last executing test programs: 13m15.171844823s ago: executing program 1 (id=12): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f000000a980)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="091426bf9a8cdc85dab472fbcbd11960b4667f9dead0368efc4d2eeae1965a81", 0x20}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40}], 0x1, 0x4048055) recvmmsg(r1, &(0x7f0000006700)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1}, 0x4}], 0x1, 0x160, 0x0) 13m9.179374837s ago: executing program 1 (id=14): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newtaction={0x44, 0x30, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) 13m5.286145811s ago: executing program 1 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd, 0x6, 0x0, 0x0, 0x2, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) 12m59.399367729s ago: executing program 1 (id=18): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40090) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close_range(r4, 0xffffffffffffffff, 0x0) 12m32.074267419s ago: executing program 1 (id=20): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00'}, 0x10) io_uring_setup(0x4c22, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf250600000008000300", @ANYRES32=0x0, @ANYBLOB="e1fe990055120000680000000a0018000303030303030000080005000b0000000000530001000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40814) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000841, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/resume_offset', 0x149a82, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r5, 0x0, 0x0, 0x62, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000f80)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 11m55.79626915s ago: executing program 1 (id=22): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2710, &(0x7f0000000600)=""/102389, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9af33139c2c4eaae}, 0x20) r5 = io_uring_setup(0x3c93, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) unshare(0x62040200) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) 11m1.833664716s ago: executing program 32 (id=22): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2710, &(0x7f0000000600)=""/102389, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9af33139c2c4eaae}, 0x20) r5 = io_uring_setup(0x3c93, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) unshare(0x62040200) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) 10m16.720531327s ago: executing program 0 (id=37): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2, 0x25, 0x4}, 0x14) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r3, 0xffffffffffffffff, 0x4, r0}, 0x10) 9m59.612443611s ago: executing program 0 (id=38): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41, 0x0, 0x6}) 9m54.302585518s ago: executing program 0 (id=39): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000180)="d2cf4071eedf8b7b757ad2e20539519ec6afbc267e17", 0x16}, {&(0x7f0000000540)="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", 0x116}], 0x2}}], 0x1, 0x4000001) r1 = dup(r0) read$FUSE(r1, &(0x7f00000075c0)={0x2020}, 0x2020) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@gettaction={0x14, 0x32, 0x20, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x1001) 9m48.831514894s ago: executing program 0 (id=40): socket$inet6(0xa, 0x2, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r4 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000000c0)={0x0, r4}) 9m42.730009362s ago: executing program 0 (id=41): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x3, 0x17, 0x0, 0xf, 0x4000000}]}, {0x0, [0x0, 0x0, 0x61, 0x25]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000280)=""/198, &(0x7f00000000c0)=0xc6) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_open_dev$usbfs(0x0, 0x775, 0x8000) munlockall() madvise(&(0x7f00002af000/0x2000)=nil, 0x2000, 0x15) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_io_uring_setup(0xbea, 0x0, 0x0, &(0x7f0000000240)) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000480)={0x0, 0x2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000380)={0x0, 0x80000}) syz_io_uring_setup(0x66a3, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, 0x0, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 9m24.21343002s ago: executing program 0 (id=42): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(r3, &(0x7f0000000000)=[{0x0}], 0x1) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0x12800100, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r6, 0x39) syz_clone3(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022}) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0) 8m37.557896387s ago: executing program 33 (id=42): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(r3, &(0x7f0000000000)=[{0x0}], 0x1) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0x12800100, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r6, 0x39) syz_clone3(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022}) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0) 1m9.12462844s ago: executing program 3 (id=106): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41, 0x0, 0x6}) 1m3.006485809s ago: executing program 3 (id=107): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp(r1, r1, 0x2, r3, r2) openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [{{0x254, 0x1, {{0x0, 0x7}, 0x0, 0x6, 0x1, 0x80, 0x8, 'syz1\x00', "f0a921fcfc5860599ffda11d6b368ca9cec1daaf331db9a83a4291d3979d7d66", "457e1bbfc9da769cfd28f588cad4e0945bf3ce83704c9e5edbecde2651326b14", [{0x2, 0x3, {0x3, 0x40}}, {0x0, 0x5, {0x0, 0x1ff}}, {0x2, 0x8, {0x0, 0x74b97176}}, {0x5600, 0xa019, {0x0, 0x7fff}}, {0x7, 0x81, {0x3, 0x9}}, {0x1c0, 0xeb73, {0x2, 0x3}}, {0x1d, 0xffff, {0x0, 0x2006}}, {0x8, 0x2, {0x0, 0x7}}, {0x2, 0xfffb, {0x2, 0xfffffffa}}, {0x1000, 0x779, {0x0, 0x9}}, {0x6, 0xbdf8, {0xc0639df420928755, 0x7}}, {0x83, 0x4, {0x2, 0xfff}}, {0xfff8, 0xb, {0x2, 0xa784}}, {0x7, 0x20, {0x3, 0xc}}, {0x6, 0x1, {0x2, 0x4}}, {0x0, 0x3d, {0x1, 0x7fff}}, {0x7fff, 0xdf6b, {0x2, 0x7}}, {0x4, 0x3, {0x3, 0x8001}}, {0x5, 0x5, {0x3, 0x8a71}}, {0xfff, 0x2, {0x2, 0x9}}, {0x5, 0x5, {0x3, 0xffffffff}}, {0x8000, 0x99, {0x1, 0xfffff635}}, {0x200, 0x0, {0x0, 0x8}}, {0x9, 0x6, {0x1, 0x9}}, {0xb9aa, 0x9, {0x3, 0x6}}, {0x5, 0x4, {0x0, 0x9}}, {0xfffb, 0x10, {0x3, 0x7ff}}, {0x5, 0xcef9, {0x1, 0x5d}}, {0x8, 0x60, {0x3, 0x10}}, {0xc17d, 0x1}, {0x9, 0x6, {0x3, 0xfffffff9}}, {0x977, 0xfffa, {0x2, 0xafb}}, {0xd, 0x4, {0x1, 0x9}}, {0x3, 0x21, {0x0, 0x3}}, {0x1c29, 0x7, {0x2, 0x4}}, {0x5, 0x1, {0x3, 0x80000001}}, {0x400, 0xfff9, {0x0, 0x4eb}}, {0x8, 0xe5, {0x3, 0x4}}, {0x100, 0x8, {0x0, 0x4}}, {0x5, 0x8, {0x2, 0x7}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x44010}, 0x4001000) 46.684573611s ago: executing program 2 (id=109): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000020000008500000086000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000006c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x1a, &(0x7f0000000000)={@remote, @empty, @val={@void, {0x8100, 0x2, 0x1, 0x1}}, {@llc={0x4, {@snap={0x1, 0xaa, "ce", "285b94", 0xf5}}}}}, 0x0) 42.975717085s ago: executing program 3 (id=110): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0x7a, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb5, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x6, 0x20}, @cipso={0x86, 0x34, 0x0, [{0x0, 0xc, "e256b28c590300000052"}, {0x0, 0x9, "020007651442eb"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x9, "8475be675de6a7"}]}]}}}}}}}, 0x0) 38.612664863s ago: executing program 3 (id=111): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000180)="d2cf4071eedf8b7b757ad2e20539519ec6", 0x11}, {&(0x7f0000000540)="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", 0x202}], 0x2}}], 0x1, 0x4000001) r1 = dup(r0) read$FUSE(r1, &(0x7f00000075c0)={0x2020}, 0x2020) 38.154727897s ago: executing program 2 (id=112): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xe5}], 0x1}, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = getpid() r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x2, 0x0, 0x0, 0x10000], [0x4, 0x1, 0x1, 0x0, 0x0, 0x4], [0x0, 0xffffffff, 0xfffffffe, 0x37, 0x0, 0x0, 0xffffffff, 0xfffffffd]], '\x00', [{0xfffffffc, 0xf8}, {0x102, 0x1}, {0xffffffff}, {0x10000000, 0x10000000, 0x0, 0x1}, {0x3, 0xffffffff}, {0x1}, {0x1, 0x5}, {0x0, 0x4}, {}, {0x2}, {}, {0xfffffff6}], '\x00', 0x4, 0x0, 0x0, 0xf8}) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r8, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) sendmsg$RDMA_NLDEV_CMD_SET(r7, 0x0, 0x4000050) 35.078874758s ago: executing program 3 (id=113): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000180)="d2cf4071eedf8b7b757ad2e20539519ec6afbc267e17", 0x16}, {&(0x7f0000000540)="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", 0x209}], 0x2}}], 0x1, 0x4000001) r1 = dup(r0) read$FUSE(r1, &(0x7f00000075c0)={0x2020}, 0x2020) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@gettaction={0x14, 0x32, 0x20, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x1001) 25.184036565s ago: executing program 3 (id=114): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp(r1, r1, 0x2, r3, r2) openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [{{0x254, 0x1, {{0x0, 0x7}, 0x0, 0x6, 0x1, 0x80, 0x8, 'syz1\x00', "f0a921fcfc5860599ffda11d6b368ca9cec1daaf331db9a83a4291d3979d7d66", "457e1bbfc9da769cfd28f588cad4e0945bf3ce83704c9e5edbecde2651326b14", [{0x2, 0x3, {0x3, 0x40}}, {0x0, 0x5, {0x0, 0x1ff}}, {0x2, 0x8, {0x0, 0x74b97176}}, {0x5600, 0xa019, {0x0, 0x7fff}}, {0x7, 0x81, {0x3, 0x9}}, {0x1c0, 0xeb73, {0x2, 0x3}}, {0x1d, 0xffff, {0x0, 0x2006}}, {0x8, 0x2, {0x0, 0x7}}, {0x2, 0xfffb, {0x2, 0xfffffffa}}, {0x1000, 0x779, {0x0, 0x9}}, {0x6, 0xbdf8, {0xc0639df420928755, 0x7}}, {0x83, 0x4, {0x2, 0xfff}}, {0xfff8, 0xb, {0x2, 0xa784}}, {0x7, 0x20, {0x3, 0xc}}, {0x6, 0x1, {0x2, 0x4}}, {0x0, 0x3d, {0x1, 0x7fff}}, {0x7fff, 0xdf6b, {0x2, 0x7}}, {0x4, 0x3, {0x3, 0x8001}}, {0x5, 0x5, {0x3, 0x8a71}}, {0xfff, 0x2, {0x2, 0x9}}, {0x5, 0x5, {0x3, 0xffffffff}}, {0x8000, 0x99, {0x1, 0xfffff635}}, {0x200, 0x0, {0x0, 0x8}}, {0x9, 0x6, {0x1, 0x9}}, {0xb9aa, 0x9, {0x3, 0x6}}, {0x5, 0x4, {0x0, 0x9}}, {0xfffb, 0x10, {0x3, 0x7ff}}, {0x5, 0xcef9, {0x1, 0x5d}}, {0x8, 0x60, {0x3, 0x10}}, {0xc17d, 0x1}, {0x9, 0x6, {0x3, 0xfffffff9}}, {0x977, 0xfffa, {0x2, 0xafb}}, {0xd, 0x4, {0x1, 0x9}}, {0x3, 0x21, {0x0, 0x3}}, {0x1c29, 0x7, {0x2, 0x4}}, {0x5, 0x1, {0x3, 0x80000001}}, {0x400, 0xfff9, {0x0, 0x4eb}}, {0x8, 0xe5, {0x3, 0x4}}, {0x100, 0x8, {0x0, 0x4}}, {0x5, 0x8, {0x2, 0x7}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x44010}, 0x4001000) 12.873163288s ago: executing program 2 (id=115): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0x7a, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb5, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x6, 0x20}, @cipso={0x86, 0x36, 0x0, [{0x0, 0xc, "e256b28c590300000052"}, {0x0, 0x9, "020007651442eb"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x9, "8475be675de6a7"}, {0x0, 0x2}]}]}}}}}}}, 0x0) 8.166266694s ago: executing program 2 (id=116): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000006c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r4, r2, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x1a, &(0x7f0000000000)={@remote, @empty, @val={@void, {0x8100, 0x2, 0x1, 0x1}}, {@llc={0x4, {@snap={0x1, 0xaa, "ce", "285b94", 0xf5}}}}}, 0x0) 4.883818055s ago: executing program 2 (id=117): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_clone(0x2102000, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000040)=0x13e) 0s ago: executing program 2 (id=118): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000180)="d2cf4071eedf8b7b757ad2e20539519ec6afbc267e17", 0x16}, {&(0x7f0000000540)="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", 0x21a}], 0x2}}], 0x1, 0x4000001) r1 = dup(r0) read$FUSE(r1, &(0x7f00000075c0)={0x2020}, 0x2020) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@gettaction={0x14, 0x32, 0x20, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x1001) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:41192' (ED25519) to the list of known hosts. syzkaller login: [ 348.310035][ T3194] cgroup: Unknown subsys name 'net' [ 348.696378][ T3194] cgroup: Unknown subsys name 'cpuset' [ 348.775728][ T3194] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 397.157533][ T3194] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 483.937911][ T3205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.054187][ T3207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.148690][ T3205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.217303][ T3207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.479534][ T3205] hsr_slave_0: entered promiscuous mode [ 493.498197][ T3205] hsr_slave_1: entered promiscuous mode [ 495.563863][ T3207] hsr_slave_0: entered promiscuous mode [ 495.593773][ T3207] hsr_slave_1: entered promiscuous mode [ 495.616377][ T3207] debugfs: 'hsr0' already exists in 'hsr' [ 495.625006][ T3207] Cannot create hsr debugfs directory [ 502.418149][ T3205] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 502.582841][ T3205] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 502.702710][ T3205] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 502.923462][ T3205] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 504.067638][ T3207] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 504.234977][ T3207] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 504.558268][ T3207] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 504.831270][ T3207] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 512.056761][ T3205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.488901][ T3207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.641356][ T3205] veth0_vlan: entered promiscuous mode [ 546.099816][ T3205] veth1_vlan: entered promiscuous mode [ 548.319978][ T3205] veth0_macvtap: entered promiscuous mode [ 548.464377][ T3205] veth1_macvtap: entered promiscuous mode [ 549.425122][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.457980][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.459731][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.488218][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.529288][ T3205] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 555.723967][ T3207] veth0_vlan: entered promiscuous mode [ 556.142301][ T3207] veth1_vlan: entered promiscuous mode [ 557.706859][ T3207] veth0_macvtap: entered promiscuous mode [ 558.235094][ T3207] veth1_macvtap: entered promiscuous mode [ 560.129724][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.135655][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.137995][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.304986][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.469462][ T3916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4'. [ 578.868956][ T36] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 580.214279][ T36] usb 2-1: config 0 has no interfaces? [ 581.648669][ T36] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 581.684659][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.385878][ T36] usb 2-1: config 0 descriptor?? [ 594.695358][ T36] usb 2-1: can't set config #0, error -110 [ 595.843844][ T3903] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 596.702990][ T3933] usb 2-1: USB disconnect, device number 2 [ 630.290934][ C1] sched: DL replenish lagged too much [ 712.457404][ T4012] Zero length message leads to an empty skb [ 714.978058][ T60] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 714.981081][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 715.132579][ T60] usb 2-1: device descriptor read/64, error -32 [ 715.443050][ T60] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 715.447207][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 715.494985][ T36] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 715.614092][ T60] usb 2-1: device descriptor read/64, error -32 [ 715.708424][ T36] usb 1-1: device descriptor read/64, error -71 [ 715.749206][ T60] usb usb2-port1: attempt power cycle [ 716.023546][ T36] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 716.209674][ T60] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 716.251698][ T36] usb 1-1: device descriptor read/64, error -71 [ 716.394066][ T36] usb usb1-port1: attempt power cycle [ 717.192464][ T36] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 717.324139][ T36] usb 1-1: device descriptor read/8, error -71 [ 717.944722][ T36] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 718.044703][ T36] usb 1-1: device descriptor read/8, error -71 [ 718.203540][ T36] usb usb1-port1: unable to enumerate USB device [ 721.413746][ T60] usb 2-1: device descriptor read/8, error -110 [ 721.783641][ T60] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 721.805307][ T60] usb 2-1: device descriptor read/8, error -32 [ 721.943595][ T60] usb usb2-port1: unable to enumerate USB device [ 724.330125][ T4012] raw-gadget.0 gadget.1: fail, usb_ep_queue returned -108 [ 730.857629][ T4028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'. [ 731.124298][ T4028] gtp0: entered promiscuous mode [ 731.125981][ T4028] gtp0: entered allmulticast mode [ 782.265437][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.376634][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.582306][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.417197][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.577874][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 795.786029][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 795.894160][ T12] bond0 (unregistering): Released all slaves [ 797.646047][ T12] hsr_slave_0: left promiscuous mode [ 797.788734][ T12] hsr_slave_1: left promiscuous mode [ 798.464873][ T12] veth1_macvtap: left promiscuous mode [ 798.469457][ T12] veth0_macvtap: left promiscuous mode [ 798.489095][ T12] veth1_vlan: left promiscuous mode [ 798.527733][ T12] veth0_vlan: left promiscuous mode [ 855.317551][ T4052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.482511][ T4052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.758545][ T4052] hsr_slave_0: entered promiscuous mode [ 874.786864][ T4052] hsr_slave_1: entered promiscuous mode [ 889.646140][ T4052] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 889.864904][ T4052] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 890.666393][ T4052] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 891.373038][ T4052] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 910.017625][ T4052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.808191][ T3552] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.853996][ T3552] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.483299][ T3552] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.924856][ T3552] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.837801][ T3552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 964.918800][ T3552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 965.046530][ T3552] bond0 (unregistering): Released all slaves [ 966.122299][ T3552] hsr_slave_0: left promiscuous mode [ 966.174799][ T3552] hsr_slave_1: left promiscuous mode [ 966.605069][ T3552] veth1_macvtap: left promiscuous mode [ 966.608247][ T3552] veth0_macvtap: left promiscuous mode [ 966.656214][ T3552] veth1_vlan: left promiscuous mode [ 966.661464][ T3552] veth0_vlan: left promiscuous mode [ 991.971062][ T4052] veth0_vlan: entered promiscuous mode [ 992.335873][ T4052] veth1_vlan: entered promiscuous mode [ 995.726557][ T4474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 995.832795][ T4052] veth0_macvtap: entered promiscuous mode [ 996.114869][ T4474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 998.199650][ T4052] veth1_macvtap: entered promiscuous mode [ 1000.717433][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.733114][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.734764][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.735967][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.824457][ T4474] hsr_slave_0: entered promiscuous mode [ 1018.855384][ T4474] hsr_slave_1: entered promiscuous mode [ 1018.892972][ T4474] debugfs: 'hsr0' already exists in 'hsr' [ 1018.894270][ T4474] Cannot create hsr debugfs directory [ 1026.406142][ T4839] netlink: 60 bytes leftover after parsing attributes in process `syz.2.47'. [ 1029.257161][ T4474] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1029.461972][ T4474] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1029.799566][ T4474] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1030.001224][ T4474] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1058.425134][ T4474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1070.248978][ T4897] netlink: 60 bytes leftover after parsing attributes in process `syz.2.51'. [ 1116.223237][ T4941] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1130.604997][ T4951] netlink: 60 bytes leftover after parsing attributes in process `syz.2.55'. [ 1149.919868][ T4474] veth0_vlan: entered promiscuous mode [ 1150.623753][ T4474] veth1_vlan: entered promiscuous mode [ 1153.423439][ T4474] veth0_macvtap: entered promiscuous mode [ 1154.116193][ T4474] veth1_macvtap: entered promiscuous mode [ 1155.295377][ T4983] netlink: 60 bytes leftover after parsing attributes in process `syz.2.59'. [ 1156.824154][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.098434][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.173727][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.176149][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.973660][ T4994] netlink: 20 bytes leftover after parsing attributes in process `syz.2.60'. [ 1174.529338][ T5009] netlink: 60 bytes leftover after parsing attributes in process `syz.3.63'. [ 1203.829819][ T5030] syz.3.67 uses obsolete (PF_INET,SOCK_PACKET) [ 1312.944760][ T5111] fuse: Bad value for 'fd' [ 1422.421463][ C0] ------------[ cut here ]------------ [ 1422.421683][ C0] kernel BUG at mm/page_table_check.c:142! [ 1422.422510][ C0] Kernel BUG [#1] [ 1422.422721][ C0] Modules linked in: [ 1422.423518][ C0] CPU: 0 UID: 0 PID: 5171 Comm: syz.2.117 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 1422.424040][ C0] Hardware name: riscv-virtio,qemu (DT) [ 1422.424414][ C0] epc : __page_table_check_zero+0x46e/0x6ac [ 1422.425792][ C0] ra : __page_table_check_zero+0x46e/0x6ac [ 1422.426151][ C0] epc : ffffffff80bcc210 ra : ffffffff80bcc210 sp : ffff8f8004547360 [ 1422.426369][ C0] gp : ffffffff89c9e5c0 tp : ffffaf80147a4ec0 t0 : ffff8f80045473a0 [ 1422.426565][ C0] t1 : fffff5ef02682809 t2 : ffff8f80045477e0 s0 : ffff8f8004547460 [ 1422.426798][ C0] s1 : ffffaf8013414048 a0 : 0000000000000005 a1 : 0000000000000000 [ 1422.427015][ C0] a2 : 0000000000000002 a3 : ffffffff80bcc210 a4 : 0000000000000000 [ 1422.427200][ C0] a5 : ffffaf80147a5ec0 a6 : 0000000000000003 a7 : ffffaf801341404b [ 1422.427399][ C0] s2 : 0000000000000000 s3 : ffffaf8013414000 s4 : 00000000000b8400 [ 1422.427586][ C0] s5 : dfffffff00000000 s6 : 0000000000000009 s7 : 0000000000000200 [ 1422.427768][ C0] s8 : 0000000000007fff s9 : fffffffef13b6704 s10: ffffffff89db3820 [ 1422.427953][ C0] s11: 0000000000000001 t3 : a0977a1f00000000 t4 : fffff5ef02682809 [ 1422.428131][ C0] t5 : fffff5ef0268280a t6 : 0000000000000002 [ 1422.428294][ C0] status: 0000000200000120 badaddr: ffffffff80bcc210 cause: 0000000000000003 [ 1422.428568][ C0] [] __page_table_check_zero+0x46e/0x6ac [ 1422.428978][ C0] [] free_unref_folios+0xc3a/0x1c7e [ 1422.429316][ C0] [] folios_put_refs+0x418/0x5fa [ 1422.429610][ C0] [] free_pages_and_swap_cache+0x268/0x490 [ 1422.429866][ C0] [] __tlb_batch_free_encoded_pages+0x100/0x2b2 [ 1422.430197][ C0] [] tlb_finish_mmu+0x15e/0x7f0 [ 1422.430459][ C0] [] exit_mmap+0x39c/0xd00 [ 1422.430751][ C0] [] __mmput+0x108/0x3b6 [ 1422.431141][ C0] [] mmput+0x74/0x88 [ 1422.431458][ C0] [] do_exit+0x7ba/0x28e0 [ 1422.431723][ C0] [] __riscv_sys_exit+0x4a/0x54 [ 1422.432000][ C0] [] syscall_handler+0x94/0x118 [ 1422.432285][ C0] [] do_trap_ecall_u+0x396/0x530 [ 1422.432554][ C0] [] handle_exception+0x146/0x152 [ 1422.433272][ C0] Code: 8526 c0ef f0df 89aa 0905 bd1d 2097 ff93 80e7 d780 (9002) 2097 [ 1422.434239][ C0] ---[ end trace 0000000000000000 ]--- [ 1422.435206][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 1422.436093][ C0] SMP: stopping secondary CPUs VM DIAGNOSIS: 06:37:20 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff81f0f2ac mhartid 0000000000000000 mstatus 0000000a000001a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000220 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b10d mtvec 00000000800004f0 stvec ffffffff863ed450 vstvec 0000000000000000 mepc ffffffff8008f822 sepc ffffffff80bcc210 vsepc 0000000000000000 mcause 0000000000000009 scause 0000000000000003 vscause 0000000000000000 mtval 0000000000000000 stval ffffffff80bcc210 htval 0000000000000000 mtval2 0000000000000000 mscratch 000000008004a000 sscratch 0000000000000000 satp 90366000000b00ef x0/zero 0000000000000000 x1/ra ffffffff81f0f27c x2/sp ffff8f8004546ad0 x3/gp ffffffff89c9e5c0 x4/tp ffffaf80147a4ec0 x5/t0 5f5f203a20617220 x6/t1 0000000000000001 x7/t2 705f5f203a206172 x8/s0 ffff8f8004546b10 x9/s1 0000000000000000 x10/a0 ffffffff91036168 x11/a1 000000000000001f x12/a2 0000000000000000 x13/a3 ffffffff81f0f27c x14/a4 1ffffffff2206c2d x15/a5 ffff8f800006d000 x16/a6 0000000000ff0100 x17/a7 0000000000000003 x18/s2 ffffffff91036120 x19/s3 0000000000000078 x20/s4 0000000000000000 x21/s5 0000000000000000 x22/s6 ffffffff81f0f20e x23/s7 0000000000000000 x24/s8 ffffffff90e60fe1 x25/s9 0000000000000010 x26/s10 fffffffef2206c2f x27/s11 dfffffff00000000 x28/t3 ffffffff90e60fb7 x29/t4 fffff1ef008a8d4c x30/t5 fffff1ef008a8d4d x31/t6 ffffffff90e60fb7 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff80085d0e mhartid 0000000000000001 mstatus 0000000a000001a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000020 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b10d mtvec 00000000800004f0 stvec ffffffff863ed450 vstvec 0000000000000000 mepc ffffffff817e00a2 sepc ffffffff863e8dca vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000001 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080048000 sscratch 0000000000000000 satp 901dc000000ad9c6 x0/zero 0000000000000000 x1/ra ffffffff80085d0a x2/sp ffff8f8000017e30 x3/gp ffffffff89c9e5c0 x4/tp ffffaf8018c81a40 x5/t0 ffff8f8000010000 x6/t1 fffffffef13b5130 x7/t2 0000000000000008 x8/s0 ffff8f8000017e60 x9/s1 ffffffff8680c328 x10/a0 0000000000000001 x11/a1 0000000000000004 x12/a2 0000000000000001 x13/a3 ffffffff80085d0a x14/a4 0000000000000000 x15/a5 ffffaf8018c81a40 x16/a6 fffffffef13b5131 x17/a7 0000000000000003 x18/s2 0000000000000001 x19/s3 ffffffff91047928 x20/s4 ffffaf8011a9a400 x21/s5 0000000000000004 x22/s6 ffffffff86859700 x23/s7 ffffffff8665e000 x24/s8 ffffffff80085a4c x25/s9 ffffffff89cdf9a0 x26/s10 ffff8d8000703800 x27/s11 ffff8d8000648410 x28/t3 6ef974db00000000 x29/t4 fffffffef13b5130 x30/t5 fffffffef13b5131 x31/t6 0000000000000002 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000