last executing test programs: 13.818197906s ago: executing program 2 (id=641): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x24089, 0x80}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r3, 0x47f6, 0xb277, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x10b, 0x0) socket$nl_generic(0x11, 0x3, 0x10) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20980, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r6, 0x40045109, &(0x7f0000002240)) openat$cachefiles(0xffffff9c, &(0x7f00000000c0), 0xaa080, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000340)=""/4096, 0x412269194f7c77a1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_pidfd_open(r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) getrandom(0x0, 0x0, 0x2) 9.846565673s ago: executing program 2 (id=663): r0 = openat$apparmor_task_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10010, r0, 0x41846000) write$apparmor_current(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="6368866e6765686174203078303030303030303030303008003030335e2f70726f632f73656c662f617474722f63757272656e74052e00"], 0x37) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) getpid() syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{}, {}, {}, {0xfffffffd}, {}, {0x0, 0x1000000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000001300)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000280), &(0x7f0000000100)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) 8.487152312s ago: executing program 2 (id=671): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x24089, 0x80}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r3, 0x47f6, 0xb277, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x10b, 0x0) socket$nl_generic(0x11, 0x3, 0x10) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20980, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r6, 0x40045109, &(0x7f0000002240)) openat$cachefiles(0xffffff9c, &(0x7f00000000c0), 0xaa080, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000340)=""/4096, 0x412269194f7c77a1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_pidfd_open(r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) getrandom(0x0, 0x0, 0x2) 7.008711162s ago: executing program 3 (id=676): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b6000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) setsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x0) 6.68197986s ago: executing program 3 (id=677): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x20, &(0x7f00000009c0)=ANY=[@ANYBLOB="18008d0000ad000000000000000300000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000186b00000e000000000000000100000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000000000000850000008600000080108000100000000de50300faffffff1800000002000000000000000e000000950000000000000018110000", @ANYBLOB="9790b614828ba87f0cea1e400ce5191f039eb5781507c0bc5bf89f9419041cdbdbea1336158b06600efe654edb02caffe6e3d35bb1dc24a4d54f75376c617f8c60a75324946b4ac4408e2eccb551b43f7fb14873140a9d81db6dff158a2d48a0b429cc07dde380f7f1ae3c910d0dd664a4548d8b5dbfc2f190d709bc81d75e", @ANYBLOB="0000000000000000b7080000800000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000300000085000000820000001835000002000000000000000000000018200000", @ANYRES32, @ANYBLOB="00000000100000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x401, 0xb3, &(0x7f0000000680)=""/179, 0x41100, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0xb, 0x6ac7f67e, 0xfff}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000780)=[{0x0, 0x5, 0xf, 0xa}], 0x10, 0x1, @void, @value}, 0x94) modify_ldt$write2(0x11, &(0x7f0000000140)={0x8, 0x20001000, 0x400, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000240)={0xa, 0x20000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) 6.593387295s ago: executing program 3 (id=678): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x20, &(0x7f00000009c0)=ANY=[@ANYBLOB="18008d0000ad000000000000000300000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000186b00000e000000000000000100000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000000000000850000008600000080108000100000000de50300faffffff1800000002000000000000000e000000950000000000000018110000", @ANYBLOB="9790b614828ba87f0cea1e400ce5191f039eb5781507c0bc5bf89f9419041cdbdbea1336158b06600efe654edb02caffe6e3d35bb1dc24a4d54f75376c617f8c60a75324946b4ac4408e2eccb551b43f7fb14873140a9d81db6dff158a2d48a0b429cc07dde380f7f1ae3c910d0dd664a4548d8b5dbfc2f190d709bc81d75e", @ANYBLOB="0000000000000000b7080000800000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000082000000183500000200000000000000000000001820", @ANYRES32, @ANYBLOB="00000000100000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x401, 0xb3, &(0x7f0000000680)=""/179, 0x41100, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0xb, 0x6ac7f67e, 0xfff}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000780)=[{0x0, 0x5, 0xf, 0xa}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080), &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x98, &(0x7f0000000580)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x20061, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe41, @void, @value}, 0x94) modify_ldt$write2(0x11, &(0x7f0000000000)={0x2c9, 0x100000, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1}, 0x10) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000)=r4, 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="27050200340f14000600002fb96dbcf7060600000017000000ff1144ee162fd4b8bf7256da82f600102821880b00000000000000570000000600000000000000", 0x40}, {&(0x7f0000001240)="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", 0xf0a}], 0x2}, 0x9cdc2384056b48b8) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="b805008ec064c109c6f2ab3e2e2e67f20f5c26baf80c66b86088e58366efbafc0c66b85200000066ef0f7953002e0f1f0066b8005000000f23d80f21f86635400000f00f23f836f390b898038ec0", 0x4e}], 0x1, 0x46, &(0x7f0000000100)=[@cstype3={0x5, 0x2}], 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='net/ip6_tables_matches\x00') r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000407b1"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) modify_ldt$write2(0x11, &(0x7f0000000140)={0x8, 0x20001000, 0x400, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) sendfile(r8, r8, &(0x7f0000000000)=0x7, 0x4) modify_ldt$write(0x1, &(0x7f0000000240)={0xa, 0x20000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) r9 = socket(0x1e, 0x4, 0x0) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0xfffffffd}, 0x10) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000280)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000) r11 = dup3(r10, r9, 0x0) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x40201, 0x0) ioctl$PPPIOCGFLAGS1(r12, 0x541b, 0x0) recvmmsg$unix(r11, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1, 0x0, 0x1800}}], 0x1, 0x0, 0x0) 6.357912802s ago: executing program 3 (id=679): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008000000000000", @ANYBLOB="00000000706877b88410"], 0x48) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newsa={0x138, 0x10, 0x413, 0x70bd26, 0x0, {{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x20, 0x20}, {@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8}, {0x0, 0x0, 0xcc}, {}, 0x0, 0x0, 0x2, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x138}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x2}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x82, &(0x7f00000001c0)={r7, 0x40, 0x8}, 0x8) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x24}}, 0x40) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r9, 0xc048aec8, &(0x7f0000000980)={0x4, 0x0, @pic={0x52, 0x9, 0x2, 0x6, 0xbf, 0x4, 0xb, 0x6, 0x3, 0x1, 0x3, 0x23, 0xf, 0x0, 0x4e, 0x8}}) r10 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.log\x00', 0x400080, 0x65) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f0000000300)=[@window={0x3, 0x8000, 0x8}, @window={0x3, 0xef0e, 0x3}, @window={0x3, 0x81, 0x8000}, @mss={0x2, 0xfffffff0}, @window={0x3, 0x3, 0xfffc}, @mss={0x2, 0x5}, @window={0x3, 0x2, 0x81}, @mss={0x2, 0x1}, @sack_perm, @mss={0x2, 0x6}], 0xa) 5.433033556s ago: executing program 2 (id=682): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 5.346990382s ago: executing program 2 (id=683): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="f8ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400009e54000000000000000000000000000000000000008b3809aec0701768a9e301b130c68899b2bd025ee9da974e70692c0602c81a60d2b1c3feab59a6c3d5d3eb295cbc68e3575b75aba3c18af19a36a04ab1bafd555731ea5a55d1fa48d5e4dd8407516b7b33e6fd5f51de202adbefd458e00fe7657e3c5829581b8a26a71a01da68420f4aa921765e587a2d1453"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) r2 = syz_io_uring_setup(0x38fe, &(0x7f0000000600)={0x0, 0x5d3e, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180), &(0x7f0000000400)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) (async) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="1400000016000b43d27a80648c2594f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) (async) write$binfmt_aout(r4, &(0x7f0000001640)=ANY=[], 0x1a3) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f8000000160001000000000000000000ff01000000000000000000000000000100000000000000000000ffff000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ff00001414200000000033000000000000000000000000000000000000000000000000000001000000000000000000000000000000004432b295000000000000000000000000f1ffffffffffffff030000000000000000000000000000000000000000000000000000feffffffff"], 0xf8}}, 0x0) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) write$binfmt_misc(r4, 0x0, 0x0) (async) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6]}}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETA(r8, 0x8924, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) (async) r9 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) read$nci(r7, &(0x7f0000000800)=""/4096, 0x1000) (async) r10 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r10, &(0x7f0000000380)={'stack ', ':\x00~\x14-\x90\x14\x05\x00\x8fQhj\x1b\x04\xe5\x8d\xa1\xc2\xaa-\xc7gD#\x03\x1c\xee\xaa\xdd\x80\x9e/\x19{S\x15\xfe\xbaO\xae\xa1z,\xde-\x8fKN\x86g\x9b\xe4\xfe\xae/\x90\xd8^O\x86\x81\x84\xabq\xeb\x8b;F\xe9\xee\xc8\xd1\xb4Q\x05\x14\xe7\xa9c(0D7[\xccB\xe1Y\x99\x05\xae\xba\x00\xc4\b1\x84\xd6\b\xb0\xf0\x9a\x98\x85;\xffUq9:\xaf\xa2\x83\x88d\xc0\xe5\xcfF\x144}\x02\xb9\xb1\x85\x7fx\xe6\'\x8c\x898\'eD\xcbj\xde;+\n1\xd4\x15\xf9Q\xacw\xcfS\xed\x80\fkt\xed\xdb|\x10\xbd\xbe\xf1\x94\x99\xe1?\x10\xda\xc7\xed['}, 0xb3) fcntl$setlease(r9, 0x400, 0x0) 4.987298495s ago: executing program 0 (id=685): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, r1, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000c40)={{0x2000000, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0xfffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x7]}) 4.887338377s ago: executing program 0 (id=686): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) modify_ldt$write2(0x11, &(0x7f0000000140)={0x8, 0x20001000, 0x400, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000240)={0xa, 0x20000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) 4.724331306s ago: executing program 0 (id=688): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xfffffffffffffffe) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r4}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYRES32], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x11) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(r7) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000e8aad1b80eb5a71acbc5066cb1af7373e83547112d71511f224f43c2cb5b7e8f878d7751fcd54a39b09fc3b224d8d97c7877a7640a82c18d82c99650bbd39dba361d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000380)='/', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000040)={r8}, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 3.465930018s ago: executing program 0 (id=689): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0xfa8cce04cde62478, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000004500)={0x3, 0x80000002, 0x0, 0x0, 0x0, "1241b72d7fffff5b000f000000462200"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "5a5f0020008a3fc945e8724a114177ffffef00"}) syz_open_pts(r0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="020701000209e5b74738"], 0x10}}, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x23b, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0x0, 0x9f}, &(0x7f0000000540)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) timerfd_create(0x1, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000280)={{0x77359400}, {0x0, 0x3938700}}, 0x0) openat(r3, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000180)=0x83, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0xc0105500, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r5]) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000004a6d591020012800b0001006272e15889b86f699a5e0d4887938df91739ff79e7cb480ed7abe307d804ead42322bb5d9eebd63cc1230e29e83fd956e25d21f3443405e88a427acf86baee2fb71cffc872f0cf2d270ad044d0750e71a02eced751bcf3f4c08afd2a504da2fa1c8856a7239d06ee386e1f4a411b9d8951595e50a7495467b3f48097fa0f46f94ee5f25a1d2ec110d88167a86bff1a4cf10bba0f553634f9eed1fb23"], 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010002a0401000000000000007a0000001a01614e3ff89769ed66f2d6b3e67bce1a52a54bee2ccde700"/56, @ANYRES32=0x0, @ANYBLOB="01900400000000001c0012800b00010062726964676500000c0002800500190058000000"], 0x3c}}, 0x0) 3.161229637s ago: executing program 3 (id=691): r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r6, 0xc0603d06, &(0x7f0000000040)) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r8 = accept4(r5, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched_retired(r8, &(0x7f000001be80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b00)=@newchain={0x2dd8, 0x64, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xe}}, [@f_rsvp={{0x9}, {0x4}}, @f_rsvp6={{0xa}, {0x2d98, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @rand_addr=' \x01\x00'}, @TCA_RSVP_DST={0x14, 0x2, @local}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xa, 0x5}}, @TCA_RSVP_ACT={0x2d64, 0x6, [@m_sample={0x1050, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xeda5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3000}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_mirred={0xa0, 0x1c, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x7ff, 0x6, 0x7}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x10000, 0x3, 0x4000000}, 0x2}}]}, {0x32, 0x6, "7f874e6bb3d67f97f11fa975ee2f48c6b033df777db6d70335b00de04cbf5c68a7fefa7eef02d33269cf2d4efbc1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x5}}}}, @m_ctinfo={0x50, 0x11, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x74}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x200}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x5}}}}, @m_police={0x1928, 0x6, 0x0, 0x0, {{0xb}, {0x1894, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x80}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff0}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfe, 0xadd, 0xffff8000, 0x1, 0x8, 0x2000000, 0xe02, 0x8724, 0x4, 0xffffffff, 0x8, 0x400, 0x7, 0x401, 0x8000, 0x3ab, 0x7, 0x6, 0x8001, 0x4, 0x2, 0x8b, 0x3e6, 0x5, 0x5, 0xffffff81, 0x5, 0x8, 0xc8, 0xff, 0x7, 0x10, 0x5, 0x9, 0x1, 0xe19, 0x1000, 0x1, 0x7, 0x10001, 0x8, 0x5, 0x98, 0x4, 0x4a94, 0x5, 0x3, 0x7, 0x9, 0x8, 0x9, 0xfffffff7, 0x7f, 0x0, 0x6, 0x3d, 0x6, 0x9, 0x3, 0x7, 0xa, 0x4, 0x0, 0x0, 0x9, 0x7, 0x6a, 0x690, 0xb, 0x1, 0x0, 0x0, 0xbb, 0x9, 0x0, 0x8000, 0x3, 0x9, 0x10, 0x6, 0x6, 0x5, 0x9, 0x6, 0x9, 0xfffffffe, 0x22164ba5, 0x8, 0x6, 0x0, 0x8, 0xd1, 0x401, 0xfffffff7, 0x1, 0x3, 0x4c, 0x20000, 0x401, 0x7, 0x3, 0x3ff, 0x823, 0x9, 0x1, 0x800, 0x1, 0x8001, 0x100, 0x30, 0x10, 0x3ff, 0x4, 0x5, 0xc6a0, 0xeee1, 0x40, 0x0, 0x5a, 0x6, 0x1000, 0x6, 0x4, 0x4, 0x7, 0xf0000000, 0xc4, 0x9217, 0x3, 0x8, 0xd, 0x5, 0x2, 0x8, 0x200, 0x8, 0x9, 0xffffffff, 0x1, 0xbfc, 0xfffffbff, 0x1, 0xffffffff, 0x2bb, 0x8, 0x4, 0x6ee, 0x8, 0xfffffff7, 0xe, 0x7, 0x8, 0x3ff, 0x7fffffff, 0x80000001, 0xd, 0x2, 0x6, 0x5, 0xc, 0x7fffffff, 0x74a6, 0xa16c, 0x8, 0xe8, 0x9, 0x760b, 0x6, 0x4, 0x79, 0x1, 0x8, 0x6, 0x8, 0x5, 0x6, 0x2, 0x2, 0x9, 0x63, 0x2, 0xf, 0x3, 0x2, 0x1, 0x7, 0x10000, 0x1, 0x1, 0xff, 0x200, 0x28000000, 0x98, 0x1, 0x40, 0x80000001, 0x5, 0x6, 0x10001, 0x18, 0xfffffff8, 0x5, 0x7, 0x7, 0x3, 0x8, 0x4, 0x9, 0x9, 0x9, 0xfffffffa, 0x1, 0xd, 0xfffff840, 0x3a3c0255, 0x2, 0x8000, 0x400000, 0x80, 0x9, 0xfffffffe, 0xfff, 0x7fffffff, 0x20, 0x8001, 0x5, 0x3, 0x0, 0x3, 0x81, 0x10001, 0x7, 0x8, 0x75, 0x6, 0x8, 0x6, 0x7, 0xfffffffc, 0x45, 0x92, 0xe, 0x65, 0x400, 0x1, 0x38c, 0x10000, 0x49a, 0x4, 0x0, 0x2, 0xfffffffc, 0x863a, 0x74, 0x1, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x9, 0x9, 0x8, 0x4, 0x184, 0xfffffeff, 0x6cd, 0x0, 0x4, 0xe5dd, 0xffffffff, 0x5, 0x2, 0x8, 0xf4, 0x4, 0x7, 0x3, 0x2, 0x7, 0x1, 0x8, 0x1, 0x89, 0x0, 0x0, 0x7, 0xf, 0x8, 0x400, 0x2, 0x6, 0x5, 0x7fff, 0xc5, 0x80000001, 0x6b55, 0x6, 0x26, 0x81, 0x4, 0x5, 0x3, 0x3ff, 0x399efd8e, 0x4, 0xa, 0x80, 0x101, 0x100, 0x9d, 0x8, 0x7ff, 0xe, 0x3, 0x7, 0x4, 0x2, 0x4, 0x6, 0x9, 0x200, 0x4, 0x5, 0x8, 0x0, 0x9, 0x4, 0x5, 0x2, 0x6, 0x0, 0xfffffffc, 0x400, 0x80000000, 0x0, 0xfffffffa, 0x7, 0x3, 0x81, 0x1, 0x81, 0x1, 0x5, 0x3, 0x4, 0x4, 0x4, 0x2, 0x3ff, 0x1, 0x3, 0x4ac4, 0xd59, 0x9, 0x8, 0x0, 0x6, 0x2, 0x8, 0xce71, 0x3, 0x2, 0xfe, 0x7, 0x8, 0xa858329, 0xc7c, 0x8, 0xfffffff5, 0x68, 0x8000, 0x5, 0x7, 0xffff7fff, 0xf, 0x800, 0x9, 0x6, 0x900, 0xfffffffb, 0x9, 0x3, 0x1000, 0x9, 0x4, 0x80000001, 0x5, 0x1, 0x6, 0xfffffffd, 0x9, 0xff, 0x8, 0x7, 0x136, 0x1, 0x9, 0x7, 0x33d, 0x3a4, 0x1, 0x8, 0x0, 0xfffffff9, 0x81, 0x6, 0xd2, 0x9, 0x8, 0x7, 0x0, 0x4, 0x1, 0x7, 0x7, 0x7, 0xd, 0x9, 0xd2c, 0x200, 0x80000000, 0xfff, 0xeaa, 0xb951, 0x3, 0x7, 0x1, 0x9, 0x5, 0x4000000, 0x8, 0x9, 0x1, 0x5, 0x7, 0xb18, 0x200, 0x7, 0xe0, 0x5, 0x7f, 0x3, 0x8, 0x5, 0x3, 0x7, 0x0, 0xeb, 0x8, 0x0, 0x3, 0xa, 0x0, 0x9, 0x6, 0xf, 0xe36, 0x9, 0x93, 0x8, 0x0, 0x4, 0x5, 0x6a4, 0x367a, 0x3, 0x9, 0x1000000, 0x0, 0x7, 0x0, 0xea, 0xfffff801, 0xffffeae3, 0x0, 0x6, 0x0, 0x4, 0x9, 0x1, 0x2, 0x8, 0x8b, 0xd8bb, 0xa, 0x294, 0xbd, 0x9, 0x7f, 0x9, 0x1, 0x7f, 0x5, 0x800, 0x1f8b7470, 0xd8f, 0x48, 0xfffffff0, 0x6, 0x1, 0x0, 0x1, 0x80, 0x2, 0x9, 0x3ff, 0x5, 0x2, 0x5, 0xc, 0xfff, 0x0, 0x3, 0x91]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x7a94c528, 0x3, 0x6, 0xffffffb0, 0x1000, 0x5, 0x4, 0x7, 0xff, 0x1f, 0x80000000, 0x8001, 0xd, 0x7, 0x0, 0x2, 0x65, 0x97, 0x8bbd, 0x0, 0x40000, 0x6, 0x5, 0x1000, 0xe124, 0x4f, 0x400, 0x9, 0x1000, 0x1, 0x7fff, 0x0, 0x1, 0x3, 0x4, 0xfffff997, 0x5, 0x6, 0x4, 0x4, 0xfffffffc, 0x7, 0x9, 0x11d, 0x8, 0x8, 0x6, 0x40, 0x80, 0x80, 0x0, 0x9f, 0x3, 0x9, 0x7fffffff, 0x1, 0x7f, 0x3, 0x0, 0x3, 0x7a, 0x2, 0x4, 0xff, 0x4, 0xfffffff8, 0x0, 0x211a9a78, 0x58b, 0x8, 0x3, 0x4, 0x2, 0x2, 0xe8d, 0xb2, 0x3ff, 0x7, 0x10001, 0xfd, 0x9, 0x7fff, 0x80000000, 0x400, 0xffffffff, 0x0, 0x5, 0x518, 0x4, 0x1, 0x9, 0x5, 0x0, 0x7, 0x1, 0x2, 0x5, 0x5fa, 0x3, 0x9, 0x8, 0x2, 0x6c70, 0xdbbe, 0x101, 0xffffffff, 0x5, 0x9, 0xffff, 0x100, 0x6, 0x5, 0x7, 0x0, 0xffff, 0x5, 0x80000000, 0x2, 0x2, 0x0, 0x3c, 0x2cc4, 0x3, 0x40c, 0xc86, 0x9, 0x8, 0x5, 0x1, 0x200, 0x2, 0xfffffffd, 0x2, 0x2, 0x2, 0x3, 0x31bc97ce, 0x8, 0x7fff, 0x7, 0x6, 0x3, 0x3ff, 0x0, 0x5, 0x57d556eb, 0x7, 0x2, 0x5, 0x41, 0x1, 0xa4, 0xfff, 0xfff, 0x3, 0x2000005, 0x6, 0x3, 0x180000, 0x3, 0x9, 0xffffffff, 0x7, 0xc, 0x10001, 0x8000, 0xe, 0x400, 0xfffffffe, 0x1, 0x7, 0x2, 0x1, 0x9, 0x2, 0x7ff, 0x2, 0x6, 0x2, 0x1, 0x1ff, 0x7, 0x5, 0x99a, 0x8, 0x2, 0xffff6f1f, 0x9, 0x4, 0x9, 0x80, 0x7, 0x23, 0x8, 0x3, 0x2, 0x5, 0x9, 0x4, 0x8, 0x5, 0x80000000, 0x0, 0x3, 0x8ecb, 0x5, 0x6, 0x4, 0x9, 0x3, 0xfc, 0x0, 0x8000, 0x2ff, 0x1, 0x8, 0xbf34, 0x7, 0xd, 0x10000, 0x8, 0x12000, 0x5, 0x9, 0xffffffff, 0x55, 0x1085, 0x8, 0x91, 0xfff, 0x2, 0x5159, 0x6, 0x6, 0x0, 0xfbbe, 0x3, 0xd1, 0xa, 0x9, 0x200, 0x6, 0x101, 0x1, 0xab1, 0x9, 0xfff, 0x4, 0x5e3, 0xc84d, 0x7fff, 0x6, 0xd007, 0x37cb901e, 0xfffffffb]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x3, 0x7, 0x8, 0xd, {0xf, 0x0, 0x3, 0x6, 0x9, 0xa}, {0x6, 0x2, 0x7, 0x6, 0xf, 0x1}, 0x4, 0x7fff, 0x26}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x80, 0x9, 0x7fffffff, 0x2, 0x7fffffff, 0x3a1, 0x1, 0x80000001, 0x6, 0x1, 0x9, 0x0, 0x7, 0x6, 0x2, 0x4, 0xa, 0x5, 0x6, 0x6, 0x7, 0x5, 0x3, 0x4, 0x9, 0x2, 0x4, 0x8, 0x0, 0xff, 0xfff, 0x9c99, 0x6, 0x6, 0xee0, 0x1, 0x7, 0x6e, 0x3, 0x5, 0x9a, 0x9, 0x2, 0x3, 0x8, 0x3, 0xc, 0x3, 0x2, 0x7, 0x101, 0x1800, 0x4, 0x10, 0x1, 0x7, 0x7, 0xfffffff8, 0x2, 0x9, 0xb, 0x4, 0x3, 0x80000001, 0xffff7b6c, 0x6, 0x5c, 0x7, 0x8, 0x246cda72, 0x3, 0x1, 0x200, 0x9, 0xe, 0xff, 0xa7b, 0x8, 0x3, 0x9, 0x2, 0x28000, 0x0, 0x27d7ad2, 0x6, 0x10001, 0x8, 0xaa8, 0xffffffff, 0xd, 0x7ff, 0x8, 0x8, 0x9, 0xb, 0x7ff, 0xffffffff, 0x5, 0x9, 0xbd, 0xcb25, 0x7, 0x42f, 0x8, 0x400, 0x81, 0x6, 0x6, 0x9, 0x2, 0xfb71, 0x800, 0x70812d63, 0x76, 0x9, 0x7, 0xe, 0xfffffff9, 0xfff, 0x4, 0x0, 0xb, 0x1, 0x4, 0x5, 0x80000001, 0xf3e, 0x6e3b279a, 0x800, 0x17, 0x7ff, 0x0, 0xeaa, 0x0, 0x3, 0x800, 0x34ed, 0x10000, 0x8, 0x1ff, 0xfffffffb, 0x101, 0xfffffe4d, 0x7, 0x9, 0x5, 0x800, 0x8, 0x5a04, 0xfff, 0x7, 0x9, 0x5, 0x38dd, 0x8001, 0x61, 0x8, 0x9, 0x40, 0x4, 0x100, 0x5, 0x7, 0x645d, 0x9, 0x76d, 0x2, 0x2, 0x1, 0x5, 0x2, 0x6, 0x9, 0x3ff, 0xd, 0x8, 0x9, 0xbd4, 0x6, 0x1, 0x800, 0x8, 0x0, 0xb4, 0x8, 0x7, 0x0, 0x7f, 0xcb3, 0x442d, 0x7, 0x3, 0x417c, 0xfc75, 0x3, 0x3, 0x4, 0x3, 0x7fff, 0x7, 0x6, 0x80000001, 0x0, 0x2, 0x9, 0x0, 0x28d, 0x8, 0x1, 0x80a4, 0x6, 0xa00, 0x7, 0x0, 0x48f, 0xb3b5, 0x6, 0x4, 0x0, 0x81, 0x3, 0x9, 0x6b24, 0x58c, 0x0, 0x3, 0x1, 0x80, 0x1, 0x7fffffff, 0x8, 0x9, 0x900c, 0x7fff, 0x7f, 0xc, 0x1, 0x7fb9, 0x3, 0x7, 0x0, 0x5, 0x8, 0x9, 0x8, 0x3, 0xa, 0x0, 0x6, 0x5, 0x1, 0x4, 0x3, 0xffffff80, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x7, 0x9, 0x1, 0x9, 0x67, 0x4, 0x200, 0xb8, 0x7, 0x70, 0xfe0c, 0xfffffffb, 0x7, 0x0, 0x7, 0x28, 0x2, 0x0, 0x7, 0xfb, 0x8, 0x2, 0x9, 0x10001, 0x39, 0x5, 0xe4a, 0x9, 0x9, 0x5, 0x7fff, 0x7, 0x7, 0xfffff000, 0x2, 0x200, 0x8, 0x1ff, 0x8, 0x6, 0x1b, 0x1, 0xff, 0x3000000, 0x5, 0x2a, 0x3e, 0x80000000, 0x1, 0x54, 0x0, 0x7fffffff, 0x9, 0x9, 0x7, 0x0, 0xfffffffb, 0xcd, 0x81, 0x4, 0xd00, 0x6, 0x4, 0xa4, 0x7, 0x84, 0x30a, 0x647a41bc, 0xad, 0x9, 0x5, 0x81, 0xdc71, 0x1, 0x4, 0x7, 0x8, 0xfffffeca, 0x0, 0x80, 0x7446, 0x1, 0xfff, 0xfffeffff, 0x7fff, 0x91, 0x8, 0x1, 0xb, 0x10000, 0x5, 0x7, 0xfffffff7, 0x84, 0x7, 0x101, 0x80000000, 0x9e3, 0x3, 0x400, 0x100, 0x56, 0x0, 0x5, 0x858, 0x4, 0xb, 0xfffffffa, 0x4, 0x1, 0xad, 0x80, 0x6, 0x9, 0x394, 0x2, 0x101, 0x200, 0x2, 0x8, 0x6a97, 0x7, 0x6, 0x6, 0x38000, 0x1, 0x5, 0x3, 0x20, 0xfffffffa, 0x101, 0x8, 0x40, 0x4, 0x1, 0x26483fb2, 0x5, 0x8fb, 0x401, 0x6, 0x8, 0x7fffffff, 0x7, 0x9, 0xffff, 0x3, 0xbe, 0x8001, 0x1, 0x1, 0x3, 0x7f, 0x794f, 0xffffffff, 0x6, 0x9, 0x0, 0x5, 0x9, 0x40, 0x0, 0x9, 0x7, 0x6, 0x4, 0x7, 0x6, 0x9, 0xfffffffe, 0x5, 0x7, 0x7, 0x6, 0x6, 0x63b, 0xa, 0x3, 0x1, 0xfffffffa, 0x6, 0x80, 0x0, 0x1000, 0x751, 0x8, 0x0, 0xc1, 0x7ff, 0x3, 0x6, 0x8001, 0x9, 0xe, 0xd548, 0x3, 0x4, 0x5, 0x5, 0x7, 0x1, 0x1, 0x5f7a2d97, 0x3ff, 0x3, 0x41bc, 0x4800, 0x10, 0xcc, 0x8, 0xe, 0x3ff, 0xd, 0x6, 0x5, 0x5, 0xc, 0x800, 0x1, 0x8, 0x3, 0x3, 0x7, 0x2, 0x1, 0x5, 0x3, 0x3ff, 0xbe7d, 0x5, 0x8, 0xe3c, 0x8000, 0x0, 0x1efc, 0x4, 0x9, 0xf7b0, 0x2, 0x4, 0xfffffff8, 0xd, 0x0, 0x2, 0x81, 0x5d8, 0xfffffff9, 0xd0, 0x200, 0x100, 0xf5a, 0xfe, 0x7, 0x401, 0x200]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}], [@TCA_POLICE_RATE={0x404, 0x2, [0xd9d8, 0x9, 0x8, 0x7, 0xd, 0x6, 0x0, 0x3, 0x4, 0x8000, 0x401, 0x3, 0x9, 0x9b1a, 0x307f, 0x8, 0x81, 0x9, 0x8, 0x271, 0xffff, 0x6, 0x7fffffff, 0x7dd, 0x4, 0x28c, 0xffffff8d, 0x6, 0x4, 0x4, 0x9, 0x9, 0x64, 0x4, 0xfffffffa, 0x6, 0xffffffff, 0x4000, 0x8, 0x6, 0x3, 0x9, 0x7fffffff, 0x9, 0xff, 0x7, 0x5, 0xffff, 0x5, 0x43, 0x3, 0x2, 0x0, 0x7, 0x9, 0xc621, 0x2, 0x1ff, 0x7, 0x6, 0x7f, 0x2, 0x10, 0x270, 0xc, 0x5, 0x2, 0x7, 0x6, 0x8, 0x4, 0x100, 0x0, 0x2, 0x6, 0x44, 0x6, 0x6, 0x0, 0x7, 0x400, 0x0, 0x0, 0x2, 0xde, 0xe, 0x0, 0x1, 0x7, 0x5, 0x8, 0x1c983f51, 0x2, 0x8, 0x4, 0xfffffffc, 0x9, 0x1000, 0xfff, 0x60, 0x200, 0x3, 0x2, 0x400, 0x6, 0x66e6d03f, 0x0, 0xfff, 0x1, 0x0, 0x7fffffff, 0x8, 0x9, 0x4, 0x4, 0xffffff7f, 0x80, 0x1000, 0xbdd, 0x1, 0x0, 0xfff, 0x9, 0x200, 0x81, 0xb, 0x5, 0x8, 0x41d6, 0x6, 0xfffffff7, 0x8, 0xfffffffc, 0x101, 0x4, 0x4, 0x3ff, 0x3ff, 0xc, 0x4, 0x1000, 0x5, 0x3, 0x1, 0x61, 0x0, 0x2, 0x0, 0xffff, 0xffffffff, 0x7, 0x7, 0x7, 0x5, 0xfffffffa, 0x8, 0x7, 0xdba4, 0x8, 0x7, 0x7, 0x8, 0x92, 0x3, 0x6, 0x10, 0x365, 0x8, 0x0, 0x4, 0x867e, 0x5, 0x80000000, 0x96, 0x4, 0x2, 0x1, 0x6, 0x7, 0x0, 0x7, 0xf4ea, 0x1, 0xff, 0x2, 0x2, 0xa7dc, 0x1, 0x0, 0x7, 0x7, 0x1, 0x4, 0xbe5, 0x7f, 0x8, 0x6, 0x1e, 0x200, 0xa7, 0x4, 0xfff, 0x1, 0xd59a, 0x81, 0xffffffff, 0x5, 0x3, 0xc, 0x800, 0x8, 0x10000, 0x4, 0x200, 0x3ff, 0xd, 0x3, 0x1, 0x8df4, 0x4, 0xf0000000, 0x15da, 0xe8bb, 0x0, 0x9, 0x9, 0x5, 0x14000000, 0x1, 0x4, 0x2c, 0x0, 0x80, 0x9, 0x1, 0x568, 0x40, 0x400, 0x0, 0x3, 0xfffffffb, 0x2, 0x2, 0xfffffc01, 0x443, 0x1ff, 0x1, 0xfffffc00, 0xa140, 0x1, 0x4, 0x80000000, 0x2, 0x8, 0xfffffffc, 0xfffffff7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xc3d1}]]}, {0x69, 0x6, "8a2df9d5fcafd6b87f5951571d943f57329862323d6c2c9ff59d46d48bc3d1e6749202324bbed84f71e6aaa9a5f429d3a60657957c21ca76703d61c766ab31ae6de5e8948c1ae4ffb7ced0eed13919a4248c6710e0ead2b4b836207f10659a920e53a62af8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mpls={0x1a0, 0x7, 0x0, 0x0, {{0x9}, {0x80, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xf1f, 0x8, 0xfffff0ba, 0x40}, 0x2}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x3, 0x0, 0x10, 0x8000}, 0x2}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x55, 0x10000, 0x1, 0xd, 0x7}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xce24e}]}, {0xf8, 0x6, "f1542a28b810c142b036a55b350970da9142f124485eddfd84e597a1303f800e47a2a877fe9c9d8b8c0b78b0effb5ee67767dbfdc72d5e7355e4635ce8f3adc14094fe72b032348ae7315fd883c439296cc2f3b4b81151c4fae92674c2718ee749cbf539e3e9f1226a374f37d9118974855ccea762940c25ba892ba6d44206d27c9e21f2efa5003fc11c16cec8973d532a9e095422bc3940001a009ed70b24912b659417d439612e7a0534e78ab4d4e98cfc2d5c49aa3610a85bbf5789151b3462e7bf580e8773617a71a5f6655172d6a754d1dd9bcd74c719d726f477168680d89aea247e88afff21cc11292615f84dc6100d8f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x68, 0x1a, 0x0, 0x0, {{0x7}, {0x4}, {0x3f, 0x6, "33bc4900cc8baa51d3a1ed945e62a652c74241ab7d725deeca80295c71100d1ad032be55b3e3499201df33a9e64e910289c843d5db0f5b77efd011"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0x6c, 0xa, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x6, 0x8, 0xe39, 0xff}, 0x8}}]}, {0x1f, 0x6, "786eef0d07fb0bac40caaee018d086748aa2b2ae3e2ca0923a95a2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0x34, 0xb, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x50, 0x1f, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x44e, 0x2, 0x13, 0x80000000}, 0x13}}]}, {0x7, 0x6, "ceebd5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x2dd8}}, 0x0) recvmsg(r8, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000009700)=""/4082, 0xff2}], 0x1}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='\x00', &(0x7f0000000240)='{}k%@\x00', 0x0) 3.156745583s ago: executing program 2 (id=692): bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="74b3e0055447b3ec72616e733d6664", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) mmap(&(0x7f0000119000/0x3000)=nil, 0x3000, 0x6000007, 0x4010, r1, 0x0) ioprio_get$uid(0x3, 0xee01) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ec0000001a000100000000551767560000000000fc0000000000000000000000005d0af2e0510200000000030000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000006c000000fc010000000000000000000000000000000008000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000007000000000000000001000000000000000000000000000000dfffffff000000000000000a00000000000000"], 0xec}}, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x14800, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r6 = dup(r5) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r7, 0x80044d0b, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r6, 0x63) r8 = syz_open_procfs(0x0, &(0x7f0000000400)='net/igmp\x00') preadv(r8, &(0x7f0000000280)=[{&(0x7f0000000140)=""/59, 0x3b}], 0x1, 0x400, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x22200, 0x0) 2.986604961s ago: executing program 1 (id=693): r0 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0xd, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) r6 = inotify_init() syz_open_dev$ptys(0xc, 0x3, 0x0) inotify_add_watch(r6, &(0x7f00000001c0)='./file0\x00', 0xa50003d1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @dev, 0x9}, 0x1c) 1.889156729s ago: executing program 1 (id=694): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f00000000c0)={0x2, 0x0, [0x7fffffff, 0x8, 0x538b, 0x9, 0x0, 0x6, 0x4, 0x7]}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000440)={r2, 0x700, {0x0, 0x0, 0x0, 0x1, 0x800000000000, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x13, r3, 0xa41b5000) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x1, 0x12, 0x3, 0x0, "cd0d05a286c3d9c7b418dd4350274fc803519e3d7d156d943d4034728428556b2b5a97d6203497d63e98ec46bc3116e3930f9b02cdc0f982e0d499db318cb04c", "e39fb4a608003aba8405d70d523a5a783847b8bc04869aad25d757c86a08e932", [0xd026, 0x52]}) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4040004) 1.888749406s ago: executing program 0 (id=695): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 1.676855479s ago: executing program 1 (id=696): socket$inet6(0xa, 0x3, 0x3a) modify_ldt$write2(0x11, &(0x7f0000000140)={0x8, 0x20001000, 0x400, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000240)={0xa, 0x20000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) 1.662869774s ago: executing program 0 (id=697): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000400)=@ethtool_cmd={0x26, 0x3, 0x6f, 0x3, 0x3, 0x4, 0x6, 0x5, 0x1, 0x5, 0x35, 0x5bf, 0x4, 0x4, 0x4, 0x6, [0x7f, 0x11]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100), 0x10, 0x4d0, @void, @value}, 0x94) r0 = add_key$user(&(0x7f0000000280), &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000180)="b8", 0x1, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdir(0x0, 0x200) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, r5, 0x0, 0x0, 0xa, 0x1ff, 0x1}) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000340)={&(0x7f0000001000), 0x0, 0x1}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={0x0}, 0x18) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000340), 0x584, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r6, r6}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000380)={0x0, 0xfffffffd}, 0x8) r8 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r9 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r8) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r9) 1.511292848s ago: executing program 1 (id=698): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x20, &(0x7f00000009c0)=ANY=[@ANYBLOB="18008d0000ad000000000000000300000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000186b00000e000000000000000100000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000000000000850000008600000080108000100000000de50300faffffff1800000002000000000000000e000000950000000000000018110000", @ANYBLOB="9790b614828ba87f0cea1e400ce5191f039eb5781507c0bc5bf89f9419041cdbdbea1336158b06600efe654edb02caffe6e3d35bb1dc24a4d54f75376c617f8c60a75324946b4ac4408e2eccb551b43f7fb14873140a9d81db6dff158a2d48a0b429cc07dde380f7f1ae3c910d0dd664a4548d8b5dbfc2f190d709bc81d75e", @ANYBLOB="0000000000000000b7080000800000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000008200000018350000020000000000000000000000182000", @ANYRES32, @ANYBLOB="00000000100000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x401, 0xb3, &(0x7f0000000680)=""/179, 0x41100, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0xb, 0x6ac7f67e, 0xfff}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000780)=[{0x0, 0x5, 0xf, 0xa}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080), &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x98, &(0x7f0000000580)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x20061, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe41, @void, @value}, 0x94) modify_ldt$write2(0x11, &(0x7f0000000000)={0x2c9, 0x100000, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1}, 0x10) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000)=r4, 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="27050200340f14000600002fb96dbcf7060600000017000000ff1144ee162fd4b8bf7256da82f600102821880b00000000000000570000000600000000000000", 0x40}, {&(0x7f0000001240)="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", 0xf0a}], 0x2}, 0x9cdc2384056b48b8) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="b805008ec064c109c6f2ab3e2e2e67f20f5c26baf80c66b86088e58366efbafc0c66b85200000066ef0f7953002e0f1f0066b8005000000f23d80f21f86635400000f00f23f836f390b898038ec0", 0x4e}], 0x1, 0x46, &(0x7f0000000100)=[@cstype3={0x5, 0x2}], 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='net/ip6_tables_matches\x00') r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000407b1"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) modify_ldt$write2(0x11, &(0x7f0000000140)={0x8, 0x20001000, 0x400, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) sendfile(r8, r8, &(0x7f0000000000)=0x7, 0x4) modify_ldt$write(0x1, &(0x7f0000000240)={0xa, 0x20000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) r9 = socket(0x1e, 0x4, 0x0) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0xfffffffd}, 0x10) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000280)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000) r11 = dup3(r10, r9, 0x0) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x40201, 0x0) ioctl$PPPIOCGFLAGS1(r12, 0x541b, 0x0) recvmmsg$unix(r11, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1, 0x0, 0x1800}}], 0x1, 0x0, 0x0) 1.228850444s ago: executing program 3 (id=699): r0 = openat$apparmor_task_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10010, r0, 0x41846000) write$apparmor_current(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="6368866e6765686174203078303030303030303030303008003030335e2f70726f632f73656c662f617474722f63757272656e74052e00"], 0x37) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) getpid() syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{}, {}, {}, {0xfffffffd}, {}, {0x0, 0x1000000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000001300)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) getsockopt$netrom_NETROM_T1(r6, 0x103, 0x1, &(0x7f0000000280), &(0x7f0000000100)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) 1.227853288s ago: executing program 1 (id=700): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008000000000000", @ANYBLOB="00000000706877b88410"], 0x48) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newsa={0x138, 0x10, 0x413, 0x70bd26, 0x0, {{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x20, 0x20}, {@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8}, {0x0, 0x0, 0xcc}, {}, 0x0, 0x0, 0x2, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x138}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x2}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x82, &(0x7f00000001c0)={r7, 0x40, 0x8}, 0x8) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x24}}, 0x40) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r9, 0xc048aec8, &(0x7f0000000980)={0x4, 0x0, @pic={0x52, 0x9, 0x2, 0x6, 0xbf, 0x4, 0xb, 0x6, 0x3, 0x1, 0x3, 0x23, 0xf, 0x0, 0x4e, 0x8}}) r10 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.log\x00', 0x400080, 0x65) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f0000000300)=[@window={0x3, 0x8000, 0x8}, @window={0x3, 0xef0e, 0x3}, @window={0x3, 0x81, 0x8000}, @mss={0x2, 0xfffffff0}, @window={0x3, 0x3, 0xfffc}, @mss={0x2, 0x5}, @window={0x3, 0x2, 0x81}, @mss={0x2, 0x1}, @sack_perm, @mss={0x2, 0x6}], 0xa) 0s ago: executing program 1 (id=701): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e79"]) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) mmap(&(0x7f000066e000/0x2000)=nil, 0x2000, 0x7eb340381b5fed7a, 0x8031, r2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg(r4, &(0x7f00000059c0)=[{{&(0x7f0000000140)=@nfc={0x27, 0x0, 0x1, 0x3}, 0x80, 0x0}}, {{&(0x7f0000001480)=@can, 0x80, 0x0}}, {{&(0x7f00000029c0)=@can, 0x80, 0x0}}], 0x3, 0x4821) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0xe6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xd) sendto$inet(r5, &(0x7f0000000080)='w', 0x34000, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:26316' (ED25519) to the list of known hosts. [ 40.896717][ T5930] cgroup: Unknown subsys name 'net' [ 41.062556][ T5930] cgroup: Unknown subsys name 'cpuset' [ 41.065960][ T5930] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 41.813077][ T5930] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.654861][ T5955] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.658603][ T5955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.662678][ T5955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.664153][ T5956] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.665031][ T5955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.666291][ T5957] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.667718][ T5957] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.668040][ T5956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.668294][ T5956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.670468][ T5956] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.670582][ T5955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.670785][ T5955] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 44.670928][ T5955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.672796][ T5957] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.673240][ T5959] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.675014][ T5956] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 44.677558][ T5959] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.678501][ T5957] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.678602][ T5956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.681097][ T5959] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 44.684721][ T5957] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.685429][ T5959] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.688517][ T5957] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 44.713599][ T5957] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.835428][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 44.881469][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 44.886492][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 44.954365][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 44.994793][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.997284][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.999637][ T5943] bridge_slave_0: entered allmulticast mode [ 45.001825][ T5943] bridge_slave_0: entered promiscuous mode [ 45.051264][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.053446][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.055544][ T5943] bridge_slave_1: entered allmulticast mode [ 45.057836][ T5943] bridge_slave_1: entered promiscuous mode [ 45.078349][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.081605][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.083719][ T5944] bridge_slave_0: entered allmulticast mode [ 45.086678][ T5944] bridge_slave_0: entered promiscuous mode [ 45.118027][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.121360][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.123536][ T5941] bridge_slave_0: entered allmulticast mode [ 45.125822][ T5941] bridge_slave_0: entered promiscuous mode [ 45.128418][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.130909][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.133017][ T5944] bridge_slave_1: entered allmulticast mode [ 45.135141][ T5944] bridge_slave_1: entered promiscuous mode [ 45.146635][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.148887][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.151408][ T5942] bridge_slave_0: entered allmulticast mode [ 45.153603][ T5942] bridge_slave_0: entered promiscuous mode [ 45.158173][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.162130][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.164330][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.166530][ T5941] bridge_slave_1: entered allmulticast mode [ 45.168859][ T5941] bridge_slave_1: entered promiscuous mode [ 45.204163][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.206265][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.208338][ T5942] bridge_slave_1: entered allmulticast mode [ 45.210728][ T5942] bridge_slave_1: entered promiscuous mode [ 45.221110][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.238547][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.270449][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.288216][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.293806][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.297316][ T5943] team0: Port device team_slave_0 added [ 45.311983][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.316562][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.320800][ T5943] team0: Port device team_slave_1 added [ 45.325858][ T5941] team0: Port device team_slave_0 added [ 45.364876][ T5941] team0: Port device team_slave_1 added [ 45.376784][ T5942] team0: Port device team_slave_0 added [ 45.414301][ T5944] team0: Port device team_slave_0 added [ 45.416937][ T5942] team0: Port device team_slave_1 added [ 45.418831][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.421580][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.428773][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.432931][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.435543][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.445112][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.457391][ T5944] team0: Port device team_slave_1 added [ 45.459349][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.461306][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.468691][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.472542][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.474620][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.482281][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.511041][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.512878][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.519632][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.536335][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.539039][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.548938][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.554917][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.556952][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.564397][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.575560][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.577533][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.586095][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.610908][ T5943] hsr_slave_0: entered promiscuous mode [ 45.613243][ T5943] hsr_slave_1: entered promiscuous mode [ 45.678395][ T5942] hsr_slave_0: entered promiscuous mode [ 45.681394][ T5942] hsr_slave_1: entered promiscuous mode [ 45.684001][ T5942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.687161][ T5942] Cannot create hsr debugfs directory [ 45.692397][ T5941] hsr_slave_0: entered promiscuous mode [ 45.694309][ T5941] hsr_slave_1: entered promiscuous mode [ 45.695926][ T5941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.697972][ T5941] Cannot create hsr debugfs directory [ 45.718935][ T5944] hsr_slave_0: entered promiscuous mode [ 45.721878][ T5944] hsr_slave_1: entered promiscuous mode [ 45.724483][ T5944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.727532][ T5944] Cannot create hsr debugfs directory [ 45.939364][ T5943] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.945824][ T5943] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.957648][ T5943] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.962614][ T5943] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.972075][ T5942] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.976048][ T5942] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.979712][ T5942] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.983134][ T5942] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.006451][ T5941] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.010071][ T5941] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.013492][ T5941] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.017103][ T5941] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.041543][ T5944] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.046795][ T5944] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.050590][ T5944] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.053878][ T5944] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.105469][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.113406][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.137865][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.144861][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.152393][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.154504][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.165211][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.167200][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.170544][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.172463][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.176846][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.184625][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.186619][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.197455][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.200979][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.210991][ T215] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.213032][ T215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.215682][ T215] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.217651][ T215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.237283][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.254725][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.257264][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.267893][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.270057][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.348973][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.363423][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.379179][ T5943] veth0_vlan: entered promiscuous mode [ 46.387713][ T5943] veth1_vlan: entered promiscuous mode [ 46.401722][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.415011][ T5942] veth0_vlan: entered promiscuous mode [ 46.424108][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.426391][ T5943] veth0_macvtap: entered promiscuous mode [ 46.428954][ T5942] veth1_vlan: entered promiscuous mode [ 46.434110][ T5943] veth1_macvtap: entered promiscuous mode [ 46.445892][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.455014][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.466087][ T5941] veth0_vlan: entered promiscuous mode [ 46.471649][ T5943] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.474873][ T5943] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.478107][ T5943] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.481624][ T5943] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.486282][ T5944] veth0_vlan: entered promiscuous mode [ 46.491673][ T5941] veth1_vlan: entered promiscuous mode [ 46.496142][ T5942] veth0_macvtap: entered promiscuous mode [ 46.503954][ T5942] veth1_macvtap: entered promiscuous mode [ 46.507158][ T5944] veth1_vlan: entered promiscuous mode [ 46.542362][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.546052][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.550947][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.555944][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.560040][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.564404][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.567957][ T5941] veth0_macvtap: entered promiscuous mode [ 46.571262][ T1216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.574470][ T5944] veth0_macvtap: entered promiscuous mode [ 46.574532][ T1216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.577373][ T5942] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.582489][ T5942] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.585675][ T5942] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.588901][ T5942] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.594806][ T5941] veth1_macvtap: entered promiscuous mode [ 46.603991][ T5944] veth1_macvtap: entered promiscuous mode [ 46.624574][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.630654][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.633819][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.638091][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.642584][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.648721][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.651004][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.651817][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.654707][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.660723][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.664121][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.667910][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.678523][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.682142][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.685492][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.688804][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.690831][ T5296] Bluetooth: hci2: command tx timeout [ 46.692638][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.697525][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.701203][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.704057][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.704636][ T5941] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.706789][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.710773][ T5941] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.715506][ T5941] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.717996][ T5941] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.728477][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.732327][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.735172][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.738085][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.741179][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.744246][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.747744][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.760142][ T5296] Bluetooth: hci0: command tx timeout [ 46.766949][ T5944] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.767817][ T5943] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 46.769346][ T5296] Bluetooth: hci1: command tx timeout [ 46.769547][ T5296] Bluetooth: hci3: command tx timeout [ 46.769993][ T5944] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.782041][ T5944] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.784580][ T5944] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.789338][ T1216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.793401][ T1216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.851020][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.856658][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.874033][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.876223][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.914133][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.916399][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.918102][ T1216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.925456][ T1216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.990089][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 47.436263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 48.769318][ T5957] Bluetooth: hci2: command tx timeout [ 48.782880][ T6040] capability: warning: `syz.0.8' uses deprecated v2 capabilities in a way that may be insecure [ 48.786318][ T6040] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.849624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.849652][ T5957] Bluetooth: hci3: command tx timeout [ 48.849781][ T5296] Bluetooth: hci1: command tx timeout [ 48.849811][ T5296] Bluetooth: hci0: command tx timeout [ 48.856512][ T6044] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 48.860254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 48.899310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.971853][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 49.224150][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.381518][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 49.524771][ T6055] netlink: 'syz.1.11': attribute type 21 has an invalid length. [ 49.586237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 49.688638][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 49.851032][ T6062] loop9: detected capacity change from 0 to 8 [ 49.905396][ T6062] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 49.907152][ T6062] loop9: partition table partially beyond EOD, truncated [ 49.910908][ T6062] loop9: p1 size 81768186 extends beyond EOD, truncated [ 49.995875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 50.840732][ T5957] Bluetooth: hci2: command tx timeout [ 50.919230][ T5957] Bluetooth: hci0: command tx timeout [ 50.919270][ T5959] Bluetooth: hci1: command tx timeout [ 50.920827][ T5957] Bluetooth: hci3: command tx timeout [ 52.139091][ T6088] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 52.919393][ T5959] Bluetooth: hci2: command tx timeout [ 52.999319][ T5959] Bluetooth: hci1: command tx timeout [ 52.999736][ T5296] Bluetooth: hci3: command tx timeout [ 52.999755][ T5957] Bluetooth: hci0: command tx timeout [ 53.804285][ T6113] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.813800][ T6113] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 53.822357][ T6113] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 54.269285][ T6008] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 54.340363][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'. [ 54.344988][ T6123] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 54.348612][ T6123] cramfs: wrong magic [ 54.436515][ T6008] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 54.440633][ T6008] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 54.445611][ T6008] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 54.450428][ T6008] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 54.456002][ T6008] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 54.460155][ T6008] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.472116][ T6008] usb 8-1: config 0 descriptor?? [ 54.483149][ T6117] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 54.918588][ T6008] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 54.930999][ T6008] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 54.940169][ T6008] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 55.190965][ T1328] usb 8-1: USB disconnect, device number 2 [ 56.922094][ T5947] libceph: connect (1)[c::]:6789 error -101 [ 56.926576][ T5947] libceph: mon0 (1)[c::]:6789 connect error [ 56.930874][ T5947] libceph: connect (1)[c::]:6789 error -101 [ 56.933382][ T5947] libceph: mon0 (1)[c::]:6789 connect error [ 57.058715][ T6161] ceph: No mds server is up or the cluster is laggy [ 59.559382][ T5296] Bluetooth: hci3: command tx timeout [ 59.583114][ T6199] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 60.906586][ T6215] serio: Serial port ptm0 [ 61.345167][ T5959] Bluetooth: hci4: sending frame failed (-49) [ 61.347670][ T5296] Bluetooth: hci4: Entering manufacturer mode failed (-49) [ 61.619558][ T6008] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 61.869209][ T6008] usb 5-1: Using ep0 maxpacket: 8 [ 61.937051][ T6008] usb 5-1: config 7 has an invalid interface number: 207 but max is 0 [ 61.940059][ T6008] usb 5-1: config 7 has no interface number 0 [ 61.942062][ T6008] usb 5-1: too many endpoints for config 7 interface 207 altsetting 80: 184, using maximum allowed: 30 [ 61.945365][ T6008] usb 5-1: config 7 interface 207 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 184 [ 61.953061][ T6008] usb 5-1: config 7 interface 207 has no altsetting 0 [ 61.977049][ T6008] usb 5-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=4e.59 [ 61.980000][ T6008] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.982537][ T6008] usb 5-1: Product: syz [ 61.984087][ T6008] usb 5-1: Manufacturer: syz [ 61.985481][ T6008] usb 5-1: SerialNumber: syz [ 62.278672][ T6008] cypress_m8 5-1:7.207: HID->COM RS232 Adapter converter detected [ 62.290285][ T6008] cyphidcom ttyUSB0: required endpoint is missing [ 62.308105][ T6008] usb 5-1: USB disconnect, device number 2 [ 62.312483][ T6008] cypress_m8 5-1:7.207: device disconnected [ 62.340889][ T6231] sctp: [Deprecated]: syz.1.53 (pid 6231) Use of struct sctp_assoc_value in delayed_ack socket option. [ 62.340889][ T6231] Use struct sctp_sack_info instead [ 62.552740][ T6235] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 62.572268][ T6235] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 62.652852][ T6239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.55'. [ 62.922267][ T6243] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 62.924729][ T6243] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 62.927403][ T6243] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 62.930368][ T6243] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 63.786067][ T6268] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 63.799517][ T6268] serio: Serial port ptm0 [ 64.900290][ T6288] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 64.902728][ T6288] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 64.905543][ T6288] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 64.908191][ T6288] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 65.339909][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.64'. [ 65.346382][ T6290] netlink: 277 bytes leftover after parsing attributes in process `syz.0.64'. [ 65.349855][ T6290] netlink: 277 bytes leftover after parsing attributes in process `syz.0.64'. [ 68.679778][ T6330] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 70.763413][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.766020][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.907963][ T6375] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 70.910233][ T6375] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 70.912591][ T6375] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 70.914750][ T6375] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 72.879029][ T6395] warning: `syz.0.94' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 72.886515][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.179813][ T6408] netlink: 84 bytes leftover after parsing attributes in process `syz.0.96'. [ 73.302086][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'. [ 73.309723][ T6409] netlink: 337 bytes leftover after parsing attributes in process `syz.2.95'. [ 73.313189][ T6409] netlink: 337 bytes leftover after parsing attributes in process `syz.2.95'. [ 75.517443][ T6458] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 75.520117][ T6458] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 76.046294][ T6463] befs: (nullb0): No write support. Marking filesystem read-only [ 76.048731][ T6463] befs: (nullb0): invalid magic header [ 76.574967][ T6473] netlink: 'syz.3.109': attribute type 10 has an invalid length. [ 76.622357][ T6473] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 76.907267][ T6483] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.095976][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.115'. [ 77.422536][ T6504] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 77.467123][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.120'. [ 77.907294][ T6518] syz.1.123 uses obsolete (PF_INET,SOCK_PACKET) [ 78.228419][ T6523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.125'. [ 78.231680][ T6523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.125'. [ 78.533041][ T6547] netlink: 'syz.2.132': attribute type 10 has an invalid length. [ 78.536314][ T6547] veth0_macvtap: left promiscuous mode [ 78.540861][ T6547] batman_adv: batadv0: Adding interface: macvtap0 [ 78.542695][ T6547] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.549920][ T6547] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 78.737767][ T6559] input: syz1 as /devices/virtual/input/input7 [ 79.037150][ T6577] usb 1-1: USB disconnect, device number 2 [ 79.043328][ T6565] dccp_close: ABORT with 20 bytes unread [ 79.517851][ T6595] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 80.366956][ T6620] netlink: 'syz.2.157': attribute type 1 has an invalid length. [ 80.549229][ T1328] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.703098][ T1328] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 80.707154][ T1328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.713074][ T1328] usb 5-1: Product: syz [ 80.714301][ T1328] usb 5-1: Manufacturer: syz [ 80.718133][ T1328] usb 5-1: SerialNumber: syz [ 80.730116][ T1328] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 80.775160][ T64] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 80.941930][ T6639] netlink: 16 bytes leftover after parsing attributes in process `syz.1.163'. [ 81.010538][ T1337] cfg80211: failed to load regulatory.db [ 81.763721][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.168'. [ 81.807485][ T39] audit: type=1326 audit(1738222938.068:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.3.169" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 81.819318][ T39] audit: type=1326 audit(1738222938.078:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.3.169" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 81.825658][ T39] audit: type=1326 audit(1738222938.078:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.3.169" exe="/syz-executor" sig=0 arch=40000003 syscall=398 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 81.833047][ T39] audit: type=1326 audit(1738222938.078:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.3.169" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 81.845873][ T39] audit: type=1326 audit(1738222938.078:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.3.169" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 81.859727][ T39] audit: type=1326 audit(1738222938.078:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.3.169" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 81.868610][ T39] audit: type=1326 audit(1738222938.078:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.3.169" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 81.877179][ T39] audit: type=1326 audit(1738222938.078:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.3.169" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 81.885779][ T39] audit: type=1326 audit(1738222938.078:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.3.169" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 81.893904][ T39] audit: type=1326 audit(1738222938.078:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.3.169" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 81.906395][ T64] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 81.910614][ T64] ath9k_htc: Failed to initialize the device [ 81.932828][ T64] usb 5-1: ath9k_htc: USB layer deinitialized [ 82.045937][ T6667] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 82.049437][ T6667] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 82.052279][ T6667] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 82.054713][ T6667] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 82.495438][ T6676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.173'. [ 82.570923][ T6678] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.639494][ T6684] fuse: Unknown parameter 'root0000000000040000' [ 82.644664][ T6684] tc_dump_action: action bad kind [ 82.768319][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'. [ 83.344175][ T64] usb 5-1: USB disconnect, device number 3 [ 83.385114][ T6699] netlink: 'syz.0.181': attribute type 30 has an invalid length. [ 83.387834][ T6699] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 83.393005][ T6699] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 84.069336][ T6720] random: crng reseeded on system resumption [ 84.151646][ T6723] ebtables: wrong size: *len 120, entries_size 48, replsz 48 [ 84.195041][ T6725] netlink: 72 bytes leftover after parsing attributes in process `syz.2.183'. [ 84.198459][ T6725] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 84.252981][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.187'. [ 85.417304][ T6753] netlink: 108 bytes leftover after parsing attributes in process `syz.1.194'. [ 85.497592][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.196'. [ 85.926482][ T6769] FAULT_INJECTION: forcing a failure. [ 85.926482][ T6769] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 85.930491][ T6769] CPU: 0 UID: 0 PID: 6769 Comm: syz.0.200 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 85.930503][ T6769] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.930516][ T6769] Call Trace: [ 85.930521][ T6769] [ 85.930525][ T6769] dump_stack_lvl+0x16c/0x1f0 [ 85.930602][ T6769] should_fail_ex+0x50a/0x650 [ 85.930632][ T6769] _copy_from_user+0x2e/0xd0 [ 85.930644][ T6769] get_compat_msghdr+0xa8/0x170 [ 85.930654][ T6769] ? __pfx_get_compat_msghdr+0x10/0x10 [ 85.930667][ T6769] ___sys_sendmsg+0x1b0/0x1e0 [ 85.930681][ T6769] ? __pfx____sys_sendmsg+0x10/0x10 [ 85.930698][ T6769] ? trace_lock_acquire+0x14e/0x1f0 [ 85.930712][ T6769] ? __pfx___might_resched+0x10/0x10 [ 85.930725][ T6769] __sys_sendmmsg+0x2fa/0x420 [ 85.930738][ T6769] ? __pfx___sys_sendmmsg+0x10/0x10 [ 85.930754][ T6769] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 85.930772][ T6769] ? fput+0x67/0x440 [ 85.930783][ T6769] ? ksys_write+0x1ba/0x250 [ 85.930791][ T6769] ? __pfx_ksys_write+0x10/0x10 [ 85.930801][ T6769] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 85.930810][ T6769] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 85.930823][ T6769] __do_fast_syscall_32+0x73/0x120 [ 85.930836][ T6769] do_fast_syscall_32+0x32/0x80 [ 85.930847][ T6769] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 85.930861][ T6769] RIP: 0023:0xf7f44579 [ 85.930868][ T6769] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 85.930876][ T6769] RSP: 002b:00000000f504555c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 85.930884][ T6769] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000100 [ 85.930889][ T6769] RDX: 000000000400020d RSI: 0000000000000000 RDI: 0000000000000000 [ 85.930894][ T6769] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 85.930898][ T6769] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 85.930903][ T6769] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.930913][ T6769] [ 86.148412][ T6781] vlan2: entered allmulticast mode [ 86.208941][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'. [ 86.662559][ T6813] dccp_close: ABORT with 20 bytes unread [ 87.239893][ T6823] process 'syz.1.214' launched './file1' with NULL argv: empty string added [ 87.462045][ T6829] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 87.464350][ T6829] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 87.467187][ T6829] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 87.470325][ T6829] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 88.615006][ T1328] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 88.785165][ T1328] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 88.787858][ T1328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.790399][ T1328] usb 5-1: Product: syz [ 88.793244][ T1328] usb 5-1: Manufacturer: syz [ 88.794741][ T1328] usb 5-1: SerialNumber: syz [ 88.798601][ T1328] usb 5-1: config 0 descriptor?? [ 89.015111][ T1337] usb 5-1: USB disconnect, device number 4 [ 89.652299][ T6848] FAULT_INJECTION: forcing a failure. [ 89.652299][ T6848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.656175][ T6848] CPU: 2 UID: 0 PID: 6848 Comm: syz.1.224 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 89.656187][ T6848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.656192][ T6848] Call Trace: [ 89.656195][ T6848] [ 89.656199][ T6848] dump_stack_lvl+0x16c/0x1f0 [ 89.656215][ T6848] should_fail_ex+0x50a/0x650 [ 89.656227][ T6848] _copy_from_user+0x2e/0xd0 [ 89.656239][ T6848] get_compat_msghdr+0xa8/0x170 [ 89.656249][ T6848] ? __pfx_get_compat_msghdr+0x10/0x10 [ 89.656263][ T6848] ___sys_sendmsg+0x1b0/0x1e0 [ 89.656276][ T6848] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.656292][ T6848] ? __pfx_lock_release+0x10/0x10 [ 89.656303][ T6848] ? trace_lock_acquire+0x14e/0x1f0 [ 89.656314][ T6848] ? __fget_files+0x206/0x3a0 [ 89.656326][ T6848] __sys_sendmsg+0x16e/0x220 [ 89.656338][ T6848] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.656357][ T6848] __do_fast_syscall_32+0x73/0x120 [ 89.656370][ T6848] do_fast_syscall_32+0x32/0x80 [ 89.656381][ T6848] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.656394][ T6848] RIP: 0023:0xf742e579 [ 89.656401][ T6848] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 89.656409][ T6848] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 89.656417][ T6848] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000200001c0 [ 89.656422][ T6848] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.656427][ T6848] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 89.656431][ T6848] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 89.656436][ T6848] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.656445][ T6848] [ 89.711835][ C2] vkms_vblank_simulate: vblank timer overrun [ 90.091965][ T6864] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 90.094907][ T6864] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 90.098074][ T6864] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 90.105743][ T6864] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 90.605921][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'. [ 91.596470][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'. [ 91.989225][ T6008] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 92.032181][ T6919] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 92.034583][ T6919] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 92.037059][ T6919] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 92.042704][ T6919] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 92.209209][ T6008] usb 6-1: Using ep0 maxpacket: 32 [ 92.212318][ T6008] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 92.217560][ T6008] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 92.221382][ T6008] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 92.224636][ T6008] usb 6-1: Product: syz [ 92.226416][ T6008] usb 6-1: Manufacturer: syz [ 92.228283][ T6008] usb 6-1: SerialNumber: syz [ 92.232866][ T6008] usb 6-1: config 0 descriptor?? [ 92.236766][ T6910] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 92.690586][ T35] usb 6-1: USB disconnect, device number 2 [ 93.319281][ T5959] Bluetooth: hci3: command 0x0406 tx timeout [ 94.079591][ T6994] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 94.082359][ T6994] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 94.082451][ T6994] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 94.082461][ T6994] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 94.709806][ T7005] 9pnet_fd: Insufficient options for proto=fd [ 94.794629][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'. [ 94.998043][ T39] kauditd_printk_skb: 6 callbacks suppressed [ 94.998057][ T39] audit: type=1804 audit(1738222951.258:18): pid=7021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.263" name="/newroot/61/file0" dev="tmpfs" ino=340 res=1 errno=0 [ 95.137131][ T6008] libceph: connect (1)[c::]:6789 error -101 [ 95.139347][ T6008] libceph: mon0 (1)[c::]:6789 connect error [ 95.441947][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 95.454680][ T6008] libceph: connect (1)[c::]:6789 error -101 [ 95.456478][ T6008] libceph: mon0 (1)[c::]:6789 connect error [ 95.665000][ T7029] ceph: No mds server is up or the cluster is laggy [ 95.684584][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.271'. [ 96.307847][ T7069] Zero length message leads to an empty skb [ 96.335057][ T7075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.281'. [ 96.364316][ T7079] netlink: 24 bytes leftover after parsing attributes in process `syz.1.283'. [ 96.996179][ T7085] tipc: Started in network mode [ 96.997892][ T7085] tipc: Node identity 080211, cluster identity 4711 [ 97.001281][ T7085] tipc: Enabled bearer , priority 10 [ 97.031117][ T7089] netlink: 9 bytes leftover after parsing attributes in process `syz.2.286'. [ 97.035812][ T7089] gretap0: entered promiscuous mode [ 97.042162][ T7089] netlink: 5 bytes leftover after parsing attributes in process `syz.2.286'. [ 97.044821][ T7089] 0ªX¹¦D: renamed from gretap0 [ 97.045790][ T7091] Driver unsupported XDP return value 0 on prog (id 71) dev N/A, expect packet loss! [ 97.050566][ T7089] 0ªX¹¦D: left promiscuous mode [ 97.052038][ T7089] 0ªX¹¦D: entered allmulticast mode [ 97.054430][ T7089] A link change request failed with some changes committed already. Interface 60ªX¹¦D may have been left with an inconsistent configuration, please check. [ 97.061400][ T39] audit: type=1400 audit(1738222953.328:19): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=7088 comm="syz.2.286" [ 98.021010][ T35] tipc: Node number set to 134353152 [ 98.237006][ T7129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.298'. [ 98.241040][ T7129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.298'. [ 98.266979][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'. [ 98.565219][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.303'. [ 98.568788][ T7140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.303'. [ 99.179199][ T5296] Bluetooth: hci3: unexpected event 0x04 length: 6 < 10 [ 99.185912][ T7153] loop2: detected capacity change from 0 to 7 [ 99.189591][ T7153] Dev loop2: unable to read RDB block 7 [ 99.191269][ T7153] loop2: AHDI p2 [ 99.192352][ T7153] loop2: partition table partially beyond EOD, truncated [ 100.910282][ T7195] __nla_validate_parse: 2 callbacks suppressed [ 100.910296][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.316'. [ 100.987312][ T7195] hsr_slave_1 (unregistering): left promiscuous mode [ 101.343067][ T7204] FAULT_INJECTION: forcing a failure. [ 101.343067][ T7204] name failslab, interval 1, probability 0, space 0, times 0 [ 101.348115][ T7204] CPU: 2 UID: 0 PID: 7204 Comm: syz.2.319 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 101.348127][ T7204] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 101.348132][ T7204] Call Trace: [ 101.348135][ T7204] [ 101.348140][ T7204] dump_stack_lvl+0x16c/0x1f0 [ 101.348156][ T7204] should_fail_ex+0x50a/0x650 [ 101.348167][ T7204] ? fs_reclaim_acquire+0xae/0x150 [ 101.348181][ T7204] ? madvise_collapse+0x1ce/0xae0 [ 101.348192][ T7204] should_failslab+0xc2/0x120 [ 101.348202][ T7204] __kmalloc_cache_noprof+0x68/0x420 [ 101.348214][ T7204] madvise_collapse+0x1ce/0xae0 [ 101.348226][ T7204] ? mas_prev_slot+0x4c5/0x1460 [ 101.348240][ T7204] ? __pfx_madvise_collapse+0x10/0x10 [ 101.348253][ T7204] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 101.348266][ T7204] madvise_vma_behavior+0xbb8/0x1dd0 [ 101.348279][ T7204] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 101.348290][ T7204] ? find_vma_prev+0xdb/0x160 [ 101.348299][ T7204] ? __pfx_find_vma_prev+0x10/0x10 [ 101.348310][ T7204] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 101.348322][ T7204] ? do_madvise+0x2b3/0x7c0 [ 101.348334][ T7204] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 101.348344][ T7204] madvise_walk_vmas+0x1cf/0x2c0 [ 101.348355][ T7204] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 101.348369][ T7204] do_madvise+0x366/0x7c0 [ 101.348381][ T7204] ? __pfx_do_madvise+0x10/0x10 [ 101.348394][ T7204] ? ksys_write+0x1ba/0x250 [ 101.348403][ T7204] ? __pfx_ksys_write+0x10/0x10 [ 101.348413][ T7204] __ia32_sys_madvise+0xa7/0x110 [ 101.348424][ T7204] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 101.348436][ T7204] __do_fast_syscall_32+0x73/0x120 [ 101.348449][ T7204] do_fast_syscall_32+0x32/0x80 [ 101.348460][ T7204] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 101.348474][ T7204] RIP: 0023:0xf741e579 [ 101.348481][ T7204] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 101.348489][ T7204] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 00000000000000db [ 101.348497][ T7204] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000600722 [ 101.348502][ T7204] RDX: 0000000000000019 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.348507][ T7204] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.348511][ T7204] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 101.348515][ T7204] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.348526][ T7204] [ 101.502477][ T5947] IPVS: starting estimator thread 0... [ 101.928387][ T7219] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 101.980209][ T7209] IPVS: using max 39 ests per chain, 93600 per kthread [ 102.039225][ T7220] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 102.042026][ T7220] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 102.044568][ T7220] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 102.047144][ T7220] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 102.051954][ T7220] geneve2: entered promiscuous mode [ 102.053530][ T7220] geneve2: entered allmulticast mode [ 102.231341][ T7225] netlink: 32 bytes leftover after parsing attributes in process `syz.1.325'. [ 103.230674][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.333'. [ 103.287816][ T7259] netlink: 'syz.0.334': attribute type 1 has an invalid length. [ 103.295326][ T7259] bond1: entered promiscuous mode [ 103.297027][ T7259] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.318753][ T7259] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.324147][ T7259] bond1: (slave bond2): making interface the new active one [ 103.326993][ T7259] bond2: entered promiscuous mode [ 103.329748][ T7259] bond1: (slave bond2): Enslaving as an active interface with an up link [ 104.260192][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'. [ 104.791626][ T7291] FAULT_INJECTION: forcing a failure. [ 104.791626][ T7291] name failslab, interval 1, probability 0, space 0, times 0 [ 104.796651][ T7291] CPU: 2 UID: 0 PID: 7291 Comm: syz.1.343 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 104.796683][ T7291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.796693][ T7291] Call Trace: [ 104.796698][ T7291] [ 104.796705][ T7291] dump_stack_lvl+0x16c/0x1f0 [ 104.796733][ T7291] should_fail_ex+0x50a/0x650 [ 104.796752][ T7291] ? fs_reclaim_acquire+0xae/0x150 [ 104.796780][ T7291] should_failslab+0xc2/0x120 [ 104.796801][ T7291] __kmalloc_cache_node_noprof+0x6f/0x3f0 [ 104.796825][ T7291] ? __get_vm_area_node+0x101/0x2f0 [ 104.796854][ T7291] __get_vm_area_node+0x101/0x2f0 [ 104.796883][ T7291] __vmalloc_node_range_noprof+0x26a/0x1530 [ 104.796901][ T7291] ? kernel_clone+0xfd/0x960 [ 104.796928][ T7291] ? mod_objcg_state+0x4c4/0x8d0 [ 104.796944][ T7291] ? lockdep_hardirqs_on+0x7c/0x110 [ 104.796969][ T7291] ? kernel_clone+0xfd/0x960 [ 104.796997][ T7291] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 104.797015][ T7291] ? rcu_is_watching+0x12/0xc0 [ 104.797039][ T7291] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 104.797063][ T7291] ? kmem_cache_alloc_node_noprof+0x219/0x3b0 [ 104.797082][ T7291] ? copy_process+0x49c/0x6f20 [ 104.797106][ T7291] ? kernel_clone+0xfd/0x960 [ 104.797129][ T7291] copy_process+0x29b3/0x6f20 [ 104.797152][ T7291] ? kernel_clone+0xfd/0x960 [ 104.797176][ T7291] ? get_pid_task+0xfc/0x250 [ 104.797192][ T7291] ? __pfx_lock_release+0x10/0x10 [ 104.797210][ T7291] ? trace_lock_acquire+0x14e/0x1f0 [ 104.797230][ T7291] ? __pfx_copy_process+0x10/0x10 [ 104.797256][ T7291] ? find_held_lock+0x2d/0x110 [ 104.797285][ T7291] kernel_clone+0xfd/0x960 [ 104.797309][ T7291] ? __pfx_kernel_clone+0x10/0x10 [ 104.797340][ T7291] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 104.797381][ T7291] __do_compat_sys_ia32_clone+0xb7/0x100 [ 104.797402][ T7291] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 104.797437][ T7291] __do_fast_syscall_32+0x73/0x120 [ 104.797462][ T7291] do_fast_syscall_32+0x32/0x80 [ 104.797485][ T7291] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 104.797511][ T7291] RIP: 0023:0xf742e579 [ 104.797523][ T7291] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 104.797537][ T7291] RSP: 002b:00000000f509550c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 104.797553][ T7291] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 104.797562][ T7291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.797570][ T7291] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 104.797579][ T7291] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 104.797588][ T7291] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.797608][ T7291] [ 104.797810][ T7291] syz.1.343: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 104.893345][ T7291] CPU: 2 UID: 0 PID: 7291 Comm: syz.1.343 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 104.893357][ T7291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.893362][ T7291] Call Trace: [ 104.893366][ T7291] [ 104.893369][ T7291] dump_stack_lvl+0x16c/0x1f0 [ 104.893385][ T7291] warn_alloc+0x24d/0x3a0 [ 104.893397][ T7291] ? __pfx_warn_alloc+0x10/0x10 [ 104.893406][ T7291] ? rcu_is_watching+0x12/0xc0 [ 104.893420][ T7291] ? __kmalloc_cache_node_noprof+0x245/0x3f0 [ 104.893431][ T7291] ? __kasan_kmalloc+0x8a/0xb0 [ 104.893440][ T7291] ? __get_vm_area_node+0x1dc/0x2f0 [ 104.893456][ T7291] __vmalloc_node_range_noprof+0xd24/0x1530 [ 104.893466][ T7291] ? mod_objcg_state+0x4c4/0x8d0 [ 104.893474][ T7291] ? lockdep_hardirqs_on+0x7c/0x110 [ 104.893486][ T7291] ? kernel_clone+0xfd/0x960 [ 104.893501][ T7291] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 104.893510][ T7291] ? rcu_is_watching+0x12/0xc0 [ 104.893522][ T7291] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 104.893533][ T7291] ? kmem_cache_alloc_node_noprof+0x219/0x3b0 [ 104.893543][ T7291] ? copy_process+0x49c/0x6f20 [ 104.893554][ T7291] ? kernel_clone+0xfd/0x960 [ 104.893565][ T7291] copy_process+0x29b3/0x6f20 [ 104.893576][ T7291] ? kernel_clone+0xfd/0x960 [ 104.893587][ T7291] ? get_pid_task+0xfc/0x250 [ 104.893596][ T7291] ? __pfx_lock_release+0x10/0x10 [ 104.893606][ T7291] ? trace_lock_acquire+0x14e/0x1f0 [ 104.893616][ T7291] ? __pfx_copy_process+0x10/0x10 [ 104.893629][ T7291] ? find_held_lock+0x2d/0x110 [ 104.893644][ T7291] kernel_clone+0xfd/0x960 [ 104.893657][ T7291] ? __pfx_kernel_clone+0x10/0x10 [ 104.893672][ T7291] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 104.893685][ T7291] __do_compat_sys_ia32_clone+0xb7/0x100 [ 104.893696][ T7291] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 104.893713][ T7291] __do_fast_syscall_32+0x73/0x120 [ 104.893725][ T7291] do_fast_syscall_32+0x32/0x80 [ 104.893737][ T7291] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 104.893751][ T7291] RIP: 0023:0xf742e579 [ 104.893758][ T7291] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 104.893766][ T7291] RSP: 002b:00000000f509550c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 104.893774][ T7291] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 104.893778][ T7291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.893783][ T7291] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 104.893787][ T7291] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 104.893792][ T7291] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.893802][ T7291] [ 104.893805][ T7291] Mem-Info: [ 104.994424][ T7291] active_anon:13115 inactive_anon:64 isolated_anon:0 [ 104.994424][ T7291] active_file:14851 inactive_file:33810 isolated_file:0 [ 104.994424][ T7291] unevictable:1768 dirty:398 writeback:0 [ 104.994424][ T7291] slab_reclaimable:7192 slab_unreclaimable:55688 [ 104.994424][ T7291] mapped:32004 shmem:10636 pagetables:797 [ 104.994424][ T7291] sec_pagetables:320 bounce:0 [ 104.994424][ T7291] kernel_misc_reclaimable:0 [ 104.994424][ T7291] free:47583 free_pcp:5138 free_cma:0 [ 105.007537][ T7291] Node 0 active_anon:3056kB inactive_anon:124kB active_file:68kB inactive_file:48kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:2980kB dirty:80kB writeback:0kB shmem:7588kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9964kB pagetables:916kB sec_pagetables:1160kB all_unreclaimable? yes [ 105.016606][ T7291] Node 1 active_anon:49404kB inactive_anon:132kB active_file:59336kB inactive_file:135192kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:125036kB dirty:1512kB writeback:0kB shmem:34956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2348kB pagetables:2272kB sec_pagetables:120kB all_unreclaimable? no [ 105.027220][ T7291] Node 0 DMA free:2632kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 105.035051][ T7291] lowmem_reserve[]: 0 297 0 0 0 [ 105.036472][ T7291] Node 0 DMA32 free:18624kB boost:0kB min:13672kB low:17088kB high:20504kB reserved_highatomic:4096KB active_anon:3056kB inactive_anon:124kB active_file:68kB inactive_file:48kB unevictable:3536kB writepending:80kB present:1032196kB managed:305108kB mlocked:0kB bounce:0kB free_pcp:2076kB local_pcp:1100kB free_cma:0kB [ 105.044970][ T7291] lowmem_reserve[]: 0 0 0 0 0 [ 105.046371][ T7291] Node 1 DMA32 free:169076kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:49404kB inactive_anon:132kB active_file:59336kB inactive_file:135192kB unevictable:3536kB writepending:1512kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:18592kB local_pcp:1576kB free_cma:0kB [ 105.055068][ T7291] lowmem_reserve[]: 0 0 0 0 0 [ 105.056484][ T7291] Node 0 DMA: 140*4kB (UE) 59*8kB (UE) 50*16kB (UE) 19*32kB (UE) 1*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2632kB [ 105.060670][ T7291] Node 0 DMA32: 162*4kB (UMEH) 69*8kB (UMEH) 28*16kB (UMEH) 58*32kB (UEH) 28*64kB (UMEH) 16*128kB (UMEH) 8*256kB (UM) 10*512kB (UMH) 2*1024kB (M) 1*2048kB (M) 0*4096kB = 18608kB [ 105.065781][ T7291] Node 1 DMA32: 54*4kB (UM) 62*8kB (UME) 70*16kB (UME) 119*32kB (UME) 257*64kB (UME) 31*128kB (UME) 10*256kB (UME) 20*512kB (ME) 6*1024kB (ME) 5*2048kB (UM) 29*4096kB (UME) = 174024kB [ 105.070920][ T7291] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 105.073606][ T7291] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 105.076282][ T7291] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 105.079024][ T7291] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 105.081747][ T7291] 59513 total pagecache pages [ 105.083109][ T7291] 216 pages in swap cache [ 105.084478][ T7291] Free swap = 118872kB [ 105.085756][ T7291] Total swap = 124996kB [ 105.087077][ T7291] 524155 pages RAM [ 105.088166][ T7291] 0 pages HighMem/MovableOnly [ 105.089612][ T7291] 206975 pages reserved [ 105.090812][ T7291] 0 pages cma reserved [ 105.531854][ T7319] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 105.534220][ T7319] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 105.536675][ T7319] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 105.539223][ T7319] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 106.093755][ T7327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.118755][ T7327] vxcan1: tx address claim with dest, not broadcast [ 106.647015][ T7338] netlink: 'syz.0.357': attribute type 1 has an invalid length. [ 107.352083][ T7361] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 107.354997][ T7361] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 107.358946][ T7361] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 107.361950][ T7361] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 107.479273][ T5959] Bluetooth: hci2: command 0x0405 tx timeout [ 108.984521][ T7395] mmap: syz.1.373 (7395) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 110.021853][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.381'. [ 110.039431][ T5296] Bluetooth: hci0: command tx timeout [ 110.229220][ T65] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 110.404335][ T65] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 110.407956][ T65] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 110.419199][ T65] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 110.422870][ T65] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 110.426424][ T65] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 110.447276][ T65] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 110.458264][ T65] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 110.491606][ T65] usb 5-1: Product: syz [ 110.511132][ T65] usb 5-1: Manufacturer: syz [ 110.523077][ T65] cdc_wdm 5-1:1.0: skipping garbage [ 110.524656][ T65] cdc_wdm 5-1:1.0: skipping garbage [ 110.527948][ T65] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 110.529904][ T65] cdc_wdm 5-1:1.0: Unknown control protocol [ 111.193426][ T7415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.198261][ T7415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.996091][ T7450] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 112.073120][ T7454] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 112.075421][ T7454] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 112.079103][ T7454] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 112.081582][ T7454] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 112.784758][ T1328] libceph: connect (1)[c::]:6789 error -101 [ 112.786601][ T1328] libceph: mon0 (1)[c::]:6789 connect error [ 112.944731][ T7459] ceph: No mds server is up or the cluster is laggy [ 112.977862][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 112.977996][ T9] usb 5-1: USB disconnect, device number 5 [ 112.979926][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 112.979941][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 112.979997][ T7442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.176116][ T7480] FAULT_INJECTION: forcing a failure. [ 113.176116][ T7480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.180275][ T7480] CPU: 0 UID: 0 PID: 7480 Comm: syz.0.395 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 113.180289][ T7480] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 113.180295][ T7480] Call Trace: [ 113.180298][ T7480] [ 113.180302][ T7480] dump_stack_lvl+0x16c/0x1f0 [ 113.180320][ T7480] should_fail_ex+0x50a/0x650 [ 113.180332][ T7480] _copy_from_user+0x2e/0xd0 [ 113.180345][ T7480] snd_seq_ioctl+0x1c0/0x3f0 [ 113.180356][ T7480] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 113.180373][ T7480] ? __fget_files+0x206/0x3a0 [ 113.180385][ T7480] snd_seq_ioctl_compat+0xea/0x310 [ 113.180394][ T7480] ? __pfx_snd_seq_ioctl_compat+0x10/0x10 [ 113.180404][ T7480] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 113.180418][ T7480] __do_fast_syscall_32+0x73/0x120 [ 113.180432][ T7480] do_fast_syscall_32+0x32/0x80 [ 113.180444][ T7480] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 113.180459][ T7480] RIP: 0023:0xf7f44579 [ 113.180466][ T7480] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 113.180474][ T7480] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 113.180483][ T7480] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040505330 [ 113.180488][ T7480] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.180493][ T7480] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 113.180498][ T7480] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 113.180503][ T7480] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 113.180513][ T7480] [ 114.142613][ T7500] Bluetooth: MGMT ver 1.23 [ 114.142980][ T7501] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 114.144270][ T7500] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 114.147053][ T7501] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 114.147152][ T7501] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 114.159245][ T7501] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 114.499093][ T7513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.403'. [ 115.069294][ T1328] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 115.220378][ T1328] usb 7-1: config 0 has no interfaces? [ 115.223395][ T1328] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 115.226032][ T1328] usb 7-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 115.228365][ T1328] usb 7-1: Product: syz [ 115.229717][ T1328] usb 7-1: Manufacturer: syz [ 115.231071][ T1328] usb 7-1: SerialNumber: syz [ 115.233199][ T1328] usb 7-1: config 0 descriptor?? [ 115.307447][ T7522] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 115.319369][ T7522] serio: Serial port ptm0 [ 115.742180][ T7515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.745752][ T7515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.753114][ T9] usb 7-1: USB disconnect, device number 2 [ 116.710319][ T7542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.410'. [ 116.713807][ T7542] netlink: 277 bytes leftover after parsing attributes in process `syz.2.410'. [ 116.716502][ T7542] netlink: 277 bytes leftover after parsing attributes in process `syz.2.410'. [ 116.916289][ T7546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.412'. [ 116.923700][ T7546] input: syz0 as /devices/virtual/input/input10 [ 116.957132][ T7547] overlayfs: failed to clone upperpath [ 117.106801][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.414'. [ 117.171271][ T5296] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 117.173862][ T5296] Bluetooth: hci2: Injecting HCI hardware error event [ 117.176824][ T5959] Bluetooth: hci2: hardware error 0x00 [ 117.194462][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.424'. [ 117.656463][ T7565] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 117.658921][ T7565] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 117.661736][ T7565] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 117.664206][ T7565] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 118.034052][ T7563] netlink: 24 bytes leftover after parsing attributes in process `syz.2.416'. [ 118.048771][ T7571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.419'. [ 118.051532][ T7571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.419'. [ 119.239652][ T5959] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 120.200941][ T7610] netlink: 'syz.2.432': attribute type 21 has an invalid length. [ 121.043478][ T7618] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 124.081632][ T1216] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.914534][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.454'. [ 125.761422][ T1328] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 125.930344][ T1328] usb 7-1: config 0 has no interfaces? [ 125.933495][ T1328] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 125.936244][ T1328] usb 7-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 125.938629][ T1328] usb 7-1: Product: syz [ 125.940486][ T1328] usb 7-1: Manufacturer: syz [ 125.941917][ T1328] usb 7-1: SerialNumber: syz [ 125.944732][ T1328] usb 7-1: config 0 descriptor?? [ 126.410921][ T1328] kernel read not supported for file /adsp1 (pid: 1328 comm: kworker/3:3) [ 126.428027][ T7765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.431738][ T7765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.819464][ T7785] block device autoloading is deprecated and will be removed. [ 127.841797][ T1337] usb 7-1: USB disconnect, device number 3 [ 127.982461][ T7798] netlink: 16 bytes leftover after parsing attributes in process `syz.3.475'. [ 128.062859][ T7811] fuse: Bad value for 'fd' [ 128.388797][ T64] IPVS: starting estimator thread 0... [ 128.479327][ T7819] IPVS: using max 39 ests per chain, 93600 per kthread [ 128.479906][ T7826] FAULT_INJECTION: forcing a failure. [ 128.479906][ T7826] name failslab, interval 1, probability 0, space 0, times 0 [ 128.486374][ T7826] CPU: 0 UID: 0 PID: 7826 Comm: syz.2.484 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 128.486387][ T7826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.486392][ T7826] Call Trace: [ 128.486395][ T7826] [ 128.486399][ T7826] dump_stack_lvl+0x16c/0x1f0 [ 128.486415][ T7826] should_fail_ex+0x50a/0x650 [ 128.486427][ T7826] should_failslab+0xc2/0x120 [ 128.486439][ T7826] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 128.486450][ T7826] ? skb_clone+0x190/0x3f0 [ 128.486464][ T7826] skb_clone+0x190/0x3f0 [ 128.486477][ T7826] netlink_deliver_tap+0xafd/0xca0 [ 128.486490][ T7826] netlink_unicast+0x5e1/0x7f0 [ 128.486502][ T7826] ? __pfx_netlink_unicast+0x10/0x10 [ 128.486512][ T7826] ? __phys_addr_symbol+0x30/0x80 [ 128.486526][ T7826] ? __check_object_size+0x488/0x710 [ 128.486541][ T7826] netlink_sendmsg+0x8b8/0xd70 [ 128.486567][ T7826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.486582][ T7826] ____sys_sendmsg+0x9ae/0xb40 [ 128.486593][ T7826] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.486602][ T7826] ? get_compat_msghdr+0x11b/0x170 [ 128.486617][ T7826] ___sys_sendmsg+0x135/0x1e0 [ 128.486630][ T7826] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.486648][ T7826] ? __pfx_lock_release+0x10/0x10 [ 128.486682][ T7826] ? trace_lock_acquire+0x14e/0x1f0 [ 128.486694][ T7826] ? __fget_files+0x206/0x3a0 [ 128.486707][ T7826] __sys_sendmsg+0x16e/0x220 [ 128.486719][ T7826] ? __pfx___sys_sendmsg+0x10/0x10 [ 128.486740][ T7826] __do_fast_syscall_32+0x73/0x120 [ 128.486754][ T7826] do_fast_syscall_32+0x32/0x80 [ 128.486765][ T7826] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 128.486779][ T7826] RIP: 0023:0xf741e579 [ 128.486786][ T7826] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 128.486794][ T7826] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 128.486803][ T7826] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 128.486808][ T7826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.486812][ T7826] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 128.486816][ T7826] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 128.486821][ T7826] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 128.486831][ T7826] [ 128.761436][ T7829] trusted_key: syz.2.485 sent an empty control message without MSG_MORE. [ 128.975761][ T7838] tmpfs: Bad value for 'mpol' [ 129.901586][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.494'. [ 129.937065][ T7870] fuse: Bad value for 'fd' [ 131.185157][ T7900] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.214154][ T7900] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.216446][ T7900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.226430][ T7900] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 131.288254][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.507'. [ 131.319508][ T7912] overlay: ./file0 is not a directory [ 131.322338][ T7912] FAULT_INJECTION: forcing a failure. [ 131.322338][ T7912] name failslab, interval 1, probability 0, space 0, times 0 [ 131.326394][ T7912] CPU: 2 UID: 0 PID: 7912 Comm: syz.1.515 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 131.326405][ T7912] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 131.326411][ T7912] Call Trace: [ 131.326414][ T7912] [ 131.326418][ T7912] dump_stack_lvl+0x16c/0x1f0 [ 131.326433][ T7912] should_fail_ex+0x50a/0x650 [ 131.326442][ T7912] ? fs_reclaim_acquire+0xae/0x150 [ 131.326457][ T7912] should_failslab+0xc2/0x120 [ 131.326468][ T7912] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 131.326478][ T7912] ? security_file_alloc+0x34/0x2b0 [ 131.326489][ T7912] security_file_alloc+0x34/0x2b0 [ 131.326497][ T7912] init_file+0x93/0x480 [ 131.326508][ T7912] alloc_empty_file+0x91/0x1e0 [ 131.326519][ T7912] path_openat+0xe1/0x2d80 [ 131.326528][ T7912] ? hlock_class+0x4e/0x130 [ 131.326540][ T7912] ? __lock_acquire+0x15a9/0x3c40 [ 131.326553][ T7912] ? __pfx_path_openat+0x10/0x10 [ 131.326562][ T7912] ? __pfx___lock_acquire+0x10/0x10 [ 131.326571][ T7912] ? lock_acquire.part.0+0x11b/0x380 [ 131.326585][ T7912] ? find_held_lock+0x2d/0x110 [ 131.326598][ T7912] do_filp_open+0x20c/0x470 [ 131.326607][ T7912] ? __pfx_do_filp_open+0x10/0x10 [ 131.326615][ T7912] ? find_held_lock+0x2d/0x110 [ 131.326658][ T7912] ? _raw_spin_unlock+0x28/0x50 [ 131.326670][ T7912] ? alloc_fd+0x41f/0x760 [ 131.326682][ T7912] do_sys_openat2+0x17a/0x1e0 [ 131.326693][ T7912] ? __pfx_do_sys_openat2+0x10/0x10 [ 131.326705][ T7912] ? __fget_files+0x206/0x3a0 [ 131.326715][ T7912] __ia32_compat_sys_open+0x147/0x1e0 [ 131.326727][ T7912] ? __pfx___ia32_compat_sys_open+0x10/0x10 [ 131.326741][ T7912] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 131.326754][ T7912] __do_fast_syscall_32+0x73/0x120 [ 131.326766][ T7912] do_fast_syscall_32+0x32/0x80 [ 131.326778][ T7912] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 131.326792][ T7912] RIP: 0023:0xf742e579 [ 131.326799][ T7912] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 131.326807][ T7912] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 131.326815][ T7912] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000000145142 [ 131.326820][ T7912] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.326825][ T7912] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 131.326829][ T7912] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 131.326834][ T7912] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 131.326844][ T7912] [ 131.408141][ T7881] [U]  [ 132.203181][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.205655][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.521053][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'. [ 132.525344][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.514'. [ 132.528134][ T7937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.514'. [ 133.039589][ T7951] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 133.042080][ T7951] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 133.045068][ T7951] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 133.047708][ T7951] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 133.598306][ T7957] netlink: 16 bytes leftover after parsing attributes in process `syz.3.521'. [ 133.689506][ T1328] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.732383][ T7961] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 133.736528][ T7961] Cannot find add_set index 3 as target [ 133.751977][ T7961] netlink: 48 bytes leftover after parsing attributes in process `syz.1.523'. [ 133.819277][ T1328] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.909552][ T1328] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.952620][ T1328] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 134.049327][ T1328] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 134.279870][ T1328] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 134.462487][ T39] audit: type=1326 audit(1738222990.728:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7966 comm="syz.0.525" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 134.476951][ T39] audit: type=1326 audit(1738222990.728:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7966 comm="syz.0.525" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 134.483477][ T39] audit: type=1326 audit(1738222990.728:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7966 comm="syz.0.525" exe="/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 134.489806][ T39] audit: type=1326 audit(1738222990.728:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7966 comm="syz.0.525" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 134.495890][ T39] audit: type=1326 audit(1738222990.728:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7966 comm="syz.0.525" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 134.502180][ T39] audit: type=1326 audit(1738222990.728:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7966 comm="syz.0.525" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 134.509096][ T39] audit: type=1326 audit(1738222990.728:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7966 comm="syz.0.525" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 134.517460][ T39] audit: type=1326 audit(1738222990.738:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7966 comm="syz.0.525" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 134.730680][ T30] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 135.259019][ T7997] fuse: Unknown parameter 'grou00000000000000000000' [ 135.401235][ T8001] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 135.403560][ T8001] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 135.405991][ T8001] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 135.408284][ T8001] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 135.657630][ T30] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 135.708476][ T8009] __vm_enough_memory: pid: 8009, comm: syz.3.535, bytes: 4294963200 not enough memory for the allocation [ 136.657243][ T8036] netlink: 36 bytes leftover after parsing attributes in process `syz.2.539'. [ 137.734711][ T8052] tipc: Enabling of bearer rejected, failed to enable media [ 137.764841][ T8055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.545'. [ 137.815845][ T8057] bridge0: port 3(syz_tun) entered blocking state [ 137.818111][ T8057] bridge0: port 3(syz_tun) entered disabled state [ 137.820758][ T8057] syz_tun: entered allmulticast mode [ 137.824027][ T8057] syz_tun: entered promiscuous mode [ 137.826780][ T8057] bridge0: port 3(syz_tun) entered blocking state [ 137.829622][ T8057] bridge0: port 3(syz_tun) entered forwarding state [ 137.949472][ T1482] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 137.983827][ T8064] Cannot find add_set index 3 as target [ 137.988949][ T8064] netlink: 48 bytes leftover after parsing attributes in process `syz.0.547'. [ 138.063114][ T8058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.546'. [ 138.140109][ T1482] usb 7-1: Using ep0 maxpacket: 8 [ 138.143684][ T1482] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 138.146955][ T1482] usb 7-1: config 179 has no interface number 0 [ 138.151990][ T1482] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 138.161552][ T1482] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 138.170431][ T1482] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 138.174754][ T1482] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 138.179111][ T1482] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 138.186543][ T1482] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 138.191371][ T1482] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.198042][ T8050] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 138.413214][ T1482] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input13 [ 138.619621][ T5947] usb 7-1: USB disconnect, device number 4 [ 138.619711][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 138.625839][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 138.629643][ T5947] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 139.269003][ T8105] Cannot find add_set index 3 as target [ 139.273191][ T8105] netlink: 48 bytes leftover after parsing attributes in process `syz.0.558'. [ 139.499256][ T64] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 139.661094][ T64] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 139.665497][ T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 139.669777][ T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 139.674058][ T64] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 139.679005][ T64] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.682898][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.159090][ T64] usb 7-1: config 0 descriptor?? [ 140.161885][ T8103] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 140.580921][ T64] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 140.583882][ T64] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 140.586710][ T64] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 140.590634][ T64] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 140.593514][ T64] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 140.596429][ T64] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 140.599956][ T64] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 140.603000][ T64] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 140.605967][ T64] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 140.608897][ T64] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 140.612407][ T64] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 140.616916][ T64] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 140.620528][ T64] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 140.623427][ T64] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 140.626299][ T64] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 140.630061][ T64] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 140.635573][ T64] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 141.005722][ T64] usb 7-1: USB disconnect, device number 5 [ 141.869279][ T9] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 142.099229][ T9] usb 7-1: config 0 has no interfaces? [ 142.469252][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 142.516606][ T8140] tmpfs: Bad value for 'mpol' [ 142.561284][ T9] usb 7-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 142.564572][ T9] usb 7-1: Product: syz [ 142.566249][ T9] usb 7-1: Manufacturer: syz [ 142.568085][ T9] usb 7-1: SerialNumber: syz [ 142.576470][ T9] usb 7-1: config 0 descriptor?? [ 142.894982][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.573'. [ 143.041619][ T8135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.044322][ T8135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.049907][ T1328] usb 7-1: USB disconnect, device number 6 [ 143.140374][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.576'. [ 143.973793][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.582'. [ 144.010975][ T8187] random: crng reseeded on system resumption [ 144.039925][ T8187] ebtables: wrong size: *len 120, entries_size 48, replsz 48 [ 144.705091][ T8195] netlink: 36 bytes leftover after parsing attributes in process `syz.3.585'. [ 145.039245][ T6008] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 145.201145][ T6008] usb 5-1: config 0 has no interfaces? [ 145.214712][ T6008] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 145.218231][ T6008] usb 5-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 145.221949][ T6008] usb 5-1: Product: syz [ 145.223601][ T6008] usb 5-1: Manufacturer: syz [ 145.225428][ T6008] usb 5-1: SerialNumber: syz [ 145.229909][ T6008] usb 5-1: config 0 descriptor?? [ 145.697291][ T8198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.705803][ T8198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.713655][ T1328] usb 5-1: USB disconnect, device number 6 [ 146.755110][ T39] audit: type=1326 audit(1738223003.018:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.3.596" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 146.761393][ T39] audit: type=1326 audit(1738223003.018:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.3.596" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 146.767279][ T39] audit: type=1326 audit(1738223003.018:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.3.596" exe="/syz-executor" sig=0 arch=40000003 syscall=239 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 146.773507][ T39] audit: type=1326 audit(1738223003.018:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.3.596" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 146.780092][ T39] audit: type=1326 audit(1738223003.018:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.3.596" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 146.786157][ T39] audit: type=1326 audit(1738223003.018:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.3.596" exe="/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 147.082690][ T5947] libceph: connect (1)[c::]:6789 error -22 [ 147.085696][ T5947] libceph: mon0 (1)[c::]:6789 connect error [ 147.092748][ T5947] libceph: connect (1)[c::]:6789 error -22 [ 147.095900][ T5947] libceph: mon0 (1)[c::]:6789 connect error [ 147.361261][ T5947] libceph: connect (1)[c::]:6789 error -22 [ 147.363765][ T5947] libceph: mon0 (1)[c::]:6789 connect error [ 147.684153][ T8247] ceph: No mds server is up or the cluster is laggy [ 148.341983][ T8269] netlink: 20 bytes leftover after parsing attributes in process `syz.0.603'. [ 149.328440][ T39] audit: type=1326 audit(1738223005.588:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.3.607" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 149.334780][ T39] audit: type=1326 audit(1738223005.588:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.3.607" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 149.341461][ T39] audit: type=1326 audit(1738223005.598:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.3.607" exe="/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 149.348720][ T39] audit: type=1326 audit(1738223005.598:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.3.607" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 151.401006][ T5959] Bluetooth: hci0: command 0x0406 tx timeout [ 152.922662][ T8374] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 152.939218][ T8374] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 152.948401][ T8374] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 152.963853][ T8374] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 154.595613][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'. [ 154.852753][ T8422] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 154.855791][ T8422] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 154.860718][ T8422] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 154.863800][ T8422] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 155.013325][ T8424] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 155.016277][ T8424] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 155.029837][ T8424] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 155.032788][ T8424] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 156.091136][ T8454] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 156.093273][ T8454] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 156.095595][ T8454] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 156.097602][ T8454] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 156.524649][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.645'. [ 156.712122][ T8473] tmpfs: Bad value for 'mpol' [ 156.758888][ T5296] Bluetooth: hci0: unexpected event for opcode 0x040d [ 157.404614][ T5296] Bluetooth: hci0: unexpected event for opcode 0x080e [ 158.426573][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'. [ 158.842835][ T8516] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 158.846096][ T8516] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 158.849772][ T8516] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 158.853403][ T8516] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 159.754636][ T8528] veth0_to_team: entered promiscuous mode [ 159.756858][ T8528] veth0_to_team: entered allmulticast mode [ 159.846815][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.664'. [ 159.897397][ T8540] netlink: 72 bytes leftover after parsing attributes in process `syz.3.665'. [ 160.496219][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.674'. [ 161.862513][ T64] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 162.051092][ T64] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 162.072468][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.106209][ T64] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 162.121881][ T64] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 162.125166][ T64] usb 5-1: Manufacturer: syz [ 162.144231][ T64] usb 5-1: config 0 descriptor?? [ 162.219785][ T64] rc_core: IR keymap rc-hauppauge not found [ 162.222031][ T64] Registered IR keymap rc-empty [ 162.227844][ T64] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 162.246744][ T64] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input14 [ 162.384533][ T63] usb 5-1: USB disconnect, device number 7 [ 163.090671][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.678'. [ 163.304784][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.687'. [ 164.596033][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.679'. [ 165.380243][ T8621] can0: slcan on ttyS3. [ 165.790563][ T8619] can0 (unregistered): slcan off ttyS3. [ 166.174081][ T8625] netlink: 'syz.0.689': attribute type 10 has an invalid length. [ 166.193960][ T8625] bond0: (slave wlan1): Opening slave failed [ 166.225994][ T8625] netlink: 32 bytes leftover after parsing attributes in process `syz.0.689'. [ 167.806737][ T8643] Invalid logical block size (1792) [ 167.850190][ T8642] netlink: 'syz.0.695': attribute type 8 has an invalid length. [ 168.055927][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.698'. [ 168.957421][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.700'. [ 169.621445][ C0] ================================================================== [ 169.624921][ C0] BUG: KASAN: slab-use-after-free in __lock_acquire+0x2d90/0x3c40 [ 169.628268][ C0] Read of size 8 at addr ffff888012d22c18 by task swapper/0/0 [ 169.650774][ C0] [ 169.651776][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 169.651793][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 169.651802][ C0] Call Trace: [ 169.651807][ C0] [ 169.651814][ C0] dump_stack_lvl+0x116/0x1f0 [ 169.651841][ C0] print_report+0xc3/0x620 [ 169.651858][ C0] ? __virt_addr_valid+0x5e/0x590 [ 169.651881][ C0] ? __phys_addr+0xc6/0x150 [ 169.651903][ C0] kasan_report+0xd9/0x110 [ 169.651920][ C0] ? __lock_acquire+0x2d90/0x3c40 [ 169.651938][ C0] ? __lock_acquire+0x2d90/0x3c40 [ 169.651956][ C0] __lock_acquire+0x2d90/0x3c40 [ 169.651982][ C0] ? __pfx_lock_release+0x10/0x10 [ 169.651998][ C0] ? rcu_is_watching+0x12/0xc0 [ 169.652019][ C0] ? ttwu_queue_wakelist+0x26d/0x400 [ 169.652037][ C0] ? __smp_call_single_queue+0x174/0x1e0 [ 169.652058][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 169.652075][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 169.652094][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 169.652111][ C0] lock_acquire.part.0+0x11b/0x380 [ 169.652124][ C0] ? p9_req_put+0xaf/0x250 [ 169.652140][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 169.652156][ C0] ? rcu_is_watching+0x12/0xc0 [ 169.652176][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 169.652190][ C0] ? p9_req_put+0xaf/0x250 [ 169.652208][ C0] ? lock_acquire+0x2f/0xb0 [ 169.652222][ C0] ? p9_req_put+0xaf/0x250 [ 169.652241][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 169.652258][ C0] ? p9_req_put+0xaf/0x250 [ 169.652275][ C0] p9_req_put+0xaf/0x250 [ 169.652293][ C0] req_done+0x1e7/0x2f0 [ 169.652308][ C0] ? __pfx_req_done+0x10/0x10 [ 169.652323][ C0] ? __pfx_req_done+0x10/0x10 [ 169.652338][ C0] vring_interrupt+0x31b/0x400 [ 169.652355][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 169.652372][ C0] __handle_irq_event_percpu+0x229/0x7d0 [ 169.652396][ C0] handle_irq_event+0xab/0x1e0 [ 169.652417][ C0] handle_edge_irq+0x263/0xd10 [ 169.652438][ C0] __common_interrupt+0xdf/0x250 [ 169.652456][ C0] common_interrupt+0xba/0xe0 [ 169.652470][ C0] [ 169.652475][ C0] [ 169.652480][ C0] asm_common_interrupt+0x26/0x40 [ 169.652500][ C0] RIP: 0010:default_idle+0xf/0x20 [ 169.652522][ C0] Code: 4c 01 c7 4c 29 c2 e9 72 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 de 20 00 fb f4 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 [ 169.652536][ C0] RSP: 0018:ffffffff8de07e20 EFLAGS: 00000206 [ 169.652548][ C0] RAX: 0000000000321f0f RBX: 0000000000000000 RCX: ffffffff8b45af89 [ 169.652558][ C0] RDX: 0000000000000000 RSI: ffffffff8b6cd200 RDI: ffffffff8bd28220 [ 169.652566][ C0] RBP: fffffbfff1bd2ef8 R08: 0000000000000001 R09: ffffed1005686f7d [ 169.652575][ C0] R10: ffff88802b437beb R11: 0000000000000000 R12: 0000000000000000 [ 169.652584][ C0] R13: ffffffff8de977c0 R14: ffffffff905ff710 R15: 0000000000000000 [ 169.652596][ C0] ? ct_kernel_exit+0x139/0x190 [ 169.652617][ C0] default_idle_call+0x6d/0xb0 [ 169.652638][ C0] do_idle+0x329/0x3f0 [ 169.652655][ C0] ? __pfx_do_idle+0x10/0x10 [ 169.652672][ C0] cpu_startup_entry+0x4f/0x60 [ 169.652686][ C0] rest_init+0x16b/0x2b0 [ 169.652699][ C0] ? acpi_subsystem_init+0x133/0x180 [ 169.652713][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 169.652735][ C0] start_kernel+0x3e9/0x4d0 [ 169.652756][ C0] x86_64_start_reservations+0x18/0x30 [ 169.652776][ C0] x86_64_start_kernel+0xb2/0xc0 [ 169.652795][ C0] common_startup_64+0x13e/0x148 [ 169.652820][ C0] [ 169.652825][ C0] [ 169.989390][ C0] Allocated by task 8668: [ 169.991131][ C0] kasan_save_stack+0x33/0x60 [ 169.993298][ C0] kasan_save_track+0x14/0x30 [ 169.995508][ C0] __kasan_kmalloc+0xaa/0xb0 [ 169.997492][ C0] p9_client_create+0xc8/0x11a0 [ 170.003020][ C0] v9fs_session_init+0x1f8/0x1a80 [ 170.005066][ C0] v9fs_mount+0xc6/0xa30 [ 170.006660][ C0] legacy_get_tree+0x109/0x220 [ 170.009155][ C0] vfs_get_tree+0x8b/0x340 [ 170.015153][ C0] path_mount+0x6e1/0x1f00 [ 170.017792][ C0] __ia32_sys_mount+0x28d/0x310 [ 170.027692][ C0] __do_fast_syscall_32+0x73/0x120 [ 170.030458][ C0] do_fast_syscall_32+0x32/0x80 [ 170.033083][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 170.036433][ C0] [ 170.038033][ C0] Freed by task 8668: [ 170.040445][ C0] kasan_save_stack+0x33/0x60 [ 170.043103][ C0] kasan_save_track+0x14/0x30 [ 170.045624][ C0] kasan_save_free_info+0x3b/0x60 [ 170.049870][ C0] __kasan_slab_free+0x51/0x70 [ 170.054350][ C0] kfree+0x2c4/0x4d0 [ 170.057341][ C0] p9_client_create+0x97d/0x11a0 [ 170.060495][ C0] v9fs_session_init+0x1f8/0x1a80 [ 170.064590][ C0] v9fs_mount+0xc6/0xa30 [ 170.067136][ C0] legacy_get_tree+0x109/0x220 [ 170.071440][ C0] vfs_get_tree+0x8b/0x340 [ 170.074373][ C0] path_mount+0x6e1/0x1f00 [ 170.077819][ C0] __ia32_sys_mount+0x28d/0x310 [ 170.081196][ C0] __do_fast_syscall_32+0x73/0x120 [ 170.083949][ C0] do_fast_syscall_32+0x32/0x80 [ 170.086587][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 170.090478][ C0] [ 170.091745][ C0] The buggy address belongs to the object at ffff888012d22c00 [ 170.091745][ C0] which belongs to the cache kmalloc-512 of size 512 [ 170.099473][ C0] The buggy address is located 24 bytes inside of [ 170.099473][ C0] freed 512-byte region [ffff888012d22c00, ffff888012d22e00) [ 170.107391][ C0] [ 170.108739][ C0] The buggy address belongs to the physical page: [ 170.112981][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12d20 [ 170.119467][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 170.123728][ T5959] Bluetooth: hci1: command 0x0406 tx timeout [ 170.124577][ C0] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 170.124599][ C0] page_type: f5(slab) [ 170.124612][ C0] raw: 00fff00000000040 ffff88801b042c80 ffffea0001a08200 dead000000000003 [ 170.124624][ C0] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 170.124635][ C0] head: 00fff00000000040 ffff88801b042c80 ffffea0001a08200 dead000000000003 [ 170.124646][ C0] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 170.124657][ C0] head: 00fff00000000002 ffffea00004b4801 ffffffffffffffff 0000000000000000 [ 170.124667][ C0] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 170.168102][ C0] page dumped because: kasan: bad access detected [ 170.173058][ C0] page_owner tracks the page as allocated [ 170.177044][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 8608, tgid 8586 (syz.3.679), ts 164469770464, free_ts 159662420831 [ 170.191916][ C0] post_alloc_hook+0x181/0x1b0 [ 170.195616][ C0] get_page_from_freelist+0xfce/0x2f80 [ 170.199648][ C0] __alloc_frozen_pages_noprof+0x6a6/0x2470 [ 170.204370][ C0] new_slab+0x94/0x330 [ 170.208177][ C0] ___slab_alloc+0xbfa/0x1600 [ 170.213580][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 170.218728][ C0] __kmalloc_node_noprof+0x2f0/0x520 [ 170.223175][ C0] alloc_slab_obj_exts+0x41/0xa0 [ 170.226625][ C0] __memcg_slab_post_alloc_hook+0x2a7/0x9b0 [ 170.239403][ C0] kmem_cache_alloc_noprof+0x310/0x3b0 [ 170.244716][ C0] fib_trie_unmerge+0x220/0xc20 [ 170.247368][ C0] fib_unmerge+0xf8/0x520 [ 170.256888][ C0] fib4_rule_configure+0x253/0xe00 [ 170.259947][ C0] fib_nl_newrule+0x355/0x1be0 [ 170.261902][ C0] rtnetlink_rcv_msg+0x3c7/0xea0 [ 170.265598][ C0] netlink_rcv_skb+0x165/0x410 [ 170.268895][ C0] page last free pid 5941 tgid 5941 stack trace: [ 170.272678][ C0] free_frozen_pages+0x6db/0xfb0 [ 170.275127][ C0] qlist_free_all+0x4e/0x120 [ 170.277414][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 170.280368][ C0] __kasan_slab_alloc+0x69/0x90 [ 170.282696][ C0] kmem_cache_alloc_noprof+0x1c8/0x3b0 [ 170.285933][ C0] getname_flags.part.0+0x4c/0x550 [ 170.290948][ C0] __ia32_sys_unlink+0xaf/0x110 [ 170.294065][ C0] __do_fast_syscall_32+0x73/0x120 [ 170.297464][ C0] do_fast_syscall_32+0x32/0x80 [ 170.310381][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 170.314233][ C0] [ 170.315381][ C0] Memory state around the buggy address: [ 170.318047][ C0] ffff888012d22b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 170.322845][ C0] ffff888012d22b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 170.328716][ C0] >ffff888012d22c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 170.332705][ C0] ^ [ 170.335133][ C0] ffff888012d22c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 170.339259][ C0] ffff888012d22d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 170.344278][ C0] ================================================================== [ 170.350662][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 170.354785][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 170.361191][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 170.370827][ C0] Call Trace: [ 170.372392][ C0] [ 170.374367][ C0] dump_stack_lvl+0x3d/0x1f0 [ 170.383690][ C0] panic+0x71d/0x800 [ 170.385525][ C0] ? __pfx_panic+0x10/0x10 [ 170.388046][ C0] ? rcu_is_watching+0x12/0xc0 [ 170.393129][ C0] ? __pfx_lock_release+0x10/0x10 [ 170.399320][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 170.405486][ C0] check_panic_on_warn+0xab/0xb0 [ 170.412822][ C0] end_report+0x117/0x180 [ 170.415149][ C0] kasan_report+0xe9/0x110 [ 170.418876][ C0] ? __lock_acquire+0x2d90/0x3c40 [ 170.420453][ C0] ? __lock_acquire+0x2d90/0x3c40 [ 170.422161][ C0] __lock_acquire+0x2d90/0x3c40 [ 170.429316][ C0] ? __pfx_lock_release+0x10/0x10 [ 170.431262][ C0] ? rcu_is_watching+0x12/0xc0 [ 170.433103][ C0] ? ttwu_queue_wakelist+0x26d/0x400 [ 170.435140][ C0] ? __smp_call_single_queue+0x174/0x1e0 [ 170.437282][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 170.452028][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 170.453978][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 170.469939][ C0] lock_acquire.part.0+0x11b/0x380 [ 170.472188][ C0] ? p9_req_put+0xaf/0x250 [ 170.473999][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 170.476014][ C0] ? rcu_is_watching+0x12/0xc0 [ 170.477750][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 170.479724][ C0] ? p9_req_put+0xaf/0x250 [ 170.481231][ C0] ? lock_acquire+0x2f/0xb0 [ 170.482919][ C0] ? p9_req_put+0xaf/0x250 [ 170.484721][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 170.496204][ C0] ? p9_req_put+0xaf/0x250 [ 170.498532][ C0] p9_req_put+0xaf/0x250 [ 170.508410][ C0] req_done+0x1e7/0x2f0 [ 170.510150][ C0] ? __pfx_req_done+0x10/0x10 [ 170.512054][ C0] ? __pfx_req_done+0x10/0x10 [ 170.514193][ C0] vring_interrupt+0x31b/0x400 [ 170.516220][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 170.519013][ C0] __handle_irq_event_percpu+0x229/0x7d0 [ 170.521160][ C0] handle_irq_event+0xab/0x1e0 [ 170.523630][ C0] handle_edge_irq+0x263/0xd10 [ 170.526539][ C0] __common_interrupt+0xdf/0x250 [ 170.530022][ C0] common_interrupt+0xba/0xe0 [ 170.532801][ C0] [ 170.534516][ C0] [ 170.536179][ C0] asm_common_interrupt+0x26/0x40 [ 170.539573][ C0] RIP: 0010:default_idle+0xf/0x20 [ 170.542606][ C0] Code: 4c 01 c7 4c 29 c2 e9 72 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 de 20 00 fb f4 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 [ 170.553288][ C0] RSP: 0018:ffffffff8de07e20 EFLAGS: 00000206 [ 170.557173][ C0] RAX: 0000000000321f0f RBX: 0000000000000000 RCX: ffffffff8b45af89 [ 170.562908][ C0] RDX: 0000000000000000 RSI: ffffffff8b6cd200 RDI: ffffffff8bd28220 [ 170.567729][ C0] RBP: fffffbfff1bd2ef8 R08: 0000000000000001 R09: ffffed1005686f7d [ 170.572926][ C0] R10: ffff88802b437beb R11: 0000000000000000 R12: 0000000000000000 [ 170.577635][ C0] R13: ffffffff8de977c0 R14: ffffffff905ff710 R15: 0000000000000000 [ 170.582315][ C0] ? ct_kernel_exit+0x139/0x190 [ 170.585580][ C0] default_idle_call+0x6d/0xb0 [ 170.588307][ C0] do_idle+0x329/0x3f0 [ 170.590820][ C0] ? __pfx_do_idle+0x10/0x10 [ 170.593669][ C0] cpu_startup_entry+0x4f/0x60 [ 170.596555][ C0] rest_init+0x16b/0x2b0 [ 170.599174][ C0] ? acpi_subsystem_init+0x133/0x180 [ 170.602428][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 170.605653][ C0] start_kernel+0x3e9/0x4d0 [ 170.608463][ C0] x86_64_start_reservations+0x18/0x30 [ 170.612011][ C0] x86_64_start_kernel+0xb2/0xc0 [ 170.615143][ C0] common_startup_64+0x13e/0x148 [ 170.618032][ C0] [ 170.620451][ C0] Kernel Offset: disabled [ 170.623786][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:43:46 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853811a5 RDI=ffffffff9aad2ea0 RBP=ffffffff9aad2e60 RSP=ffffc900000075b8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000020 R14=ffffffff85381140 R15=0000000000000000 RIP=ffffffff853811cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000ff823d30 CR3=0000000064872000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000056e483 RBX=0000000000000001 RCX=ffffffff8b45af89 RDX=0000000000000000 RSI=ffffffff8b6cd200 RDI=ffffffff8bd28220 RBP=ffffed1003a5f910 RSP=ffffc9000047fe08 R8 =0000000000000001 R9 =ffffed10056a6f7d R10=ffff88802b537beb R11=0000000000000001 R12=0000000000000001 R13=ffff88801d2fc880 R14=ffffffff905ff710 R15=0000000000000000 RIP=ffffffff8b45c36f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00000000 FS =0000 0000000000000000 ffffffff 00000000 GS =0000 ffff88802b500000 ffffffff 00000000 LDT=0000 0000000000000000 ffffffff 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002002b000 CR3=0000000073180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ab653f80aa983120 bf3ab4688b31b28f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 38978769fd34f763 d8e8124b5528392e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 473cecde6dbdb45b 48bb3bcb37c9e98b ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f311ab5b0edfa32 e9168f2549986d10 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000005940 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cb000000ee000000 000022f667b21522 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6800000016000000 2a00000030000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6400000067978ce7 6772fdc400011a01 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0014c24467b23fa0 cf000000677098f1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 30985b1b1734f7d4 50f8e353a01f1f41 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bcabb8a47773893c e1f1d020211c740c ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000000 RDX=0000000000000000 RSI=1ffff110039dc5f4 RDI=ffff88801cee2fa0 RBP=0000000000000000 RSP=ffffc900001d77e8 R8 =0000000000000001 R9 =0000000000000001 R10=000000000000000f R11=0000000000000002 R12=ffff88801b0b0018 R13=ffff88801cee2440 R14=ffff88801cee2f80 R15=0000000000000078 RIP=ffffffff8195dbfc RFL=00000802 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000564b8a9a8000 CR3=000000004a50e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=d8fdea7ad8fdea7a d8fdea7ad8fdea7a d8fdea7ad8fdea7a d8fdea7ad8fdea7a d8fdea7ad8fdea7a d8fdea7ad8fdea7a d8fdea7ad8fdea7a d8fdea7ad8fdea7a ZMM22=5b305bc95b305bc9 5b305bc95b305bc9 5b305bc95b305bc9 5b305bc95b305bc9 5b305bc95b305bc9 5b305bc95b305bc9 5b305bc95b305bc9 5b305bc95b305bc9 ZMM23=b09e74e7b09e74e7 b09e74e7b09e74e7 b09e74e7b09e74e7 b09e74e7b09e74e7 b09e74e7b09e74e7 b09e74e7b09e74e7 b09e74e7b09e74e7 b09e74e7b09e74e7 ZMM24=d3059312d3059312 d3059312d3059312 d3059312d3059312 d3059312d3059312 d3059312d3059312 d3059312d3059312 d3059312d3059312 d3059312d3059312 ZMM25=844161dd844161dd 844161dd844161dd 844161dd844161dd 844161dd844161dd 844161dd844161dd 844161dd844161dd 844161dd844161dd 844161dd844161dd ZMM26=0acf66cc0acf66cc 0acf66cc0acf66cc 0acf66cc0acf66cc 0acf66cc0acf66cc 0acf66cc0acf66cc 0acf66cc0acf66cc 0acf66cc0acf66cc 0acf66cc0acf66cc ZMM27=8ebc78a48ebc78a4 8ebc78a48ebc78a4 8ebc78a48ebc78a4 8ebc78a48ebc78a4 8ebc78a48ebc78a4 8ebc78a48ebc78a4 8ebc78a48ebc78a4 8ebc78a48ebc78a4 ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=3006000030060000 3006000030060000 3006000030060000 3006000030060000 3006000030060000 3006000030060000 3006000030060000 3006000030060000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff81682965 RDI=ffffffff8da66cf0 RBP=0000000000000002 RSP=ffffc90004207948 R8 =ffff88807ffc00c0 R9 =ffffed10056c7da0 R10=ffff88802b63ed03 R11=0000000000000000 R12=0000000000000008 R13=ffff88802b63ed00 R14=00000000000000ac R15=dffffc0000000000 RIP=ffffffff816829c4 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000c3ba595 CR3=0000000064836000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000