last executing test programs: 7.21142863s ago: executing program 0 (id=18): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007bc0)=[{{&(0x7f0000000500)=@abs={0x1}, 0x6e, &(0x7f0000006180), 0x0, &(0x7f0000000b80)=ANY=[], 0x110, 0x4c001}}], 0x1, 0x200080c0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r4, &(0x7f0000000340)=""/254, 0xfe, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x100010, r5, 0xaa6d8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$packet(0x11, 0x2, 0x300) read$FUSE(r0, &(0x7f0000000380)={0x2020}, 0x2020) 7.045394217s ago: executing program 3 (id=20): syz_emit_ethernet(0x2e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaa090000000000000800460000200000000100029078ac1414bb640101000000000000803b7800000000"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x11, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) syz_io_uring_setup(0x239, 0x0, &(0x7f0000000000), 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x19) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000019340), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x141a42, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x401, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x8, 0x0, 0x0, 0x0, 0x5e}, 0x9c) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x4e23, @multicast1}, 0x10) listen(0xffffffffffffffff, 0x8) 6.721034901s ago: executing program 2 (id=21): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)=[{0x2, 0x2, 0xf, 0x7}], 0x10, 0x36, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESOCT=r2]) write$FUSE_INIT(r4, &(0x7f0000000240)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x202}}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x5c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fcntl$setstatus(r0, 0x4, 0x800) bind$rds(0xffffffffffffffff, 0x0, 0x0) 6.194685373s ago: executing program 0 (id=22): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x0, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000007c0)={0x400000000000000, 0x0, 0x0}, 0x20004808) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x76) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r3, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) recvmmsg(r3, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 6.126529083s ago: executing program 3 (id=23): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f00000000c0)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="71e67a15", 0x4) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) sendmsg$alg(r4, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmmsg$alg(r4, &(0x7f0000002dc0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) io_submit(r5, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r4, &(0x7f0000000340), 0xfdef}]) 5.760831983s ago: executing program 2 (id=24): r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x140a, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f00000001c0)=0x4) read$FUSE(r2, &(0x7f0000000d80)={0x2020}, 0x2020) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) preadv(r2, &(0x7f0000000840)=[{&(0x7f0000000880)=""/192, 0xc0}], 0x1, 0x180, 0x0) r5 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) execve(&(0x7f00000004c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000940), &(0x7f0000000b40)) write$binfmt_elf64(r5, &(0x7f00000004c0)=ANY=[], 0xfffffda5) mknod$loop(&(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r6 = openat$sr(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x31f, &(0x7f0000000200)=ANY=[]) socket$nl_xfrm(0x10, 0x3, 0x6) 5.737111096s ago: executing program 1 (id=25): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000001040), &(0x7f0000001080)=0x26) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902"], 0x0) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000380)="49db", 0x2}], 0x1, 0xfffffc00, 0x4) pselect6(0x40, &(0x7f00000007c0), &(0x7f0000000800)={0x7f}, 0x0, 0x0, 0x0) r5 = dup3(r2, r1, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000003200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1472, 0x0, 0x0, 0x0, 0xff8, 0x0, &(0x7f00000031c0)={0x30, 0x30, 0x1e}}}], 0x0, 0x0, 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0xee01}}, {{@in=@multicast1, 0x0, 0x6c}}}, 0xe8) listen(r7, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000300)={0x6, 'veth0_macvtap\x00'}) 5.429669654s ago: executing program 2 (id=26): r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) fsopen(&(0x7f0000000100)='vxfs\x00', 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) getpgid(0xffffffffffffffff) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000000280)="3906615f7a07cbc5304c4a3e5678be9c51bdb68ec5cf33710fa2650def9773214863c5357556d295042ffeb0c8ae1baa466a0c4ad7c5c273bf687278c854f56158de1c67c233457d92e127811ad88462f7556c32dd7cd569e35b83096aad4ac1c1930f012172c08a6c6fde3e82bd852d6e82651a776b7ad79bb1d9100cf46c7e643ba897e292575980210388dd2ee026c564b00677ce8b4d881c0093b0dc29fc98ba8a1719bd43594503b827174116e15a9f0ca26efdcaaa2e3f4826fa94fa86fe17fabd0c880024d38909051c5d827bfa1ebfc857d3c60560d8daf1f4a039ba954417f567388e4ab187", 0xea}], 0x2, &(0x7f0000000580)=ANY=[], 0xcc}, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) openat$pmem0(0xffffff9c, &(0x7f0000000100), 0x101042, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x80000000}]}}]}, 0x38}}, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) sendmmsg$inet(r6, &(0x7f00000020c0)=[{{0x0, 0x4000, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1}}], 0xfdef, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.174545423s ago: executing program 0 (id=27): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) close(0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0xf, 0x0, 0x0, 0x6}, 0x20) socket$igmp(0x2, 0x3, 0x2) r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_flash={0x33, 0x4, './file0\x00'}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) pipe(&(0x7f00000002c0)) io_setup(0x3ff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, 0x0) 4.68871088s ago: executing program 3 (id=28): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b702000000080000850000008600000018110000", @ANYRES32, @ANYRESDEC=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @cgroup_skb=0x1, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x3a) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r6 = openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) read(r6, &(0x7f00000000c0)=""/138, 0x8a) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x4000300) 4.384611633s ago: executing program 1 (id=29): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x1010, r1, 0xc98e2000) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102379, 0x18feb}], 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80803, 0x83) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@multicast1}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x41564e57, 0x4, 0x0, [], 0xff}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) accept4(r6, 0x0, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0) recvmmsg(r4, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 4.028988778s ago: executing program 0 (id=30): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb], 0x100000}) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000280)={@rand_addr=0x64010100, @private=0xa010102, 0xffffffffffffffff, "19f794b9a3d42eaa7ba7ad4ddc8c3633ba51ccaa39fd8934052e2331e8615ab3", 0x8, 0x3, 0x5702712a, 0x3}, 0x3c) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 3.745733722s ago: executing program 2 (id=31): io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000340)={0x2, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/85, 0x55}, {&(0x7f0000000100)=""/118, 0x76}], 0x0}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800a00010071756575650000000c00028006000140800000000900010073797a30000000000900020073797a32000800001400000011000100000000006fbbe9a9843aac1c"], 0x74}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x11, 0x3, 0x10) lstat(&(0x7f00000001c0)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port0\x00', 0x3eb, 0x2062f, 0x3, 0x0, 0x0, 0xc, 0x400, 0x0, 0x6, 0x20}) openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 3.735210952s ago: executing program 3 (id=32): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56bb6e284f5fab5c66", 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1e8640, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000000)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.855449421s ago: executing program 1 (id=33): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x8, 0x80001) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000100)={0x0, r1}) r5 = syz_open_pts(0xffffffffffffffff, 0x20000) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000600)={0x5, 0x1000, 0x6, 0x1, 0xb, "3f1dc6b28d1f76c7ea457cb83a6f2ec4f46aa0"}) ioctl$VHOST_RESET_OWNER(r0, 0xaf1f, 0x0) close(0x3) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, 0xd, 0x6, 0x301, 0x0, 0x0, {0x3}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x24000844) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rt_sigprocmask(0x1, &(0x7f0000000580)={[0x800]}, &(0x7f00000005c0), 0x8) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r6, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x1, 0x0, 0x1000000, 0x7}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, 0x0) pwritev2(r6, 0x0, 0x0, 0x0, 0x2, 0x10) 2.76788207s ago: executing program 3 (id=34): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) socket(0x10, 0x3, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2000000069000305000000000000000000000000000000000800010002"], 0x20}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_open_dev$cec(0x0, 0x0, 0x2c801) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) 2.687675617s ago: executing program 2 (id=35): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) nanosleep(0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x40000000002, 0x3, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x3, 0x9}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r1, 0x20003d16, 0x80000, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) io_pgetevents(r4, 0x8, 0xa, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x98cf2a9168e5e5a4) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x80000) syz_open_procfs(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r6 = socket(0x10, 0x80003, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) 2.252841024s ago: executing program 1 (id=36): openat$audio1(0xffffff9c, 0x0, 0x2041, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0xfffffffe, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x8, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setresuid(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010700000000000000002000000008000300", @ANYRES32=r7], 0x1c}}, 0x0) 1.953268452s ago: executing program 0 (id=37): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) socket$inet6(0xa, 0x2, 0x3a) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x10, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="851666ce20db", 0x0, 0x10, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) io_setup(0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="c411616acc1ebd8082d01818cbaf00000000000000008000000000000a00ffe7d6116c3c1ebf48bf31cea38685801b1a20991ae959a0c65e195e7dbb783c19670251cf7c045257ccd9ca0fb4571199c84bf83b7c7c7ba5b56e5e323f080010a542866eb39b0bb70a66bf5c00aefeae432da01c091c2373b78f635c35a3ea0f5c6e705b706147945aa4001351bdcb85cdbce1fd4e9277aca07a495171b5f076439a53df2c8cb1ebbeec1a63fa95cb02b4c8c8778f205482becb760e50fb48910e0251bd03e9e462356139eb"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='jbd2_handle_stats\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') readv(r6, &(0x7f0000000240)=[{&(0x7f0000000340)=""/228, 0xe4}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r6}, 0xfffffffffffffd88) 916.822677ms ago: executing program 1 (id=38): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="09000000010000", 0x7) socket$inet6_sctp(0xa, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) 746.199614ms ago: executing program 2 (id=39): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000640)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) fspick(r0, &(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) getresuid(0x0, &(0x7f0000000480), &(0x7f00000004c0)) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x4040c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r5, 0x0, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4205, r6, 0x2, &(0x7f0000000080)={0x0, 0x6c00}) 689.59857ms ago: executing program 0 (id=40): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x100000001) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xe) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r6, 0x541b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bb67a153cd0e3e4a1aac449e5ad88b56923d9dfe", "b1610538917aa875e9b6000000007aa56a33d100"}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) ppoll(0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) r7 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0xc0046209, 0x0) 502.824618ms ago: executing program 3 (id=41): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000001f00)={0x0, 0x0, 0x0}, 0x20008815) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x14, 0x86, 0x4c, 0x8, 0x19d2, 0x20, 0xa773, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0xfe, 0xa0, 0x1, [{{0x9, 0x4, 0x8c, 0x4, 0x0, 0xff, 0xff, 0xff, 0xc}}]}}]}}, 0x0) listen(0xffffffffffffffff, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x10000, 0x440) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, 0x0) fsetxattr$security_capability(r2, &(0x7f00000000c0), &(0x7f0000000100)=@v1={0x1000000, [{0x8000, 0x4}]}, 0xc, 0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x20000002}) read$char_usb(r2, 0x0, 0x0) write$char_usb(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local, 0x6}, 0x1c) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, 0x0) 0s ago: executing program 1 (id=42): chdir(&(0x7f0000000080)='./file1\x00') accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(r2, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x1966cd75, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x641, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff122]}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000380)={&(0x7f0000001000)}, 0x1) syz_io_uring_setup(0x36c1, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:55941' (ED25519) to the list of known hosts. [ 34.279701][ T5867] cgroup: Unknown subsys name 'net' [ 34.434363][ T5867] cgroup: Unknown subsys name 'cpuset' [ 34.438287][ T5867] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 35.277315][ T5867] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.954847][ T5952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.957777][ T5952] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.959859][ T5952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.963980][ T5964] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.966470][ T5964] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.969385][ T5964] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.972918][ T5964] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.975584][ T5964] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 37.975850][ T5960] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.977055][ T5952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.977512][ T5952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.977699][ T5964] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.980675][ T65] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.980893][ T5960] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.981244][ T5960] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.981812][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.982194][ T5952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.982410][ T5952] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 37.982519][ T5952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.984417][ T65] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 37.986221][ T5960] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.988222][ T65] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.990149][ T5960] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 38.007107][ T5960] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 38.178126][ T5953] chnl_net:caif_netlink_parms(): no params data found [ 38.183347][ T5954] chnl_net:caif_netlink_parms(): no params data found [ 38.215673][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 38.226493][ T5962] chnl_net:caif_netlink_parms(): no params data found [ 38.359282][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.361200][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.364001][ T5954] bridge_slave_0: entered allmulticast mode [ 38.366201][ T5954] bridge_slave_0: entered promiscuous mode [ 38.380561][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.382547][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.384454][ T5953] bridge_slave_0: entered allmulticast mode [ 38.386661][ T5953] bridge_slave_0: entered promiscuous mode [ 38.415100][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.417044][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.418946][ T5954] bridge_slave_1: entered allmulticast mode [ 38.420985][ T5954] bridge_slave_1: entered promiscuous mode [ 38.434362][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.436354][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.438232][ T5949] bridge_slave_0: entered allmulticast mode [ 38.440345][ T5949] bridge_slave_0: entered promiscuous mode [ 38.443126][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.445020][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.446907][ T5953] bridge_slave_1: entered allmulticast mode [ 38.448929][ T5953] bridge_slave_1: entered promiscuous mode [ 38.451079][ T5962] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.453828][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.456007][ T5962] bridge_slave_0: entered allmulticast mode [ 38.457998][ T5962] bridge_slave_0: entered promiscuous mode [ 38.468898][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.470840][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.473989][ T5949] bridge_slave_1: entered allmulticast mode [ 38.476468][ T5949] bridge_slave_1: entered promiscuous mode [ 38.490276][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.492340][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.494492][ T5962] bridge_slave_1: entered allmulticast mode [ 38.496727][ T5962] bridge_slave_1: entered promiscuous mode [ 38.544692][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.556181][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.559765][ T5953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.563772][ T5962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.567127][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.570407][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.576101][ T5953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.580290][ T5962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.644477][ T5954] team0: Port device team_slave_0 added [ 38.647568][ T5949] team0: Port device team_slave_0 added [ 38.658915][ T5962] team0: Port device team_slave_0 added [ 38.661907][ T5954] team0: Port device team_slave_1 added [ 38.664426][ T5949] team0: Port device team_slave_1 added [ 38.667459][ T5953] team0: Port device team_slave_0 added [ 38.670267][ T5962] team0: Port device team_slave_1 added [ 38.696854][ T5953] team0: Port device team_slave_1 added [ 38.714156][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.716036][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.722910][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.742122][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.744013][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.750860][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.754561][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.756927][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.763848][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.775413][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.777295][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.784409][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.787798][ T5962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.789712][ T5962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.796676][ T5962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.800066][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.802165][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.809007][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.816953][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.818816][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.825879][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.829232][ T5962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.831121][ T5962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.837996][ T5962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.895454][ T5962] hsr_slave_0: entered promiscuous mode [ 38.897468][ T5962] hsr_slave_1: entered promiscuous mode [ 38.902567][ T5954] hsr_slave_0: entered promiscuous mode [ 38.904609][ T5954] hsr_slave_1: entered promiscuous mode [ 38.906438][ T5954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.908548][ T5954] Cannot create hsr debugfs directory [ 38.911816][ T5949] hsr_slave_0: entered promiscuous mode [ 38.913842][ T5949] hsr_slave_1: entered promiscuous mode [ 38.915732][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.917619][ T5949] Cannot create hsr debugfs directory [ 38.935219][ T5953] hsr_slave_0: entered promiscuous mode [ 38.937884][ T5953] hsr_slave_1: entered promiscuous mode [ 38.940142][ T5953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.942850][ T5953] Cannot create hsr debugfs directory [ 39.160863][ T5954] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.181315][ T5954] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.188423][ T5954] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.194220][ T5954] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.207034][ T5962] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.210295][ T5962] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.214612][ T5962] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.217493][ T5962] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.245220][ T5953] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.249551][ T5953] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.254967][ T5953] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.259471][ T5953] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.279447][ T5949] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.285130][ T5949] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.294245][ T5949] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.298654][ T5949] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.322374][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.345726][ T5954] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.357856][ T1044] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.359927][ T1044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.365082][ T1044] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.367376][ T1044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.379799][ T5962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.390811][ T5962] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.394399][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.401345][ T1218] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.403303][ T1218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.416687][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.420301][ T1218] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.422213][ T1218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.435600][ T1218] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.437408][ T1218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.442981][ T5954] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.456966][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.458729][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.468356][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.484858][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.493340][ T1218] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.495739][ T1218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.500695][ T5953] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.512453][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.514866][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.526882][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.566985][ T5954] veth0_vlan: entered promiscuous mode [ 39.572331][ T5962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.576498][ T5954] veth1_vlan: entered promiscuous mode [ 39.589738][ T5954] veth0_macvtap: entered promiscuous mode [ 39.595465][ T5954] veth1_macvtap: entered promiscuous mode [ 39.611099][ T5962] veth0_vlan: entered promiscuous mode [ 39.614052][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.617494][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.622867][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.627730][ T5962] veth1_vlan: entered promiscuous mode [ 39.632182][ T5954] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.634568][ T5954] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.636783][ T5954] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.638882][ T5954] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.654775][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.682450][ T5962] veth0_macvtap: entered promiscuous mode [ 39.682534][ T1218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.686417][ T1218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.686499][ T5962] veth1_macvtap: entered promiscuous mode [ 39.700388][ T5949] veth0_vlan: entered promiscuous mode [ 39.711195][ T5949] veth1_vlan: entered promiscuous mode [ 39.719063][ T1218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.721161][ T1218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.722648][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.725883][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.728951][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.730994][ T5953] veth0_vlan: entered promiscuous mode [ 39.737012][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.739744][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.743091][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.747412][ T5962] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.749715][ T5962] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.752876][ T5962] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.755133][ T5962] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.759938][ T5953] veth1_vlan: entered promiscuous mode [ 39.767708][ T5949] veth0_macvtap: entered promiscuous mode [ 39.773177][ T5949] veth1_macvtap: entered promiscuous mode [ 39.775378][ T5954] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.790104][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.793304][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.795839][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.798408][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.801716][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.805346][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.808621][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.811229][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.814401][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.817570][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.830480][ T5949] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.833985][ T5949] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.836329][ T5949] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.838634][ T5949] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.868022][ T5953] veth0_macvtap: entered promiscuous mode [ 39.870801][ T1044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.875931][ T5953] veth1_macvtap: entered promiscuous mode [ 39.876018][ T1044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.903290][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.906074][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.908629][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.911353][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.916278][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.920202][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.925958][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.930694][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.933525][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.948684][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.951468][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.954909][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.957687][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.960241][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.963758][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.967152][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.973940][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.976604][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.981879][ T6019] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 39.985697][ T5953] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.988654][ T5953] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.990907][ T5953] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.995499][ T5953] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.002357][ T6019] syzkaller1: entered promiscuous mode [ 40.004148][ T6019] syzkaller1: entered allmulticast mode [ 40.012730][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 40.049921][ T5960] Bluetooth: hci3: command tx timeout [ 40.051661][ T5960] Bluetooth: hci2: command tx timeout [ 40.053293][ T5960] Bluetooth: hci0: command tx timeout [ 40.054789][ T5960] Bluetooth: hci1: command tx timeout [ 40.068497][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.070725][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.090015][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.096160][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.123179][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.126317][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.193509][ T6027] 9pnet: p9_errstr2errno: server reported unknown error [ 40.344929][ T6037] binder: 6031:6037 ioctl 4018620d 0 returned -22 [ 40.620849][ T6041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'. [ 41.604507][ T6050] netlink: 'syz.3.8': attribute type 4 has an invalid length. [ 41.617575][ T6050] syz.3.8 (6050) used greatest stack depth: 20832 bytes left [ 41.705279][ T6056] netlink: 'syz.0.12': attribute type 3 has an invalid length. [ 41.707291][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'. [ 41.781728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 41.853825][ T6058] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.856599][ T6058] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.121695][ T5956] Bluetooth: hci1: command tx timeout [ 42.123242][ T5956] Bluetooth: hci0: command tx timeout [ 42.124726][ T5956] Bluetooth: hci2: command tx timeout [ 42.126209][ T5956] Bluetooth: hci3: command tx timeout [ 42.804903][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 42.809450][ T39] audit: type=1326 audit(1732325201.913:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.15" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 42.815335][ T39] audit: type=1326 audit(1732325201.913:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.15" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 42.820875][ T39] audit: type=1326 audit(1732325201.913:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.15" exe="/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 42.827216][ T39] audit: type=1326 audit(1732325201.913:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.15" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 42.832726][ T39] audit: type=1326 audit(1732325201.913:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.15" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 42.838193][ T39] audit: type=1326 audit(1732325201.923:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.15" exe="/syz-executor" sig=0 arch=40000003 syscall=355 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 42.843851][ T39] audit: type=1326 audit(1732325201.923:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.15" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 42.849296][ T39] audit: type=1326 audit(1732325201.923:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.15" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 42.854993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 42.857240][ T39] audit: type=1326 audit(1732325201.923:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.15" exe="/syz-executor" sig=0 arch=40000003 syscall=326 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 42.862808][ T39] audit: type=1326 audit(1732325201.923:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.15" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 42.895470][ T6074] trusted_key: encrypted_key: insufficient parameters specified [ 42.914502][ T6077] fuse: Bad value for 'fd' [ 43.006679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 43.009362][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 43.083815][ T6077] nbd1: detected capacity change from 0 to 22 [ 43.097451][ T6084] block nbd1: shutting down sockets [ 43.113931][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 43.116518][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 43.119085][ T1156] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 43.121665][ T1156] Buffer I/O error on dev nbd1, logical block 0, async page read [ 43.126010][ T5950] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 43.129191][ T5950] Buffer I/O error on dev nbd1, logical block 0, async page read [ 43.148422][ T5950] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 43.152227][ T5950] Buffer I/O error on dev nbd1, logical block 0, async page read [ 43.158413][ T5950] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 43.168542][ T5950] Buffer I/O error on dev nbd1, logical block 0, async page read [ 43.171120][ T5950] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 43.178596][ T5950] Buffer I/O error on dev nbd1, logical block 0, async page read [ 43.185106][ T5950] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 43.191824][ T5950] Buffer I/O error on dev nbd1, logical block 0, async page read [ 43.196212][ T5950] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 43.198565][ T5950] Buffer I/O error on dev nbd1, logical block 0, async page read [ 43.200593][ T5950] ldm_validate_partition_table(): Disk read failed. [ 43.206993][ T5950] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 43.211079][ T5950] Buffer I/O error on dev nbd1, logical block 0, async page read [ 43.214491][ T5950] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 43.216789][ T5950] Buffer I/O error on dev nbd1, logical block 0, async page read [ 43.218893][ T5950] Dev nbd1: unable to read RDB block 0 [ 43.220867][ T5950] nbd1: unable to read partition table [ 43.228787][ T5950] nbd1: partition table beyond EOD, truncated [ 43.236789][ T6077] ldm_validate_partition_table(): Disk read failed. [ 43.238709][ T6077] Dev nbd1: unable to read RDB block 0 [ 43.240298][ T6077] nbd1: unable to read partition table [ 43.253242][ T6077] nbd1: partition table beyond EOD, truncated [ 43.257810][ T5950] ldm_validate_partition_table(): Disk read failed. [ 43.260062][ T5950] Dev nbd1: unable to read RDB block 0 [ 43.273603][ T5950] nbd1: unable to read partition table [ 43.275868][ T5950] nbd1: partition table beyond EOD, truncated [ 43.620403][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 44.201683][ T5956] Bluetooth: hci1: command tx timeout [ 44.201717][ T5964] Bluetooth: hci3: command tx timeout [ 44.203647][ T5960] Bluetooth: hci2: command tx timeout [ 44.205033][ T5964] Bluetooth: hci0: command tx timeout [ 44.691858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 44.694016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 44.697500][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 44.760013][ T6103] trusted_key: syz.3.23 sent an empty control message without MSG_MORE. [ 45.041667][ T5993] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 45.107234][ T6113] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.211582][ T5993] usb 6-1: Using ep0 maxpacket: 8 [ 45.271888][ T5993] usb 6-1: config 0 has no interfaces? [ 45.273359][ T5993] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 45.275686][ T5993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.302366][ T5993] usb 6-1: config 0 descriptor?? [ 45.533904][ T6108] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 45.559148][ T8] usb 6-1: USB disconnect, device number 2 [ 45.729113][ T6117] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 45.732272][ T6117] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 46.281874][ T65] Bluetooth: hci0: command tx timeout [ 46.283473][ T65] Bluetooth: hci1: command tx timeout [ 46.285116][ T65] Bluetooth: hci2: command tx timeout [ 46.287085][ T5964] Bluetooth: hci3: command tx timeout [ 47.269227][ T6139] random: crng reseeded on system resumption [ 47.686524][ T6142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 47.701649][ T6142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 48.021676][ T6013] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 48.183031][ T6013] usb 8-1: Using ep0 maxpacket: 8 [ 48.193178][ T6013] usb 8-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 48.195627][ T6013] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.198059][ T6013] usb 8-1: Product: syz [ 48.199473][ T6013] usb 8-1: Manufacturer: syz [ 48.201396][ T6013] usb 8-1: SerialNumber: syz [ 48.204837][ T6013] usb 8-1: config 0 descriptor?? [ 48.210082][ T6013] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 49.209937][ T6013] gspca_sonixj: reg_r err -32 [ 49.211915][ T6013] sonixj 8-1:0.0: probe with driver sonixj failed with error -32 [ 49.219950][ T6013] usb 8-1: USB disconnect, device number 2 [ 49.829288][ T6170] Bluetooth: MGMT ver 1.23 [ 50.301659][ T5993] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 50.369112][ T6183] binder: 6172:6183 ioctl c0046209 0 returned -22 [ 50.461605][ T5993] usb 8-1: Using ep0 maxpacket: 8 [ 50.466396][ T5993] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.469122][ T5993] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 50.471472][ T5993] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 50.474531][ T5993] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 50.477601][ T5993] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 50.479928][ T5993] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.484282][ T5993] hub 8-1:1.0: bad descriptor, ignoring hub [ 50.486585][ T5993] hub 8-1:1.0: probe with driver hub failed with error -5 [ 50.490081][ T5993] cdc_wdm 8-1:1.0: skipping garbage [ 50.491954][ T5993] cdc_wdm 8-1:1.0: skipping garbage [ 50.495633][ T5993] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 50.497216][ T5993] cdc_wdm 8-1:1.0: Unknown control protocol [ 50.615221][ T112] [ 50.616300][ T112] ====================================================== [ 50.618151][ T112] WARNING: possible circular locking dependency detected [ 50.620023][ T112] 6.12.0-syzkaller-07834-g06afb0f36106 #0 Not tainted [ 50.623125][ T112] ------------------------------------------------------ [ 50.625853][ T112] kswapd0/112 is trying to acquire lock: [ 50.627318][ T112] ffff88801f3f1438 (&q->q_usage_counter(io)#68){++++}-{0:0}, at: blk_mq_submit_bio+0x7ca/0x24c0 [ 50.630019][ T112] [ 50.630019][ T112] but task is already holding lock: [ 50.631946][ T112] ffffffff8df4de60 (fs_reclaim){+.+.}-{0:0}, at: balance_pgdat+0xcd9/0x18f0 [ 50.634248][ T112] [ 50.634248][ T112] which lock already depends on the new lock. [ 50.634248][ T112] [ 50.636898][ T112] [ 50.636898][ T112] the existing dependency chain (in reverse order) is: [ 50.639206][ T112] [ 50.639206][ T112] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 50.641154][ T112] fs_reclaim_acquire+0x102/0x150 [ 50.642813][ T112] __kmalloc_node_noprof+0xb7/0x440 [ 50.644835][ T112] __kvmalloc_node_noprof+0xad/0x1a0 [ 50.646872][ T112] sbitmap_init_node+0x1ca/0x770 [ 50.648867][ T112] scsi_realloc_sdev_budget_map+0x2c7/0x610 [ 50.651214][ T112] scsi_add_lun+0x11b4/0x1fd0 [ 50.653096][ T112] scsi_probe_and_add_lun+0x4fa/0xda0 [ 50.655236][ T112] __scsi_add_device+0x24b/0x290 [ 50.657207][ T112] ata_scsi_scan_host+0x215/0x780 [ 50.659211][ T112] async_run_entry_fn+0x9c/0x530 [ 50.661178][ T112] process_one_work+0x958/0x1b30 [ 50.663183][ T112] worker_thread+0x6c8/0xf00 [ 50.665021][ T112] kthread+0x2c1/0x3a0 [ 50.666630][ T112] ret_from_fork+0x45/0x80 [ 50.668373][ T112] ret_from_fork_asm+0x1a/0x30 [ 50.670228][ T112] [ 50.670228][ T112] -> #0 (&q->q_usage_counter(io)#68){++++}-{0:0}: [ 50.673245][ T112] __lock_acquire+0x249e/0x3c40 [ 50.674740][ T112] lock_acquire.part.0+0x11b/0x380 [ 50.676707][ T112] __bio_queue_enter+0x4c6/0x740 [ 50.678612][ T112] blk_mq_submit_bio+0x7ca/0x24c0 [ 50.680550][ T112] __submit_bio+0x384/0x540 [ 50.682320][ T112] submit_bio_noacct_nocheck+0x698/0xd70 [ 50.684451][ T112] submit_bio_noacct+0x93a/0x1e20 [ 50.686297][ T112] __swap_writepage+0x3a3/0xf50 [ 50.688255][ T112] swap_writepage+0x403/0x1040 [ 50.690099][ T112] pageout+0x3b2/0xaa0 [ 50.691744][ T112] shrink_folio_list+0x3025/0x42d0 [ 50.693651][ T112] evict_folios+0x6d6/0x1970 [ 50.695239][ T112] try_to_shrink_lruvec+0x612/0x9b0 [ 50.697240][ T112] shrink_one+0x3e3/0x7b0 [ 50.698956][ T112] shrink_node+0xbbc/0x3ed0 [ 50.700735][ T112] balance_pgdat+0xc1f/0x18f0 [ 50.702607][ T112] kswapd+0x5f8/0xc30 [ 50.704292][ T112] kthread+0x2c1/0x3a0 [ 50.705993][ T112] ret_from_fork+0x45/0x80 [ 50.707778][ T112] ret_from_fork_asm+0x1a/0x30 [ 50.709647][ T112] [ 50.709647][ T112] other info that might help us debug this: [ 50.709647][ T112] [ 50.713128][ T112] Possible unsafe locking scenario: [ 50.713128][ T112] [ 50.715654][ T112] CPU0 CPU1 [ 50.717533][ T112] ---- ---- [ 50.719476][ T112] lock(fs_reclaim); [ 50.720885][ T112] lock(&q->q_usage_counter(io)#68); [ 50.723629][ T112] lock(fs_reclaim); [ 50.725570][ T112] rlock(&q->q_usage_counter(io)#68); [ 50.727000][ T112] [ 50.727000][ T112] *** DEADLOCK *** [ 50.727000][ T112] [ 50.729082][ T112] 1 lock held by kswapd0/112: [ 50.729289][ T6187] input: syz0 as /devices/virtual/input/input5 [ 50.730296][ T112] #0: ffffffff8df4de60 (fs_reclaim){+.+.}-{0:0}, at: balance_pgdat+0xcd9/0x18f0 [ 50.730327][ T112] [ 50.730327][ T112] stack backtrace: [ 50.730331][ T112] CPU: 3 UID: 0 PID: 112 Comm: kswapd0 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 50.739287][ T112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.742237][ T112] Call Trace: [ 50.743145][ T112] [ 50.743920][ T112] dump_stack_lvl+0x116/0x1f0 [ 50.745151][ T112] print_circular_bug+0x41c/0x610 [ 50.746472][ T112] check_noncircular+0x31a/0x400 [ 50.747769][ T112] ? __pfx_check_noncircular+0x10/0x10 [ 50.749198][ T112] ? lockdep_lock+0xc6/0x200 [ 50.750478][ T112] ? __pfx_lockdep_lock+0x10/0x10 [ 50.751787][ T112] __lock_acquire+0x249e/0x3c40 [ 50.753135][ T112] ? __pfx___lock_acquire+0x10/0x10 [ 50.754611][ T112] lock_acquire.part.0+0x11b/0x380 [ 50.755962][ T112] ? blk_mq_submit_bio+0x7ca/0x24c0 [ 50.757455][ T112] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 50.759024][ T112] ? rcu_is_watching+0x12/0xc0 [ 50.760282][ T112] ? trace_lock_acquire+0x146/0x1e0 [ 50.761662][ T112] ? blk_mq_submit_bio+0x7ca/0x24c0 [ 50.763196][ T112] ? lock_acquire+0x2f/0xb0 [ 50.764390][ T112] ? blk_mq_submit_bio+0x7ca/0x24c0 [ 50.765765][ T112] __bio_queue_enter+0x4c6/0x740 [ 50.767111][ T112] ? blk_mq_submit_bio+0x7ca/0x24c0 [ 50.768466][ T112] ? __pfx___bio_queue_enter+0x10/0x10 [ 50.769879][ T112] ? blk_mq_submit_bio+0x7b5/0x24c0 [ 50.771246][ T112] ? __pfx_autoremove_wake_function+0x10/0x10 [ 50.772896][ T112] blk_mq_submit_bio+0x7ca/0x24c0 [ 50.774258][ T112] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 50.775670][ T112] ? __pfx_mark_lock+0x10/0x10 [ 50.777056][ T112] ? __pfx___lock_acquire+0x10/0x10 [ 50.778787][ T112] __submit_bio+0x384/0x540 [ 50.780163][ T112] ? __pfx___submit_bio+0x10/0x10 [ 50.781532][ T112] ? ktime_get+0x206/0x300 [ 50.782727][ T112] ? lockdep_hardirqs_on+0x7c/0x110 [ 50.784113][ T112] ? submit_bio_noacct_nocheck+0x698/0xd70 [ 50.785642][ T112] submit_bio_noacct_nocheck+0x698/0xd70 [ 50.787126][ T112] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 50.788755][ T112] ? __pfx___might_resched+0x10/0x10 [ 50.790207][ T112] ? __pfx___folio_start_writeback+0x10/0x10 [ 50.791789][ T112] submit_bio_noacct+0x93a/0x1e20 [ 50.793106][ T112] __swap_writepage+0x3a3/0xf50 [ 50.794391][ T112] swap_writepage+0x403/0x1040 [ 50.795668][ T112] ? folio_clear_dirty_for_io+0x112/0x800 [ 50.797227][ T112] pageout+0x3b2/0xaa0 [ 50.798312][ T112] ? __pfx_pageout+0x10/0x10 [ 50.799552][ T112] ? __pfx_try_to_unmap_one+0x10/0x10 [ 50.800962][ T112] ? __pfx_folio_not_mapped+0x10/0x10 [ 50.801671][ T827] usb 8-1: USB disconnect, device number 3 [ 50.802364][ T112] ? __pfx_folio_lock_anon_vma_read+0x10/0x10 [ 50.802380][ T112] ? folio_mark_dirty+0xd8/0x150 [ 50.802392][ T112] shrink_folio_list+0x3025/0x42d0 [ 50.803717][ T6177] sctp: failed to load transform for md5: -2 [ 50.809697][ T112] ? __pfx_shrink_folio_list+0x10/0x10 [ 50.811147][ T112] ? isolate_folios+0x1c4b/0x35f0 [ 50.812461][ T112] ? hlock_class+0x4e/0x130 [ 50.813676][ T112] ? mark_lock+0xb5/0xc60 [ 50.814818][ T112] ? mark_held_locks+0x9f/0xe0 [ 50.816092][ T112] evict_folios+0x6d6/0x1970 [ 50.817311][ T112] ? __pfx_evict_folios+0x10/0x10 [ 50.818635][ T112] ? mem_cgroup_get_nr_swap_pages+0x20/0x120 [ 50.820214][ T112] ? sc_swappiness+0xd4/0x190 [ 50.821452][ T112] try_to_shrink_lruvec+0x612/0x9b0 [ 50.822809][ T112] ? find_held_lock+0x2d/0x110 [ 50.824061][ T112] ? __pfx_try_to_shrink_lruvec+0x10/0x10 [ 50.825533][ T112] ? shrink_node+0xb9c/0x3ed0 [ 50.826831][ T112] shrink_one+0x3e3/0x7b0 [ 50.827963][ T112] ? shrink_node+0xb9c/0x3ed0 [ 50.829234][ T112] shrink_node+0xbbc/0x3ed0 [ 50.830426][ T112] ? shrink_node+0x90a/0x3ed0 [ 50.831673][ T112] ? __pfx_shrink_node+0x10/0x10 [ 50.832960][ T112] ? percpu_ref_put_many.constprop.0+0x1b/0x150 [ 50.835022][ T112] ? balance_pgdat+0xc1f/0x18f0 [ 50.836291][ T112] balance_pgdat+0xc1f/0x18f0 [ 50.837524][ T112] ? __pfx_balance_pgdat+0x10/0x10 [ 50.838869][ T112] ? __pfx___lock_acquire+0x10/0x10 [ 50.840246][ T112] ? __pfx_debug_object_free+0x10/0x10 [ 50.841681][ T112] ? lock_acquire.part.0+0x11b/0x380 [ 50.843065][ T112] ? __pfx___might_resched+0x10/0x10 [ 50.844485][ T112] kswapd+0x5f8/0xc30 [ 50.845942][ T112] ? __pfx_kswapd+0x10/0x10 [ 50.847190][ T112] ? __pfx_autoremove_wake_function+0x10/0x10 [ 50.848807][ T112] ? lockdep_hardirqs_on+0x7c/0x110 [ 50.850182][ T112] ? __kthread_parkme+0x148/0x220 [ 50.851519][ T112] ? __pfx_kswapd+0x10/0x10 [ 50.852719][ T112] kthread+0x2c1/0x3a0 [ 50.853790][ T112] ? _raw_spin_unlock_irq+0x23/0x50 [ 50.855134][ T112] ? __pfx_kthread+0x10/0x10 [ 50.856665][ T112] ret_from_fork+0x45/0x80 [ 50.858193][ T112] ? __pfx_kthread+0x10/0x10 [ 50.859712][ T112] ret_from_fork_asm+0x1a/0x30 [ 50.861403][ T112] [ 50.915001][ T5961] udevd[5961]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 51.131594][ T6013] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 51.291704][ T6013] usb 8-1: Using ep0 maxpacket: 8 [ 51.294752][ T6013] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.298430][ T6013] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 51.301830][ T6013] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 51.305665][ T6013] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 51.309761][ T6013] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 51.313050][ T6013] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.318853][ T6013] hub 8-1:1.0: bad descriptor, ignoring hub [ 51.321003][ T6013] hub 8-1:1.0: probe with driver hub failed with error -5 [ 51.323917][ T6013] cdc_wdm 8-1:1.0: skipping garbage [ 51.325809][ T6013] cdc_wdm 8-1:1.0: skipping garbage [ 51.328229][ T6013] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 51.330286][ T6013] cdc_wdm 8-1:1.0: Unknown control protocol [ 51.631799][ T5993] usb 8-1: USB disconnect, device number 4 VM DIAGNOSIS: 01:26:49 Registers: info registers vcpu 0 CPU#0 EAX=00000000 EBX=ffffffff ECX=81c2d6f1 EDX=00000000 ESI=f6caf000 EDI=f68af568 EBP=f692ead0 ESP=ffce4cd0 EIP=f70e7c9c EFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 57253440 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 00003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3bac6a CR3=0000000022f42000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffea0001411808 RBX=ffffea0001411840 RCX=ffffffff81f80564 RDX=1ffffd4000282309 RSI=ffffffff8bb05ce0 RDI=ffffea0001411848 RBP=ffff88807ffd6540 RSP=ffffc900066475e0 R8 =0000000000000000 R9 =fffffbfff2039b42 R10=ffffffff901cda17 R11=1ffffffff1bb8c99 R12=00000000ffffffff R13=0000000000000012 R14=ffff8880207535d0 R15=ffffea0001411840 RIP=ffffffff81f7ad3f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002fbf5ff8 CR3=000000006c6c0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000709ac RBX=0000000000000002 RCX=ffffffff8b159f99 RDX=ffffed10056c6fee RSI=ffffffff8bb05ce0 RDI=ffffffff81646059 RBP=ffffed1003775000 RSP=ffffc90000487e08 R8 =0000000000000000 R9 =ffffed10056c6fed R10=ffff88802b637f6b R11=0000000000000001 R12=0000000000000002 R13=ffff88801bba8000 R14=ffffffff901cda10 R15=0000000000000000 RIP=ffffffff8b15b37f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f5136b04 CR3=000000004ba66000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f741dff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fee6f5 RDI=ffffffff9a656460 RBP=ffffffff9a656420 RSP=ffffc90000e5e210 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000020 R14=ffffffff84fee690 R15=0000000000000000 RIP=ffffffff84fee71f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002fc1cff8 CR3=00000000622e0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000