x6f1, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x13ec, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x209, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x7, 0x1, 0x0, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x1, 0x5, 0x7, 0x7ff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x1c9, 0xfffffffffffffff3, 0x3, 0xd}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x6}}}}]}, {0x608, 0x1, [@m_tunnel_key={0x90, 0x1f, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xe}]}, {0x55, 0x6, "29d1076b0f09e0d26d85fc531a9a38b813ac86654cf5c08164c3abb757c77744da55bf81fe988999c0443a481aacc73027dc967e2c07e25d45953d3b275bc1840a05a73dbb4c36e84d8f70e85570bc35c2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0xd4, 0x20, 0x0, 0x0, {{0xf}, {0x5c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x86f4}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7, 0x4, 0xffffffffffffffff, 0x40, 0x800}, 0x2}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x4c, 0x6, "aad15f7deea9f7e77e9f75ecf407e2e501a45e7f177aa23169c6d83838811e8e6f3f554e961b31bab48200f134e3761f43f8642fd803a231e17f5163718488b8f29c90e763cbf8b8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0x19c, 0x0, 0x0, 0x0, {{0x7}, {0xf8, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x100}, @TCA_IPT_TARG={0x6b, 0x6, {0xb, 'nat\x00', 0x0, 0x5, "c2f3ffcbef0afb004c06a108a7c65a5a679b62d8e942f6e034487f7e554cb5208468948f08fec39a488f925e5a7b06c1f0b085c46a411c7164e4a60fad57056e8e"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0x53, 0x6, {0x10, 'raw\x00', 0x0, 0x3, "9b353e23b5582e6691fc3453071623dae852fd6b25ac63552c57157c9b025e22a5786651a07a4f83db"}}]}, {0x7d, 0x6, "589718d7dee2c0de6e86398a4500608f3ccf74efcdb17c6911c018a565f6a13c0012635762477bda352d6afbed81d01f368e49279f8ffad4da3147ab96495a0c8bd2ab6e09e914290a2683dc500ac9d302dc838881d5f2ebafb8fe92f6d050f9ab282832b31b80bc6cefe1211da4c881d48818a468480c76f5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0xb4, 0x6, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x6, 0x1, 0xfffc0000, 0xd3df9aa}}]}, {0x6d, 0x6, "f9b79915eeb0f2a8c47f4c04a9497c4721b0784bac337ccfcd877de9ac925a22600c25ceff66afe33aa8f4173de2282b7d510da882f5842a74f0279902fec7cf94c03c1a5e7f15f8af9176206774af75062baa7ad80a42bb24d53bf4d248cbba2027f2995aab3d9022"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0x148, 0x13, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x6, 0x10000000, 0x1}, 0x1}}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9100}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_BOS={0x5}]}, {0xd8, 0x6, "262f531101b05188dceabb5f814d29c7d193d7d1fcb441c284cd9121c5793ef1b59e67ce167e852a1924561958fce3f2d68282c09b23e8d961e27d6273257ae5ef26015fd24c9f2366888eb3351d9010e5b329e002a93e9c3ff078dd5118ad311db78c4c9efcafd794a59e7a01289b81a22e5855a80e976f89fbf492937bc3271c88704364666620d9b8f204aada8b7661ca02a62c35f639c92922981659620bd4048ee40ac111fed537df5b79f3d9a0a74f834757886914863aed7465e958ec32eaada003582e6a082f822386beeb9030719415"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0x9c, 0x19, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x28, 0x6, "85254b0cc9935d996a6226763fa4e3dea6c0164e823f47e8e5d5935c7f99d831952b758d"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x6c, 0x10, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}]}, {0x30, 0x6, "fbf7273eb5ffa221b436a8d3551da1a75c7d435ceb1e45ce6111939f13ad55292783314746c4602282955c4e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0xf88, 0x1, [@m_pedit={0xf84, 0x17, 0x0, 0x0, {{0xa}, {0xe84, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x0, 0x3, 0x10000000, 0x3, 0x96ae}, 0x9, 0x4, [{0x8, 0x3, 0x2, 0xb, 0x200, 0x93}, {0x1, 0x2, 0x3, 0x94a5, 0x7, 0x2}, {0x950c, 0x1, 0x8328, 0x2, 0x7fffffff, 0x10}, {0xe3, 0x9, 0x2, 0x9e0d, 0x8, 0xc}]}, [{0x1, 0x0, 0x2, 0x1, 0x0, 0x7}, {0x5, 0x3, 0x2, 0x7, 0x4000008, 0x3}, {0x9, 0x0, 0x1, 0x9, 0x3, 0x5}, {0x1, 0x0, 0xfffffffa, 0x8, 0x55757d3a, 0xd}, {0x3, 0xebc1, 0xffffffff, 0x800, 0x0, 0x8}, {0x88b, 0xb, 0x7, 0x7f, 0x8, 0x81}, {0x976, 0x8, 0xc, 0xfffffff8, 0x200, 0x9}, {0x8, 0xcb, 0x2, 0x7, 0x5, 0x3ff}, {0xfa85, 0x0, 0x783, 0x4, 0x0, 0x6}, {0x5, 0x4, 0xb, 0x9, 0x9, 0x2}, {0xd, 0x2d7b, 0x40, 0x401, 0x10, 0xffffffff}, {0xfffffb7a, 0x800, 0x5, 0x550bdde0, 0x10001, 0xfffffe00}, {0x9, 0x1, 0x40, 0x148, 0xbc3c, 0x7f}, {0xffffff0c, 0x1, 0x1, 0x8, 0x5, 0x4}, {0x4, 0x6, 0x9, 0x8384, 0xfffff90d, 0x8}, {0x6, 0x8, 0xfff, 0xc, 0x6, 0x5}, {0x0, 0x645b, 0xa4b, 0x1, 0x10001}, {0x9, 0x41, 0x6, 0x9, 0x4ead, 0x2}, {0xab, 0x1, 0x0, 0xfff, 0x4, 0x1}, {0x8, 0x5, 0x8, 0x0, 0xe, 0x8001}, {0xb, 0x5, 0x73, 0x8001, 0x5, 0x8801}, {0x1, 0x2, 0x5, 0xc, 0xffff1f8a, 0x2}, {0x60d9ddd2, 0x7, 0x80000000, 0x5, 0x32, 0x2}, {0x8, 0x4d, 0xffffffb9, 0x200, 0x4, 0x2}, {0x7ff, 0x1a, 0x3, 0x2a, 0x7, 0x10000}, {0x0, 0x0, 0x200, 0x6cb, 0x6, 0x6}, {0x85fc, 0x9, 0x7, 0x6, 0x401, 0x6}, {0xa1, 0x101, 0x2, 0x2, 0x4, 0x54d4}, {0x11d, 0x8000000, 0x3, 0xff, 0xc, 0xf2}, {0xffffffff, 0x3, 0xf2, 0x8, 0x0, 0x8}, {0x8000, 0x8eb5, 0x3, 0x4, 0x8001, 0xec0}, {0x3, 0x9, 0x5a47ae3f, 0x37, 0x5, 0x9}, {0x4, 0x3, 0x10000, 0x3, 0xee66, 0x8}, {0x5, 0x1, 0x5, 0x20000010, 0x2, 0x7ff}, {0x2, 0x81, 0x6, 0xd4, 0xf9c0, 0xcc85}, {0x9, 0x3, 0x30000000, 0x101, 0xb5, 0x1}, {0x1f, 0x6, 0x4, 0x7, 0x8, 0x9}, {0x10001, 0x7, 0xffffff8a, 0x6, 0xfee6, 0x40}, {0x6, 0x240000, 0xffffffff, 0x660a, 0x7, 0x4}, {0x0, 0x10, 0x1000000, 0x2, 0x4, 0x5}, {0x8, 0x7ff, 0x9, 0x1, 0x4, 0x7}, {0x7, 0x80000000, 0xa, 0xf, 0x49, 0xfffffff8}, {0xfffffff9, 0x3, 0x10000, 0x0, 0xa4, 0xff}, {0xfffff9f0, 0xfffffffe, 0x8001, 0x7, 0x9, 0x1}, {0x3, 0xd, 0x5, 0x5, 0x6, 0x6}, {0x2, 0x6, 0x3, 0x1, 0x5, 0x1}, {0xa0000000, 0x6, 0xfffff000, 0x2, 0x7, 0xcf4}, {0x400, 0x9, 0x6, 0x8, 0xc8000000, 0x6bf}, {0x0, 0x7fffffff, 0x6, 0xfffbffff, 0x0, 0x252}, {0xe1, 0x5, 0x4, 0x9, 0x2, 0x5}, {0x6, 0xfffffffc, 0xb0e, 0x5, 0x1}, {0x6, 0x1000, 0xa, 0x81, 0x5, 0x3}, {0x400, 0x4, 0xbdf, 0x5, 0x7f, 0x10001}, {0x7, 0x7, 0x7, 0x0, 0x57, 0xfff}, {0xff, 0x0, 0x10000, 0x1, 0x1, 0x2}, {0xe655, 0x5, 0x100, 0x1, 0x1, 0xfffffff9}, {0x9, 0x0, 0x101, 0x5d, 0x2, 0x5}, {0x101, 0x400, 0x102, 0x3, 0x4, 0x7}, {0x7fff, 0x1, 0x1, 0x0, 0x3}, {0x7, 0xfffffff7, 0xf, 0x9, 0x65, 0x5}, {0xc, 0xfffffffa, 0xa14, 0x6, 0x400, 0x4}, {0x5, 0x0, 0x800, 0x1b07, 0x6, 0x1}, {0x59ab, 0x1, 0x8, 0x8, 0x5, 0x3}, {0x101, 0xa, 0x91, 0x9, 0x7ff, 0x4}, {0x5, 0x2, 0xffa, 0xb, 0x4c492f02, 0x6}, {0xffff, 0x6, 0x9, 0x9, 0x8, 0xf70}, {0x3, 0x1463, 0xfffffffa, 0x4, 0xfffffffd, 0xea}, {0x8, 0x2, 0x100009, 0x7ff, 0x1, 0x6a6c0000}, {0x2, 0x1, 0x6, 0x3, 0x16c2, 0x5d4}, {0x10000, 0x3, 0x3, 0x6, 0x8, 0x5}, {0x4, 0x0, 0xffff, 0x388, 0x5a3}, {0xb43, 0x5, 0xe0e, 0x7, 0x4f71}, {0x8000, 0x9, 0x5, 0x7ff, 0x3, 0x3}, {0x4, 0x6, 0x7, 0x6, 0x9, 0xffffffff}, {0x9, 0x1, 0x622f, 0x2, 0x2, 0x4}, {0x3, 0x4, 0x28000000, 0xfffffff3, 0xffffffff}, {0x6, 0x3, 0xf, 0x8, 0xa2, 0xfffffffd}, {0x1, 0x2cd, 0x7, 0x0, 0x4, 0x2}, {0x1000, 0x9, 0xec, 0x9, 0x3, 0xfffffff7}, {0x2, 0x8, 0x8, 0x9, 0x81, 0xfff}, {0x6, 0xd, 0x0, 0x6, 0x10, 0x4535}, {0x6, 0xffffff3c, 0x0, 0x3, 0x9, 0x9}, {0x2, 0x7, 0x1, 0x4, 0x6, 0x4}, {0xf, 0x44, 0x6, 0x7ff, 0xb55, 0x82a8}, {0x3ff, 0x788, 0x100, 0x22, 0x101, 0x8}, {0xfffffff9, 0x0, 0x5, 0xffffff0d, 0xa, 0x8000}, {0x401, 0xfffffff7, 0x2, 0x9, 0xffffff80, 0x2058}, {0x5, 0x7, 0x9, 0x1, 0x6, 0x1}, {0x5, 0x18d, 0x34, 0x4, 0x81, 0x40}, {0xfd, 0x3, 0x2, 0xfffffffd, 0x800, 0xffff}, {0x4a, 0x10001, 0x1, 0x10, 0x5, 0xd2}, {0xc7, 0x0, 0x6, 0x20000f, 0x7, 0xd03}, {0x4, 0x1, 0xa0be, 0x80000001, 0x0, 0x2}, {0x5, 0x3, 0x8, 0x4, 0x863b, 0xe}, {0x7f, 0x8, 0x9, 0x5, 0x1, 0x9b}, {0x3, 0x7, 0x101, 0x8, 0xee56, 0x800}, {0x6, 0x555a, 0x3a, 0x5, 0x856, 0x7fffffff}, {0x3, 0xe4f, 0x792, 0xc2, 0x3660, 0x8}, {0x7, 0x37, 0x6, 0x8, 0x0, 0x3ff}, {0x5, 0x3ff, 0x9, 0x9, 0x40000, 0x3}, {0x9, 0xd, 0x3, 0x4943, 0x7}, {0x8a3, 0x7a, 0x0, 0x68, 0x3, 0x3ff}, {0xe, 0x3, 0x9, 0x7e480816, 0x6, 0xf}, {0xfffffff8, 0x57, 0x2, 0x6, 0x9, 0x3}, {0xfffffffc, 0x5, 0x5, 0xf, 0x7fff, 0x8}, {0x7, 0x6, 0x101, 0x400, 0xd, 0xa}, {0x3, 0x3, 0x2, 0x7, 0x0, 0x9}, {0x9, 0x7, 0x3, 0x5, 0x7f, 0x7c}, {0x5, 0x40, 0x67, 0x99ad, 0x1, 0x40}, {0xef9, 0x1, 0x9, 0x2, 0x10, 0x6}, {0x122b, 0xd6f, 0x40000, 0x6, 0x401, 0x4a}, {0xffffff01, 0x7, 0x6, 0x9, 0x6, 0x3}, {0x5, 0x7, 0xfffffff9, 0x7, 0xed6, 0x3}, {0x6, 0x94, 0x5, 0xb, 0x1, 0xc56}, {0x6, 0x0, 0x9, 0x9, 0x0, 0x7fffffff}, {0x3, 0xf16, 0x1, 0x4, 0x4, 0x6}, {0x5, 0xffffff56, 0xa0, 0xb, 0x101, 0x4}, {0xfffffffd, 0x15, 0x34000000, 0x4, 0x6, 0x8}, {0x1, 0xfffffffe, 0x4, 0x1c, 0x1, 0x2}, {0x401, 0x1, 0x2, 0x7, 0x0, 0x2}, {0x9, 0x9, 0x7fffffff, 0x2, 0x5, 0x4}, {0x4, 0x8, 0x8, 0x75, 0xc, 0x2c3}, {0x3, 0x9, 0xffffffff, 0x6, 0x7, 0x400}, {0x66, 0xd, 0x1, 0x5, 0x9, 0x3}, {0x40, 0xb, 0xd79e, 0x8, 0x0, 0x1070}, {0xfff, 0xdb, 0xbaa, 0x8, 0x3ff, 0x7}, {0x7, 0x9c, 0x1ff, 0x1, 0xfffffe00, 0x400}, {0x7, 0x3, 0x0, 0x100, 0x7, 0xff}], [{0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x3}, {0x4}, {0x5}, {0x2}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x3}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {}, {}, {0x2}, {0x3}, {0x3}, {0x2}, {0x0, 0x1}, {0x5}, {0x3}, {0x5}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x2}, {0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x1}, {0x4}, {0x4}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {}, {0x5}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}]}}]}, {0xd6, 0x6, "c047df94f0309735546eacb41fc978c3f5582e286db0b0bea55ef0957292f14ed416052a7c658d363cd8c296906024845aae3e396d30028fe6783500ca90d946c8489e8b8f0fcfe7b0e2c45314c84590a3340f3d461b066d472490bad5697cc3861110bd3b65ded4e7e23d088fd79e0d5639312b2bed0b3b3e20a3f882cf0cc7872486e9496e1498555e59e05857ac2bb908d52fcdd4a8d449f0e4cb89fa02645fa5307299dafcafdb27ee73ad04d0596a19532bc570937f40288eed63d1211c283c5f8f9299c3057b80100bb0f5df5b859e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x1794}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000001ac0), 0x6) ioctl$sock_bt_hci(r2, 0x800448d7, &(0x7f0000000000)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) chown(0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{}k%@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) readv(r3, &(0x7f0000000200)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, &(0x7f0000002680)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000060a0b0400000000b2000000020000000900020073797a7f000000001400000011000100"/70], 0x48}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000480)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/277, &(0x7f0000000340)='/\x00\x01\x00H\x98', 0x0) tkill(r4, 0xb) 1.592251033s ago: executing program 2 (id=253): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="680000002000010000000000000000000a801400000000070000000014000200fc02c9ecde2a00000000000000000001080006000700000014000200fc000000000000000000000000000000050016003200000014000100200100"/100], 0x68}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x1000000, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 1.512443423s ago: executing program 2 (id=254): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x8000, 0x1, 0x5, 0x3, {{0x2e, 0x4, 0x1, 0x8, 0xb8, 0x65, 0x0, 0x6, 0x29, 0x0, @empty, @empty, {[@lsrr={0x83, 0x1b, 0x9, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @generic={0x7, 0x10, "46866b0fb9e8957251f5e9d42c0e"}, @timestamp={0x44, 0x10, 0xf1, 0x0, 0x7, [0x4, 0x3, 0x7e]}, @lsrr={0x83, 0x23, 0xca, [@dev={0xac, 0x14, 0x14, 0x1f}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @remote, @empty, @rand_addr=0x64010102, @broadcast, @multicast1]}, @timestamp_prespec={0x44, 0x14, 0x24, 0x3, 0x9, [{@multicast1, 0x1}, {@multicast1, 0x937f}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0x54, 0x0, 0xd, [0xffff, 0x4, 0xbcce]}, @noop, @timestamp_prespec={0x44, 0x1c, 0xe3, 0x3, 0x2, [{@rand_addr=0x64010100, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/171, 0x41000, 0x3, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffda5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, &(0x7f0000000180)) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$dsp(0xffffffffffffff9c, 0x0, 0x2c2fc2, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0x80000300, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) 1.312291082s ago: executing program 1 (id=255): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = syz_io_uring_setup(0x7934, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f00000000c0), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa91, &(0x7f0000000100), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x6e6a9ace1e35a607}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x10000, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYRES64=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r9, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$ARPT_SO_GET_INFO(r8, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x0, [0x2, 0x6, 0x9]}, &(0x7f0000000280)=0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchmod(r10, 0x63) io_uring_enter(r1, 0xec4, 0x0, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000002c0)='%', 0x1, 0x4000001, 0x0, 0x0) 1.241273479s ago: executing program 2 (id=256): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=@delchain={0x3c, 0x64, 0xf31, 0x1001100, 0x0, {0x0, 0x0, 0x0, r3, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}}, 0x1000000) 1.240875997s ago: executing program 1 (id=257): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000808000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) mount$fuse(0x20000000, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x2270a92, 0x0) chdir(&(0x7f0000000100)='./file0\x00') syz_open_dev$loop(0x0, 0x2, 0x40000) syz_usb_connect$hid(0xf63067478e218e8, 0x36, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="05000000993ace95ab00200000fcff6c0d010000000000d8f4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x6a) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000540)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = syz_io_uring_setup(0x4f1f, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xc4424b61c9f5fc7}}) io_uring_enter(r2, 0x2a3d, 0xfffffffc, 0x40, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair(0x1, 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='attr\x00') ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r5) r7 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$FBIOPUT_CON2FBMAP(r7, 0x4610, &(0x7f0000000140)={0x19}) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') move_pages(0x0, 0xe7f, &(0x7f0000000540)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil], &(0x7f0000000580), &(0x7f0000000000), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000003c0)={0x0, 0xc}, 0x8) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r8, 0x40103d0b, &(0x7f0000000300)={0x100, 0x1}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r8, 0xc0405405, &(0x7f0000000080)={{0x0, 0x1, 0xfffffffd, 0x3, 0xa3d}, 0x6, 0x1, 0xf65}) 1.132252483s ago: executing program 2 (id=258): r0 = socket$kcm(0x2, 0x3, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000880)="c1090a000300000000011d1e", 0xc}], 0x1}, 0x4040) 1.12553647s ago: executing program 2 (id=259): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x2, 0x2, 0xf, 0x7}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/timers\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x23d) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000200)={0x0, 0x1, 0x2}) 1.061873329s ago: executing program 3 (id=260): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x2, 0x2, 0xf, 0x7}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/timers\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x23d) r6 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x4, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000200)={0x0, 0x1, 0x2}) 441.577677ms ago: executing program 0 (id=262): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x5]}) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004841}, 0x4810) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0xffff3092, 0x0, 0x54}, 0x9c) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 441.363775ms ago: executing program 1 (id=263): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast}, 0xc000000, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x3}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon]}, 0x5c}}, 0x20000880) 441.177751ms ago: executing program 1 (id=264): mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x38, 0x30, 0x2d, 0x39]}}}}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYBLOB="010027bd7000000000001400000018000180140002006e657464657673696d3000000000000005000c000300000008001600ffffffff080003000d00000008000f00050000000800040019dc0000050019"], 0x5c}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x18, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0xa, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) set_mempolicy(0x4005, 0x0, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$inet_int(r2, 0x0, 0x4, 0x0, 0x0) writev(r2, 0x0, 0x0) getpriority(0x2, 0x0) socket$inet(0x2, 0x3, 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0xe) 336.753095ms ago: executing program 0 (id=265): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f4079e0904001f0000000001000000000000", 0x1c) 271.852277ms ago: executing program 0 (id=266): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x60008094, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r4 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f00000001c0)=0x2000004) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x4011) (async) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000100000408000000000000000200000020000000000000"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x2) (async) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x11) r8 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffe2f, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="080028b570045b05df2504000000a09a8c583e5845de1bf9cc36219926a649aa10793e57d69dfd1cc2b6b29dfc95e5d5f4a21a02bba5f88fd9d83a71371efe04510fbee193dee6b70a1272f89902504c601f8225824b6f18666909fbb723c364dc5dbe86f1a47e32f605b4db2f1305e31a1f15b9915308842c00001760a11df9902091cb1a121008a41c4e47f447356bbeef081018ed9ed2a4e9e2d0ca205f2391d2d9c69555d4a86690a5878da9989afdacf859e12c3503bd"], 0x14}, 0x1, 0x0, 0x0, 0x20010}, 0x0) 271.653511ms ago: executing program 0 (id=267): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x7, &(0x7f0000000c80)=0x0) io_submit(r1, 0x8, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0300ffff00f4", 0x6}]) 201.658965ms ago: executing program 2 (id=268): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=@newtaction={0x1794, 0x30, 0x1, 0x0, 0x0, {}, [{0x1f0, 0x1, [@m_vlan={0x114, 0x4, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x7, 0x20000000, 0x400, 0x7}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcee}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x905}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x5f3}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x92, 0x6, "da14baab773108f2d8aeb1ce64894f7f439e6c804aae94837faf6679e7f15554eecdec91a7d40cbfee79b7a432c61eb024509b538ffea73de283913daf8f9006996f8495998ad3dce271befd4d05a8ce6f2d7d414277e618c8f41370c8049ca02f3eddb2621b592199a432d778d68a49ed9bce7a7dac5a3ed15d9dc1fb132537886b10c0af4ab0749db1fac2ef2f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_gact={0xd8, 0xd, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0xc2b, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x7, 0x7, 0x2, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0xa3, 0x4, 0x8, 0x4, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x6f1, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x13ec, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x209, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x7, 0x1, 0x0, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x1, 0x5, 0x7, 0x7ff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x1c9, 0xfffffffffffffff3, 0x3, 0xd}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x6}}}}]}, {0x608, 0x1, [@m_tunnel_key={0x90, 0x1f, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xe}]}, {0x55, 0x6, "29d1076b0f09e0d26d85fc531a9a38b813ac86654cf5c08164c3abb757c77744da55bf81fe988999c0443a481aacc73027dc967e2c07e25d45953d3b275bc1840a05a73dbb4c36e84d8f70e85570bc35c2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0xd4, 0x20, 0x0, 0x0, {{0xf}, {0x5c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x86f4}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7, 0x4, 0xffffffffffffffff, 0x40, 0x800}, 0x2}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x4c, 0x6, "aad15f7deea9f7e77e9f75ecf407e2e501a45e7f177aa23169c6d83838811e8e6f3f554e961b31bab48200f134e3761f43f8642fd803a231e17f5163718488b8f29c90e763cbf8b8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0x19c, 0x0, 0x0, 0x0, {{0x7}, {0xf8, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x100}, @TCA_IPT_TARG={0x6b, 0x6, {0xb, 'nat\x00', 0x0, 0x5, "c2f3ffcbef0afb004c06a108a7c65a5a679b62d8e942f6e034487f7e554cb5208468948f08fec39a488f925e5a7b06c1f0b085c46a411c7164e4a60fad57056e8e"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0x53, 0x6, {0x10, 'raw\x00', 0x0, 0x3, "9b353e23b5582e6691fc3453071623dae852fd6b25ac63552c57157c9b025e22a5786651a07a4f83db"}}]}, {0x7d, 0x6, "589718d7dee2c0de6e86398a4500608f3ccf74efcdb17c6911c018a565f6a13c0012635762477bda352d6afbed81d01f368e49279f8ffad4da3147ab96495a0c8bd2ab6e09e914290a2683dc500ac9d302dc838881d5f2ebafb8fe92f6d050f9ab282832b31b80bc6cefe1211da4c881d48818a468480c76f5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0xb4, 0x6, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x6, 0x1, 0xfffc0000, 0xd3df9aa}}]}, {0x6d, 0x6, "f9b79915eeb0f2a8c47f4c04a9497c4721b0784bac337ccfcd877de9ac925a22600c25ceff66afe33aa8f4173de2282b7d510da882f5842a74f0279902fec7cf94c03c1a5e7f15f8af9176206774af75062baa7ad80a42bb24d53bf4d248cbba2027f2995aab3d9022"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0x148, 0x13, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x6, 0x10000000, 0x1}, 0x1}}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9100}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_BOS={0x5}]}, {0xd8, 0x6, "262f531101b05188dceabb5f814d29c7d193d7d1fcb441c284cd9121c5793ef1b59e67ce167e852a1924561958fce3f2d68282c09b23e8d961e27d6273257ae5ef26015fd24c9f2366888eb3351d9010e5b329e002a93e9c3ff078dd5118ad311db78c4c9efcafd794a59e7a01289b81a22e5855a80e976f89fbf492937bc3271c88704364666620d9b8f204aada8b7661ca02a62c35f639c92922981659620bd4048ee40ac111fed537df5b79f3d9a0a74f834757886914863aed7465e958ec32eaada003582e6a082f822386beeb9030719415"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0x9c, 0x19, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x28, 0x6, "85254b0cc9935d996a6226763fa4e3dea6c0164e823f47e8e5d5935c7f99d831952b758d"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x6c, 0x10, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}]}, {0x30, 0x6, "fbf7273eb5ffa221b436a8d3551da1a75c7d435ceb1e45ce6111939f13ad55292783314746c4602282955c4e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0xf88, 0x1, [@m_pedit={0xf84, 0x17, 0x0, 0x0, {{0xa}, {0xe84, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x0, 0x3, 0x10000000, 0x3, 0x96ae}, 0x9, 0x4, [{0x8, 0x3, 0x2, 0xb, 0x200, 0x93}, {0x1, 0x2, 0x3, 0x94a5, 0x7, 0x2}, {0x950c, 0x1, 0x8328, 0x2, 0x7fffffff, 0x10}, {0xe3, 0x9, 0x2, 0x9e0d, 0x8, 0xc}]}, [{0x1, 0x0, 0x2, 0x1, 0x0, 0x7}, {0x5, 0x3, 0x2, 0x7, 0x4000008, 0x3}, {0x9, 0x0, 0x1, 0x9, 0x3, 0x5}, {0x1, 0x0, 0xfffffffa, 0x8, 0x55757d3a, 0xd}, {0x3, 0xebc1, 0xffffffff, 0x800, 0x0, 0x8}, {0x88b, 0xb, 0x7, 0x7f, 0x8, 0x81}, {0x976, 0x8, 0xc, 0xfffffff8, 0x200, 0x9}, {0x8, 0xcb, 0x2, 0x7, 0x5, 0x3ff}, {0xfa85, 0x0, 0x783, 0x4, 0x0, 0x6}, {0x5, 0x4, 0xb, 0x9, 0x9, 0x2}, {0xd, 0x2d7b, 0x40, 0x401, 0x10, 0xffffffff}, {0xfffffb7a, 0x800, 0x5, 0x550bdde0, 0x10001, 0xfffffe00}, {0x9, 0x1, 0x40, 0x148, 0xbc3c, 0x7f}, {0xffffff0c, 0x1, 0x1, 0x8, 0x5, 0x4}, {0x4, 0x6, 0x9, 0x8384, 0xfffff90d, 0x8}, {0x6, 0x8, 0xfff, 0xc, 0x6, 0x5}, {0x0, 0x645b, 0xa4b, 0x1, 0x10001}, {0x9, 0x41, 0x6, 0x9, 0x4ead, 0x2}, {0xab, 0x1, 0x0, 0xfff, 0x4, 0x1}, {0x8, 0x5, 0x8, 0x0, 0xe, 0x8001}, {0xb, 0x5, 0x73, 0x8001, 0x5, 0x8801}, {0x1, 0x2, 0x5, 0xc, 0xffff1f8a, 0x2}, {0x60d9ddd2, 0x7, 0x80000000, 0x5, 0x32, 0x2}, {0x8, 0x4d, 0xffffffb9, 0x200, 0x4, 0x2}, {0x7ff, 0x1a, 0x3, 0x2a, 0x7, 0x10000}, {0x0, 0x0, 0x200, 0x6cb, 0x6, 0x6}, {0x85fc, 0x9, 0x7, 0x6, 0x401, 0x6}, {0xa1, 0x101, 0x2, 0x2, 0x4, 0x54d4}, {0x11d, 0x8000000, 0x3, 0xff, 0xc, 0xf2}, {0xffffffff, 0x3, 0xf2, 0x8, 0x0, 0x8}, {0x8000, 0x8eb5, 0x3, 0x4, 0x8001, 0xec0}, {0x3, 0x9, 0x5a47ae3f, 0x37, 0x5, 0x9}, {0x4, 0x3, 0x10000, 0x3, 0xee66, 0x8}, {0x5, 0x1, 0x5, 0x20000010, 0x2, 0x7ff}, {0x2, 0x81, 0x6, 0xd4, 0xf9c0, 0xcc85}, {0x9, 0x3, 0x30000000, 0x101, 0xb5, 0x1}, {0x1f, 0x6, 0x4, 0x7, 0x8, 0x9}, {0x10001, 0x7, 0xffffff8a, 0x6, 0xfee6, 0x40}, {0x6, 0x240000, 0xffffffff, 0x660a, 0x7, 0x4}, {0x0, 0x10, 0x1000000, 0x2, 0x4, 0x5}, {0x8, 0x7ff, 0x9, 0x1, 0x4, 0x7}, {0x7, 0x80000000, 0xa, 0xf, 0x49, 0xfffffff8}, {0xfffffff9, 0x3, 0x10000, 0x0, 0xa4, 0xff}, {0xfffff9f0, 0xfffffffe, 0x8001, 0x7, 0x9, 0x1}, {0x3, 0xd, 0x5, 0x5, 0x6, 0x6}, {0x2, 0x6, 0x3, 0x1, 0x5, 0x1}, {0xa0000000, 0x6, 0xfffff000, 0x2, 0x7, 0xcf4}, {0x400, 0x9, 0x6, 0x8, 0xc8000000, 0x6bf}, {0x0, 0x7fffffff, 0x6, 0xfffbffff, 0x0, 0x252}, {0xe1, 0x5, 0x4, 0x9, 0x2, 0x5}, {0x6, 0xfffffffc, 0xb0e, 0x5, 0x1}, {0x6, 0x1000, 0xa, 0x81, 0x5, 0x3}, {0x400, 0x4, 0xbdf, 0x5, 0x7f, 0x10001}, {0x7, 0x7, 0x7, 0x0, 0x57, 0xfff}, {0xff, 0x0, 0x10000, 0x1, 0x1, 0x2}, {0xe655, 0x5, 0x100, 0x1, 0x1, 0xfffffff9}, {0x9, 0x0, 0x101, 0x5d, 0x2, 0x5}, {0x101, 0x400, 0x102, 0x3, 0x4, 0x7}, {0x7fff, 0x1, 0x1, 0x0, 0x3}, {0x7, 0xfffffff7, 0xf, 0x9, 0x65, 0x5}, {0xc, 0xfffffffa, 0xa14, 0x6, 0x400, 0x4}, {0x5, 0x0, 0x800, 0x1b07, 0x6, 0x1}, {0x59ab, 0x1, 0x8, 0x8, 0x5, 0x3}, {0x101, 0xa, 0x91, 0x9, 0x7ff, 0x4}, {0x5, 0x2, 0xffa, 0xb, 0x4c492f02, 0x6}, {0xffff, 0x6, 0x9, 0x9, 0x8, 0xf70}, {0x3, 0x1463, 0xfffffffa, 0x4, 0xfffffffd, 0xea}, {0x8, 0x2, 0x100009, 0x7ff, 0x1, 0x6a6c0000}, {0x2, 0x1, 0x6, 0x3, 0x16c2, 0x5d4}, {0x10000, 0x3, 0x3, 0x6, 0x8, 0x5}, {0x4, 0x0, 0xffff, 0x388, 0x5a3}, {0xb43, 0x5, 0xe0e, 0x7, 0x4f71}, {0x8000, 0x9, 0x5, 0x7ff, 0x3, 0x3}, {0x4, 0x6, 0x7, 0x6, 0x9, 0xffffffff}, {0x9, 0x1, 0x622f, 0x2, 0x2, 0x4}, {0x3, 0x4, 0x28000000, 0xfffffff3, 0xffffffff}, {0x6, 0x3, 0xf, 0x8, 0xa2, 0xfffffffd}, {0x1, 0x2cd, 0x7, 0x0, 0x4, 0x2}, {0x1000, 0x9, 0xec, 0x9, 0x3, 0xfffffff7}, {0x2, 0x8, 0x8, 0x9, 0x81, 0xfff}, {0x6, 0xd, 0x0, 0x6, 0x10, 0x4535}, {0x6, 0xffffff3c, 0x0, 0x3, 0x9, 0x9}, {0x2, 0x7, 0x1, 0x4, 0x6, 0x4}, {0xf, 0x44, 0x6, 0x7ff, 0xb55, 0x82a8}, {0x3ff, 0x788, 0x100, 0x22, 0x101, 0x8}, {0xfffffff9, 0x0, 0x5, 0xffffff0d, 0xa, 0x8000}, {0x401, 0xfffffff7, 0x2, 0x9, 0xffffff80, 0x2058}, {0x5, 0x7, 0x9, 0x1, 0x6, 0x1}, {0x5, 0x18d, 0x34, 0x4, 0x81, 0x40}, {0xfd, 0x3, 0x2, 0xfffffffd, 0x800, 0xffff}, {0x4a, 0x10001, 0x1, 0x10, 0x5, 0xd2}, {0xc7, 0x0, 0x6, 0x20000f, 0x7, 0xd03}, {0x4, 0x1, 0xa0be, 0x80000001, 0x0, 0x2}, {0x5, 0x3, 0x8, 0x4, 0x863b, 0xe}, {0x7f, 0x8, 0x9, 0x5, 0x1, 0x9b}, {0x3, 0x7, 0x101, 0x8, 0xee56, 0x800}, {0x6, 0x555a, 0x3a, 0x5, 0x856, 0x7fffffff}, {0x3, 0xe4f, 0x792, 0xc2, 0x3660, 0x8}, {0x7, 0x37, 0x6, 0x8, 0x0, 0x3ff}, {0x5, 0x3ff, 0x9, 0x9, 0x40000, 0x3}, {0x9, 0xd, 0x3, 0x4943, 0x7}, {0x8a3, 0x7a, 0x0, 0x68, 0x3, 0x3ff}, {0xe, 0x3, 0x9, 0x7e480816, 0x6, 0xf}, {0xfffffff8, 0x57, 0x2, 0x6, 0x9, 0x3}, {0xfffffffc, 0x5, 0x5, 0xf, 0x7fff, 0x8}, {0x7, 0x6, 0x101, 0x400, 0xd, 0xa}, {0x3, 0x3, 0x2, 0x7, 0x0, 0x9}, {0x9, 0x7, 0x3, 0x5, 0x7f, 0x7c}, {0x5, 0x40, 0x67, 0x99ad, 0x1, 0x40}, {0xef9, 0x1, 0x9, 0x2, 0x10, 0x6}, {0x122b, 0xd6f, 0x40000, 0x6, 0x401, 0x4a}, {0xffffff01, 0x7, 0x6, 0x9, 0x6, 0x3}, {0x5, 0x7, 0xfffffff9, 0x7, 0xed6, 0x3}, {0x6, 0x94, 0x5, 0xb, 0x1, 0xc56}, {0x6, 0x0, 0x9, 0x9, 0x0, 0x7fffffff}, {0x3, 0xf16, 0x1, 0x4, 0x4, 0x6}, {0x5, 0xffffff56, 0xa0, 0xb, 0x101, 0x4}, {0xfffffffd, 0x15, 0x34000000, 0x4, 0x6, 0x8}, {0x1, 0xfffffffe, 0x4, 0x1c, 0x1, 0x2}, {0x401, 0x1, 0x2, 0x7, 0x0, 0x2}, {0x9, 0x9, 0x7fffffff, 0x2, 0x5, 0x4}, {0x4, 0x8, 0x8, 0x75, 0xc, 0x2c3}, {0x3, 0x9, 0xffffffff, 0x6, 0x7, 0x400}, {0x66, 0xd, 0x1, 0x5, 0x9, 0x3}, {0x40, 0xb, 0xd79e, 0x8, 0x0, 0x1070}, {0xfff, 0xdb, 0xbaa, 0x8, 0x3ff, 0x7}, {0x7, 0x9c, 0x1ff, 0x1, 0xfffffe00, 0x400}, {0x7, 0x3, 0x0, 0x100, 0x7, 0xff}], [{0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x3}, {0x4}, {0x5}, {0x2}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x3}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {}, {}, {0x2}, {0x3}, {0x3}, {0x2}, {0x0, 0x1}, {0x5}, {0x3}, {0x5}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x2}, {0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x1}, {0x4}, {0x4}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {}, {0x5}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}]}}]}, {0xd6, 0x6, "c047df94f0309735546eacb41fc978c3f5582e286db0b0bea55ef0957292f14ed416052a7c658d363cd8c296906024845aae3e396d30028fe6783500ca90d946c8489e8b8f0fcfe7b0e2c45314c84590a3340f3d461b066d472490bad5697cc3861110bd3b65ded4e7e23d088fd79e0d5639312b2bed0b3b3e20a3f882cf0cc7872486e9496e1498555e59e05857ac2bb908d52fcdd4a8d449f0e4cb89fa02645fa5307299dafcafdb27ee73ad04d0596a19532bc570937f40288eed63d1211c283c5f8f9299c3057b80100bb0f5df5b859e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x1794}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000001ac0), 0x6) ioctl$sock_bt_hci(r2, 0x800448d7, &(0x7f0000000000)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) chown(0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{}k%@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) readv(r3, &(0x7f0000000200)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, &(0x7f0000002680)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000060a0b0400000000b2000000020000000900020073797a7f000000001400000011000100"/70], 0x48}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000480)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/277, &(0x7f0000000340)='/\x00\x01\x00H\x98', 0x0) tkill(r4, 0xb) 201.07048ms ago: executing program 3 (id=269): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r1, 0x0, 0x40000000}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="fa8c067a3d53fa661fee557f34a03622acab"]) r4 = semget(0x3, 0x4, 0x610) semctl$SETALL(r4, 0x0, 0x11, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000002280)={0x50, 0x0, r5, {0x7, 0x9, 0x7fffffff, 0x24080e0, 0x9, 0x0, 0x7}}, 0x50) read$FUSE(r3, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r6}, 0x10) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r7, r3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r8 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r8, 0x47f6, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000000)="43e6cd587beb19d67afb19e8b30a40f3", 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0xf}, 0x8) connect$inet(r2, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) close(r2) 93.631743ms ago: executing program 0 (id=270): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10006c00, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x33, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x400300) 93.288245ms ago: executing program 0 (id=271): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x10204, 0x7, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)={0x4}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r4) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x2c, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xf}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4804) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) 85.762219ms ago: executing program 3 (id=272): setresuid(0x0, 0xee00, 0x0) r0 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x3010, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r2, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000000000000711205000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x41, 0x0) writev(r4, &(0x7f0000005500)=[{&(0x7f0000003440)="060000", 0x3}], 0x1) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ppoll(&(0x7f0000000000)=[{}], 0x77, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000100)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000200)=0xe4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(r7, r7, r7) setuid(r5) 0s ago: executing program 3 (id=273): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0xf5ffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:15370' (ED25519) to the list of known hosts. [ 32.017925][ T5851] cgroup: Unknown subsys name 'net' [ 32.121679][ T5851] cgroup: Unknown subsys name 'cpuset' [ 32.124716][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.913277][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.031407][ T5940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 35.034766][ T5940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 35.037050][ T5940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 35.039675][ T5940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 35.042369][ T5940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 35.043362][ T5941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.044592][ T5940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 35.048336][ T5941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 35.048991][ T5940] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.053172][ T5942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 35.053507][ T5940] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 35.056401][ T5941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.056646][ T5942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 35.056830][ T5942] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 35.057209][ T5942] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 35.057834][ T5942] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 35.058144][ T5940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 35.065029][ T5943] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 35.068033][ T5942] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.068303][ T5941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 35.073545][ T5301] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 35.076179][ T5942] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 35.079205][ T5301] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 35.080260][ T5942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.231388][ T5927] chnl_net:caif_netlink_parms(): no params data found [ 35.237078][ T5928] chnl_net:caif_netlink_parms(): no params data found [ 35.273910][ T5929] chnl_net:caif_netlink_parms(): no params data found [ 35.370803][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 35.409112][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.411448][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.413457][ T5927] bridge_slave_0: entered allmulticast mode [ 35.415520][ T5927] bridge_slave_0: entered promiscuous mode [ 35.421188][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.423988][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.426153][ T5928] bridge_slave_0: entered allmulticast mode [ 35.429011][ T5928] bridge_slave_0: entered promiscuous mode [ 35.439758][ T5929] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.441956][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.444163][ T5929] bridge_slave_0: entered allmulticast mode [ 35.446357][ T5929] bridge_slave_0: entered promiscuous mode [ 35.449114][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.451293][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.453440][ T5927] bridge_slave_1: entered allmulticast mode [ 35.455639][ T5927] bridge_slave_1: entered promiscuous mode [ 35.469062][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.471222][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.473378][ T5928] bridge_slave_1: entered allmulticast mode [ 35.475600][ T5928] bridge_slave_1: entered promiscuous mode [ 35.485307][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.487480][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.490222][ T5929] bridge_slave_1: entered allmulticast mode [ 35.492476][ T5929] bridge_slave_1: entered promiscuous mode [ 35.556059][ T5927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.561143][ T5927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.564812][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.569214][ T5929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.591057][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.594821][ T5929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.611901][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.614148][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.616392][ T5937] bridge_slave_0: entered allmulticast mode [ 35.619124][ T5937] bridge_slave_0: entered promiscuous mode [ 35.632781][ T5927] team0: Port device team_slave_0 added [ 35.650548][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.652699][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.654850][ T5937] bridge_slave_1: entered allmulticast mode [ 35.657062][ T5937] bridge_slave_1: entered promiscuous mode [ 35.661266][ T5927] team0: Port device team_slave_1 added [ 35.723014][ T5928] team0: Port device team_slave_0 added [ 35.726085][ T5929] team0: Port device team_slave_0 added [ 35.728801][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.730988][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.742060][ T5927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.747103][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.753953][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.759015][ T5928] team0: Port device team_slave_1 added [ 35.762411][ T5929] team0: Port device team_slave_1 added [ 35.764447][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.766516][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.774193][ T5927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.828472][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.831226][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.841350][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.846317][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.849123][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.860325][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.865044][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.867153][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.874870][ T5929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.879327][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.881424][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.889248][ T5929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.894082][ T5937] team0: Port device team_slave_0 added [ 35.916692][ T5937] team0: Port device team_slave_1 added [ 35.935421][ T5927] hsr_slave_0: entered promiscuous mode [ 35.938335][ T5927] hsr_slave_1: entered promiscuous mode [ 35.950211][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.952358][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.960225][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.993063][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.995194][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.003066][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.010626][ T5928] hsr_slave_0: entered promiscuous mode [ 36.013393][ T5928] hsr_slave_1: entered promiscuous mode [ 36.015388][ T5928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.018597][ T5928] Cannot create hsr debugfs directory [ 36.021746][ T5929] hsr_slave_0: entered promiscuous mode [ 36.024341][ T5929] hsr_slave_1: entered promiscuous mode [ 36.026353][ T5929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.029752][ T5929] Cannot create hsr debugfs directory [ 36.101036][ T5937] hsr_slave_0: entered promiscuous mode [ 36.103231][ T5937] hsr_slave_1: entered promiscuous mode [ 36.105202][ T5937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.107491][ T5937] Cannot create hsr debugfs directory [ 36.217722][ T5927] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.224764][ T5927] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.246036][ T5927] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.251569][ T5927] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.263378][ T5929] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.267215][ T5929] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.270582][ T5929] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.281455][ T5929] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.291101][ T5928] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.298418][ T5928] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.302153][ T5928] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.305259][ T5928] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.330285][ T5937] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.337836][ T5937] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.341794][ T5937] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.345244][ T5937] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.369578][ T5927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.382733][ T5927] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.403472][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.405680][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.409017][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.411163][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.421273][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.425893][ T5929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.434895][ T5928] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.442077][ T5929] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.447013][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.449252][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.459946][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.462087][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.466520][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.469169][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.475347][ T5927] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.484223][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.490191][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.493179][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.510795][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.523393][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.526382][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.530806][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.533779][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.571496][ T5937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.579132][ T5927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.596156][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.600709][ T5927] veth0_vlan: entered promiscuous mode [ 36.605148][ T5927] veth1_vlan: entered promiscuous mode [ 36.621987][ T5927] veth0_macvtap: entered promiscuous mode [ 36.625886][ T5927] veth1_macvtap: entered promiscuous mode [ 36.635681][ T5928] veth0_vlan: entered promiscuous mode [ 36.644846][ T5928] veth1_vlan: entered promiscuous mode [ 36.651568][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.657444][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.664355][ T5929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.668824][ T5927] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.671731][ T5927] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.674337][ T5927] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.676942][ T5927] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.694127][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.711090][ T5928] veth0_macvtap: entered promiscuous mode [ 36.728960][ T5929] veth0_vlan: entered promiscuous mode [ 36.731418][ T5928] veth1_macvtap: entered promiscuous mode [ 36.735810][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.739007][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.750453][ T5929] veth1_vlan: entered promiscuous mode [ 36.759612][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.761982][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.764655][ T5937] veth0_vlan: entered promiscuous mode [ 36.769994][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.773206][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.776708][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.780265][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.783380][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.786712][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.792192][ T5928] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.794821][ T5928] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.797418][ T5928] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.800610][ T5928] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.809836][ T5929] veth0_macvtap: entered promiscuous mode [ 36.813167][ T5929] veth1_macvtap: entered promiscuous mode [ 36.817695][ T5937] veth1_vlan: entered promiscuous mode [ 36.825822][ T5927] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.827032][ T5929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.833792][ T5929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.836750][ T5929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.840407][ T5929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.844255][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.851440][ T5929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.854639][ T5929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.857541][ T5929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.860708][ T5929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.865298][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.876424][ T5929] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.879256][ T5929] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.881864][ T5929] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.885113][ T5929] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.889850][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.893337][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.899023][ T5937] veth0_macvtap: entered promiscuous mode [ 36.910861][ T5937] veth1_macvtap: entered promiscuous mode [ 36.915068][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.918585][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.919179][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.921929][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.927026][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.931356][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.934291][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.938958][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.943612][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.951083][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.955132][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.959853][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.962973][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.965866][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.969222][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.973591][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.984710][ T5937] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.987327][ T5937] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.990345][ T5937] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.992943][ T5937] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.998039][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.000941][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.035856][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.038854][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.058762][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.067399][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.082703][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.085250][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.108775][ T5942] Bluetooth: hci0: command tx timeout [ 37.110675][ T5942] Bluetooth: hci2: command tx timeout [ 37.112853][ T5942] Bluetooth: hci3: command tx timeout [ 37.114655][ T5942] Bluetooth: hci1: command tx timeout [ 37.118747][ T6003] openvswitch: netlink: IP tunnel dst address not specified [ 37.187725][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 37.217950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 37.291462][ T6014] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 37.294111][ T6014] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3'. [ 37.296973][ T6014] team0: entered promiscuous mode [ 37.298789][ T6014] team_slave_0: entered promiscuous mode [ 37.301781][ T6014] team_slave_1: entered promiscuous mode [ 37.304323][ T6014] bridge0: port 3(team0) entered blocking state [ 37.306526][ T6014] bridge0: port 3(team0) entered disabled state [ 37.309144][ T6014] team0: entered allmulticast mode [ 37.311356][ T6014] team_slave_0: entered allmulticast mode [ 37.313185][ T6014] team_slave_1: entered allmulticast mode [ 37.326953][ T6014] bridge0: port 3(team0) entered blocking state [ 37.329158][ T6014] bridge0: port 3(team0) entered forwarding state [ 37.666873][ T6022] tmpfs: Bad value for 'mpol' [ 38.123440][ T62] libceph: connect (1)[c::]:6789 error -101 [ 38.125462][ T62] libceph: mon0 (1)[c::]:6789 connect error [ 38.154523][ T6035] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 38.156604][ T6035] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 38.163144][ T6035] vhci_hcd vhci_hcd.0: Device attached [ 38.198652][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 38.301245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 38.362421][ T6028] ceph: No mds server is up or the cluster is laggy [ 38.368532][ T5974] vhci_hcd: vhci_device speed not set [ 38.388353][ T62] libceph: connect (1)[c::]:6789 error -101 [ 38.390276][ T62] libceph: mon0 (1)[c::]:6789 connect error [ 38.401129][ T832] libceph: connect (1)[c::]:6789 error -101 [ 38.403076][ T832] libceph: mon0 (1)[c::]:6789 connect error [ 38.438814][ T5974] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 38.657921][ T832] libceph: connect (1)[c::]:6789 error -101 [ 38.659874][ T832] libceph: mon0 (1)[c::]:6789 connect error [ 38.685327][ T6040] ceph: No mds server is up or the cluster is laggy [ 38.708310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 38.727990][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 38.906322][ T6036] vhci_hcd: connection reset by peer [ 38.910029][ T12] vhci_hcd: stop threads [ 38.912263][ T12] vhci_hcd: release socket [ 38.914621][ T6053] tmpfs: Bad value for 'mpol' [ 38.916170][ T12] vhci_hcd: disconnect device [ 38.958896][ T832] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 39.147814][ T832] usb 6-1: Using ep0 maxpacket: 8 [ 39.151917][ T832] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 39.154393][ T832] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 39.156897][ T832] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 39.159992][ T832] usb 6-1: config 250 has no interface number 0 [ 39.161906][ T832] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 39.165332][ T832] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 39.168547][ T832] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 39.171611][ T832] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 39.174631][ T832] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 39.178669][ T832] usb 6-1: config 250 interface 228 has no altsetting 0 [ 39.182286][ T832] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 39.185028][ T832] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 39.187410][ T832] usb 6-1: Product: syz [ 39.187964][ T5933] Bluetooth: hci1: command tx timeout [ 39.187991][ T5942] Bluetooth: hci3: command tx timeout [ 39.188026][ T5930] Bluetooth: hci2: command tx timeout [ 39.188029][ T5942] Bluetooth: hci0: command tx timeout [ 39.189180][ T832] usb 6-1: SerialNumber: syz [ 39.201342][ T832] hub 6-1:250.228: bad descriptor, ignoring hub [ 39.201451][ T6059] netlink: 'syz.2.11': attribute type 10 has an invalid length. [ 39.203257][ T832] hub 6-1:250.228: probe with driver hub failed with error -5 [ 39.209164][ T6059] netlink: 2 bytes leftover after parsing attributes in process `syz.2.11'. [ 39.408298][ T832] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 39.770511][ T6066] netlink: 'syz.0.12': attribute type 10 has an invalid length. [ 39.772910][ T6066] netlink: 2 bytes leftover after parsing attributes in process `syz.0.12'. [ 39.775575][ T6066] team0: entered promiscuous mode [ 39.777141][ T6066] team_slave_0: entered promiscuous mode [ 39.779054][ T6066] team_slave_1: entered promiscuous mode [ 39.780913][ T6066] bridge0: port 3(team0) entered blocking state [ 39.783302][ T6066] bridge0: port 3(team0) entered disabled state [ 39.785452][ T6066] team0: entered allmulticast mode [ 39.787036][ T6066] team_slave_0: entered allmulticast mode [ 39.789053][ T6066] team_slave_1: entered allmulticast mode [ 39.792229][ T6066] bridge0: port 3(team0) entered blocking state [ 39.794626][ T6066] bridge0: port 3(team0) entered forwarding state [ 39.871011][ T6069] openvswitch: netlink: IP tunnel dst address not specified [ 40.090502][ T6051] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 40.095133][ T6051] usb 6-1: device reset changed ep0 maxpacket size! [ 40.290500][ T832] usb 6-1: USB disconnect, device number 2 [ 40.294537][ T832] usblp0: removed [ 40.427693][ T832] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 40.453253][ T6082] tipc: Failed to remove unknown binding: 66,1,1/0:3774643456/3774643458 [ 40.455915][ T6082] tipc: Failed to remove unknown binding: 66,1,1/0:3774643456/3774643458 [ 40.569857][ T6085] netlink: 48 bytes leftover after parsing attributes in process `syz.0.16'. [ 40.577945][ T832] usb 6-1: Using ep0 maxpacket: 16 [ 40.580799][ T832] usb 6-1: config 0 has no interfaces? [ 40.584143][ T832] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 40.586876][ T832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.589400][ T832] usb 6-1: Product: syz [ 40.590679][ T832] usb 6-1: Manufacturer: syz [ 40.592078][ T832] usb 6-1: SerialNumber: syz [ 40.594606][ T832] usb 6-1: config 0 descriptor?? [ 40.813015][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 40.822927][ T6088] openvswitch: netlink: IP tunnel dst address not specified [ 40.832189][ T5983] usb 6-1: USB disconnect, device number 3 [ 40.881185][ T6090] openvswitch: netlink: IP tunnel dst address not specified [ 41.267683][ T5933] Bluetooth: hci1: command tx timeout [ 41.277659][ T5301] Bluetooth: hci2: command tx timeout [ 41.278499][ T5933] Bluetooth: hci3: command tx timeout [ 41.280237][ T5942] Bluetooth: hci0: command tx timeout [ 41.707725][ T30] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 41.804050][ T6108] openvswitch: netlink: IP tunnel dst address not specified [ 41.917618][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 41.921408][ T30] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 41.923911][ T30] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 41.926671][ T30] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 41.931408][ T30] usb 6-1: config 250 has no interface number 0 [ 41.933212][ T30] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 41.936668][ T30] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 41.939859][ T30] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 41.942963][ T30] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 41.946041][ T30] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 41.950197][ T30] usb 6-1: config 250 interface 228 has no altsetting 0 [ 41.961034][ T30] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 41.965560][ T30] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 42.010298][ T6113] netlink: 'syz.2.21': attribute type 10 has an invalid length. [ 42.016221][ T6113] netlink: 2 bytes leftover after parsing attributes in process `syz.2.21'. [ 42.087803][ T30] usb 6-1: Product: syz [ 42.148169][ T30] usb 6-1: SerialNumber: syz [ 42.174888][ T30] hub 6-1:250.228: bad descriptor, ignoring hub [ 42.176890][ T30] hub 6-1:250.228: probe with driver hub failed with error -5 [ 42.379458][ T30] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 42.454729][ T30] libceph: connect (1)[c::]:6789 error -101 [ 42.456623][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 42.718140][ T30] libceph: connect (1)[c::]:6789 error -101 [ 42.720072][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 42.770587][ T6118] ceph: No mds server is up or the cluster is laggy [ 42.912557][ T6133] netlink: 'syz.2.24': attribute type 4 has an invalid length. [ 42.976655][ T6134] netlink: 'syz.2.24': attribute type 4 has an invalid length. [ 43.113944][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 43.116549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 43.318718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 43.396875][ T5942] Bluetooth: hci3: command 0x0419 tx timeout [ 43.400939][ T5942] Bluetooth: hci0: command tx timeout [ 43.418053][ T5942] Bluetooth: hci1: command tx timeout [ 43.437820][ T5983] usb 6-1: USB disconnect, device number 4 [ 43.501009][ T5983] usblp0: removed [ 43.599340][ T5974] vhci_hcd: vhci_device speed not set [ 43.875087][ T6134] syz.2.24 (6134) used greatest stack depth: 20784 bytes left [ 44.107867][ T30] libceph: connect (1)[c::]:6789 error -101 [ 44.109766][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 44.335571][ T30] libceph: connect (1)[c::]:6789 error -101 [ 44.337457][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 44.355591][ T6146] ceph: No mds server is up or the cluster is laggy [ 44.367913][ T30] libceph: connect (1)[c::]:6789 error -101 [ 44.370329][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 44.452718][ T30] libceph: connect (1)[c::]:6789 error -101 [ 44.454641][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 44.597841][ T30] libceph: connect (1)[c::]:6789 error -101 [ 44.599807][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 44.632266][ T6155] ceph: No mds server is up or the cluster is laggy [ 44.708051][ T30] libceph: connect (1)[c::]:6789 error -101 [ 44.710560][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 44.732272][ T6160] ceph: No mds server is up or the cluster is laggy [ 44.783346][ T30] libceph: connect (1)[c::]:6789 error -101 [ 44.786855][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 45.026238][ T6181] openvswitch: netlink: IP tunnel dst address not specified [ 45.050284][ T30] libceph: connect (1)[c::]:6789 error -101 [ 45.058026][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 45.085904][ T6173] ceph: No mds server is up or the cluster is laggy [ 45.327390][ T6188] netlink: 'syz.1.33': attribute type 10 has an invalid length. [ 45.329893][ T6188] netlink: 2 bytes leftover after parsing attributes in process `syz.1.33'. [ 45.332629][ T6188] team0: entered promiscuous mode [ 45.334230][ T6188] team_slave_0: entered promiscuous mode [ 45.336470][ T6188] team_slave_1: entered promiscuous mode [ 45.339018][ T6188] bridge0: port 3(team0) entered blocking state [ 45.341075][ T6188] bridge0: port 3(team0) entered disabled state [ 45.343358][ T6188] team0: entered allmulticast mode [ 45.344959][ T6188] team_slave_0: entered allmulticast mode [ 45.346748][ T6188] team_slave_1: entered allmulticast mode [ 45.351936][ T6188] bridge0: port 3(team0) entered blocking state [ 45.354358][ T6188] bridge0: port 3(team0) entered forwarding state [ 45.507652][ T5930] Bluetooth: hci3: command 0x0419 tx timeout [ 45.833652][ T6192] netlink: 'syz.3.34': attribute type 10 has an invalid length. [ 45.836049][ T6192] netlink: 2 bytes leftover after parsing attributes in process `syz.3.34'. [ 45.839494][ T6192] team0: entered promiscuous mode [ 45.841071][ T6192] team_slave_0: entered promiscuous mode [ 45.842899][ T6192] team_slave_1: entered promiscuous mode [ 45.844727][ T6192] bridge0: port 3(team0) entered blocking state [ 45.846653][ T6192] bridge0: port 3(team0) entered disabled state [ 45.848672][ T6192] team0: entered allmulticast mode [ 45.850220][ T6192] team_slave_0: entered allmulticast mode [ 45.851958][ T6192] team_slave_1: entered allmulticast mode [ 45.854419][ T6192] bridge0: port 3(team0) entered blocking state [ 45.856360][ T6192] bridge0: port 3(team0) entered forwarding state [ 46.022000][ T6196] netlink: 'syz.1.36': attribute type 10 has an invalid length. [ 46.065160][ T6197] netlink: 48 bytes leftover after parsing attributes in process `syz.2.35'. [ 46.193169][ T6202] netlink: 'syz.1.37': attribute type 4 has an invalid length. [ 46.265862][ T6204] netlink: 'syz.1.37': attribute type 4 has an invalid length. [ 46.343762][ T6205] tipc: Started in network mode [ 46.345862][ T6205] tipc: Node identity 7f000001, cluster identity 4711 [ 46.350059][ T6205] tipc: Enabled bearer , priority 10 [ 46.358680][ T6205] tipc: Enabled bearer , priority 0 [ 46.707081][ T5974] libceph: connect (1)[c::]:6789 error -101 [ 46.709211][ T5974] libceph: mon0 (1)[c::]:6789 connect error [ 46.711734][ T5974] libceph: connect (1)[c::]:6789 error -101 [ 46.713762][ T5974] libceph: mon0 (1)[c::]:6789 connect error [ 46.787026][ T5931] libceph: connect (1)[c::]:6789 error -101 [ 46.789134][ T5931] libceph: mon0 (1)[c::]:6789 connect error [ 46.923370][ T6213] ceph: No mds server is up or the cluster is laggy [ 47.019416][ T6217] ceph: No mds server is up or the cluster is laggy [ 47.133243][ T6229] evm: overlay not supported [ 47.359344][ T5931] libceph: connect (1)[c::]:6789 error -101 [ 47.361228][ T5931] libceph: mon0 (1)[c::]:6789 connect error [ 47.378780][ T35] tipc: Node number set to 2130706433 [ 47.527342][ T6250] Illegal XDP return value 4294967274 on prog (id 7) dev N/A, expect packet loss! [ 47.582773][ T6231] ceph: No mds server is up or the cluster is laggy [ 47.741973][ T5931] libceph: connect (1)[c::]:6789 error -101 [ 47.743927][ T5931] libceph: mon0 (1)[c::]:6789 connect error [ 48.014734][ T5995] libceph: connect (1)[c::]:6789 error -101 [ 48.016641][ T5995] libceph: mon0 (1)[c::]:6789 connect error [ 48.150421][ T6275] tmpfs: Bad value for 'mpol' [ 48.199999][ T6265] ceph: No mds server is up or the cluster is laggy [ 48.512677][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.54'. [ 49.069165][ T62] libceph: connect (1)[c::]:6789 error -101 [ 49.071492][ T62] libceph: mon0 (1)[c::]:6789 connect error [ 49.219751][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.59'. [ 49.338097][ T62] libceph: connect (1)[c::]:6789 error -101 [ 49.340518][ T62] libceph: mon0 (1)[c::]:6789 connect error [ 49.395855][ T6285] ceph: No mds server is up or the cluster is laggy [ 49.926987][ T5931] libceph: connect (1)[c::]:6789 error -101 [ 49.928994][ T5931] libceph: mon0 (1)[c::]:6789 connect error [ 50.244346][ T5931] libceph: connect (1)[c::]:6789 error -101 [ 50.246369][ T5931] libceph: mon0 (1)[c::]:6789 connect error [ 50.385032][ T6333] netlink: 'syz.2.64': attribute type 10 has an invalid length. [ 50.387409][ T6333] netlink: 2 bytes leftover after parsing attributes in process `syz.2.64'. [ 50.401140][ T6316] ceph: No mds server is up or the cluster is laggy [ 50.439820][ T6335] netlink: 'syz.3.66': attribute type 10 has an invalid length. [ 50.442300][ T6335] netlink: 2 bytes leftover after parsing attributes in process `syz.3.66'. [ 51.007172][ T6338] tipc: Started in network mode [ 51.008996][ T6338] tipc: Node identity 7f000001, cluster identity 4711 [ 51.011239][ T6338] tipc: Enabled bearer , priority 10 [ 51.015219][ T6338] tipc: Enabled bearer , priority 0 [ 51.040631][ T6342] openvswitch: netlink: IP tunnel dst address not specified [ 51.418414][ T5931] libceph: connect (1)[c::]:6789 error -101 [ 51.420948][ T5931] libceph: mon0 (1)[c::]:6789 connect error [ 51.721837][ T30] libceph: connect (1)[c::]:6789 error -101 [ 51.726990][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 51.789011][ T6349] ceph: No mds server is up or the cluster is laggy [ 52.143148][ T69] tipc: Node number set to 2130706433 [ 52.362352][ T6375] FAULT_INJECTION: forcing a failure. [ 52.362352][ T6375] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 52.370999][ T6375] CPU: 2 UID: 0 PID: 6375 Comm: syz.1.75 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 52.374195][ T6375] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.377461][ T6375] Call Trace: [ 52.378510][ T6375] [ 52.379429][ T6375] dump_stack_lvl+0x16c/0x1f0 [ 52.380877][ T6375] should_fail_ex+0x497/0x5b0 [ 52.382321][ T6375] _copy_from_iter+0x29b/0x1400 [ 52.383829][ T6375] ? trace_lock_acquire+0x14e/0x1f0 [ 52.385420][ T6375] ? __pfx__copy_from_iter+0x10/0x10 [ 52.387040][ T6375] ? __virt_addr_valid+0x1a4/0x590 [ 52.388633][ T6375] ? __virt_addr_valid+0x5e/0x590 [ 52.390166][ T6375] ? __phys_addr_symbol+0x30/0x80 [ 52.391707][ T6375] ? __check_object_size+0x488/0x710 [ 52.393315][ T6375] file_tty_write.constprop.0+0x48d/0x9a0 [ 52.395009][ T6375] vfs_write+0x5ae/0x1150 [ 52.396328][ T6375] ? __pfx_tty_write+0x10/0x10 [ 52.397849][ T6375] ? __pfx_vfs_write+0x10/0x10 [ 52.399326][ T6375] ? __fget_files+0x40/0x3a0 [ 52.400749][ T6375] ksys_write+0x12b/0x250 [ 52.402069][ T6375] ? __pfx_ksys_write+0x10/0x10 [ 52.403565][ T6375] __do_fast_syscall_32+0x73/0x120 [ 52.405122][ T6375] do_fast_syscall_32+0x32/0x80 [ 52.406614][ T6375] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.408544][ T6375] RIP: 0023:0xf7fd3579 [ 52.409785][ T6375] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 52.416149][ T6375] RSP: 002b:00000000f512655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 52.416173][ T6375] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000540 [ 52.416180][ T6375] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.416186][ T6375] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.416193][ T6375] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 52.416199][ T6375] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.416212][ T6375] [ 52.748848][ T6394] netlink: 'syz.1.78': attribute type 10 has an invalid length. [ 52.751191][ T6394] netlink: 2 bytes leftover after parsing attributes in process `syz.1.78'. [ 53.026840][ T6398] netlink: 'syz.2.79': attribute type 10 has an invalid length. [ 53.040533][ T6398] netlink: 2 bytes leftover after parsing attributes in process `syz.2.79'. [ 53.119062][ T6400] syz.3.81 uses obsolete (PF_INET,SOCK_PACKET) [ 53.296786][ T6401] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.452594][ T6406] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 53.454657][ T6406] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 53.458457][ T6406] vhci_hcd vhci_hcd.0: Device attached [ 53.469709][ T6406] Zero length message leads to an empty skb [ 53.639174][ T5945] vhci_hcd: vhci_device speed not set [ 53.697645][ T5945] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 53.877726][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 54.029195][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 54.032043][ T25] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 54.034545][ T25] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 54.037096][ T25] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 54.040493][ T6400] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 54.042968][ T25] usb 5-1: config 250 has no interface number 0 [ 54.044911][ T25] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 54.048937][ T25] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 54.052111][ T25] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 54.055204][ T25] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 54.058537][ T25] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 54.062649][ T25] usb 5-1: config 250 interface 228 has no altsetting 0 [ 54.066655][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 54.069727][ T25] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 54.072405][ T25] usb 5-1: Product: syz [ 54.073785][ T25] usb 5-1: SerialNumber: syz [ 54.079234][ T25] hub 5-1:250.228: bad descriptor, ignoring hub [ 54.081171][ T25] hub 5-1:250.228: probe with driver hub failed with error -5 [ 54.236057][ T6408] vhci_hcd: connection reset by peer [ 54.238736][ T39] vhci_hcd: stop threads [ 54.240107][ T39] vhci_hcd: release socket [ 54.241554][ T39] vhci_hcd: disconnect device [ 54.280421][ T25] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 54.339733][ T6418] netlink: 'syz.2.85': attribute type 1 has an invalid length. [ 54.342192][ T6418] netlink: 24 bytes leftover after parsing attributes in process `syz.2.85'. [ 54.349194][ T6418] NILFS (loop2): device size too small [ 54.702480][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.87'. [ 55.268893][ T5930] Bluetooth: hci1: command 0x0401 tx timeout [ 55.694869][ T6437] tmpfs: Bad value for 'mpol' [ 55.931810][ T6442] netlink: 'syz.1.90': attribute type 10 has an invalid length. [ 55.934193][ T6442] netlink: 2 bytes leftover after parsing attributes in process `syz.1.90'. [ 56.661977][ T6453] netlink: 596 bytes leftover after parsing attributes in process `syz.2.92'. [ 56.847170][ T6458] netlink: 'syz.1.93': attribute type 10 has an invalid length. [ 56.849708][ T6458] netlink: 2 bytes leftover after parsing attributes in process `syz.1.93'. [ 57.273732][ T6460] openvswitch: netlink: IP tunnel dst address not specified [ 57.862437][ T6468] FAULT_INJECTION: forcing a failure. [ 57.862437][ T6468] name failslab, interval 1, probability 0, space 0, times 1 [ 57.866327][ T6468] CPU: 1 UID: 0 PID: 6468 Comm: syz.2.96 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 57.869730][ T6468] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.871474][ T62] usb 5-1: USB disconnect, device number 2 [ 57.873935][ T6468] Call Trace: [ 57.873944][ T6468] [ 57.873951][ T6468] dump_stack_lvl+0x16c/0x1f0 [ 57.873977][ T6468] should_fail_ex+0x497/0x5b0 [ 57.878516][ T62] usblp0: removed [ 57.880373][ T6468] ? fs_reclaim_acquire+0xae/0x150 [ 57.884526][ T6468] should_failslab+0xc2/0x120 [ 57.885975][ T6468] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 57.887642][ T6468] ? rcu_is_watching+0x12/0xc0 [ 57.889229][ T6468] ? security_file_alloc+0x34/0x2b0 [ 57.890820][ T6468] security_file_alloc+0x34/0x2b0 [ 57.892371][ T6468] init_file+0x93/0x480 [ 57.893648][ T6468] alloc_empty_file+0x91/0x1e0 [ 57.895125][ T6468] alloc_file_pseudo+0x13d/0x200 [ 57.896643][ T6468] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 57.898345][ T6468] sock_alloc_file+0x50/0x1d0 [ 57.900011][ T6468] do_accept+0x23e/0x530 [ 57.901344][ T6468] ? do_raw_spin_lock+0x12d/0x2c0 [ 57.902894][ T6468] ? __pfx_do_accept+0x10/0x10 [ 57.904369][ T6468] __sys_accept4+0xfe/0x1b0 [ 57.905761][ T6468] ? __pfx___sys_accept4+0x10/0x10 [ 57.907331][ T6468] ? __pfx_ksys_write+0x10/0x10 [ 57.908846][ T6468] __ia32_sys_accept4+0x94/0x100 [ 57.910536][ T6468] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 57.912559][ T6468] __do_fast_syscall_32+0x73/0x120 [ 57.914123][ T6468] do_fast_syscall_32+0x32/0x80 [ 57.915619][ T6468] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 57.917546][ T6468] RIP: 0023:0xf7fa3579 [ 57.918886][ T6468] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 57.924882][ T6468] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 000000000000016c [ 57.927425][ T6468] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 57.929938][ T6468] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000 [ 57.932486][ T6468] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 57.935581][ T6468] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 57.937969][ T6468] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.940377][ T6468] [ 58.131501][ T6478] capability: warning: `syz.2.99' uses deprecated v2 capabilities in a way that may be insecure [ 58.301952][ T6484] tmpfs: Bad value for 'mpol' [ 58.425799][ T6487] tmpfs: Bad value for 'mpol' [ 58.797743][ T5945] vhci_hcd: vhci_device speed not set [ 59.123558][ T6498] netlink: 'syz.1.104': attribute type 10 has an invalid length. [ 59.125931][ T6498] netlink: 2 bytes leftover after parsing attributes in process `syz.1.104'. [ 59.807631][ T62] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 60.032762][ T62] usb 7-1: Using ep0 maxpacket: 8 [ 60.036389][ T62] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 60.039093][ T62] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 60.041711][ T62] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 60.052003][ T62] usb 7-1: config 250 has no interface number 0 [ 60.053910][ T62] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 60.057453][ T62] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 60.060876][ T62] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 60.063931][ T62] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 60.066991][ T62] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 60.071092][ T62] usb 7-1: config 250 interface 228 has no altsetting 0 [ 60.074263][ T62] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 60.077043][ T62] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 60.079706][ T62] usb 7-1: Product: syz [ 60.081034][ T62] usb 7-1: SerialNumber: syz [ 60.084789][ T62] hub 7-1:250.228: bad descriptor, ignoring hub [ 60.086710][ T62] hub 7-1:250.228: probe with driver hub failed with error -5 [ 60.104201][ T6523] openvswitch: netlink: IP tunnel dst address not specified [ 60.147726][ T5930] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 60.171743][ T6524] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 60.389145][ T62] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 60.881301][ T6536] tmpfs: Bad value for 'mpol' [ 60.908019][ T6537] program syz.0.113 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.910997][ T6537] ata1.00: invalid transfer count 0 [ 61.596660][ T6545] netem: change failed [ 61.620235][ T6546] netlink: 'syz.3.116': attribute type 10 has an invalid length. [ 61.622681][ T6546] netlink: 2 bytes leftover after parsing attributes in process `syz.3.116'. [ 61.816313][ T6550] netlink: 'syz.0.118': attribute type 10 has an invalid length. [ 61.818826][ T6550] netlink: 2 bytes leftover after parsing attributes in process `syz.0.118'. [ 62.510674][ T35] libceph: connect (1)[c::]:6789 error -101 [ 62.512586][ T35] libceph: mon0 (1)[c::]:6789 connect error [ 62.825308][ T6566] netlink: 'syz.0.120': attribute type 1 has an invalid length. [ 62.832293][ T6566] netlink: 24 bytes leftover after parsing attributes in process `syz.0.120'. [ 62.840922][ T6566] NILFS (loop0): device size too small [ 62.943343][ T35] libceph: connect (1)[c::]:6789 error -101 [ 62.945224][ T35] libceph: mon0 (1)[c::]:6789 connect error [ 63.076212][ T6568] netlink: 'syz.1.121': attribute type 10 has an invalid length. [ 63.078679][ T6568] netlink: 2 bytes leftover after parsing attributes in process `syz.1.121'. [ 63.119151][ T6557] ceph: No mds server is up or the cluster is laggy [ 63.139426][ T6573] netlink: 20 bytes leftover after parsing attributes in process `syz.1.122'. [ 63.166511][ T6575] tmpfs: Bad value for 'mpol' [ 63.790613][ T62] usb 7-1: USB disconnect, device number 2 [ 63.793342][ T62] usblp0: removed [ 63.866476][ T6587] openvswitch: netlink: IP tunnel dst address not specified [ 64.571807][ T6602] netlink: 'syz.3.131': attribute type 10 has an invalid length. [ 64.574203][ T6602] netlink: 2 bytes leftover after parsing attributes in process `syz.3.131'. [ 64.699156][ T6611] netlink: 'syz.3.133': attribute type 10 has an invalid length. [ 64.712966][ T6611] bridge0: port 3(team0) entered disabled state [ 64.715030][ T6611] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.717756][ T6611] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.829216][ T5931] libceph: connect (1)[c::]:6789 error -101 [ 64.831147][ T5931] libceph: mon0 (1)[c::]:6789 connect error [ 64.986420][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.136'. [ 65.035966][ T6617] ceph: No mds server is up or the cluster is laggy [ 65.163024][ T6638] netlink: 'syz.3.140': attribute type 10 has an invalid length. [ 65.165440][ T6638] netlink: 2 bytes leftover after parsing attributes in process `syz.3.140'. [ 65.207677][ T5931] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 65.357760][ T5931] usb 5-1: Using ep0 maxpacket: 8 [ 65.361543][ T5931] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 65.364783][ T5931] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 65.368604][ T5931] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 65.372340][ T5931] usb 5-1: config 250 has no interface number 0 [ 65.374811][ T5931] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 65.378872][ T5931] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 65.382074][ T5931] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 65.385256][ T5931] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 65.389771][ T5931] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 65.395405][ T5931] usb 5-1: config 250 interface 228 has no altsetting 0 [ 65.399836][ T5931] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 65.402577][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 65.405067][ T5931] usb 5-1: Product: syz [ 65.406353][ T5931] usb 5-1: SerialNumber: syz [ 65.412126][ T5931] hub 5-1:250.228: bad descriptor, ignoring hub [ 65.414137][ T5931] hub 5-1:250.228: probe with driver hub failed with error -5 [ 65.619299][ T5931] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 65.688520][ T6644] openvswitch: netlink: IP tunnel dst address not specified [ 66.111698][ T5931] libceph: connect (1)[c::]:6789 error -101 [ 66.113597][ T5931] libceph: mon0 (1)[c::]:6789 connect error [ 66.320637][ T6650] ceph: No mds server is up or the cluster is laggy [ 66.658403][ T1459] usb 5-1: USB disconnect, device number 3 [ 66.661047][ T1459] usblp0: removed [ 66.941546][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.149'. [ 67.165468][ T6684] netlink: 'syz.1.150': attribute type 10 has an invalid length. [ 67.167961][ T6684] netlink: 2 bytes leftover after parsing attributes in process `syz.1.150'. [ 67.324744][ T6687] netlink: 'syz.0.152': attribute type 10 has an invalid length. [ 67.327176][ T6687] netlink: 2 bytes leftover after parsing attributes in process `syz.0.152'. [ 67.507294][ T5995] libceph: connect (1)[c::]:6789 error -101 [ 67.509354][ T5995] libceph: mon0 (1)[c::]:6789 connect error [ 67.523608][ T6693] openvswitch: netlink: IP tunnel dst address not specified [ 67.723683][ T6689] ceph: No mds server is up or the cluster is laggy [ 67.892256][ T6702] overlayfs: failed to resolve './file0/file0': -2 [ 68.277514][ T6712] program syz.3.157 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.425608][ T40] audit: type=1400 audit(1735941636.289:2): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=26AE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC1 pid=6715 comm="syz.1.159" [ 68.530970][ T6722] vlan2: entered allmulticast mode [ 68.532637][ T6722] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 68.538038][ T6722] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 68.878160][ T62] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 69.038568][ T62] usb 7-1: Using ep0 maxpacket: 8 [ 69.041523][ T62] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 69.045970][ T62] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 69.048727][ T62] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 69.051655][ T62] usb 7-1: config 250 has no interface number 0 [ 69.053627][ T62] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 69.057161][ T62] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 69.060987][ T62] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 69.066406][ T62] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 69.076486][ T62] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 69.084230][ T62] usb 7-1: config 250 interface 228 has no altsetting 0 [ 69.091269][ T62] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 69.097458][ T62] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 69.101724][ T62] usb 7-1: Product: syz [ 69.103166][ T62] usb 7-1: SerialNumber: syz [ 69.111357][ T62] hub 7-1:250.228: bad descriptor, ignoring hub [ 69.113610][ T62] hub 7-1:250.228: probe with driver hub failed with error -5 [ 69.312478][ T62] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 69.486093][ T5995] libceph: connect (1)[c::]:6789 error -101 [ 69.488115][ T5995] libceph: mon0 (1)[c::]:6789 connect error [ 69.729661][ T6742] ceph: No mds server is up or the cluster is laggy [ 69.748659][ T5931] libceph: connect (1)[c::]:6789 error -101 [ 69.754041][ T5931] libceph: mon0 (1)[c::]:6789 connect error [ 70.010817][ T6756] openvswitch: netlink: IP tunnel dst address not specified [ 70.169783][ T40] audit: type=1400 audit(1735941638.059:3): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC1 pid=6753 comm="syz.3.167" [ 70.799756][ T1411] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.801804][ T1411] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.051505][ T6774] cifs: Unknown parameter 'mode' [ 71.057525][ T6777] netlink: 'syz.3.169': attribute type 10 has an invalid length. [ 71.060011][ T6777] netlink: 2 bytes leftover after parsing attributes in process `syz.3.169'. [ 71.084845][ T6779] binder_alloc: 6778: binder_alloc_buf, no vma [ 71.952810][ T6788] tmpfs: Bad value for 'mpol' [ 71.966544][ T5930] Bluetooth: hci1: unexpected event for opcode 0x200a [ 71.970432][ T6790] netlink: 20 bytes leftover after parsing attributes in process `syz.3.176'. [ 71.999281][ T6793] netlink: 'syz.0.177': attribute type 33 has an invalid length. [ 72.001655][ T6793] netlink: 152 bytes leftover after parsing attributes in process `syz.0.177'. [ 72.004754][ T6793] tipc: Resetting bearer [ 72.008354][ T12] bridge0: port 3(team0) entered disabled state [ 72.010850][ T12] tipc: Resetting bearer [ 72.136122][ T6796] openvswitch: netlink: IP tunnel dst address not specified [ 72.173177][ T6800] netlink: 48 bytes leftover after parsing attributes in process `syz.0.180'. [ 72.282948][ T6808] input: syz1 as /devices/virtual/input/input5 [ 72.354402][ T5930] Bluetooth: Wrong link type (-57) [ 72.692056][ T5931] libceph: connect (1)[c::]:6789 error -101 [ 72.693946][ T5931] libceph: mon0 (1)[c::]:6789 connect error [ 72.910094][ T6821] ceph: No mds server is up or the cluster is laggy [ 72.920706][ T5995] usb 7-1: USB disconnect, device number 3 [ 72.923857][ T5995] usblp0: removed [ 73.043478][ T6832] netlink: 'syz.1.187': attribute type 10 has an invalid length. [ 73.063631][ T6832] netlink: 2 bytes leftover after parsing attributes in process `syz.1.187'. [ 73.337719][ T5995] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 73.487658][ T5995] usb 7-1: device descriptor read/64, error -71 [ 73.747689][ T5995] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 73.877710][ T5995] usb 7-1: device descriptor read/64, error -71 [ 73.998834][ T5995] usb usb7-port1: attempt power cycle [ 74.053116][ T6847] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.387630][ T5995] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 74.409325][ T5995] usb 7-1: device descriptor read/8, error -71 [ 74.730870][ T5995] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 74.748050][ T5995] usb 7-1: device descriptor read/8, error -71 [ 74.765482][ T5976] libceph: connect (1)[c::]:6789 error -101 [ 74.769151][ T5976] libceph: mon0 (1)[c::]:6789 connect error [ 74.858656][ T5995] usb usb7-port1: unable to enumerate USB device [ 74.864496][ T6870] netlink: 'syz.0.195': attribute type 10 has an invalid length. [ 74.866982][ T6870] netlink: 2 bytes leftover after parsing attributes in process `syz.0.195'. [ 75.027249][ T6861] ceph: No mds server is up or the cluster is laggy [ 75.031684][ T5995] libceph: connect (1)[c::]:6789 error -101 [ 75.034330][ T5995] libceph: mon0 (1)[c::]:6789 connect error [ 75.055144][ T5995] libceph: connect (1)[c::]:6789 error -101 [ 75.057116][ T5995] libceph: mon0 (1)[c::]:6789 connect error [ 75.065745][ T5995] libceph: connect (1)[c::]:6789 error -101 [ 75.067953][ T5995] libceph: mon0 (1)[c::]:6789 connect error [ 75.249548][ T6872] ceph: No mds server is up or the cluster is laggy [ 75.797622][ T6889] netlink: 'syz.1.199': attribute type 10 has an invalid length. [ 75.800317][ T6889] netlink: 2 bytes leftover after parsing attributes in process `syz.1.199'. [ 75.824937][ T6891] netlink: 'syz.0.200': attribute type 10 has an invalid length. [ 75.827306][ T6891] netlink: 2 bytes leftover after parsing attributes in process `syz.0.200'. [ 75.981447][ T9] cfg80211: failed to load regulatory.db [ 75.999629][ T5930] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 76.002862][ T5930] Bluetooth: hci1: Injecting HCI hardware error event [ 76.005879][ T5930] Bluetooth: hci1: hardware error 0x00 [ 76.589138][ T6912] FAULT_INJECTION: forcing a failure. [ 76.589138][ T6912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.593124][ T6912] CPU: 2 UID: 0 PID: 6912 Comm: syz.1.208 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 76.596269][ T6912] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.599484][ T6912] Call Trace: [ 76.600500][ T6912] [ 76.601404][ T6912] dump_stack_lvl+0x16c/0x1f0 [ 76.602849][ T6912] should_fail_ex+0x497/0x5b0 [ 76.604289][ T6912] _copy_from_user+0x2e/0xd0 [ 76.605695][ T6912] copy_clone_args_from_user+0x156/0x780 [ 76.607404][ T6912] ? ksys_write+0x12b/0x250 [ 76.608782][ T6912] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 76.610677][ T6912] ? vfs_write+0x306/0x1150 [ 76.612056][ T6912] __do_sys_clone3+0xac/0x270 [ 76.613486][ T6912] ? __pfx___do_sys_clone3+0x10/0x10 [ 76.615094][ T6912] __do_fast_syscall_32+0x73/0x120 [ 76.616643][ T6912] do_fast_syscall_32+0x32/0x80 [ 76.618133][ T6912] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 76.620042][ T6912] RIP: 0023:0xf7fd3579 [ 76.621234][ T6912] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 76.626828][ T6912] RSP: 002b:00000000f512642c EFLAGS: 00000286 ORIG_RAX: 00000000000001b3 [ 76.629351][ T6912] RAX: ffffffffffffffda RBX: 00000000f5126460 RCX: 0000000000000058 [ 76.631734][ T6912] RDX: 0000000000000000 RSI: 0000000020001000 RDI: 0000000000000000 [ 76.634095][ T6912] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 76.636474][ T6912] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 76.639147][ T6912] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 76.641531][ T6912] [ 76.657929][ T6914] netlink: 'syz.0.209': attribute type 12 has an invalid length. [ 76.686659][ T6912] netlink: 'syz.1.208': attribute type 12 has an invalid length. [ 76.759181][ T6922] netlink: 36 bytes leftover after parsing attributes in process `syz.0.211'. [ 76.788543][ T6934] openvswitch: netlink: IP tunnel dst address not specified [ 76.970043][ T6959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'. [ 76.975696][ T6959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.218'. [ 76.998207][ T6959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'. [ 77.001363][ T6959] FAULT_INJECTION: forcing a failure. [ 77.001363][ T6959] name failslab, interval 1, probability 0, space 0, times 0 [ 77.005251][ T6959] CPU: 1 UID: 0 PID: 6959 Comm: syz.2.218 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 77.008453][ T6959] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.011637][ T6959] Call Trace: [ 77.012643][ T6959] [ 77.013541][ T6959] dump_stack_lvl+0x16c/0x1f0 [ 77.014972][ T6959] should_fail_ex+0x497/0x5b0 [ 77.016407][ T6959] should_failslab+0xc2/0x120 [ 77.017925][ T6959] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 77.019683][ T6959] ? __alloc_skb+0x2b3/0x380 [ 77.021097][ T6959] __alloc_skb+0x2b3/0x380 [ 77.022451][ T6959] ? __pfx___alloc_skb+0x10/0x10 [ 77.023945][ T6959] ? __pfx_lock_release+0x10/0x10 [ 77.025466][ T6959] ? mark_held_locks+0x9f/0xe0 [ 77.026984][ T6959] fdb_notify+0xa4/0x1a0 [ 77.028261][ T6959] fdb_delete+0x6fc/0x1240 [ 77.029606][ T6959] fdb_delete_local+0x566/0x740 [ 77.031114][ T6959] br_fdb_delete_by_port+0x2a6/0x320 [ 77.032693][ T6959] br_dev_delete+0xe5/0x1a0 [ 77.034070][ T6959] rtnl_dellink+0x3c3/0xaa0 [ 77.035467][ T6959] ? __pfx_br_dev_delete+0x10/0x10 [ 77.036979][ T6959] ? kasan_save_stack+0x42/0x60 [ 77.038509][ T6959] ? kasan_save_stack+0x33/0x60 [ 77.039985][ T6959] ? __pfx_rtnl_dellink+0x10/0x10 [ 77.041506][ T6959] ? kmem_cache_free+0x152/0x4c0 [ 77.043019][ T6959] ? hlock_class+0x4e/0x130 [ 77.044417][ T6959] ? aa_get_newest_label+0x376/0x680 [ 77.046020][ T6959] ? find_held_lock+0x2d/0x110 [ 77.047476][ T6959] ? find_held_lock+0x2d/0x110 [ 77.048963][ T6959] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 77.050640][ T6959] ? __pfx_lock_release+0x10/0x10 [ 77.052157][ T6959] ? trace_lock_acquire+0x14e/0x1f0 [ 77.053714][ T6959] ? __pfx_rtnl_dellink+0x10/0x10 [ 77.055260][ T6959] rtnetlink_rcv_msg+0x95b/0xea0 [ 77.056778][ T6959] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 77.058419][ T6959] ? __pfx___dev_queue_xmit+0x10/0x10 [ 77.060029][ T6959] netlink_rcv_skb+0x165/0x410 [ 77.061467][ T6959] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 77.063277][ T6959] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 77.064865][ T6959] ? netlink_deliver_tap+0x1ae/0xca0 [ 77.066472][ T6959] netlink_unicast+0x53c/0x7f0 [ 77.067949][ T6959] ? __pfx_netlink_unicast+0x10/0x10 [ 77.069533][ T6959] ? __phys_addr_symbol+0x30/0x80 [ 77.071071][ T6959] ? __check_object_size+0x488/0x710 [ 77.072662][ T6959] netlink_sendmsg+0x8b8/0xd70 [ 77.074116][ T6959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.075737][ T6959] ____sys_sendmsg+0x9ae/0xb40 [ 77.077300][ T6959] ? __pfx_____sys_sendmsg+0x10/0x10 [ 77.078892][ T6959] ? get_compat_msghdr+0x11b/0x170 [ 77.080436][ T6959] ___sys_sendmsg+0x135/0x1e0 [ 77.081855][ T6959] ? __pfx____sys_sendmsg+0x10/0x10 [ 77.083430][ T6959] ? __pfx_lock_release+0x10/0x10 [ 77.084941][ T6959] ? trace_lock_acquire+0x14e/0x1f0 [ 77.086528][ T6959] ? __fget_files+0x206/0x3a0 [ 77.087956][ T6959] __sys_sendmsg+0x16e/0x220 [ 77.089354][ T6959] ? __pfx___sys_sendmsg+0x10/0x10 [ 77.090909][ T6959] __do_fast_syscall_32+0x73/0x120 [ 77.092538][ T6959] do_fast_syscall_32+0x32/0x80 [ 77.094007][ T6959] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.095919][ T6959] RIP: 0023:0xf7fa3579 [ 77.097159][ T6959] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 77.102871][ T6959] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 77.105362][ T6959] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020000280 [ 77.107729][ T6959] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.110178][ T6959] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 77.112593][ T6959] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 77.114952][ T6959] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.117344][ T6959] [ 77.178875][ T6964] netlink: 'syz.0.216': attribute type 10 has an invalid length. [ 77.181242][ T6964] netlink: 2 bytes leftover after parsing attributes in process `syz.0.216'. [ 77.246291][ T6965] overlay: Unknown parameter 'smackfshat' [ 77.362756][ T6965] lo speed is unknown, defaulting to 1000 [ 77.366483][ T6965] lo speed is unknown, defaulting to 1000 [ 77.369190][ T6965] lo speed is unknown, defaulting to 1000 [ 77.412072][ T6965] infiniband sz1: set active [ 77.413657][ T6965] infiniband sz1: added lo [ 77.421860][ T5995] lo speed is unknown, defaulting to 1000 [ 77.462868][ T6965] RDS/IB: sz1: added [ 77.464381][ T6965] smc: adding ib device sz1 with port count 1 [ 77.466343][ T6965] smc: ib device sz1 port 1 has pnetid [ 77.470010][ T6965] lo speed is unknown, defaulting to 1000 [ 77.507399][ T6965] lo speed is unknown, defaulting to 1000 [ 77.542424][ T6965] lo speed is unknown, defaulting to 1000 [ 77.576835][ T6965] lo speed is unknown, defaulting to 1000 [ 77.626303][ T5976] lo speed is unknown, defaulting to 1000 [ 77.939216][ T6981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.222'. [ 78.012977][ T6987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.221'. [ 78.060240][ T6996] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 78.067764][ T5930] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 78.530145][ T7021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.225'. [ 78.544743][ T7021] lo speed is unknown, defaulting to 1000 [ 78.651626][ T7026] netlink: 'syz.2.227': attribute type 10 has an invalid length. [ 78.654138][ T7026] netlink: 2 bytes leftover after parsing attributes in process `syz.2.227'. [ 78.686481][ T7027] netlink: 'syz.0.228': attribute type 10 has an invalid length. [ 78.698099][ T7027] netlink: 2 bytes leftover after parsing attributes in process `syz.0.228'. [ 79.420327][ T7036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.232'. [ 79.428886][ T7036] bond1: entered promiscuous mode [ 79.436170][ T7036] gretap1: entered promiscuous mode [ 79.438456][ T7036] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 79.497657][ T7041] overlayfs: conflicting options: userxattr,redirect_dir=on [ 79.856922][ T7051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.237'. [ 79.861481][ T7053] openvswitch: netlink: IP tunnel dst address not specified [ 79.890534][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.239'. [ 80.068384][ T5930] Bluetooth: hci4: command 0x1003 tx timeout [ 80.068472][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 80.518407][ T7075] netlink: 'syz.0.241': attribute type 10 has an invalid length. [ 80.856679][ T7098] warning: `syz.3.246' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.900794][ T7100] syz_tun: entered allmulticast mode [ 80.907972][ T7100] dvmrp1: entered allmulticast mode [ 80.915628][ T7099] syz_tun: left allmulticast mode [ 81.409644][ T25] libceph: connect (1)[c::]:6789 error -101 [ 81.412168][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 81.464749][ T7123] openvswitch: netlink: IP tunnel dst address not specified [ 81.633018][ T7113] ceph: No mds server is up or the cluster is laggy [ 82.121807][ T7144] netlink: 'syz.2.259': attribute type 10 has an invalid length. [ 82.128704][ T7144] __nla_validate_parse: 5 callbacks suppressed [ 82.128740][ T7144] netlink: 2 bytes leftover after parsing attributes in process `syz.2.259'. [ 82.182423][ T7145] netlink: 'syz.3.260': attribute type 10 has an invalid length. [ 82.185907][ T7145] netlink: 2 bytes leftover after parsing attributes in process `syz.3.260'. [ 82.573198][ T7159] tmpfs: Bad value for 'mpol' [ 82.880832][ T7174] fuse: Bad value for 'group_id' [ 82.882383][ T7174] fuse: Bad value for 'group_id' [ 82.992332][ T25] libceph: connect (1)[c::]:6789 error -101 [ 82.994237][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 83.188704][ T78] wlan1: Trigger new scan to find an IBSS to join [ 83.191631][ T78] ------------[ cut here ]------------ [ 83.193931][ T78] WARNING: CPU: 0 PID: 78 at net/mac80211/scan.c:1213 ieee80211_request_ibss_scan+0x7b8/0x9a0 [ 83.198510][ T78] Modules linked in: [ 83.200889][ T78] CPU: 0 UID: 0 PID: 78 Comm: kworker/u32:4 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 83.205678][ T78] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.205776][ T7188] ceph: No mds server is up or the cluster is laggy [ 83.209622][ T78] Workqueue: events_unbound cfg80211_wiphy_work [ 83.209656][ T78] RIP: 0010:ieee80211_request_ibss_scan+0x7b8/0x9a0 [ 83.209684][ T78] Code: e9 3b fb ff ff e8 88 df 08 f7 be 04 00 00 00 bf 06 00 00 00 41 bd 04 00 00 00 e8 b3 e1 08 f7 e9 3b fd ff ff e8 69 df 08 f7 90 <0f> 0b 90 bb ea ff ff ff e9 6e fc ff ff 48 c7 c7 54 18 1d 90 e8 6f [ 83.221557][ T78] RSP: 0018:ffffc9000100f988 EFLAGS: 00010293 [ 83.223386][ T78] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8a906fc0 [ 83.225708][ T78] RDX: ffff88801f990000 RSI: ffffffff8a907057 RDI: 0000000000000005 [ 83.228198][ T78] RBP: ffff88804c61d720 R08: 0000000000000005 R09: 0000000000000000 [ 83.230599][ T78] R10: 0000000000000000 R11: 0000000000000003 R12: 0000000000000005 [ 83.233031][ T78] R13: 0000000000000006 R14: dffffc0000000000 R15: ffff888068170e40 [ 83.235422][ T78] FS: 0000000000000000(0000) GS:ffff88802b400000(0000) knlGS:0000000000000000 [ 83.238175][ T78] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.240171][ T78] CR2: 0000000020001000 CR3: 000000004f9b2000 CR4: 0000000000352ef0 [ 83.242542][ T78] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 83.244902][ T78] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 83.247292][ T78] Call Trace: [ 83.248253][ T25] libceph: connect (1)[c::]:6789 error -101 [ 83.248443][ T78] [ 83.250251][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 83.251063][ T78] ? __warn+0xea/0x3c0 [ 83.254070][ T78] ? ieee80211_request_ibss_scan+0x7b8/0x9a0 [ 83.255973][ T78] ? report_bug+0x3c0/0x580 [ 83.257358][ T78] ? handle_bug+0x54/0xa0 [ 83.258779][ T78] ? exc_invalid_op+0x17/0x50 [ 83.260215][ T78] ? asm_exc_invalid_op+0x1a/0x20 [ 83.261748][ T78] ? ieee80211_request_ibss_scan+0x720/0x9a0 [ 83.263574][ T78] ? ieee80211_request_ibss_scan+0x7b7/0x9a0 [ 83.265403][ T78] ? ieee80211_request_ibss_scan+0x7b8/0x9a0 [ 83.267213][ T78] ? ieee80211_request_ibss_scan+0x7b7/0x9a0 [ 83.269164][ T78] ieee80211_ibss_work+0x107f/0x14c0 [ 83.270815][ T78] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 83.272528][ T78] ? lock_acquire.part.0+0x11b/0x380 [ 83.274131][ T78] ? find_held_lock+0x2d/0x110 [ 83.275608][ T78] ? skb_dequeue+0x126/0x180 [ 83.277025][ T78] ? mark_held_locks+0x9f/0xe0 [ 83.278571][ T78] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 83.280351][ T78] ? lockdep_hardirqs_on+0x7c/0x110 [ 83.281966][ T78] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 83.283733][ T78] ieee80211_iface_work+0xd01/0xf00 [ 83.285334][ T78] cfg80211_wiphy_work+0x3de/0x560 [ 83.286903][ T78] process_one_work+0x958/0x1b30 [ 83.288501][ T78] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 83.290370][ T78] ? __pfx_process_one_work+0x10/0x10 [ 83.291992][ T78] ? rcu_is_watching+0x12/0xc0 [ 83.293452][ T78] ? assign_work+0x1a0/0x250 [ 83.294866][ T78] worker_thread+0x6c8/0xf00 [ 83.296276][ T78] ? __kthread_parkme+0x148/0x220 [ 83.297912][ T78] ? __pfx_worker_thread+0x10/0x10 [ 83.299525][ T78] kthread+0x2c1/0x3a0 [ 83.300769][ T78] ? _raw_spin_unlock_irq+0x23/0x50 [ 83.302372][ T78] ? __pfx_kthread+0x10/0x10 [ 83.303786][ T78] ret_from_fork+0x45/0x80 [ 83.305148][ T78] ? __pfx_kthread+0x10/0x10 [ 83.306568][ T78] ret_from_fork_asm+0x1a/0x30 [ 83.308151][ T78] [ 83.309108][ T78] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 83.311300][ T78] CPU: 0 UID: 0 PID: 78 Comm: kworker/u32:4 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 83.314527][ T78] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.317735][ T78] Workqueue: events_unbound cfg80211_wiphy_work [ 83.319632][ T78] Call Trace: [ 83.320650][ T78] [ 83.321562][ T78] dump_stack_lvl+0x3d/0x1f0 [ 83.322951][ T78] panic+0x71d/0x800 [ 83.324151][ T78] ? __pfx_panic+0x10/0x10 [ 83.325513][ T78] ? show_trace_log_lvl+0x29d/0x3d0 [ 83.327097][ T78] ? check_panic_on_warn+0x1f/0xb0 [ 83.328676][ T78] ? ieee80211_request_ibss_scan+0x7b8/0x9a0 [ 83.330494][ T78] check_panic_on_warn+0xab/0xb0 [ 83.332005][ T78] __warn+0xf6/0x3c0 [ 83.333203][ T78] ? ieee80211_request_ibss_scan+0x7b8/0x9a0 [ 83.335015][ T78] report_bug+0x3c0/0x580 [ 83.336326][ T78] handle_bug+0x54/0xa0 [ 83.337558][ T78] exc_invalid_op+0x17/0x50 [ 83.338946][ T78] asm_exc_invalid_op+0x1a/0x20 [ 83.340433][ T78] RIP: 0010:ieee80211_request_ibss_scan+0x7b8/0x9a0 [ 83.342417][ T78] Code: e9 3b fb ff ff e8 88 df 08 f7 be 04 00 00 00 bf 06 00 00 00 41 bd 04 00 00 00 e8 b3 e1 08 f7 e9 3b fd ff ff e8 69 df 08 f7 90 <0f> 0b 90 bb ea ff ff ff e9 6e fc ff ff 48 c7 c7 54 18 1d 90 e8 6f [ 83.348177][ T78] RSP: 0018:ffffc9000100f988 EFLAGS: 00010293 [ 83.350006][ T78] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8a906fc0 [ 83.352396][ T78] RDX: ffff88801f990000 RSI: ffffffff8a907057 RDI: 0000000000000005 [ 83.354788][ T78] RBP: ffff88804c61d720 R08: 0000000000000005 R09: 0000000000000000 [ 83.357174][ T78] R10: 0000000000000000 R11: 0000000000000003 R12: 0000000000000005 [ 83.359591][ T78] R13: 0000000000000006 R14: dffffc0000000000 R15: ffff888068170e40 [ 83.361993][ T78] ? ieee80211_request_ibss_scan+0x720/0x9a0 [ 83.363817][ T78] ? ieee80211_request_ibss_scan+0x7b7/0x9a0 [ 83.365635][ T78] ? ieee80211_request_ibss_scan+0x7b7/0x9a0 [ 83.367457][ T78] ieee80211_ibss_work+0x107f/0x14c0 [ 83.369081][ T78] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 83.370830][ T78] ? lock_acquire.part.0+0x11b/0x380 [ 83.372416][ T78] ? find_held_lock+0x2d/0x110 [ 83.373870][ T78] ? skb_dequeue+0x126/0x180 [ 83.375281][ T78] ? mark_held_locks+0x9f/0xe0 [ 83.376744][ T78] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 83.378517][ T78] ? lockdep_hardirqs_on+0x7c/0x110 [ 83.380087][ T78] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 83.381850][ T78] ieee80211_iface_work+0xd01/0xf00 [ 83.383442][ T78] cfg80211_wiphy_work+0x3de/0x560 [ 83.384999][ T78] process_one_work+0x958/0x1b30 [ 83.386533][ T78] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 83.388425][ T78] ? __pfx_process_one_work+0x10/0x10 [ 83.390044][ T78] ? rcu_is_watching+0x12/0xc0 [ 83.391522][ T78] ? assign_work+0x1a0/0x250 [ 83.392926][ T78] worker_thread+0x6c8/0xf00 [ 83.394316][ T78] ? __kthread_parkme+0x148/0x220 [ 83.395840][ T78] ? __pfx_worker_thread+0x10/0x10 [ 83.397394][ T78] kthread+0x2c1/0x3a0 [ 83.398670][ T78] ? _raw_spin_unlock_irq+0x23/0x50 [ 83.400235][ T78] ? __pfx_kthread+0x10/0x10 [ 83.401599][ T78] ret_from_fork+0x45/0x80 [ 83.402954][ T78] ? __pfx_kthread+0x10/0x10 [ 83.404362][ T78] ret_from_fork_asm+0x1a/0x30 [ 83.405826][ T78] [ 83.407390][ T78] Kernel Offset: disabled [ 83.408760][ T78] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:00:51 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85143475 RDI=ffffffff9a667200 RBP=ffffffff9a6671c0 RSP=ffffc9000100f2c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000007 R12=0000000000000000 R13=0000000000000020 R14=ffffffff85143410 R15=0000000000000000 RIP=ffffffff8514349f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020001000 CR3=000000004f9b2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000000 RCX=1ffffffff2d407c5 RDX=0000000000000002 RSI=ffff888022bcd360 RDI=ffff888022bcd382 RBP=0000000000000006 RSP=ffffc90020ec76a0 R8 =0000000000000000 R9 =fffffbfff2d36db0 R10=ffffffff969b6d87 R11=0000000000000001 R12=ffff888022bcc880 R13=dffffc0000000000 R14=ffff888022bcd360 R15=ffffc90020ec7898 RIP=ffffffff817601ea RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4266edf6c0 CR3=00000000258c2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000011322d RBX=0000000000000002 RCX=ffffffff8b1a4819 RDX=0000000000000000 RSI=ffffffff8b4cd300 RDI=ffffffff8bb17100 RBP=ffffed10036f0000 RSP=ffffc9000048fe08 R8 =0000000000000001 R9 =ffffed10056c6fed R10=ffff88802b637f6b R11=0000000000000000 R12=0000000000000002 R13=ffff88801b780000 R14=ffffffff901ce550 R15=0000000000000000 RIP=ffffffff8b1a5bff RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f444bda4 CR3=000000000db7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000deded RBX=0000000000000003 RCX=ffffffff8b1a4819 RDX=0000000000000000 RSI=ffffffff8b4cd300 RDI=ffffffff8bb17100 RBP=ffffed10036f0488 RSP=ffffc9000049fe08 R8 =0000000000000001 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801b782440 R14=ffffffff901ce550 R15=0000000000000000 RIP=ffffffff8b1a5bff RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055758f3fa328 CR3=0000000049d6e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73d3ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000