last executing test programs: 8.740877389s ago: executing program 0 (id=35): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e23, @remote}, 0x10, 0x0}, 0x3000c041) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000680001000000ffc300000003ff0000000000000006000700070000000800088004000100080005"], 0x30}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r7) r8 = socket(0x1e, 0x1, 0x0) connect$tipc(r8, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) splice(r6, 0x0, r7, 0x0, 0xfffd, 0x0) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, 0x0, 0x0) r10 = socket(0x10, 0x0, 0xffff8000) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000004b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000600f2d0850000002d000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r11}, 0xc) sendto$inet6(r10, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="471ef5a4", @ANYRES16=r3, @ANYBLOB="01000040000000000000040000000c00018008000100", @ANYRES32=r4, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) 8.649908914s ago: executing program 0 (id=36): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ded5eeb67a09192e3601e946cd306ee885a7f4daa99e257f1b0af07c0967de0467"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x6000, 0x7fb) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r2, &(0x7f0000000140)=@in6={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x3}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$pidfd(0xffffff9c, &(0x7f0000000100), 0x80, 0x0) pidfd_send_signal(r4, 0x30, &(0x7f0000000140)={0x11, 0x4, 0x6}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x18, &(0x7f00000001c0)={0x40, 0x24, 0xae, {0xae, 0x6, "dfb9ae664be9986e75322c3c70745326f7ee8731a1d955bf7de80f24d460a3f0b239a9ada0d28462d8c7ddb19f866865aa030a4ac844601fd93329e010a93ee826576954d178078cb3aa61a15ceca775f5b3e29adf08b29d33fcbde24f848d91ce574be662af1581e690bf9a0d2598d5e4338dbd54c719cc41f8d842b49381aff84238aef06f185f0555560a005cfeca3f8396e8dbf70c8d094282800fcc136f9de8e9112cb79ea0dc9efb5d"}}, &(0x7f0000000280)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000a00)=ANY=[@ANYBLOB="000f3e000000050f3e000414100a07e20901000fff706ac000000000000000071002101f08000a10030000005c0a0100141004ff8db062dbaa5be4d2e4024629e071f00382d4a4179a8d04e380619dfe490f7e35c018db9ed804f24f94d714b137638867decea09e4a88858c37ee470b429d783de8ee83e0572961d9a61af66e5807a32b"], &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x70, 0x10, 0x8, 0x5, "6ab65f01", "a01bbe6b"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x2, 0x6, 0x9, 0x0, 0x40, 0x6}}}, &(0x7f0000000980)={0x44, &(0x7f00000004c0)={0x20, 0x11, 0xce, "765b96c042607762f8e342d15a36381aa583657d269f6159a842e708fea652d1fa0d2710abbf66c674a0ca5e4136b3752b4bd221b399b940dd24f62dcc1bc702db727ccdfb3d06e46bc0ac387a2b2518d29881298df99c3deb5502444721ddeae6224053e275c10bf8227f591f6f8a5aac5e4c3c49cc578a71c8a51f9addd74fd41241c4f2557d46dc50e361c4ae158761920624f25c897dd73e6b82a0f58f9c0bc88b51dddc5604099975979305b9e6abb7e39d2385dd12bb68fc917c5bb50023f78306109baf8bc93ebd93777c"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000680)={0x20, 0x0, 0x8, {0x0, 0x40, [0x0]}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000740)={0x40, 0xb, 0x2, ']V'}, &(0x7f0000000780)={0x40, 0xf, 0x2}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @random="e628d24af0cf"}, &(0x7f0000000800)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, &(0x7f0000000840)={0x40, 0x19, 0x2, '`L'}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0xf36a}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x7}}) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="18000000010003", 0x7) r5 = semget$private(0x0, 0x1, 0x20) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000000)) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r6, 0x5425, 0x0) ioctl$TIOCGICOUNT(r6, 0x5409, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000b80)={0x0, @in6={{0xa, 0x4e24, 0x7f, @private0={0xfc, 0x0, '\x00', 0x3}, 0x21}}}, &(0x7f0000000380)=0x84) semctl$IPC_RMID(r5, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8200020}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$FS_IOC_GETVERSION(r8, 0xc0145b0d, &(0x7f0000000040)) 6.169292822s ago: executing program 2 (id=46): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000000)) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r3, 0x0, 0x1}, 0x18) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32, @ANYBLOB="36e55d19d7a30ead0f9da92fdcff8ace4369af5912f289939acd8e5ea8b184a092bd6871031da4746c2de0d7f55523ad5f438867a4e8911a50d88920f361c83469dbce58f20812fe86fd14243eff12efecfd3be4cebc61298cf416c21ab70c41b5ebaf612b03bd2199ff0211babd891a12b0692d30abb7bfdb76dad43a3426106275c740fb4f78ef8b446de337753b9174b8022d5fd5ead909870b0d8c"], 0x1c}}, 0x2000040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd", 0x5) 5.48557044s ago: executing program 0 (id=47): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x81) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000300)="d88b9593204eeb", 0x7}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x6], 0x0, 0x0, 0x1}}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 5.113338076s ago: executing program 1 (id=48): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080), &(0x7f0000000100)=0xfffffffffffffe85) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10003300, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x848000000015, 0x805, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.108260752s ago: executing program 0 (id=49): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080), &(0x7f0000000100)=0xfffffffffffffe85) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x40}}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x848000000015, 0x805, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.100968795s ago: executing program 3 (id=50): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44010}, 0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x11, 0x148, 0x90, 0x0, 0x184, 0x2a8, 0x2a8, 0x184, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @rand_addr=0x64010100, 0xff, 0xff000000, 'veth1_to_bond\x00', 'wlan0\x00', {}, {}, 0x88, 0x2}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xcc, 0xf4, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x4, 0x4, 0x121a5bb6, 0x1}}, @common=@addrtype={{0x2c}, {0xd29, 0x328, 0x1, 0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0xe}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x274) r2 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_mreq(r2, 0x88, 0x67, 0x0, &(0x7f00000004c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r4, @ANYBLOB="2e00000010"], 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840)={r6}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@map, 0xffffffffffffffff, 0x7}, 0x20) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r7, &(0x7f00000001c0)=""/172, 0xac) lseek(r3, 0x6, 0x0) ptrace(0x10, r0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x100301, 0x0) ptrace$getregset(0x4205, r0, 0x46e62b7f, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 5.019559179s ago: executing program 2 (id=51): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) dup(r0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = io_uring_setup(0x5b42, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc08c5332, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000300)=@updpolicy={0xbc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x0, 0x0, 0xfffe, 0x0, 0xa, 0x0, 0x80, 0x6c, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x4}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3}, [@replay_thresh={0x8, 0xb, 0x81}]}, 0xbc}}, 0x0) ftruncate(r1, 0x200004) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000000000000000000009000000000000000000000009000000000000001000000009020000000000"], 0x0, 0x96}, 0x20) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 4.994447915s ago: executing program 3 (id=52): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8080) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x108, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x803, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x9) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x2) r7 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) connect$unix(r7, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x38, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x146}]}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @local}}}]}]}, 0x38}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 4.004367657s ago: executing program 2 (id=53): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, '\x00', "037ec42b", '\x00', "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000480)={0x2000000007, 0x0, 0xb, 0x0, 0x2, 0x8, "01e60000000000000034dbb39fe6083a", 0x1, 0x0, 0x0, 0x1, 0xfa, 0xd}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r2, &(0x7f00000000c0)=[{0xb, 0x28, 0x0, 0xfd, @tick=0x1, {0x20}, {0xe}, @raw8={"749a2dd6f809cd5d37deda88"}}, {0x4, 0xc0, 0x7f, 0x87, @tick=0x7, {0x7, 0x5}, {0xf7, 0x1}, @quote={{0x4, 0x3}, 0xcaa1}}], 0x38) mlock2(&(0x7f0000abe000/0x3000)=nil, 0x3000, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={0x0, 0x0, 0x4018}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3.33195977s ago: executing program 0 (id=54): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000001280)=""/166, 0xa6}, {0x0}], 0x4}, 0x123) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r6) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r7, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0\x00'}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) timer_create(0x5, &(0x7f0000000ac0)={0x0, 0x2c, 0x2, @tid=r2}, &(0x7f0000000fc0)) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x100, 0x281, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000380)={0x1, 0x2, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0x1000000, 0xfffffffef0019000}]}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4008801}, 0x4008010) getgroups(0xa, &(0x7f00000003c0)=[0x0, 0xffffffffffffffff, 0xee00, 0xee00, 0xee00, 0xffffffffffffffff, 0x0, 0xee01, 0xffffffffffffffff, 0xee00]) r14 = syz_open_dev$dri(&(0x7f0000000400), 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000540)=0xe4) statx(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x0, 0x4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x800, 0x4, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) r19 = getgid() sendmmsg$unix(r5, &(0x7f0000000f40)=[{{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000080)="bec5dd3dc67409c5ccd86ef463943552da941b1462e9d75d36a21d058fc4ecd0afbe09d4d6510ca1b15836a16abb5550498119e6f1f4", 0x36}], 0x1, &(0x7f0000000800)=[@rights={{0x20, 0x1, 0x1, [r1, r6, r0, r0, r0]}}, @cred={{0x18, 0x1, 0x2, {r2, r8, r10}}}, @rights={{0x18, 0x1, 0x1, [r11, r0, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r2, 0xffffffffffffffff, r13}}}, @rights={{0x2c, 0x1, 0x1, [r0, r4, r1, r1, r1, r1, r3, r14]}}, @cred={{0x18, 0x1, 0x2, {r2, r15, r16}}}, @cred={{0x18, 0x1, 0x2, {r2, 0x0, r17}}}], 0xc4, 0x4008000}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000900)="6466001df1389583251b169b5c968af5267bd5d751b0923fffbbc1ad260a71ee7a3540e73f85f182d4fb3ce3eae9182273ebc8e3768d0a35ee9bd6a9fc06370800ffd75389b34eba1ebf13b9b0e1494bb91ca8f9fb12acb6d5566bbc5ddb8042977ce016b2ccb743f301afb60999e680fdf510886f2a8bc52c66baf7c8eab66244c07e3e56c3cfa6fbf62e3a6517098aee51cc1508876c530df35ddd366f", 0x9e}, {&(0x7f00000009c0)="568136b58960a4ce0900263fc5791dc98965e6fd6316b921e5abcfaa3db0abe81b9ed37de1d4266387a3214ea374781250fe139e849d6bf4bf230ddd3f04c1582f0b598cbece3157d91253aac4969d3f123b675163ad2cd8f0ffe0dfc000e15fd5545ee4d52e6a2a0ab27fd0d7df2a44d68866f6110f2bfc7018686f600fe054ef062c49d0b6364c40c7f91db8605d5e6fbc55bb61ff3800c1f2176257625b9198b788aa7dc72a6563e5034b2a40e6a47a6fc3dce70b544ef07b34e75d10d754eeeae4d519", 0xc5}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00)="021f0b0f06eda9d00cf0eec44ea7bf9595f1e411bce6488ed4b269706e46f2f5174ddc1729dbb190aa28d7874202f6bda7dc4b318de76ef7dd56cdc36f3bd641df638f18f36bea1e095a1e60b1f71d4e83f4093df6e1b4f76758208d87263098cae2c0b6313a2b606d6f771139016f01d3d51a84a46b069e8e0ad500c733e827b01dea68083b4772538e3d1123c9dad4a6055d80f9a71ea36281751c3e", 0x9d}, {&(0x7f0000001500)="5bba1a56438fa4b99ceb7f251913762df07c3c4d3d58ffc2adbedc3cfcffdf79d33b7b7825442322cc0b0bfb315236e68eb160ca697a5ff21d751bb628471567eb453294b3c89730ff478e62db6d553b1927c8a54ca59860fc726b306f658bd7cb7152365329c53c946759d59821b4b5a8730e854446d4e856fd73c3bf8a8baa7ead1357fd85c9be1cdfe8570c44efeefb4f55dc16012f3a44f9e3f54755bba69ff027054e36e1690a890ca21adbf8341d60a52795d4829cebc19e116261ad27e76a75063307692422f31e4cf4421df98380450477b07882243c157308683bd419dc6008d570800f25fb5ee2f424101f96b088afbf8a71fcfbb3320b1b23ef1a99202227095e8d1c07793a9701eae0de3b0c650271e263219a7111e2adbc34c5d064f54e9e3c6b9d474a29d0fb1f0dbcb8d8fcd4a7319db0e19a3c62d443a6e0ab254e9fdda5e2b056caa2f4a62728f528eb27916907277c052db1b96d8ded2513f9520d7bd50c8e720c9e67a188cdfb38da52a72559550f0c4b9ea6165f1ad16e09d16df5019c904955367384b2a2ed01e109a4efb50e743ce3094dbbf1483a183c35fa5686c40b22504d32e5c289a303afc87bf4391ab683e0676ca9aa79fa54286fac153fa58e8cda86ecb821f64218cc7b32ed7b953ed68b638c92e63835465f976ee0284123aafbc45876fe25e3b0650eedf043685e65f3becd1eca66f08326c97b1aa9a87b571914e4033872730fa25d1908be56f5742707c2bd3282abc1fcc2973d9d42d09012824be31cbe089aeae899b9a4dbfaa81c4af004e447bed9a241040feea4f13e1eac5f2baf174de508a54847fb484531cce7e005d92683af42426a200dc1c3678553cbcde4badea14f468f657b97b94c4e489a678001a136b45278ec497c221a1746cff94c46a983ced33be754f4b905650b5fbb991a8d333475bd6c87e50dbbcb46e4bb102d6261e1e1829fefe7c07e8d81bd97719a551556e61ca5ba75af1eddb5ff8d5d5f216e62aeb4f3e928fb8cff9d467744cc75f02b2378b7b63ab11ebfe370d182d433849c3bae700f63851c8ef10bad31a4c5d3d76a5c24d1ad72e77296d9a917ff8350294e5e4f9d45943df52b7645b06059dd84a9902172e278e89374fb05db2b062b06013947b620660da6868ab31ff0d8e5faf3be0a3ab300f606ff3e151404dd6e6152008e81eba0a5712ac7821bcab16d0830afa6d41750be6c63e9cae6b861901445b44d832f5c347968008802a98b43969de5ccd119de04761f44ba743cb9793388faa98af95ebc567a1a13a02cf1ced26eb1e0c9044a84a75ab287e38f43785ac5dec59304eb3b6d84b472a935405bb3ee5d57ab7d59cc1cf52245656cd22f67fd0b76fbc982fabc84cc5fa82fce2a3fcfa3b68f7a7251c27321f81931ce56f9cf132dc62b7695270d9e611abded70ba979234341b86d66ac0d6ce37d5a7749c535e953f8831534ede3f83221153abc0d5639df42bd26ec3e2e4983bf3782659b7960bb7b0b9044c2007e13d117265c375e16288d9ca62d1fefc89d902a13df3e8e401729819f3b5d41e097b04870437dd6da937fc42bab9562d00f58fd954ca21396dfdc98c77c52f211c4d91795e52ac82518f54bf6eb7c54b1d460a44762c30578aa7ccc1fb4f6723280132165cba3798e84e7b387c68b6a5ca2bed12fa741bb5ad290f36176b87608cad673e85bbc5e6ec86566b708f3852982c88d790a24354d8ef65caa815b75ca24707a38682dfea54f31de399418b7d18a552b39cfe7bb7f7aa497fd85d222ebb13a66402cbb73c9a13d3e641dc0cc8af8f7c1fce523c36811bf59a1457285748688cebfd5ab8f9180beea60f094e6c9de3447fb65a74c84dc6f0b8d20b0a592864b0e3a449d16e4d4668ce78e7bcf289b671950fa072e5f1c60ef65853ddac2e2d9ed679a8500cb6afe5808b898e7d3509fe55b052952c0aefcb3938e5309bdd604f6c5efd5a43ab4f75b220ebc134fd4753bd805f8cf33871f66166f442796b0e1fef3e6aea3a913ea8c2c8fb8d7c382ddea078aebbc619d4ee20aaa63039c194dc5a1a2a23c18ac479cda37b545247440ff753cb6f126a1be28be5d88fc05442b8cb6e2d871025f2ce6941c85971d1df0080d60f7c89744e51da3a145b9e1d459720860ab05c81fcf5cd26320fa9114a561fbfc7aa7ccf9efe0f53c6907f72e4cfd8d2bdaf94e2ff75c2b709796dbdb53abb53fb662ff4e28de96293d5ad14ccb16ebf85fd2b58c738417b452d03725a3307dd735cff3578bcfef685861e0c46a3e14fa633a71a0d4ce461192aabe303d51372cc06e54b3ee138cf69c911a0475caa1586b5332035c23afd1acac9d7d0d875c5159466fa5c097aff40f2a2710ebab881f641ee7c123c583365f1cb536daf5ce3274eecac29579c779d1a97f83db4e3d8551b65fe1617a9da00d3302e506e31243c6490be5351f193d29c709fd8be6d4aff4dc0a2bedb5142aa24ad075f862ef79e8511b8f1b4cab8a8eb827204f65c3b0ea865d8ef86cd43f0b926c90a579194a1c05d8690320d38ae939b567989dcda85ae9602260a6f9e8c1929abfabc5f7a1611888347c91dd76e661cb4c458c13e33e5bb2211c6272aee10ee5367804d6d3a3cf4d6a146109f9d74e91619bf35d394aff713095ffedb034e35ae896672338cddb5c30fa7613b897072146fefd26d2bc51ff13ae5f0421dd666f4e4c712048a4e03f911ee95450773f32e88b47cbe9784e1ac632a8161bc327c59e2a4ca59f3db32b58a0895ac11111ff8f24428043334049c92aae226051a50a0f79265366e812555ca4f4f8f0a9cb1907dbdcc2e7f7f0fe0340671dd54079ab8f2963fccd6f3863298204246842490bb264fc598e2d8165061b47cc5462524af51a56e0bf6d4c23ac70f3174732a7bbaa66571bcb8634a22ff5ed6888d00dae06670dca7499818b2e5b1ef482e4c6e6b64c52a8d0227377b52b00ae531e038fcb5452fd1bbbd590973ec003b868d2e33ea8806581d97bef0cc6e6d42ae4785346d397efd7d107f951218b3c56b82c11a7d61392fe320bfb438d15e6bb5f72e284f2a42ced45bba027e24488317cbeb33a552869801b5a7ca325369da730ae64d618f91f01b97b95a69622107e8db3fc3fcc4f4708c9af53f016e6aaed6bdf423ce05b7f50b1980427dcb794cef17ba97fda1a8ebeca2a25b17044d6a59d3748269f282e2c2e6796ce9ae06b2d0f778a973aa17350dc56f996ff154a7374f77fe6a8232ece6ce8540a7fd2b1ae0de1d6263357dc4275cd3d85170e93248a358cc28d78aad2048229e73f1f1a825fe9fb39fd3badbf50a3ad68d36f39a6ddb53cdf192bdc91214df282f1c68b3d1b3523cf312803d7921954990412ff1f5ac57398a7c1da8187a1d4e23d9a71bd54a9dffbd491404ab1413a59f81b73fdf942ebbd7dddc4f416ca4067d56a9cdd1d2acf280106976b48f7dccc8a64e3694061e52b4f3c0c1d5f68b481142f2074f5c21000c966326a012aac2b9683d24561e89c8296ff8804d425d05e763aaf31f49d16312a073e2bb2b0aba276d0d9622560b9e5e10a6323aef9bb44aad4955dd4c02fc36e6b11a66a492dd976b10c2e54c505b4e3e040b10407af9a2059d65b85648694293876520eb6a17ea89233134307f15f5c96beb464db19d28a1fff4cef934d589f5060a2d302856a4e5ce46afc0b79149dea091cf7b3dd3f7cf7c77bffd977a1db62b9fa1296440ddace2afd9f663a4e1621e77123b5b5c58c2b5a21b7166fd9efc38d50b639c1cacf962341caf2b046f9af05e9cc3c6f9568fcae58c4dff9281016bde7778e7f6b6883cdaad0ace6138b0e124330d99f1b8c8e2d4c3c23909daba4bdd5893e758b67e84a04ed4918e3a8b93e03720a8bcdb6d2ea8a71738072a629edca00df696d745ce5fea4e71218e556f473e752d89df6ff125620d8ab0f1e5a9a8e7e1b9cd07b387bd5fc499638cc7d7ccb11ffffc3fb873f99d240f4d2042ae91a5067f7c680cb47423ad79166ff988937fa12ee8e263d61348efc77cb69db4578de9a8c9a1750b58c8437b9ec80bd7c9f0a79c1205aa979e3d28692b3c6113ad563e15adc44b77b4c736fb02fd4fa3126d276a0b3e09c6c28df758c6d95e2645d3e514accc42f4fd46733d8fd529aa591d2d01100e9ea28732bb63cad72a76e569d79a542f4a2a37c1e01bf1243fcb7ef357a116131f3c0e8e0046c174b9ed5b45c8572932e7bad7811afbc485f763645875e10a315d9a5aebecd44fd84e8f3ef54ac5473e92ac0d3dd5d30fe507b2e048451374ec8012a0319641f231f7cb23d7bb41f52f2da6852b815f3ea4b1a67e9e7329cb10f9bad61a80c5a6f9f0ee78de5be2b9657cddc91726ed39bc18c3fcd3030c66df12ffd4bef4108cb7e2dc44bf895c5656f0faf869538e268d5dcfee46299df376ebcae9a5ca40b18479263d6d8384337d166d7deb8e84b769416c24edd137b7b362b0300a0fa03d9584b5c4fdd83e5495613afaf30c0c4d8f444a6c9285823c4ecc37c3f77b49c684db33d78a4584a6f5dde45247ea4daca977bb4561a7aa9124acc1e935595a38a850de6ca757987ec2f5cf1504f1a427249230ff96a125afece88ad548e8189ac0becc6ec7f5928e049392b60a16f043e9c8ad2c02bc441cd70978395a3d68551150e62958303bcafc285bbfaa00f879a2131cfe3170acf9be11026a48658a39f9ef8fff1185cbe04a959a09abab0fff318dd025988618bd26932584e14f2e179b5bf46409c999e3acad72ea232f159ee1262a1ab9ed123bc547165c05f404800b3605b6d000f7a4a6fea82aad3e2ecd795c45d75d6d7fc4ecf00f0aa1fadba5fa17d2122b6d4da0c368d7d3dd84250f371e1835652bc021b86b7483eabb89c3eb449bd7563b4e23b25924ff06721911d25ba4237e275889508d7b227bb1158a0ebc25128376546fdc9b608920305b57884b624c931263d68788b85c0c5db87e864ad704e5ab4ef2f2e0e5d1498577edc36b18e99bc905a02ca61bc5726de1c86e5fae16039c10746702403a19752f8c94dcced980f9474fea3836eabff0c26c32906f62c7889adfe179e98385432910315c54e875f390fd3ee4ef85f580fae74ec1ccc6705ece5750d3a0635ab55f131f4e3b3da91d3d8564be4da48064224796ac4a01d6fae342686ccd41dd6532a832b2b4a42afacb079d61d5c2ab73e528bd67d424333f26e441c9ba26318f3497bebd14a51537d42db2c33d95c8ed10ddf21462d8bec1811711b364ded779e11620ba33e201f32ec40e7d42c9ca46249e8bf89812a6035bd59fbd0a66b000687ecb7be113e3bb2e08d18dcb6b98c16ef1dc3e0f5f25d266f938c283ac6818ab48c2d0b76a8967e79cbe2aa3dd4c934cfbc9f642a32f1f6ffb7d10f963afc01a8a3f2aa410bdad2d352028ec769374add7dd7349763019770a45b94e3bdb6418e6fe63900503ed3886c76c4e326b9dddeacffdca1bdd07819491d09bfa9ce5c3e4b0fbedce82b47ba660c80cfba1c20b71630578936ee5e73aaec07ef7a479ddc45bb3ab7b7182f4a1546bd615a7689f2c98c1b2c629f6da159c376a816eba7216b58e8c6dab4bfd4c77664e9b765fa7d0f3b3211e6fae1b81da25ad60c5de8cf2031c2e1cc5d1fd475e280f6ad2dcf9ed4d257103e2f897d5c2b7a7f008f8139dfad1cff67f25c747c5afc8ac618ba563969e8d0c81305bf170a861a9efbed1a60ff573758be6f31f64ac466e67f1db968c5ea8", 0x1000}], 0x5, &(0x7f0000000c40)=[@cred={{0x18, 0x1, 0x2, {r2, r18, r19}}}, @rights={{0x10, 0x1, 0x1, [r4]}}, @rights={{0x18, 0x1, 0x1, [r0, r1, r1]}}], 0x40, 0x30000000}}, {{&(0x7f0000000c80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000d00)="f98db534d173e4aa3ee867e51054ca1572030c62d61a3eee5c58d079d088ecaa27bab9f319fa8cbd600169a2c1d88154fccb7aa24d1f18caa850d672c61e2ef0cb3bad347f4028c92ec4e726239e4d1e0516a81365b42c69edcf05852ba002c99bfdae003537987a5363ee20d005cff50235a60a08117fd6f93b96236321aa44a344555d0eb5ad3e2a96009bc4ba72cd31370dfd05d2c98b1de74908fc50bf41a901d49c991738adf4ef74033017ef80bfc5255d497d9460e3747d4217a428781fe3b61bee989ded4ace16dfa874329ee5b0ef8d27c216aa7e7344dca56e", 0xde}, {&(0x7f0000000e00)="dd98ed9e540a8a892b04df5496988a178654df26bf351045cf8308ed5ce76fcf9e98c8490b9517959a1ea72c1397a90f1204bf7a8bc12085a2004ee473e4d0185f3b92294269705afa36bb48ce5308872f3c4e85e996865a45c44d52bcc64fd6b1462103162c136b6b5c47d6cb96c25fb023e7e23fbe206ea7a2ab81d64ac98f880b4a68d18a4111566f311ded52c8f391d8c39c6da119e80ed604d65e923ca14e33f2826f601b4c59e266161642c9b3515fd73833620e030923f29fe0e98e920334545c2ee2335efae1365521c1c323a299a95f51bf28b6ed0312fe01e6e6ffe58d6d22f84640c26e1ae0d8b53235f950", 0xf1}], 0x2, 0x0, 0x0, 0x20000008}}], 0x3, 0x10040000) 3.266193144s ago: executing program 3 (id=55): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) dup(r0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = io_uring_setup(0x5b42, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r5, 0xffffffffffffffff, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000300)=@updpolicy={0xbc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x0, 0x0, 0xfffe, 0x0, 0xa, 0x0, 0x80, 0x6c, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x4}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3}, [@replay_thresh={0x8, 0xb, 0x81}]}, 0xbc}}, 0x0) ftruncate(r1, 0x200004) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000000000000000000009000000000000000000000009000000000000001000000009020000000000"], 0x0, 0x96}, 0x20) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 3.200975692s ago: executing program 1 (id=56): r0 = creat(&(0x7f0000000000)='./file2\x00', 0x92) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x18, 0x3f9, 0x8, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x18}}, 0x1000080c) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r3, &(0x7f00000001c0)=""/64, 0x40, 0x400000000000001) r4 = openat$qrtrtun(0xffffff9c, &(0x7f0000000100), 0x428000) preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000200)=""/94, 0x5e}], 0x1, 0x2, 0x49ba) 3.109250427s ago: executing program 2 (id=57): pipe(0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdir(0x0, 0x2) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x4040004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x80002, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) writev(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000000)='X\x00\x00\x00\x00\x00', 0x6}], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040)) 2.575667691s ago: executing program 1 (id=58): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x3}, 0x4) 2.445365244s ago: executing program 0 (id=59): r0 = socket(0x2, 0x2, 0x1) syz_open_dev$video(0x0, 0x7efffffe, 0x101302) socket(0x2a, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x11, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() fcntl$getownex(r0, 0x10, &(0x7f00000001c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1d, 0x2, 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) bind$can_j1939(r5, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) 2.280390706s ago: executing program 1 (id=60): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080), &(0x7f0000000100)=0xfffffffffffffe85) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x848000000015, 0x805, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.252514293s ago: executing program 2 (id=61): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080), &(0x7f0000000100)=0xfffffffffffffe85) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x848000000015, 0x805, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.226911167s ago: executing program 3 (id=62): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) io_setup(0x9, &(0x7f00000000c0)=0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x20001, 0x2e) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x2000000, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000100)='9', 0x20000101}]) ioctl$USERFAULTFD_IOC_NEW(r3, 0xaa00) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x966, [0x0, 0x0, 0x0, 0x0, 0x0, 0x800002c0], 0x11, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="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"]}, 0xaaf) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) flock(r6, 0x8) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCFLSH(r7, 0x540b, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="802100000000000014000300776c616e3000000000000000000000000800168304000180ffdb4063180a5b3a300a1463d7d11f2d8b2e673921a9846c44ba77fd40ec60ae3c916f511847a9ca28cbc72b543f3bc323b81d7dab01ad4868b0964c6b46fbc1b3e27b13f37b16f045dd7d57361d0be2a487768dbaaea8dbfc51b0cf799bd208d94caea7b5138fde043eee149e8422d97d76e31e373b36489b54485f0762b4b5439e64e0f66c9b943d56d5b7ca67c378451035f5ffbd3b745590410b8a779b62b488b908f73d9d5e493ff29593fa301728afcb"], 0x3c}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000000c0)={0x7fffffff, 0x0, 0x6, 0x3, 0x4}, 0x14) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffc2b) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10) sendmsg$can_bcm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r10, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) 1.700525149s ago: executing program 3 (id=63): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080), &(0x7f0000000100)=0xfffffffffffffe85) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x40}}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x848000000015, 0x805, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.010900355s ago: executing program 2 (id=64): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080), &(0x7f0000000100)=0xfffffffffffffe85) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x40}}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x848000000015, 0x805, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 867.123285ms ago: executing program 1 (id=65): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40)=0xffa4, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) io_setup(0x9, &(0x7f00000000c0)=0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x20001, 0x2e) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x2000000, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000100)='9', 0x20000101}]) r4 = ioctl$USERFAULTFD_IOC_NEW(r3, 0xaa00) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x966, [0x0, 0x0, 0x0, 0x0, 0x0, 0x800002c0], 0x11, 0x0, &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x41, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x9, 0xf6, 0x88f8, 'tunl0\x00', 'pimreg0\x00', 'veth0_to_bridge\x00', 'ip_vti0\x00', @multicast, [0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, [0x0, 0x0, 0xff, 0x0, 0xff], 0x8ae, 0x8ae, 0x8d6, [@among={{'among\x00', 0x0, 0x81c}, {{@zero, @offset=0x414, 0x1, {[0x7, 0x0, 0x0, 0x5, 0x8, 0x0, 0x6, 0xa188, 0x7f, 0x2, 0x8, 0x6, 0x9, 0x6f6ebcc0, 0x5899, 0x9, 0x1, 0x3, 0xa, 0x6, 0xaa52, 0xbaf, 0x7, 0x2337, 0xbd, 0x33e8, 0x3, 0x8, 0x6, 0x10000, 0x27, 0x4000, 0x81, 0x8, 0x9, 0x9, 0x5, 0x3, 0x6, 0x7, 0xfffffff9, 0x5, 0x5, 0x80, 0xffffff80, 0xd9a7, 0xd, 0x9, 0x3, 0x5, 0x5, 0x8, 0x0, 0x8, 0x3, 0x7, 0xf, 0xfffffffd, 0x6cec, 0x6, 0x40, 0x6, 0x1ff, 0x8, 0x9, 0x3, 0xff, 0x5, 0x1ff, 0x401, 0x1ff, 0xd39, 0x3, 0x4, 0x40000, 0x7fff, 0x0, 0x8, 0x7f, 0x7, 0x7f, 0x1, 0x3, 0x7ff, 0x89d4, 0x2, 0x7fff, 0x2, 0xffff, 0xfffffffe, 0x0, 0x5, 0x0, 0x5e, 0x9, 0xb, 0xfff, 0xf8, 0x2, 0x7, 0x2, 0x4, 0x9, 0xe57f, 0x89, 0xff, 0x1, 0x9, 0xa, 0x4, 0x2, 0x6, 0x74, 0x4135, 0x2903, 0x1, 0x9, 0x80000001, 0x2, 0x1, 0x8, 0x3, 0xfffffff7, 0x3d6, 0xeb, 0x9, 0x8, 0x3, 0x4, 0x5, 0x7, 0xa, 0x100, 0x1, 0x6, 0x71, 0x200, 0x1, 0x80, 0x7ff, 0x1, 0xde19, 0x6, 0x6, 0x16fb, 0x8, 0x400, 0x44d4, 0x4, 0x8000, 0xa3a, 0x6, 0x7ff, 0x7, 0xfffffff8, 0x200, 0x3, 0x5, 0x9, 0xfffffff8, 0x100, 0x0, 0x7bd90313, 0x866, 0x2, 0x6, 0xe58, 0x1e2, 0x7, 0x3, 0x4, 0x4, 0x80000001, 0x1, 0x0, 0x6, 0x8, 0x5, 0x7ff, 0xffffff01, 0xffff0c1e, 0x0, 0x6, 0x15d4, 0x7fff, 0x9, 0x8, 0x7, 0x2, 0x9000000, 0x0, 0x6, 0x6, 0x0, 0x0, 0x5, 0x2, 0x8, 0x7, 0x101, 0x2, 0xa199, 0x8, 0x4, 0x1, 0x2, 0x4, 0x1, 0xfffffff9, 0x8000, 0x6, 0x4, 0x3, 0xfffffff7, 0x6, 0x7fff, 0xfffffff9, 0x3, 0x10001, 0xff, 0x5ac, 0x7fff, 0x3, 0x0, 0x2, 0x1, 0x5, 0x4, 0x0, 0x8, 0x5, 0x10001, 0x0, 0x5, 0x0, 0x7b, 0x4, 0xff98, 0x2, 0x2, 0xd, 0x9, 0x9, 0x8ad, 0x3, 0xec30, 0xffffffff, 0x4, 0x1, 0x100, 0x9, 0xc14b, 0x1, 0x2, 0x6, 0x9, 0x80000001]}, {[0x3a741ee8, 0x1, 0xffffffff, 0x5, 0x8, 0xfffffff8, 0x1, 0x800, 0xa9ce, 0x7, 0x0, 0x1ff, 0x8, 0x2, 0x2, 0x4, 0x0, 0x6, 0x0, 0x10, 0x80000000, 0x7ff, 0xcf6, 0x2, 0x6, 0x9, 0x0, 0x5, 0x3f834eaa, 0x8000, 0x0, 0x1, 0x7, 0x200, 0x6, 0x101, 0x81b7, 0xd35d, 0x7, 0x10000, 0x0, 0x101, 0x200, 0x4, 0x0, 0x6, 0xa, 0x7, 0x4, 0x33, 0x40, 0x80, 0x9, 0xffffffff, 0x0, 0x4, 0x9, 0x2, 0xc, 0x7ff, 0x8, 0xcc9a, 0x5, 0x0, 0xc6e, 0x5, 0x13cf, 0x3, 0x81, 0x384052ae, 0x5, 0xe2fe542a, 0x1, 0x0, 0x9, 0x2, 0x4, 0x25e9, 0x7, 0x4, 0x7, 0x46, 0x20, 0x0, 0x6, 0x10000, 0x5, 0x80000000, 0x3, 0x4, 0x3, 0x3, 0x10000, 0x633c, 0x5, 0x80000000, 0xd, 0x80000000, 0x6, 0x2, 0x8, 0x3ff, 0xfffff2be, 0xd6, 0x56f, 0x0, 0x80000001, 0x3, 0x0, 0xffff7fff, 0x5, 0x6, 0x400, 0x3, 0x7, 0x81, 0x80, 0x7, 0x80000000, 0xfffffffe, 0x279b, 0x7, 0x63, 0x7f, 0x1000, 0x80, 0x7, 0x8, 0x4, 0x1, 0x3, 0x3, 0x6, 0xe9a2, 0x7, 0x5, 0x7fffffff, 0xc045b906, 0x8, 0x9, 0x7, 0x5, 0x0, 0x6, 0x8, 0x2, 0x6a14, 0x7, 0xa627, 0x6, 0xa, 0x4, 0x6, 0x4, 0x1800, 0x1, 0xc, 0x4018, 0x9, 0x3, 0x400, 0x4, 0x6, 0x4, 0x7, 0x0, 0x7, 0x7fffffff, 0x0, 0x3ff, 0xffffffff, 0x4, 0x8a59, 0x6, 0x9, 0x27d3, 0x0, 0x9, 0x7, 0x10, 0xdb, 0x3, 0xb280, 0xf6, 0x8, 0x4, 0x1, 0x0, 0x5, 0xfffffffb, 0xff, 0xe0, 0x80000000, 0x0, 0xfff, 0x7, 0xeb63, 0x4, 0x4, 0x2, 0x4, 0x0, 0x3, 0x200, 0x0, 0x1, 0x10001, 0xe, 0x10, 0x1000, 0xffffffff, 0x7c000000, 0x0, 0xdfc, 0xe7, 0x6, 0xa3, 0x5, 0xc, 0x1000, 0x1, 0x7, 0x8, 0xc37, 0x6, 0x4c00136, 0x3, 0x7ff, 0x0, 0x7, 0x6, 0x5, 0x7fffffff, 0x1ff, 0x6, 0x6, 0x10000, 0x4, 0x6, 0x8, 0x3, 0x400, 0x3, 0x79, 0x1, 0x3, 0x7, 0x7ae, 0x8, 0xf1, 0x3, 0x4, 0x9, 0x7, 0xa1, 0x1ff, 0x42]}}}}], [], @common=@STANDARD={'\x00', 0x4, {0xfffffffffffffffb}}}]}]}, 0x9b6) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) flock(r7, 0x8) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCFLSH(r8, 0x540b, 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x3c}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f00000000c0)={0x7fffffff, 0x0, 0x6, 0x3, 0x4}, 0x14) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffc2b) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x3000, 0x3}) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@empty, @empty, 0x0, "daf86eed51d59c3b227a93fc7264db425e9d015e14f17c0900497e00b3bb00", 0x7, 0x6, 0xffffff9d, 0xffffe6df}, 0x3c) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 433.812569ms ago: executing program 1 (id=66): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x751, 0xd489, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r5) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, r6, 0x1, 0x70bd2a, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r10 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r10, 0xc2c45512, &(0x7f0000000580)={{0xa, 0x3, 0x9, 0x0, 'syz0\x00', 0x10000}, 0x0, [0x2, 0x506a, 0x80000000, 0x6eb1, 0x9, 0xffffffff, 0xf, 0xd, 0xc, 0x4, 0x6, 0xff, 0x9, 0x2, 0x2, 0xad, 0xd, 0x8, 0x7, 0x0, 0x7fffffff, 0x5f, 0x40, 0x0, 0x200, 0x8, 0xe780, 0x9, 0xa8, 0x7, 0x2, 0x1, 0x8, 0x5, 0x7, 0x7ff, 0x10, 0x6, 0x1, 0x80, 0x1ff, 0xfff, 0x8, 0x2, 0x6, 0x3, 0x3, 0x7, 0x2, 0x0, 0x8, 0x6, 0x2, 0x9, 0x80, 0x6, 0x7, 0x7, 0x7ff, 0x9, 0x7, 0x2, 0x6, 0x6, 0x7, 0x3, 0x9, 0x3668077b, 0x76, 0x5, 0xffff9460, 0x1, 0x3, 0x5, 0x3, 0x0, 0x16e, 0x80000000, 0x3, 0x1000, 0x0, 0x9, 0xffffffff, 0xfff, 0xe8e4, 0xfffffff0, 0x2, 0x6, 0x10, 0x800, 0x16, 0x2f, 0x8, 0x6, 0x8ba6, 0x2, 0x3, 0x8001, 0x4, 0x7, 0x1, 0x3240, 0x65, 0x3, 0x7, 0x0, 0x6, 0xd00eb72c, 0x400, 0x3, 0x6171f0fa, 0x5, 0x3, 0x7, 0x5, 0x8589, 0x4, 0x10001, 0x994, 0x10000, 0x47, 0x6635, 0x4, 0xc2, 0x4687, 0xe3e3, 0x600000, 0x9]}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="310300000000fcdbdf250900000008000300", @ANYRES32=r9, @ANYRESDEC=r10], 0x24}}, 0x8) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00012bbd7000fddbdf2503000000080004006401010208000400ffffffff08000100", @ANYRES32=r9, @ANYBLOB="be20aef3", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000400) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000280)=0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000002c0)=0x0) setpgid(r11, r12) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) readv(r4, &(0x7f0000000600)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) r13 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r13, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="0b0000000a004e21076971c1ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a004e200000000720010000000000000000000000000002040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001fa6903e7f2130"], 0x110) ioprio_set$uid(0x3, 0x0, 0x0) r14 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/config', 0x0, 0x0) getdents(r14, &(0x7f0000000000)=""/101, 0x65) io_submit(0x0, 0x0, 0x0) 0s ago: executing program 3 (id=67): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080), &(0x7f0000000100)=0xfffffffffffffe85) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10003300, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x848000000015, 0x805, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:41537' (ED25519) to the list of known hosts. [ 46.909742][ T5922] cgroup: Unknown subsys name 'net' [ 47.030802][ T5922] cgroup: Unknown subsys name 'cpuset' [ 47.034568][ T5922] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.061524][ T5922] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.540232][ T5302] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.543419][ T5302] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.546406][ T5302] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.549544][ T5302] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.551070][ T5949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.551956][ T5302] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.556399][ T5954] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.559546][ T5954] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.563753][ T5954] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.566337][ T5954] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.576103][ T5952] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.579853][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.582239][ T5952] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.583093][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.584819][ T5952] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.587216][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.589996][ T5952] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.591869][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.594341][ T5952] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.596124][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.779025][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 51.886519][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 51.964704][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.967646][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.970362][ T5940] bridge_slave_0: entered allmulticast mode [ 51.973304][ T5940] bridge_slave_0: entered promiscuous mode [ 51.977880][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 52.000058][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.003130][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.005934][ T5940] bridge_slave_1: entered allmulticast mode [ 52.009180][ T5940] bridge_slave_1: entered promiscuous mode [ 52.069120][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 52.092588][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.108618][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.111573][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.114769][ T5943] bridge_slave_0: entered allmulticast mode [ 52.119042][ T5943] bridge_slave_0: entered promiscuous mode [ 52.135202][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.155530][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.158818][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.161949][ T5943] bridge_slave_1: entered allmulticast mode [ 52.165890][ T5943] bridge_slave_1: entered promiscuous mode [ 52.169617][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.176129][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.179856][ T5955] bridge_slave_0: entered allmulticast mode [ 52.186719][ T5955] bridge_slave_0: entered promiscuous mode [ 52.218477][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.221679][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.224881][ T5955] bridge_slave_1: entered allmulticast mode [ 52.227823][ T5955] bridge_slave_1: entered promiscuous mode [ 52.238058][ T5940] team0: Port device team_slave_0 added [ 52.241647][ T5940] team0: Port device team_slave_1 added [ 52.270866][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.281993][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.292729][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.295604][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.304612][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.310554][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.314868][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.317450][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.327873][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.341889][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.385747][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.388494][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.390798][ T5951] bridge_slave_0: entered allmulticast mode [ 52.394289][ T5951] bridge_slave_0: entered promiscuous mode [ 52.409160][ T5955] team0: Port device team_slave_0 added [ 52.412705][ T5955] team0: Port device team_slave_1 added [ 52.416146][ T5943] team0: Port device team_slave_0 added [ 52.419070][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.421417][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.423718][ T5951] bridge_slave_1: entered allmulticast mode [ 52.426406][ T5951] bridge_slave_1: entered promiscuous mode [ 52.448612][ T5943] team0: Port device team_slave_1 added [ 52.484580][ T5940] hsr_slave_0: entered promiscuous mode [ 52.488000][ T5940] hsr_slave_1: entered promiscuous mode [ 52.506784][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.509786][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.520236][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.525471][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.537257][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.540495][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.542731][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.552299][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.556396][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.558856][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.567477][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.588190][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.590941][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.599261][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.634377][ T5951] team0: Port device team_slave_0 added [ 52.651859][ T5955] hsr_slave_0: entered promiscuous mode [ 52.654151][ T5955] hsr_slave_1: entered promiscuous mode [ 52.656224][ T5955] debugfs: 'hsr0' already exists in 'hsr' [ 52.658150][ T5955] Cannot create hsr debugfs directory [ 52.660917][ T5951] team0: Port device team_slave_1 added [ 52.700729][ T5943] hsr_slave_0: entered promiscuous mode [ 52.703087][ T5943] hsr_slave_1: entered promiscuous mode [ 52.705147][ T5943] debugfs: 'hsr0' already exists in 'hsr' [ 52.706980][ T5943] Cannot create hsr debugfs directory [ 52.709501][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.711749][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.720036][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.740124][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.742410][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.750478][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.808381][ T5951] hsr_slave_0: entered promiscuous mode [ 52.810675][ T5951] hsr_slave_1: entered promiscuous mode [ 52.812880][ T5951] debugfs: 'hsr0' already exists in 'hsr' [ 52.814722][ T5951] Cannot create hsr debugfs directory [ 52.989419][ T5940] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.003268][ T5940] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.007836][ T5940] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.015135][ T5940] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.038315][ T5955] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.049322][ T5955] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.054307][ T5955] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.058927][ T5955] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.122947][ T5943] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.129487][ T5943] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.151837][ T5943] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.159560][ T5943] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.210086][ T5951] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.220807][ T5951] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.226087][ T5951] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.231100][ T5951] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.249549][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.272103][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.287611][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.299164][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.301676][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.309141][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.320117][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.322372][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.327938][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.330203][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.358533][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.360884][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.381636][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.412568][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.438385][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.440610][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.444258][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.446496][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.453647][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.490853][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.509082][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.512259][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.526250][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.529560][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.598063][ T5950] Bluetooth: hci1: command tx timeout [ 53.600370][ T5950] Bluetooth: hci0: command tx timeout [ 53.656620][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.661360][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.677765][ T5949] Bluetooth: hci2: command tx timeout [ 53.678413][ T5950] Bluetooth: hci3: command tx timeout [ 53.709129][ T5940] veth0_vlan: entered promiscuous mode [ 53.722760][ T5940] veth1_vlan: entered promiscuous mode [ 53.732818][ T5955] veth0_vlan: entered promiscuous mode [ 53.742978][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.748320][ T5955] veth1_vlan: entered promiscuous mode [ 53.752336][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.780215][ T5955] veth0_macvtap: entered promiscuous mode [ 53.784745][ T5955] veth1_macvtap: entered promiscuous mode [ 53.801764][ T5940] veth0_macvtap: entered promiscuous mode [ 53.814759][ T5940] veth1_macvtap: entered promiscuous mode [ 53.828470][ T5951] veth0_vlan: entered promiscuous mode [ 53.837851][ T5943] veth0_vlan: entered promiscuous mode [ 53.846280][ T5943] veth1_vlan: entered promiscuous mode [ 53.853245][ T5951] veth1_vlan: entered promiscuous mode [ 53.859066][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.869093][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.878621][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.883539][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.896038][ T77] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.910745][ T77] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.924354][ T77] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.928149][ T77] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.935224][ T5943] veth0_macvtap: entered promiscuous mode [ 53.940258][ T77] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.949953][ T5943] veth1_macvtap: entered promiscuous mode [ 53.953060][ T77] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.966662][ T5951] veth0_macvtap: entered promiscuous mode [ 53.969441][ T77] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.972958][ T77] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.987768][ T5951] veth1_macvtap: entered promiscuous mode [ 53.994794][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.010940][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.028922][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.054375][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.058549][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.059100][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.062565][ T46] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.067641][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.100433][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.104578][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.112742][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.115959][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.116471][ T77] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.125778][ T77] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.134922][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.138669][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.150981][ T77] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.155521][ T77] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.200263][ T5940] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.216903][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.222751][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.242516][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.245805][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.279284][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.283985][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.314945][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.318596][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.343114][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.345634][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.427612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.456358][ T6038] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 54.461311][ T6038] openvswitch: netlink: Flow key attr not present in new flow. [ 54.467585][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.471397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.702181][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 54.713559][ T6045] loop6: detected capacity change from 0 to 524287999 [ 54.719161][ T6045] Buffer I/O error on dev loop6, logical block 0, async page read [ 54.722059][ T6045] Buffer I/O error on dev loop6, logical block 0, async page read [ 54.724844][ T6045] Buffer I/O error on dev loop6, logical block 0, async page read [ 54.728154][ T6045] Buffer I/O error on dev loop6, logical block 0, async page read [ 54.731291][ T6045] Buffer I/O error on dev loop6, logical block 0, async page read [ 54.734117][ T6045] Buffer I/O error on dev loop6, logical block 0, async page read [ 54.736984][ T6045] Buffer I/O error on dev loop6, logical block 0, async page read [ 54.739845][ T6045] Buffer I/O error on dev loop6, logical block 0, async page read [ 54.742752][ T6045] ldm_validate_partition_table(): Disk read failed. [ 54.745020][ T6045] Buffer I/O error on dev loop6, logical block 0, async page read [ 54.747811][ T6045] Buffer I/O error on dev loop6, logical block 0, async page read [ 54.750936][ T6045] Dev loop6: unable to read RDB block 0 [ 54.753854][ T6045] loop6: unable to read partition table [ 54.756162][ T6045] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 54.906942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 55.009405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 55.111743][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 55.214148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 55.277704][ T6046] infiniband syz2: set down [ 55.279420][ T6046] infiniband syz2: added ipvlan0 [ 55.316540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 55.521395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 55.687198][ T5950] Bluetooth: hci0: command tx timeout [ 55.688954][ T5950] Bluetooth: hci1: command tx timeout [ 55.702335][ T6046] RDS/IB: syz2: added [ 55.703844][ T6046] smc: adding ib device syz2 with port count 1 [ 55.705870][ T6046] smc: ib device syz2 port 1 has no pnetid [ 55.832572][ T5949] Bluetooth: hci3: command tx timeout [ 55.832717][ T5950] Bluetooth: hci2: command tx timeout [ 56.242368][ T6041] mmap: syz.3.4 (6041) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.489119][ T5942] ldm_validate_partition_table(): Disk read failed. [ 56.492227][ T5942] Dev loop6: unable to read RDB block 0 [ 56.494647][ T5942] loop6: unable to read partition table [ 56.832894][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5'. [ 56.921969][ T6058] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 56.994582][ T6058] block device autoloading is deprecated and will be removed. [ 57.676208][ T6069] bridge_slave_0: left allmulticast mode [ 57.683999][ T6069] bridge_slave_0: left promiscuous mode [ 57.687590][ T6069] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.751123][ T6069] bridge_slave_1: left allmulticast mode [ 57.757421][ T6069] bridge_slave_1: left promiscuous mode [ 57.759268][ T5950] Bluetooth: hci1: command tx timeout [ 57.764472][ T6069] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.766908][ T5949] Bluetooth: hci0: command tx timeout [ 57.812021][ T6069] bond0: (slave bond_slave_0): Releasing backup interface [ 57.835617][ T6069] bond0: (slave bond_slave_1): Releasing backup interface [ 57.847819][ T5950] Bluetooth: hci3: command tx timeout [ 57.872437][ T6069] team0: Port device team_slave_0 removed [ 57.884306][ T6069] team0: Port device team_slave_1 removed [ 57.886820][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.889487][ T6069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.890797][ T6079] ata1.00: invalid multi_count 128 ignored [ 57.899060][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.904139][ T6069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.917232][ T5950] Bluetooth: hci2: command tx timeout [ 57.920653][ T6069] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 57.932585][ T6070] team0: Mode changed to "loadbalance" [ 57.940160][ T6081] syz.3.12 uses obsolete (PF_INET,SOCK_PACKET) [ 57.956733][ T6081] capability: warning: `syz.3.12' uses deprecated v2 capabilities in a way that may be insecure [ 57.966031][ T6078] vlan0: entered promiscuous mode [ 57.999376][ T6078] team0: Port device vlan0 added [ 58.062595][ T6069] tipc: Started in network mode [ 58.062639][ T6069] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 58.062915][ T6069] tipc: Enabled bearer , priority 0 [ 59.178479][ T5984] tipc: Node number set to 11578026 [ 59.847248][ T5950] Bluetooth: hci1: command tx timeout [ 59.849045][ T5950] Bluetooth: hci0: command tx timeout [ 59.917247][ T5949] Bluetooth: hci3: command tx timeout [ 60.040740][ T5949] Bluetooth: hci2: command tx timeout [ 60.362350][ T6117] syzkaller0: entered promiscuous mode [ 60.364101][ T6117] syzkaller0: entered allmulticast mode [ 61.128818][ T6131] comedi comedi0: Minor 47 could not be opened [ 61.134385][ T6131] netlink: 'syz.1.22': attribute type 1 has an invalid length. [ 61.180241][ T40] audit: type=1326 audit(1764331422.536:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.3.23" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 61.198036][ T40] audit: type=1326 audit(1764331422.536:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.3.23" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 61.206199][ T40] audit: type=1326 audit(1764331422.536:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.3.23" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 61.221358][ T40] audit: type=1326 audit(1764331422.576:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.3.23" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 61.295416][ T40] audit: type=1326 audit(1764331422.576:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.3.23" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 61.307494][ T40] audit: type=1326 audit(1764331422.576:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.3.23" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 61.373086][ T40] audit: type=1326 audit(1764331422.726:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.3.23" exe="/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 61.447419][ T4433] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 61.486305][ T40] audit: type=1326 audit(1764331422.836:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.3.23" exe="/syz-executor" sig=0 arch=40000003 syscall=284 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 61.568420][ T40] audit: type=1326 audit(1764331422.916:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.3.23" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70bd598 code=0x7ffc0000 [ 61.585492][ T40] audit: type=1326 audit(1764331422.926:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.3.23" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 61.598920][ T4433] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 61.606114][ T4433] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.609244][ T4433] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9 [ 61.618710][ T4433] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8326, setting to 1024 [ 61.624072][ T4433] usb 7-1: config 0 interface 0 has no altsetting 0 [ 61.629340][ T4433] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.632081][ T4433] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9 [ 61.637993][ T4433] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8326, setting to 1024 [ 61.643735][ T4433] usb 7-1: config 0 interface 0 has no altsetting 0 [ 61.651244][ T4433] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.656183][ T4433] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9 [ 61.664099][ T4433] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8326, setting to 1024 [ 61.670556][ T4433] usb 7-1: config 0 interface 0 has no altsetting 0 [ 61.680845][ T4433] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.686761][ T4433] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9 [ 61.692636][ T4433] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8326, setting to 1024 [ 61.698366][ T4433] usb 7-1: config 0 interface 0 has no altsetting 0 [ 61.709512][ T4433] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.712341][ T4433] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9 [ 61.717896][ T4433] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8326, setting to 1024 [ 61.721306][ T4433] usb 7-1: config 0 interface 0 has no altsetting 0 [ 61.735448][ T4433] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.740438][ T4433] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9 [ 61.747882][ T4433] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8326, setting to 1024 [ 61.753481][ T4433] usb 7-1: config 0 interface 0 has no altsetting 0 [ 61.764342][ T4433] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.767210][ T4433] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9 [ 61.770907][ T4433] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8326, setting to 1024 [ 61.774551][ T4433] usb 7-1: config 0 interface 0 has no altsetting 0 [ 61.782119][ T4433] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 61.785083][ T4433] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9 [ 61.790634][ T4433] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8326, setting to 1024 [ 61.794120][ T4433] usb 7-1: config 0 interface 0 has no altsetting 0 [ 61.816392][ T4433] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 61.819434][ T4433] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 61.822028][ T4433] usb 7-1: Product: syz [ 61.823354][ T4433] usb 7-1: Manufacturer: syz [ 61.824818][ T4433] usb 7-1: SerialNumber: syz [ 61.832898][ T4433] usb 7-1: config 0 descriptor?? [ 61.847754][ T4433] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 62.048351][ T6133] process 'syz.2.24' launched '/dev/fd/8' with NULL argv: empty string added [ 62.277233][ T5944] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 62.427227][ T5944] usb 8-1: Using ep0 maxpacket: 8 [ 62.431879][ T5944] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 62.435035][ T5944] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 62.438175][ T5944] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 62.442176][ T5944] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 62.445730][ T5944] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 62.450297][ T5944] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 62.453507][ T5944] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.696580][ T5944] usb 8-1: GET_CAPABILITIES returned 0 [ 62.699095][ T5944] usbtmc 8-1:16.0: can't read capabilities [ 62.931009][ T6137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.953798][ T54] usb 8-1: USB disconnect, device number 2 [ 63.625213][ T6163] ======================================================= [ 63.625213][ T6163] WARNING: The mand mount option has been deprecated and [ 63.625213][ T6163] and is ignored by this kernel. Remove the mand [ 63.625213][ T6163] option from the mount to silence this warning. [ 63.625213][ T6163] ======================================================= [ 63.639188][ T6163] kAFS: unable to lookup cell 'syz0' [ 63.649277][ T6163] team0: Port device vlan2 added [ 63.935759][ T6175] Zero length message leads to an empty skb [ 64.105988][ T5984] usb 7-1: USB disconnect, device number 2 [ 64.111477][ T5984] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 64.227216][ T4433] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.397223][ T4433] usb 5-1: Using ep0 maxpacket: 8 [ 64.400428][ T4433] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 64.404273][ T4433] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 64.408019][ T4433] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 64.411287][ T4433] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 64.415451][ T4433] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 64.418371][ T4433] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.543159][ T5949] block nbd3: Receive control failed (result -32) [ 64.544534][ T6167] block nbd3: shutting down sockets [ 64.629930][ T4433] usb 5-1: usb_control_msg returned -32 [ 64.631934][ T4433] usbtmc 5-1:16.0: can't read capabilities [ 65.345894][ T6193] Bluetooth: MGMT ver 1.23 [ 66.311323][ T6210] netlink: 20 bytes leftover after parsing attributes in process `syz.2.44'. [ 67.152732][ T5984] usb 5-1: USB disconnect, device number 2 [ 70.459469][ T6270] kernel profiling enabled (shift: 9) [ 70.519293][ T6270] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 70.525258][ T6273] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 70.527463][ T6273] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 70.530337][ T6273] vhci_hcd vhci_hcd.0: Device attached [ 70.987255][ T29] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 71.833677][ T6288] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 72.872383][ T6274] vhci_hcd: connection reset by peer [ 72.875106][ T60] vhci_hcd: stop threads [ 72.876913][ T60] vhci_hcd: release socket [ 72.878910][ T60] vhci_hcd: disconnect device [ 72.947450][ C0] ================================================================== [ 72.950841][ C0] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 72.955517][ C0] Read of size 1 at addr ffff888012dbc018 by task swapper/0/0 [ 72.960595][ C0] [ 72.961644][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 72.961667][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.961678][ C0] Call Trace: [ 72.961685][ C0] [ 72.961692][ C0] dump_stack_lvl+0x116/0x1f0 [ 72.961717][ C0] print_report+0xcd/0x630 [ 72.961739][ C0] ? __virt_addr_valid+0x81/0x610 [ 72.961759][ C0] ? __phys_addr+0xe8/0x180 [ 72.961780][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 72.961798][ C0] kasan_report+0xe0/0x110 [ 72.961819][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 72.961838][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 72.961856][ C0] __kasan_check_byte+0x36/0x50 [ 72.961877][ C0] lock_acquire+0xfc/0x350 [ 72.961898][ C0] ? __wake_up+0x3f/0x60 [ 72.961918][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 72.961935][ C0] ? p9_req_put+0xaf/0x250 [ 72.961958][ T6303] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 72.961956][ C0] p9_req_put+0xaf/0x250 [ 72.961976][ C0] req_done+0x1dc/0x2e0 [ 72.961995][ C0] ? __pfx_req_done+0x10/0x10 [ 72.962013][ C0] ? try_to_wake_up+0xa5d/0x1870 [ 72.962030][ C0] ? __pfx_req_done+0x10/0x10 [ 72.962047][ C0] vring_interrupt+0x31e/0x400 [ 72.962071][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 72.962094][ C0] __handle_irq_event_percpu+0x236/0x920 [ 72.962115][ C0] handle_irq_event+0xab/0x1e0 [ 72.962132][ C0] handle_edge_irq+0x3ca/0x9e0 [ 72.962151][ C0] __common_interrupt+0xd0/0x2f0 [ 72.962173][ C0] common_interrupt+0x61/0xe0 [ 72.962198][ C0] asm_common_interrupt+0x26/0x40 [ 72.962220][ C0] RIP: 0010:handle_softirqs+0x1dd/0x8e0 [ 72.962240][ C0] Code: 88 6c 24 26 4c 89 7c 24 18 48 c7 c7 20 ce 8b 8b e8 68 ef e0 09 65 66 c7 05 46 54 24 12 00 00 e8 79 7c 47 00 fb bb ff ff ff ff <49> c7 c7 c0 c0 00 8e 41 0f bc dc 83 c3 01 0f 85 a4 00 00 00 e9 b1 [ 72.962255][ C0] RSP: 0018:ffffc90000007f28 EFLAGS: 00000202 [ 72.962270][ C0] RAX: 00000000001cc754 RBX: 00000000ffffffff RCX: ffffffff81c4576f [ 72.962282][ C0] RDX: 0000000000000000 RSI: ffffffff8da29704 RDI: ffffffff8bf078c0 [ 72.962293][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 72.962302][ C0] R10: ffffffff908251d7 R11: 0000000000000001 R12: 0000000000000280 [ 72.962312][ C0] R13: 000000000000000a R14: 1ffff92000000fed R15: fffffbfff1c12f40 [ 72.962326][ C0] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 72.962347][ C0] ? handle_softirqs+0x1d7/0x8e0 [ 72.962364][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 72.962386][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 72.962407][ C0] __irq_exit_rcu+0x109/0x170 [ 72.962425][ C0] irq_exit_rcu+0x9/0x30 [ 72.962442][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 72.962461][ C0] [ 72.962467][ C0] [ 72.962473][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 72.962490][ C0] RIP: 0010:sched_core_balance+0xa0/0xeb0 [ 72.962506][ C0] Code: 45 3c 8e e8 a2 2f 0d 00 e8 fd 93 d2 09 41 5b 85 c0 0f 85 31 0a 00 00 4c 89 e7 e8 eb 72 fe ff e8 16 35 39 00 fb 48 63 44 24 50 <48> c7 c3 c0 d4 a2 93 48 89 44 24 08 48 83 f8 07 0f 87 9c 0c 00 00 [ 72.962521][ C0] RSP: 0018:ffffffff8e007b00 EFLAGS: 00000206 [ 72.962531][ C0] RAX: 0000000000000000 RBX: ffff88802b223f10 RCX: ffffffff81c4576f [ 72.962539][ C0] RDX: 0000000000000000 RSI: ffffffff8da29704 RDI: ffffffff8bf078c0 [ 72.962547][ C0] RBP: ffffffff8e007c20 R08: 0000000000000001 R09: 0000000000000001 [ 72.962554][ C0] R10: ffffffff908251d7 R11: 0000000000000001 R12: ffff88802b23a4c0 [ 72.962562][ C0] R13: ffff888024178000 R14: 0000000000000000 R15: dffffc0000000000 [ 72.962575][ C0] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 72.962596][ C0] ? lock_acquire+0x179/0x350 [ 72.962622][ C0] finish_task_switch.isra.0+0x472/0xc10 [ 72.962643][ C0] __schedule+0x1198/0x5de0 [ 72.962659][ C0] ? try_to_wake_up+0xa5d/0x1870 [ 72.962675][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 72.962691][ C0] ? try_to_wake_up+0x160/0x1870 [ 72.962708][ C0] ? __pfx___schedule+0x10/0x10 [ 72.962724][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 72.962742][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 72.962764][ C0] ? flush_smp_call_function_queue+0x153/0x1e0 [ 72.962786][ C0] schedule_idle+0x5c/0x90 [ 72.962804][ C0] do_idle+0x2b3/0x500 [ 72.962821][ C0] ? __pfx_do_idle+0x10/0x10 [ 72.962837][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 72.962863][ C0] cpu_startup_entry+0x4f/0x60 [ 72.962879][ C0] rest_init+0x16b/0x2b0 [ 72.962901][ C0] ? acpi_subsystem_init+0x133/0x180 [ 72.962926][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 72.962944][ C0] start_kernel+0x3f6/0x4e0 [ 72.962960][ C0] x86_64_start_reservations+0x18/0x30 [ 72.962976][ C0] x86_64_start_kernel+0x130/0x190 [ 72.962993][ C0] common_startup_64+0x13e/0x148 [ 72.963015][ C0] [ 72.963021][ C0] [ 72.964869][ T6303] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 72.968410][ C0] Allocated by task 6303: [ 72.968418][ C0] kasan_save_stack+0x33/0x60 [ 72.970395][ T6303] vhci_hcd vhci_hcd.0: Device attached [ 72.970479][ C0] kasan_save_track+0x14/0x30 [ 72.980090][ T6303] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(14) [ 72.981375][ C0] __kasan_kmalloc+0xaa/0xb0 [ 72.983166][ T6303] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 72.985269][ C0] p9_client_create+0xc7/0x11d0 [ 72.987868][ T6303] vhci_hcd vhci_hcd.0: Device attached [ 72.988138][ C0] v9fs_session_init+0x1f7/0x1a80 [ 72.997472][ T6303] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(16) [ 72.998011][ C0] v9fs_mount+0xc5/0xa90 [ 72.999514][ T6303] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 73.001621][ C0] legacy_get_tree+0x10c/0x220 [ 73.003325][ T6303] vhci_hcd vhci_hcd.0: Device attached [ 73.005153][ C0] vfs_get_tree+0x8e/0x340 [ 73.005182][ C0] path_mount+0x7b9/0x23a0 [ 73.005199][ C0] __ia32_sys_mount+0x291/0x310 [ 73.005216][ C0] __do_fast_syscall_32+0x7c/0x300 [ 73.015773][ T6303] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 73.015965][ C0] do_fast_syscall_32+0x32/0x80 [ 73.015983][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.020336][ T6303] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(20) [ 73.025581][ C0] [ 73.025586][ C0] Freed by task 6303: [ 73.027527][ T6303] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 73.030083][ C0] kasan_save_stack+0x33/0x60 [ 73.047428][ T6303] vhci_hcd vhci_hcd.0: Device attached [ 73.047545][ C0] kasan_save_track+0x14/0x30 [ 73.171187][ C0] __kasan_save_free_info+0x3b/0x60 [ 73.172913][ C0] __kasan_slab_free+0x5f/0x80 [ 73.174480][ C0] kfree+0x2b8/0x6d0 [ 73.175756][ C0] p9_client_create+0xa28/0x11d0 [ 73.177411][ C0] v9fs_session_init+0x1f7/0x1a80 [ 73.179068][ C0] v9fs_mount+0xc5/0xa90 [ 73.180444][ C0] legacy_get_tree+0x10c/0x220 [ 73.182043][ C0] vfs_get_tree+0x8e/0x340 [ 73.183568][ C0] path_mount+0x7b9/0x23a0 [ 73.185063][ C0] __ia32_sys_mount+0x291/0x310 [ 73.186629][ C0] __do_fast_syscall_32+0x7c/0x300 [ 73.188252][ C0] do_fast_syscall_32+0x32/0x80 [ 73.189852][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.191902][ C0] [ 73.192738][ C0] The buggy address belongs to the object at ffff888012dbc000 [ 73.192738][ C0] which belongs to the cache kmalloc-512 of size 512 [ 73.197224][ C0] The buggy address is located 24 bytes inside of [ 73.197224][ C0] freed 512-byte region [ffff888012dbc000, ffff888012dbc200) [ 73.198098][ T6303] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(22) [ 73.201568][ C0] [ 73.201574][ C0] The buggy address belongs to the physical page: [ 73.201579][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12dbc [ 73.203708][ T6303] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 73.204506][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 73.214541][ C0] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 73.217014][ C0] page_type: f5(slab) [ 73.218341][ C0] raw: 00fff00000000040 ffff88801b442c80 0000000000000000 dead000000000001 [ 73.221088][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 73.223850][ C0] head: 00fff00000000040 ffff88801b442c80 0000000000000000 dead000000000001 [ 73.226385][ T6303] vhci_hcd vhci_hcd.0: Device attached [ 73.226626][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 73.226636][ C0] head: 00fff00000000002 ffffea00004b6f01 00000000ffffffff 00000000ffffffff [ 73.226643][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 73.226648][ C0] page dumped because: kasan: bad access detected [ 73.226653][ C0] page_owner tracks the page as allocated [ 73.226656][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5951, tgid 5951 (syz-executor), ts 53801398882, free_ts 52308823338 [ 73.235835][ T6303] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 73.236594][ C0] post_alloc_hook+0x1af/0x220 [ 73.236615][ C0] get_page_from_freelist+0x10a3/0x3a30 [ 73.236623][ C0] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 73.236632][ C0] alloc_pages_mpol+0x1fb/0x550 [ 73.236643][ C0] new_slab+0x24a/0x360 [ 73.236656][ C0] ___slab_alloc+0xd79/0x1a50 [ 73.236669][ C0] __slab_alloc.constprop.0+0x63/0x110 [ 73.236683][ C0] __kmalloc_noprof+0x501/0x880 [ 73.236690][ C0] fib6_info_alloc+0x40/0x160 [ 73.236702][ C0] ip6_route_info_create+0x14c/0x870 [ 73.236711][ C0] addrconf_f6i_alloc+0x2da/0x660 [ 73.244895][ T6303] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(26) [ 73.247366][ C0] ipv6_add_addr+0x531/0x1fe0 [ 73.249941][ T6303] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 73.251499][ C0] inet6_addr_add+0x256/0x960 [ 73.254849][ T6303] vhci_hcd vhci_hcd.0: Device attached [ 73.255148][ C0] inet6_rtm_newaddr+0x1619/0x1c70 [ 73.278644][ C0] rtnetlink_rcv_msg+0x95e/0xe90 [ 73.280249][ C0] netlink_rcv_skb+0x158/0x420 [ 73.281187][ T6303] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 73.281858][ C0] page last free pid 111 tgid 111 stack trace: [ 73.286291][ C0] free_unref_folios+0xa31/0x1610 [ 73.287910][ C0] shrink_folio_list+0x35c7/0x4800 [ 73.289582][ C0] evict_folios+0x79c/0x1b30 [ 73.291079][ C0] try_to_shrink_lruvec+0x585/0x9b0 [ 73.292907][ C0] shrink_one+0x3e3/0x7a0 [ 73.294654][ C0] shrink_node+0x26cb/0x3d80 [ 73.295306][ T6310] vhci_hcd: connection closed [ 73.296139][ C0] balance_pgdat+0xbb8/0x1a50 [ 73.296150][ C0] kswapd+0x590/0xb90 [ 73.296157][ C0] kthread+0x3c5/0x780 [ 73.296171][ C0] ret_from_fork+0x675/0x7d0 [ 73.298433][ T6314] vhci_hcd: connection closed [ 73.299196][ C0] ret_from_fork_asm+0x1a/0x30 [ 73.299214][ C0] [ 73.299216][ C0] Memory state around the buggy address: [ 73.299222][ C0] ffff888012dbbf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 73.299229][ C0] ffff888012dbbf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 73.299235][ C0] >ffff888012dbc000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 73.300569][ T6312] vhci_hcd: connection closed [ 73.301887][ C0] ^ [ 73.301895][ C0] ffff888012dbc080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 73.301902][ C0] ffff888012dbc100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 73.301906][ C0] ================================================================== [ 73.301912][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 73.301920][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 73.301931][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.301937][ C0] Call Trace: [ 73.301941][ C0] [ 73.301945][ C0] dump_stack_lvl+0x3d/0x1f0 [ 73.301959][ C0] vpanic+0x640/0x6f0 [ 73.301973][ C0] panic+0xca/0xd0 [ 73.301985][ C0] ? __pfx_panic+0x10/0x10 [ 73.301999][ C0] ? end_report+0x4c/0x170 [ 73.302010][ C0] ? rcu_is_watching+0x12/0xc0 [ 73.302021][ C0] ? lock_release+0x201/0x2f0 [ 73.302038][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 73.302052][ C0] check_panic_on_warn+0xab/0xb0 [ 73.302065][ C0] end_report+0x107/0x170 [ 73.302077][ C0] kasan_report+0xee/0x110 [ 73.302089][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 73.302100][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 73.302110][ C0] __kasan_check_byte+0x36/0x50 [ 73.302122][ C0] lock_acquire+0xfc/0x350 [ 73.302134][ C0] ? __wake_up+0x3f/0x60 [ 73.302146][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 73.302156][ C0] ? p9_req_put+0xaf/0x250 [ 73.302169][ C0] p9_req_put+0xaf/0x250 [ 73.302181][ C0] req_done+0x1dc/0x2e0 [ 73.302191][ C0] ? __pfx_req_done+0x10/0x10 [ 73.302201][ C0] ? try_to_wake_up+0xa5d/0x1870 [ 73.302210][ C0] ? __pfx_req_done+0x10/0x10 [ 73.302220][ C0] vring_interrupt+0x31e/0x400 [ 73.302234][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 73.302248][ C0] __handle_irq_event_percpu+0x236/0x920 [ 73.302259][ C0] handle_irq_event+0xab/0x1e0 [ 73.302269][ C0] handle_edge_irq+0x3ca/0x9e0 [ 73.302279][ C0] __common_interrupt+0xd0/0x2f0 [ 73.302292][ C0] common_interrupt+0x61/0xe0 [ 73.302306][ C0] asm_common_interrupt+0x26/0x40 [ 73.302316][ C0] RIP: 0010:handle_softirqs+0x1dd/0x8e0 [ 73.302327][ C0] Code: 88 6c 24 26 4c 89 7c 24 18 48 c7 c7 20 ce 8b 8b e8 68 ef e0 09 65 66 c7 05 46 54 24 12 00 00 e8 79 7c 47 00 fb bb ff ff ff ff <49> c7 c7 c0 c0 00 8e 41 0f bc dc 83 c3 01 0f 85 a4 00 00 00 e9 b1 [ 73.302336][ C0] RSP: 0018:ffffc90000007f28 EFLAGS: 00000202 [ 73.302344][ C0] RAX: 00000000001cc754 RBX: 00000000ffffffff RCX: ffffffff81c4576f [ 73.302351][ C0] RDX: 0000000000000000 RSI: ffffffff8da29704 RDI: ffffffff8bf078c0 [ 73.302356][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 73.302362][ C0] R10: ffffffff908251d7 R11: 0000000000000001 R12: 0000000000000280 [ 73.302367][ C0] R13: 000000000000000a R14: 1ffff92000000fed R15: fffffbfff1c12f40 [ 73.302374][ C0] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 73.302387][ C0] ? handle_softirqs+0x1d7/0x8e0 [ 73.302397][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 73.302409][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 73.302420][ C0] __irq_exit_rcu+0x109/0x170 [ 73.302430][ C0] irq_exit_rcu+0x9/0x30 [ 73.302440][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 73.302451][ C0] [ 73.302454][ C0] [ 73.302458][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 73.302467][ C0] RIP: 0010:sched_core_balance+0xa0/0xeb0 [ 73.302476][ C0] Code: 45 3c 8e e8 a2 2f 0d 00 e8 fd 93 d2 09 41 5b 85 c0 0f 85 31 0a 00 00 4c 89 e7 e8 eb 72 fe ff e8 16 35 39 00 fb 48 63 44 24 50 <48> c7 c3 c0 d4 a2 93 48 89 44 24 08 48 83 f8 07 0f 87 9c 0c 00 00 [ 73.302484][ C0] RSP: 0018:ffffffff8e007b00 EFLAGS: 00000206 [ 73.302491][ C0] RAX: 0000000000000000 RBX: ffff88802b223f10 RCX: ffffffff81c4576f [ 73.302497][ C0] RDX: 0000000000000000 RSI: ffffffff8da29704 RDI: ffffffff8bf078c0 [ 73.302503][ C0] RBP: ffffffff8e007c20 R08: 0000000000000001 R09: 0000000000000001 [ 73.302508][ C0] R10: ffffffff908251d7 R11: 0000000000000001 R12: ffff88802b23a4c0 [ 73.302514][ C0] R13: ffff888024178000 R14: 0000000000000000 R15: dffffc0000000000 [ 73.302521][ C0] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 73.302533][ C0] ? lock_acquire+0x179/0x350 [ 73.302547][ C0] finish_task_switch.isra.0+0x472/0xc10 [ 73.302558][ C0] __schedule+0x1198/0x5de0 [ 73.302568][ C0] ? try_to_wake_up+0xa5d/0x1870 [ 73.302577][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 73.302587][ C0] ? try_to_wake_up+0x160/0x1870 [ 73.302596][ C0] ? __pfx___schedule+0x10/0x10 [ 73.302606][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 73.302616][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.302629][ C0] ? flush_smp_call_function_queue+0x153/0x1e0 [ 73.302641][ C0] schedule_idle+0x5c/0x90 [ 73.302651][ C0] do_idle+0x2b3/0x500 [ 73.302661][ C0] ? __pfx_do_idle+0x10/0x10 [ 73.302670][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 73.302685][ C0] cpu_startup_entry+0x4f/0x60 [ 73.302695][ C0] rest_init+0x16b/0x2b0 [ 73.302708][ C0] ? acpi_subsystem_init+0x133/0x180 [ 73.302723][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 73.302734][ C0] start_kernel+0x3f6/0x4e0 [ 73.302743][ C0] x86_64_start_reservations+0x18/0x30 [ 73.302752][ C0] x86_64_start_kernel+0x130/0x190 [ 73.302761][ C0] common_startup_64+0x13e/0x148 [ 73.302774][ C0] [ 73.303862][ C0] Kernel Offset: disabled VM DIAGNOSIS: 12:03:54 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8526ae75 RDI=ffffffff9adc5e20 RBP=ffffffff9adc5de0 RSP=ffffc900000075b0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9adc5de0 R15=ffffffff8526ae10 RIP=ffffffff8526ae9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809780d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f20182fc CR3=000000004b2d2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a7fffffffff81b6 1a35ffffffff81b6 1a0cffffffff81b6 19e3ffffffff81b6 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 46c1ffffffff81b6 4680ffffffff81b6 4616ffffffff81b6 1b00ffffffff81b6 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c79bffffffff81b6 c737ffffffff81b6 48c2ffffffff81b6 4719ffffffff81b6 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 cf85ffffffff81b6 cdbcffffffff81b6 cd81ffffffff81b6 cd14ffffffff81b6 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ccccffffffff81b6 cc86ffffffff81b6 cbeeffffffff81b6 cb37ffffffff81b6 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 cab7ffffffff81b6 ca6cffffffff81b6 ca43ffffffff81b6 ca1affffffff81b6 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c9fdffffffff81b6 c97dffffffff81b6 c825ffffffff81b6 c7e9ffffffff81b6 ZMM24=88cfe96388cfe963 88cfe96388cfe963 88cfe96388cfe963 88cfe96388cfe963 88cfe96388cfe963 88cfe96388cfe963 88cfe96388cfe963 88cfe96388cfe963 ZMM25=7aaa89ae7aaa89ae 7aaa89ae7aaa89ae 7aaa89ae7aaa89ae 7aaa89ae7aaa89ae 7aaa89ae7aaa89ae 7aaa89ae7aaa89ae 7aaa89ae7aaa89ae 7aaa89ae7aaa89ae ZMM26=56335d0c56335d0c 56335d0c56335d0c 56335d0c56335d0c 56335d0c56335d0c 56335d0c56335d0c 56335d0c56335d0c 56335d0c56335d0c 56335d0c56335d0c ZMM27=14f9989814f99898 14f9989814f99898 14f9989814f99898 14f9989814f99898 14f9989814f99898 14f9989814f99898 14f9989814f99898 14f9989814f99898 ZMM28=00000200000001ff 000001fe000001fd 000001fc000001fb 000001fa000001f9 000001f8000001f7 000001f6000001f5 000001f4000001f3 000001f2000001f1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=8b0400008b040000 8b0400008b040000 8b0400008b040000 8b0400008b040000 8b0400008b040000 8b0400008b040000 8b0400008b040000 8b0400008b040000 info registers vcpu 1 CPU#1 RAX=000000000018c3d1 RBX=0000000000000001 RCX=ffffffff8b5dc2a9 RDX=0000000000000000 RSI=ffffffff8da29704 RDI=ffffffff8bf078c0 RBP=ffffed1003b59490 RSP=ffffc9000046fde8 R8 =0000000000000001 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000001 R12=0000000000000001 R13=ffff88801daca480 R14=ffffffff908251d0 R15=0000000000000000 RIP=ffffffff8b5dad5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809790d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000800001c0 CR3=0000000068856000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffffffdfc000 RBX=0000000000000000 RCX=0000000000000016 RDX=0000000000000000 RSI=0000000000000004 RDI=ffffffff93a6d6b4 RBP=ffff888043aec8c0 RSP=ffffc90000538f30 R8 =0000000000000001 R9 =fffff520000a71d4 R10=0000000000000003 R11=0000000000000001 R12=0000000000204000 R13=0000000000000016 R14=ffff888043aec900 R15=dffffc0000000000 RIP=ffffffff8169996e RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097a0d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000003040fffc CR3=000000006b481000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000040 RCX=ffffffff84aac476 RDX=ffff888024178000 RSI=0000000000000004 RDI=0000000000000005 RBP=ffffc9000343f2f0 RSP=ffffc9000343f1b0 R8 =0000000000000005 R9 =0000000000000004 R10=0000000000000004 R11=0000000000000001 R12=1ffff92000687e40 R13=0000000000000040 R14=0000000000000004 R15=ffffffff8bf0a294 RIP=ffffffff81bc519b RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007feef8a54300 ffffffff 00c00000 GS =0000 ffff888097b0d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055d60028b000 CR3=000000004b2d2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8acd3f65 ffffffff892a121e 0000000600000004 0000000600040008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8ad2c982 ffffffff823da283 ffffffff8926b056 ffffffff8926a6d9 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0006080020080006 0171983c0000092b 000000140000000f 0000000200000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff020002018c 0800060172e0aa00 0000000400000000 0000000080fe0000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ffe2000000 0000000001fc002b 100000001660dd86 ffffffffffffaaaa ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 aaaaaaaa6c080003 1808000608002008 00060171980c0800 0608002008000601 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 71a0028808000a08 00140800060170ea 028808000a080014 0800060170ea1808 ZMM24=88cfe96388cfe963 88cfe96388cfe963 88cfe96388cfe963 88cfe96388cfe963 88cfe96388cfe963 88cfe96388cfe963 88cfe96388cfe963 88cfe96388cfe963 ZMM25=7aaa89ae7aaa89ae 7aaa89ae7aaa89ae 7aaa89ae7aaa89ae 7aaa89ae7aaa89ae 7aaa89ae7aaa89ae 7aaa89ae7aaa89ae 7aaa89ae7aaa89ae 7aaa89ae7aaa89ae ZMM26=56335d0c56335d0c 56335d0c56335d0c 56335d0c56335d0c 56335d0c56335d0c 56335d0c56335d0c 56335d0c56335d0c 56335d0c56335d0c 56335d0c56335d0c ZMM27=14f9989814f99898 14f9989814f99898 14f9989814f99898 14f9989814f99898 14f9989814f99898 14f9989814f99898 14f9989814f99898 14f9989814f99898 ZMM28=00000200000001ff 000001fe000001fd 000001fc000001fb 000001fa000001f9 000001f8000001f7 000001f6000001f5 000001f4000001f3 000001f2000001f1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=8e0400008e040000 8e0400008e040000 8e0400008e040000 8e0400008e040000 8e0400008e040000 8e0400008e040000 8e0400008e040000 8e0400008e040000