last executing test programs: 5.909705709s ago: executing program 1 (id=178): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged_recursive\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x80002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001e0001000000000000"], 0x24}}, 0x880) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x1002, 0x4, 0x3ac, 0xe0, 0x2cc, 0x0, 0x2cc, 0x2cc, 0x2cc, 0x4, 0x0, {[{{@uncond, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0x1ec}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="c05cd0aa2ac3", @rand_addr=0x64010102, @rand_addr=0x64010101, 0x4}}}, {{@arp={@remote, @remote, 0xff000000, 0x80800000, 0x6, 0xd, {@mac=@multicast, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@local, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x1, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x119}, 0xbc, 0xe0}, @unspec=@NFQUEUE0={0x24, 'NFQUEUE\x00', 0x0, {0xfff9}}}], {{'\x00', 0xbc, 0xe0}, {0x24, '\x00', 0x0, 0xfffffffb}}}}, 0x3f8) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x200a, 0x0, 0x3, 0x0, 0x3}}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001300), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000002c0)='lp\x00', 0x3) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) syz_open_dev$radio(&(0x7f0000000140), 0x3, 0x2) io_setup(0x6, &(0x7f0000000280)) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000080)={0xf0f041}) 4.479407057s ago: executing program 1 (id=184): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x12d803) r4 = dup(r3) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r4) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="320429c77000ffdbdf25020000000900030073797a300100000014000200626f6e645f736c6176655f31000000000900030073797a2c000000000900030073797a30f9000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x40084) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r5, 0x300, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc840}, 0x2040884) socket$xdp(0x2c, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESOCT=r6, @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$char_usb(r8, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 4.451736373s ago: executing program 3 (id=186): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000880)={{0x0, 0x6, 0x0, 0x1c0000, 'syz1\x00', 0x5}, 0x0, 0x3, 0xffffffff, 0xffffffffffffffff, 0x0, 0x4, 'syz0\x00', 0x0}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x40}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000140000003500000002000000000000000100000d0000000006000000010000000100"], 0x0, 0x2e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000000000000000000100000008500ff0761000000950000007f000000", @ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$mice(0xffffff9c, &(0x7f0000000600), 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="09000000030000000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000e0000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb53, 0x0, 0x0, 0x0, 0x3282f7bc}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', r5, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xe, 0x10000, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r1, r1, r1, r1, r6, r1, r7], &(0x7f00000004c0)=[{0x4, 0x3, 0xa, 0x3}, {0x1, 0x3, 0x2, 0x2}], 0x10, 0x3, @void, @value}, 0x94) syz_io_uring_setup(0x239, &(0x7f00000000c0)={0x0, 0x4533, 0x10100, 0xffffdffe, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000a40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x20000000, 0x4, 0x0, 0x0, 0x1, 'syz1\x00', 0x0}) lchown(&(0x7f0000000240)='./file0\x00', 0x0, 0xee00) openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000040), 0x2103, 0x0) syz_open_dev$rtc(0x0, 0x9, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 4.047340022s ago: executing program 0 (id=187): syz_open_dev$vim2m(0x0, 0x6eb, 0x2) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x4e00, 0x0, 0x0, 0xbdff, 0x0, "fdffffffffffffff"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x40000) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x2}]}) close_range(r6, 0xffffffffffffffff, 0x0) 4.020367326s ago: executing program 2 (id=188): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) splice(r5, 0x0, r7, 0x0, 0x2000, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x20040000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x3, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022ebffffffff"}}}}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61"}, 0x28) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getresuid(0x0, &(0x7f0000002100), &(0x7f0000002140)) 3.672913077s ago: executing program 3 (id=189): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="2415b66aa12bb9b94575e21afd41239d388d3729982b632023c687234c13edd7de0c4eb1e2aa5b450eb7da55c2c3a0ad9595704ca4010aa8e58b6b54e16a99a0ca46435465b5", @ANYRES64=0x0], 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYBLOB='&'], 0x10) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r8, 0x5) gettid() getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000300)=0xc) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000080)=@sg0, r9, &(0x7f0000000440)) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000500)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r10, 0x400454c9, 0x9) ioctl$TUNSETNOCSUM(r10, 0x400454c8, 0x0) timer_create(0x0, 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r11, 0x2) 3.558087623s ago: executing program 1 (id=190): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd, 0x3]}, 0x0, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0x4d}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x2) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000001c40)={'ipvs\x00'}, &(0x7f0000004580)=0x1e) 3.33987031s ago: executing program 3 (id=191): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="2415b66aa12bb9b94575e21afd41239d388d3729982b632023c687234c13edd7de0c4eb1e2aa5b450eb7da55c2c3a0ad9595704ca4010aa8e58b6b54e16a99a0ca46435465b5", @ANYRES64=0x0], 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYBLOB='&'], 0x10) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r8, 0x5) gettid() getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000300)=0xc) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000080)=@sg0, r9, &(0x7f0000000440)) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000500)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r10, 0x400454c9, 0x9) ioctl$TUNSETNOCSUM(r10, 0x400454c8, 0x0) timer_create(0x0, 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r11, 0x2) 3.139958282s ago: executing program 0 (id=192): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged_recursive\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x80002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001e0001000000000000"], 0x24}}, 0x880) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x1002, 0x4, 0x3ac, 0xe0, 0x2cc, 0x0, 0x2cc, 0x2cc, 0x2cc, 0x4, 0x0, {[{{@uncond, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0x1ec}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="c05cd0aa2ac3", @rand_addr=0x64010102, @rand_addr=0x64010101, 0x4}}}, {{@arp={@remote, @remote, 0xff000000, 0x80800000, 0x6, 0xd, {@mac=@multicast, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@local, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x1, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x119}, 0xbc, 0xe0}, @unspec=@NFQUEUE0={0x24, 'NFQUEUE\x00', 0x0, {0xfff9}}}], {{'\x00', 0xbc, 0xe0}, {0x24, '\x00', 0x0, 0xfffffffb}}}}, 0x3f8) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x200a, 0x0, 0x3, 0x0, 0x3}}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001300), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000002c0)='lp\x00', 0x3) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) syz_open_dev$radio(&(0x7f0000000140), 0x3, 0x2) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000080)={0xf0f041}) 3.069973553s ago: executing program 2 (id=193): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x7, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x101}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb49f35c25d456591f0c15a08769bcd5107053ea1f85250ac10e50c14ffda0a7a98740f8cb9694c01f", 0x30) write$qrtrtun(r1, &(0x7f0000000240)="25375468d806d8f58187445ffe9858217350a60bd72487386e5fed8ee07cb6f6b4ecc8a6356cee94d42a3c", 0x2b) write$qrtrtun(r1, &(0x7f0000000c00)="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", 0x3d1) write$qrtrtun(r1, &(0x7f00000003c0)="b9f7e454d6ce3c38320af2cda788e32c79a152b0dc36b2bdac6494a7d1f3e718f268a55c29480f0c36d8de3d666657", 0x2f) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r3, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x459], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x8000}, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, 0x0, 0x0) r6 = msgget$private(0x0, 0x0) msgrcv(r6, 0x0, 0x0, 0x3, 0x1000) 2.329852247s ago: executing program 1 (id=194): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000880)={{0x0, 0x6, 0x0, 0x1c0000, 'syz1\x00', 0x5}, 0x0, 0x3, 0xffffffff, 0xffffffffffffffff, 0x0, 0x4, 'syz0\x00', 0x0}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x40}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000140000003500000002000000000000000100000d0000000006000000010000000100"], 0x0, 0x2e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000000000000000000100000008500ff0761000000950000007f000000", @ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$mice(0xffffff9c, &(0x7f0000000600), 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0900000003000000080000400400000002000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb53, 0x0, 0x0, 0x0, 0x3282f7bc}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', r5, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xe, 0x10000, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r1, r1, r1, r1, r6, r1, r7], &(0x7f00000004c0)=[{0x4, 0x3, 0xa, 0x3}, {0x1, 0x3, 0x2, 0x2}], 0x10, 0x3, @void, @value}, 0x94) r8 = syz_io_uring_setup(0x239, &(0x7f00000000c0)={0x0, 0x4533, 0x10100, 0xffffdffe, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000a40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x20000000, 0x4, 0x0, 0x0, 0x1, 'syz1\x00', 0x0}) lchown(&(0x7f0000000240)='./file0\x00', 0x0, 0xee00) openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000040), 0x2103, 0x0) syz_open_dev$rtc(0x0, 0x9, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r8, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 2.229579528s ago: executing program 0 (id=195): r0 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000040)='nv\x00', 0x3) (async) write$tcp_congestion(r0, &(0x7f0000000040)='nv\x00', 0x3) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000080)={0x0, "3741d181effa42fcef535d80ba6ed2db"}) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000080)={0x0, "3741d181effa42fcef535d80ba6ed2db"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001080)={r1, 0x31, 0xab1d, 0x1}) r2 = syz_io_uring_setup(0x3860, &(0x7f0000001480)={0x0, 0xd6fc, 0x20, 0x2, 0x2d9}, &(0x7f0000001500), &(0x7f0000001540)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000001580), r3) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)=@deltaction={0x14, 0x31, 0x400, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4008004}, 0x80) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r5, 0x103, 0x2, &(0x7f00000016c0)=0x3, 0x4) (async) setsockopt$netrom_NETROM_T2(r5, 0x103, 0x2, &(0x7f00000016c0)=0x3, 0x4) pread64(r4, &(0x7f0000001700)=""/124, 0x7c, 0x7f) (async) pread64(r4, &(0x7f0000001700)=""/124, 0x7c, 0x7f) syz_genetlink_get_family_id$devlink(&(0x7f00000017c0), r3) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000017c0), r3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x80, r6, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xf}, {0x6, 0x11, 0x400}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x3}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r7 = openat$pfkey(0xffffff9c, &(0x7f0000001940), 0x80000, 0x0) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001980)={&(0x7f0000001900)='block_bio_complete\x00', r7, 0x0, 0x2}, 0x18) fdatasync(r5) (async) fdatasync(r5) sendto$llc(r7, &(0x7f00000019c0)="0c98f0daf10b981952606192bad085caa9266fc87444a56d598534fe3c2ffe79c24111ef91e5d25be0e79f6d202272d9cb96b516e5dab63ec0c1756113b3af76e31565c8944ba977c1c0e0966b0e7cd9a2a8fd30124a3af11c7438fc233da692a4d21ea73ebabce15eeea91109118850b9218525b33352031618495a1fd010f2ab0bbe97c35c23ca04a7f10eee6ead8b587d2177242469d059da7c86024a34426313e305b112f78b0ad2365d", 0xac, 0x4004000, &(0x7f0000001a80)={0x1a, 0xe, 0xd4, 0x6, 0x9, 0x4, @random="e6430c69ba4a"}, 0x10) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000001ac0)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) (async) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000001ac0)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) r9 = socket$kcm(0x29, 0x7, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r9, 0x119, 0x1, &(0x7f0000001b00), 0x4) ioctl$VIDIOC_S_FBUF(r7, 0x402c560b, &(0x7f0000001b80)={0x65, 0x1e, &(0x7f0000001b40)="65cc8ef7b3137bdac1d685c298e35b79", {0x0, 0x6, 0x32435750, 0x3, 0x2a01, 0x4, 0x3}}) io_setup(0x4, &(0x7f0000001bc0)) recvmmsg(r4, &(0x7f000000a680)=[{{&(0x7f0000001c00)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000001c80)=""/185, 0xb9}, {&(0x7f0000001d40)=""/195, 0xc3}, {&(0x7f0000001e40)=""/121, 0x79}, {&(0x7f0000001ec0)=""/4096, 0x1000}], 0x4, &(0x7f0000002f00)=""/140, 0x8c}, 0xffff7fff}, {{&(0x7f0000002fc0)=@tipc=@name, 0x80, &(0x7f00000032c0)=[{&(0x7f0000003040)=""/102, 0x66}, {&(0x7f00000030c0)=""/36, 0x24}, {&(0x7f0000003100)=""/62, 0x3e}, {&(0x7f0000003140)=""/149, 0x95}, {&(0x7f0000003200)=""/158, 0x9e}], 0x5, &(0x7f0000003300)=""/74, 0x4a}, 0x5}, {{&(0x7f0000003380), 0x80, &(0x7f0000005700)=[{&(0x7f0000003400)=""/102, 0x66}, {&(0x7f0000003480)=""/120, 0x78}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/71, 0x47}, {&(0x7f0000005580)=""/212, 0xd4}, {&(0x7f0000005680)=""/104, 0x68}], 0x7, &(0x7f0000005740)=""/104, 0x68}, 0x81}, {{&(0x7f00000057c0)=@un=@abs, 0x80, &(0x7f0000006a80)=[{&(0x7f0000005840)=""/253, 0xfd}, {&(0x7f0000005940)=""/43, 0x2b}, {&(0x7f0000005980)=""/236, 0xec}, {&(0x7f0000005a80)=""/4096, 0x1000}], 0x4}, 0x10}, {{&(0x7f0000006ac0)=@un=@abs, 0x80, &(0x7f0000006dc0)=[{&(0x7f0000006b40)=""/74, 0x4a}, {&(0x7f0000006bc0)=""/243, 0xf3}, {&(0x7f0000006cc0)=""/238, 0xee}], 0x3}, 0x2}, {{&(0x7f0000006e00)=@nfc_llcp, 0x80, &(0x7f0000008180)=[{&(0x7f0000006e80)=""/252, 0xfc}, {&(0x7f0000006f80)=""/4096, 0x1000}, {&(0x7f0000007f80)=""/209, 0xd1}, {&(0x7f0000008080)=""/74, 0x4a}, {&(0x7f0000008100)=""/59, 0x3b}, {&(0x7f0000008140)=""/64, 0x40}], 0x6, &(0x7f00000081c0)=""/158, 0x9e}, 0x6}, {{&(0x7f0000008280)=@nl, 0x80, &(0x7f0000008340)=[{&(0x7f0000008300)}], 0x1, &(0x7f0000008380)=""/248, 0xf8}, 0x5}, {{&(0x7f0000008480)=@phonet, 0x80, &(0x7f0000009640)=[{&(0x7f0000008500)=""/172, 0xac}, {&(0x7f00000085c0)=""/4096, 0x1000}, {&(0x7f00000095c0)=""/125, 0x7d}], 0x3, &(0x7f0000009680)=""/4096, 0x1000}, 0xa}], 0x8, 0x2040, &(0x7f000000a780)={0x77359400}) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f000000a7c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f000000a7c0), 0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f000000a800)={{0x1, 0x1, 0x18, r2, {r8}}, './file0\x00'}) sendmsg$NFT_BATCH(r11, &(0x7f000000a940)={&(0x7f000000a840)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f000000a900)={&(0x7f000000a880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2af9440ec1a90db4}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x4004}, 0x1) (async) sendmsg$NFT_BATCH(r11, &(0x7f000000a940)={&(0x7f000000a840)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f000000a900)={&(0x7f000000a880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2af9440ec1a90db4}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x4004}, 0x1) unshare(0x20000) recvmmsg(0xffffffffffffffff, &(0x7f00000159c0)=[{{&(0x7f000000aa40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f000000ae40)=[{&(0x7f000000aac0)=""/24, 0x18}, {&(0x7f000000ab00)=""/224, 0xe0}, {&(0x7f000000ac00)=""/53, 0x35}, {&(0x7f000000ac40)=""/113, 0x71}, {&(0x7f000000acc0)=""/72, 0x48}, {&(0x7f000000ad40)=""/143, 0x8f}, {&(0x7f000000ae00)=""/38, 0x26}], 0x7, &(0x7f000000ae80)=""/90, 0x5a}, 0x6}, {{&(0x7f000000af00)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f000000b040)=[{&(0x7f000000af80)=""/175, 0xaf}], 0x1, &(0x7f000000b080)=""/4096, 0x1000}, 0xa}, {{&(0x7f000000c080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f000000c380)=[{&(0x7f000000c100)=""/9, 0x9}, {&(0x7f000000c140)=""/126, 0x7e}, {&(0x7f000000c1c0)=""/207, 0xcf}, {&(0x7f000000c2c0)=""/154, 0x9a}], 0x4, &(0x7f000000c3c0)=""/246, 0xf6}, 0x8}, {{&(0x7f000000c4c0)=@hci, 0x80, &(0x7f000000e840)=[{&(0x7f000000c540)=""/4096, 0x1000}, {&(0x7f000000d540)=""/41, 0x29}, {&(0x7f000000d580)=""/4096, 0x1000}, {&(0x7f000000e580)=""/153, 0x99}, {&(0x7f000000e640)=""/48, 0x30}, {&(0x7f000000e680)=""/140, 0x8c}, {&(0x7f000000e740)=""/110, 0x6e}, {&(0x7f000000e7c0)=""/121, 0x79}], 0x8, &(0x7f000000e880)=""/4096, 0x1000}, 0x3}, {{&(0x7f000000f880)=@l2, 0x80, &(0x7f000000fb80)=[{&(0x7f000000f900)=""/149, 0x95}, {&(0x7f000000f9c0)=""/177, 0xb1}, {&(0x7f000000fa80)=""/92, 0x5c}, {&(0x7f000000fb00)=""/83, 0x53}], 0x4, &(0x7f000000fbc0)=""/152, 0x98}, 0x1}, {{&(0x7f000000fc80)=@ethernet={0x0, @remote}, 0x80, &(0x7f000000fd40)=[{&(0x7f000000fd00)=""/9, 0x9}], 0x1, &(0x7f000000fd80)=""/239, 0xef}, 0x1}, {{&(0x7f000000fe80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000012440)=[{&(0x7f000000ff00)=""/114, 0x72}, {&(0x7f000000ff80)=""/9, 0x9}, {&(0x7f000000ffc0)=""/24, 0x18}, {&(0x7f0000010000)=""/4096, 0x1000}, {&(0x7f0000011000)=""/164, 0xa4}, {&(0x7f00000110c0)=""/4096, 0x1000}, {&(0x7f00000120c0)=""/139, 0x8b}, {&(0x7f0000012180)=""/193, 0xc1}, {&(0x7f0000012280)=""/249, 0xf9}, {&(0x7f0000012380)=""/145, 0x91}], 0xa, &(0x7f00000124c0)=""/43, 0x2b}, 0x378aac4f}, {{&(0x7f0000012500)=@phonet, 0x80, &(0x7f00000138c0)=[{&(0x7f0000012580)=""/105, 0x69}, {&(0x7f0000012600)=""/89, 0x59}, {&(0x7f0000012680)=""/136, 0x88}, {&(0x7f0000012740)=""/113, 0x71}, {&(0x7f00000127c0)=""/236, 0xec}, {&(0x7f00000128c0)=""/4096, 0x1000}], 0x6, &(0x7f0000013900)=""/86, 0x56}, 0x8}, {{&(0x7f0000013980)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000014040)=[{&(0x7f0000013a00)=""/106, 0x6a}, {&(0x7f0000013a80)=""/137, 0x89}, {&(0x7f0000013b40)=""/147, 0x93}, {&(0x7f0000013c00)=""/94, 0x5e}, {&(0x7f0000013c80)=""/251, 0xfb}, {&(0x7f0000013d80)=""/165, 0xa5}, {&(0x7f0000013e40)=""/3, 0x3}, {&(0x7f0000013e80)=""/146, 0x92}, {&(0x7f0000013f40)=""/205, 0xcd}], 0x9, &(0x7f00000140c0)=""/200, 0xc8}, 0x3}, {{&(0x7f00000141c0)=@nl, 0x80, &(0x7f00000158c0)=[{&(0x7f0000014240)=""/221, 0xdd}, {&(0x7f0000014340)=""/128, 0x80}, {&(0x7f00000143c0)=""/51, 0x33}, {&(0x7f0000014400)=""/254, 0xfe}, {&(0x7f0000014500)=""/6, 0x6}, {&(0x7f0000014540)=""/4096, 0x1000}, {&(0x7f0000015540)=""/238, 0xee}, {&(0x7f0000015640)=""/106, 0x6a}, {&(0x7f00000156c0)=""/252, 0xfc}, {&(0x7f00000157c0)=""/237, 0xed}], 0xa, &(0x7f0000015940)=""/125, 0x7d}, 0x80}], 0xa, 0x12000, &(0x7f0000015b00)={0x0, 0x989680}) 2.19994413s ago: executing program 3 (id=196): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000200)=0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) poll(&(0x7f0000000100)=[{r3, 0x8004}], 0x1, 0x8001) io_submit(r4, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3}]) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='syscall\x00') read$FUSE(r7, &(0x7f0000005380)={0x2020}, 0x2020) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, &(0x7f0000000140)={0x0, 0x51, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x884) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20048055}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00!'], 0x28}}, 0x0) sendmsg$inet(r1, 0x0, 0x0) close(r0) 2.17204481s ago: executing program 2 (id=197): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000880)={{0x0, 0x6, 0x0, 0x1c0000, 'syz1\x00', 0x5}, 0x0, 0x3, 0xffffffff, 0xffffffffffffffff, 0x0, 0x4, 'syz0\x00', 0x0}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x40}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000140000003500000002000000000000000100000d0000000006000000010000000100"], 0x0, 0x2e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000000000000000000100000008500ff0761000000950000007f000000", @ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$mice(0xffffff9c, &(0x7f0000000600), 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="09000000030000000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000e0000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb53, 0x0, 0x0, 0x0, 0x3282f7bc}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', r5, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xe, 0x10000, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r1, r1, r1, r1, r6, r1, r7], &(0x7f00000004c0)=[{0x4, 0x3, 0xa, 0x3}, {0x1, 0x3, 0x2, 0x2}], 0x10, 0x3, @void, @value}, 0x94) r8 = syz_io_uring_setup(0x239, &(0x7f00000000c0)={0x0, 0x4533, 0x10100, 0xffffdffe, 0x0, 0x0, r1}, &(0x7f0000000180), &(0x7f0000000340)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000a40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x20000000, 0x4, 0x0, 0x0, 0x1, 'syz1\x00', 0x0}) lchown(&(0x7f0000000240)='./file0\x00', 0x0, 0xee00) openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000040), 0x2103, 0x0) syz_open_dev$rtc(0x0, 0x9, 0x0) io_uring_enter(r8, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 2.109854158s ago: executing program 0 (id=198): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x12d803) r4 = dup(r3) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r4) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="320429c77000ffdbdf25020000000900030073797a300100000014000200626f6e645f736c6176655f31000000000900030073797a2c000000000900030073797a30f9000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x40084) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r5, 0x300, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc840}, 0x2040884) socket$xdp(0x2c, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESOCT=r6, @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$char_usb(r8, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) 1.870021428s ago: executing program 1 (id=199): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="2415b66aa12bb9b94575e21afd41239d388d3729982b632023c687234c13edd7de0c4eb1e2aa5b450eb7da55c2c3a0ad9595704ca4010aa8e58b6b54e16a99a0ca46435465b5", @ANYRES64=0x0], 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYBLOB='&'], 0x10) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r8, 0x5) gettid() getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000300)=0xc) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000080)=@sg0, r9, &(0x7f0000000440)) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000500)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r10, 0x400454c9, 0x9) ioctl$TUNSETNOCSUM(r10, 0x400454c8, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r11, 0x2) 1.769380356s ago: executing program 2 (id=200): syz_open_dev$vim2m(0x0, 0x6eb, 0x2) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x4e00, 0x0, 0x0, 0xbdff, 0x0, "fdffffffffffffff"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x40000) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x2}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1.76846918s ago: executing program 0 (id=201): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) getgroups(0x3, &(0x7f0000000c80)=[0xee01, 0xee00, 0xffffffffffffffff]) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x85}, 0x1, 0x0, 0x0, 0x4000840}, 0x24004000) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}]}, 0x20}}, 0x140) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r9, 0x0, 0x1, 0x4}}, 0x20) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r10 = openat$nmem0(0xffffff9c, &(0x7f0000000440), 0x10000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r10, 0xc0205710, &(0x7f0000000480)={0x1, 0x4, 0x2, 0x0, 0x3}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x2}}, 0x20) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000414010026bd7000ffdbdf2508000100000000000800"], 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000000) r11 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r12, 0x0, 0x0) syz_usb_disconnect(r11) r13 = syz_open_dev$video(&(0x7f0000000040), 0x4, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r13, 0xc0185649, &(0x7f0000000140)={0x0, 0x200, 0x4001, 0xffffffffffffffff, 0x0, &(0x7f0000000580)={0xa10907, 0x0, '\x00', @p_u16=&(0x7f0000000540)=0xfbff}}) setresgid(r4, r2, r3) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r13], 0x28}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a", 0x5}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) r14 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r14, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x1002, 0x4, 0x3ac, 0x0, 0x0, 0x0, 0x2cc, 0x2cc, 0x2cc, 0x7fffffe, 0x0, {[{{@uncond, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0xe0}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @rand_addr=0x64010102, @rand_addr=0x64010101, 0x4}}}, {{@arp={@remote, @remote, 0xff000000, 0x80800000, 0x6, 0x4, {@mac=@multicast, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@local, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x119}, 0xbc, 0xe0}, @unspec=@NFQUEUE0={0x24, 'NFQUEUE\x00', 0x0, {0xfff9}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3f8) 1.767909697s ago: executing program 3 (id=202): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd, 0x3]}, 0x0, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0x4d}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000001c40)={'ipvs\x00'}, &(0x7f0000004580)=0x1e) 889.866857ms ago: executing program 2 (id=203): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged_recursive\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x80002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001e0001000000000000"], 0x24}}, 0x880) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x1002, 0x4, 0x3ac, 0xe0, 0x2cc, 0x0, 0x2cc, 0x2cc, 0x2cc, 0x4, 0x0, {[{{@uncond, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0x1ec}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="c05cd0aa2ac3", @rand_addr=0x64010102, @rand_addr=0x64010101, 0x4}}}, {{@arp={@remote, @remote, 0xff000000, 0x80800000, 0x6, 0xd, {@mac=@multicast, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@local, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x1, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x119}, 0xbc, 0xe0}, @unspec=@NFQUEUE0={0x24, 'NFQUEUE\x00', 0x0, {0xfff9}}}], {{'\x00', 0xbc, 0xe0}, {0x24, '\x00', 0x0, 0xfffffffb}}}}, 0x3f8) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x200a, 0x0, 0x3, 0x0, 0x3}}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001300), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000002c0)='lp\x00', 0x3) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000080)={0xf0f041}) 759.901205ms ago: executing program 3 (id=204): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) getgroups(0x3, &(0x7f0000000c80)=[0xee01, 0xee00, 0xffffffffffffffff]) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x85}, 0x1, 0x0, 0x0, 0x4000840}, 0x24004000) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}]}, 0x20}}, 0x140) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r9, 0x0, 0x1, 0x4}}, 0x20) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r10 = openat$nmem0(0xffffff9c, &(0x7f0000000440), 0x10000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r10, 0xc0205710, &(0x7f0000000480)={0x1, 0x4, 0x2, 0x0, 0x3}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x2}}, 0x20) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000414010026bd7000ffdbdf2508000100000000000800"], 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000000) r11 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff"], 0x0) r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r12, &(0x7f0000000200)='V', 0x1) syz_usb_disconnect(r11) r13 = syz_open_dev$video(&(0x7f0000000040), 0x4, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r13, 0xc0185649, &(0x7f0000000140)={0x0, 0x200, 0x4001, 0xffffffffffffffff, 0x0, &(0x7f0000000580)={0xa10907, 0x0, '\x00', @p_u16=&(0x7f0000000540)=0xfbff}}) setresgid(r4, r2, r3) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r13], 0x28}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a", 0x5}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) r14 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r14, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x1002, 0x4, 0x3ac, 0x0, 0x0, 0x0, 0x2cc, 0x2cc, 0x2cc, 0x7fffffe, 0x0, {[{{@uncond, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0xe0}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @rand_addr=0x64010102, @rand_addr=0x64010101, 0x4}}}, {{@arp={@remote, @remote, 0xff000000, 0x80800000, 0x6, 0x4, {@mac=@multicast, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@local, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x119}, 0xbc, 0xe0}, @unspec=@NFQUEUE0={0x24, 'NFQUEUE\x00', 0x0, {0xfff9}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3f8) 639.39821ms ago: executing program 1 (id=205): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x7, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x101}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb49f35c25d456591f0c15a08769bcd5107053ea1f85250ac10e50c14ffda0a7a98740f8cb9694c01f", 0x30) write$qrtrtun(r1, &(0x7f0000000240)="25375468d806d8f58187445ffe9858217350a60bd72487386e5fed8ee07cb6f6b4ecc8a6356cee94d42a3c", 0x2b) write$qrtrtun(r1, &(0x7f0000000c00)="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", 0x3d1) write$qrtrtun(r1, &(0x7f00000003c0)="b9f7e454d6ce3c38320af2cda788e32c79a152b0dc36b2bdac6494a7d1f3e718f268a55c29480f0c36d8de3d666657", 0x2f) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r3, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x459], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x8000}, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)={0x3}, 0x8, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x1000) 99.198011ms ago: executing program 0 (id=206): openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) io_pgetevents(0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000140), 0xffffffffffffff24}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000c811}, 0xd1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xc200000, 0x1000002}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) tkill(r2, 0x35) ptrace(0x11, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) io_uring_setup(0xaab, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000c67000/0x2000)=nil, 0x2000, 0x14) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$vim2m(&(0x7f00000003c0), 0x2, 0x2) 0s ago: executing program 2 (id=207): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000880)={{0x0, 0x6, 0x0, 0x1c0000, 'syz1\x00', 0x5}, 0x0, 0x3, 0xffffffff, 0xffffffffffffffff, 0x0, 0x4, 'syz0\x00', 0x0}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x40}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000140000003500000002000000000000000100000d0000000006000000010000000100"], 0x0, 0x2e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000000000000000000100000008500ff0761000000950000007f000000", @ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$mice(0xffffff9c, &(0x7f0000000600), 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0900000003000000080000400400000002000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb53, 0x0, 0x0, 0x0, 0x3282f7bc}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', r5, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xe, 0x10000, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r1, r1, r1, r1, r6, r1, r7], &(0x7f00000004c0)=[{0x4, 0x3, 0xa, 0x3}, {0x1, 0x3, 0x2, 0x2}], 0x10, 0x3, @void, @value}, 0x94) r8 = syz_io_uring_setup(0x239, &(0x7f00000000c0)={0x0, 0x4533, 0x10100, 0xffffdffe, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000a40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x20000000, 0x4, 0x0, 0x0, 0x1, 'syz1\x00', 0x0}) lchown(&(0x7f0000000240)='./file0\x00', 0x0, 0xee00) openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000040), 0x2103, 0x0) syz_open_dev$rtc(0x0, 0x9, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r8, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:29489' (ED25519) to the list of known hosts. [ 41.125517][ T5927] cgroup: Unknown subsys name 'net' [ 41.266158][ T5927] cgroup: Unknown subsys name 'cpuset' [ 41.269158][ T5927] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.100999][ T5927] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.293141][ T5941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.296590][ T5941] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.299014][ T5941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.301675][ T5941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.304323][ T5941] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.306579][ T5941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.309214][ T5941] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.309398][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.312512][ T5952] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.313924][ T5950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.315739][ T5952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.317667][ T5950] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 44.319934][ T5952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.321457][ T5950] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 44.323170][ T5951] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.323758][ T5951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.323803][ T5952] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.327061][ T5953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.334325][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.335950][ T5949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.338817][ T5949] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 44.339587][ T5950] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 44.340983][ T5949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.344146][ T5950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.527420][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 44.535065][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 44.550637][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 44.680025][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.682539][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.684852][ T5946] bridge_slave_0: entered allmulticast mode [ 44.687001][ T5946] bridge_slave_0: entered promiscuous mode [ 44.691738][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 44.710684][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.712760][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.715230][ T5939] bridge_slave_0: entered allmulticast mode [ 44.717713][ T5939] bridge_slave_0: entered promiscuous mode [ 44.720428][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.722594][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.724762][ T5946] bridge_slave_1: entered allmulticast mode [ 44.726856][ T5946] bridge_slave_1: entered promiscuous mode [ 44.739240][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.741236][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.743336][ T5945] bridge_slave_0: entered allmulticast mode [ 44.745705][ T5945] bridge_slave_0: entered promiscuous mode [ 44.748039][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.750915][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.753326][ T5939] bridge_slave_1: entered allmulticast mode [ 44.756403][ T5939] bridge_slave_1: entered promiscuous mode [ 44.786454][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.789196][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.791244][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.793324][ T5945] bridge_slave_1: entered allmulticast mode [ 44.795815][ T5945] bridge_slave_1: entered promiscuous mode [ 44.819055][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.830728][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.834434][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.849854][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.853361][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.890125][ T5946] team0: Port device team_slave_0 added [ 44.916473][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.919153][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.921154][ T5938] bridge_slave_0: entered allmulticast mode [ 44.923552][ T5938] bridge_slave_0: entered promiscuous mode [ 44.926673][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.928699][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.930637][ T5938] bridge_slave_1: entered allmulticast mode [ 44.932758][ T5938] bridge_slave_1: entered promiscuous mode [ 44.935490][ T5946] team0: Port device team_slave_1 added [ 44.946088][ T5945] team0: Port device team_slave_0 added [ 44.949174][ T5939] team0: Port device team_slave_0 added [ 44.977513][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.979558][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.987209][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.991735][ T5945] team0: Port device team_slave_1 added [ 44.994987][ T5939] team0: Port device team_slave_1 added [ 44.998826][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.001668][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.003731][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.011630][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.046969][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.060428][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.062429][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.069693][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.074244][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.076278][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.083507][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.087666][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.089675][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.096910][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.108957][ T5938] team0: Port device team_slave_0 added [ 45.111653][ T5938] team0: Port device team_slave_1 added [ 45.113654][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.115698][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.123112][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.162727][ T5946] hsr_slave_0: entered promiscuous mode [ 45.164880][ T5946] hsr_slave_1: entered promiscuous mode [ 45.168395][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.170343][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.177375][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.211964][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.214134][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.221438][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.234425][ T5945] hsr_slave_0: entered promiscuous mode [ 45.237020][ T5945] hsr_slave_1: entered promiscuous mode [ 45.239547][ T5945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.241851][ T5945] Cannot create hsr debugfs directory [ 45.254882][ T5939] hsr_slave_0: entered promiscuous mode [ 45.257006][ T5939] hsr_slave_1: entered promiscuous mode [ 45.259024][ T5939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.261214][ T5939] Cannot create hsr debugfs directory [ 45.345634][ T5938] hsr_slave_0: entered promiscuous mode [ 45.347690][ T5938] hsr_slave_1: entered promiscuous mode [ 45.349538][ T5938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.352241][ T5938] Cannot create hsr debugfs directory [ 45.529818][ T5946] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.535640][ T5946] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.538688][ T5946] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.544866][ T5946] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.564528][ T5938] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.567794][ T5938] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.571005][ T5938] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.575715][ T5938] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.609792][ T5939] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.615153][ T5939] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.627113][ T5939] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.630930][ T5939] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.650413][ T5945] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.653987][ T5945] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.661528][ T5945] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.666321][ T5945] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.697669][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.719405][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.729850][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.738158][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.742489][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.745039][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.753372][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.767338][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.769628][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.772492][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.774773][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.783261][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.789540][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.791562][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.798261][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.811632][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.813800][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.819419][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.827837][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.830645][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.840707][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.842791][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.848606][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.850595][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.988767][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.006104][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.012727][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.017235][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.038190][ T5938] veth0_vlan: entered promiscuous mode [ 46.051847][ T5938] veth1_vlan: entered promiscuous mode [ 46.055580][ T5939] veth0_vlan: entered promiscuous mode [ 46.073234][ T5939] veth1_vlan: entered promiscuous mode [ 46.076745][ T5945] veth0_vlan: entered promiscuous mode [ 46.080239][ T5945] veth1_vlan: entered promiscuous mode [ 46.089453][ T5938] veth0_macvtap: entered promiscuous mode [ 46.094425][ T5938] veth1_macvtap: entered promiscuous mode [ 46.097682][ T5945] veth0_macvtap: entered promiscuous mode [ 46.103436][ T5945] veth1_macvtap: entered promiscuous mode [ 46.112022][ T5946] veth0_vlan: entered promiscuous mode [ 46.119618][ T5946] veth1_vlan: entered promiscuous mode [ 46.124139][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.128029][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.132509][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.139235][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.146228][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.149999][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.152964][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.156599][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.160795][ T5939] veth0_macvtap: entered promiscuous mode [ 46.164037][ T5945] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.167317][ T5945] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.170532][ T5945] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.174146][ T5945] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.179151][ T5938] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.181662][ T5938] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.184771][ T5938] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.187257][ T5938] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.198590][ T5939] veth1_macvtap: entered promiscuous mode [ 46.226546][ T5946] veth0_macvtap: entered promiscuous mode [ 46.233845][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.236828][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.239563][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.242444][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.246459][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.249848][ T5946] veth1_macvtap: entered promiscuous mode [ 46.262314][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.262469][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.266490][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.268620][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.272228][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.278594][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.283081][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.299135][ T5939] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.301667][ T5939] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.304495][ T5939] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.306999][ T5939] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.314785][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.317402][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.317808][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.323633][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.327247][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.330484][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.333202][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.336754][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.339997][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.345592][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.348501][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.351253][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.354429][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.357272][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.360177][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.363437][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.367147][ T5950] Bluetooth: hci1: command tx timeout [ 46.372229][ T5946] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.373777][ T5950] Bluetooth: hci3: command tx timeout [ 46.375023][ T5944] Bluetooth: hci2: command tx timeout [ 46.375260][ T5946] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.375287][ T5946] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.375301][ T5946] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.376428][ T5294] Bluetooth: hci0: command tx timeout [ 46.377433][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.394996][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.408559][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.410856][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.428670][ T5945] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 46.443347][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.448075][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.477565][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.479930][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.487173][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.489477][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.492443][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 46.493755][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 46.575580][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.577828][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.673768][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 46.736666][ T6006] vivid-000: disconnect [ 46.773281][ T6012] loop7: detected capacity change from 0 to 16384 [ 46.825710][ T6012] loop7: detected capacity change from 16384 to 16383 [ 47.185907][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 47.188580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 47.304779][ T6017] ntfs3(nullb0): Primary boot signature is not NTFS. [ 47.307045][ T6017] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 47.433981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 47.459114][ T6002] vivid-000: reconnect [ 47.505305][ T6019] random: crng reseeded on system resumption [ 47.549791][ T39] audit: type=1326 audit(1737143573.242:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.3.5" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x0 [ 47.714418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 47.724174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 47.744248][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 47.756845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 47.766578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 48.016928][ T6032] 9pnet_virtio: no channels available for device [ 48.035777][ T6032] tap0: tun_chr_ioctl cmd 1074025672 [ 48.037348][ T6032] tap0: ignored: set checksum enabled [ 48.444449][ T5944] Bluetooth: hci0: command tx timeout [ 48.444667][ T5950] Bluetooth: hci2: command tx timeout [ 48.446166][ T5294] Bluetooth: hci3: command tx timeout [ 48.446443][ T5944] Bluetooth: hci1: command tx timeout [ 48.731573][ T6036] fuse: Unknown parameter 'group_id00000000000000000000' [ 48.841443][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880249a2000: rx timeout, send abort [ 48.844548][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880249a2400: rx timeout, send abort [ 48.853662][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880249a2000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 48.857947][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880249a2400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 49.013229][ T6038] PKCS7: Unknown OID: [5] (bad) [ 49.015314][ T6038] PKCS7: Only support pkcs7_signedData type [ 49.043552][ T6040] infiniband syz0: set active [ 49.045798][ T6040] infiniband syz0: added bond0 [ 49.119862][ T6040] RDS/IB: syz0: added [ 49.121462][ T6040] smc: adding ib device syz0 with port count 1 [ 49.123274][ T6040] smc: ib device syz0 port 1 has pnetid [ 49.263243][ T74] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 49.415786][ T74] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 49.431814][ T74] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 49.435268][ T74] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 49.441119][ T74] usb 5-1: config 0 interface 0 has no altsetting 0 [ 49.444750][ T74] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 49.447582][ T74] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 49.450796][ T74] usb 5-1: config 0 interface 0 has no altsetting 0 [ 49.456501][ T74] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 49.459040][ T74] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 49.462867][ T74] usb 5-1: config 0 interface 0 has no altsetting 0 [ 49.481322][ T74] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 49.490147][ T74] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 49.493234][ T74] usb 5-1: config 0 interface 0 has no altsetting 0 [ 49.499906][ T74] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 49.502361][ T74] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 49.505677][ T74] usb 5-1: config 0 interface 0 has no altsetting 0 [ 49.509793][ T74] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 49.512353][ T74] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 49.515552][ T74] usb 5-1: config 0 interface 0 has no altsetting 0 [ 49.518192][ T74] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 49.520743][ T74] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 49.523943][ T74] usb 5-1: config 0 interface 0 has no altsetting 0 [ 49.527037][ T74] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 49.530067][ T74] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 49.533695][ T74] usb 5-1: config 0 interface 0 has no altsetting 0 [ 49.537160][ T74] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 49.540193][ T74] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 49.542687][ T74] usb 5-1: Product: syz [ 49.543990][ T74] usb 5-1: Manufacturer: syz [ 49.545336][ T74] usb 5-1: SerialNumber: syz [ 49.548649][ T74] usb 5-1: config 0 descriptor?? [ 49.552986][ T74] yurex 5-1:0.0: Could not find endpoints [ 49.717402][ T6054] Zero length message leads to an empty skb [ 49.787527][ T5940] usb 5-1: USB disconnect, device number 2 [ 49.869448][ T6061] rdma_rxe: rxe_newlink: failed to add bond0 [ 49.877291][ T6061] smc: removing ib device syz0 [ 50.193685][ T30] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 50.523636][ T30] usb 7-1: device descriptor read/64, error -71 [ 50.523776][ T5294] Bluetooth: hci2: command tx timeout [ 50.533703][ T5294] Bluetooth: hci3: command tx timeout [ 50.543686][ T5950] Bluetooth: hci1: command tx timeout [ 50.543701][ T5294] Bluetooth: hci0: command tx timeout [ 50.774609][ T30] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 50.903676][ T30] usb 7-1: device descriptor read/64, error -71 [ 51.013906][ T30] usb usb7-port1: attempt power cycle [ 51.152925][ T6086] infiniband syz0: set active [ 51.154690][ T6086] infiniband syz0: added bond0 [ 51.173986][ T6086] RDS/IB: syz0: added [ 51.177520][ T6086] smc: adding ib device syz0 with port count 1 [ 51.179719][ T6086] smc: ib device syz0 port 1 has pnetid [ 51.363706][ T30] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 51.383761][ T6000] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 51.388538][ T30] usb 7-1: device descriptor read/8, error -71 [ 51.596526][ T6000] usb 8-1: device descriptor read/64, error -71 [ 51.656441][ T6097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'. [ 51.723710][ T30] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 51.744514][ T30] usb 7-1: device descriptor read/8, error -71 [ 51.833705][ T6000] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 51.855006][ T30] usb usb7-port1: unable to enumerate USB device [ 51.963810][ T6000] usb 8-1: device descriptor read/64, error -71 [ 52.087988][ T6000] usb usb8-port1: attempt power cycle [ 52.379381][ T6108] netlink: 44 bytes leftover after parsing attributes in process `syz.0.28'. [ 52.473940][ T6000] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 52.513894][ T6000] usb 8-1: device descriptor read/8, error -71 [ 52.604373][ T5950] Bluetooth: hci3: command tx timeout [ 52.607278][ T5294] Bluetooth: hci0: command tx timeout [ 52.609562][ T5294] Bluetooth: hci2: command tx timeout [ 52.613713][ T5294] Bluetooth: hci1: command tx timeout [ 52.636035][ T6112] fuse: Unknown parameter 'grou00000000000000000000' [ 52.774241][ T6000] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 52.794481][ T6000] usb 8-1: device descriptor read/8, error -71 [ 52.914432][ T6000] usb usb8-port1: unable to enumerate USB device [ 54.593990][ T6156] netlink: 44 bytes leftover after parsing attributes in process `syz.2.38'. [ 56.521179][ T6221] netlink: 44 bytes leftover after parsing attributes in process `syz.1.45'. [ 57.639818][ T6245] fuse: Bad value for 'group_id' [ 57.641433][ T6245] fuse: Bad value for 'group_id' [ 58.560840][ T6259] netlink: 16 bytes leftover after parsing attributes in process `syz.0.53'. [ 60.445544][ T6314] netlink: 44 bytes leftover after parsing attributes in process `syz.0.64'. [ 60.668118][ T6320] fuse: Unknown parameter 'group_id00000000000000000000' [ 61.747003][ T6340] netlink: 16 bytes leftover after parsing attributes in process `syz.1.67'. [ 62.491543][ T6352] tap0: tun_chr_ioctl cmd 1074025672 [ 62.493170][ T6352] tap0: ignored: set checksum enabled [ 62.499382][ T39] audit: type=1804 audit(1737143588.192:3): pid=6352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.72" name="/newroot/17/file0/file0" dev="9p" ino=38928746 res=1 errno=0 [ 63.112825][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.75'. [ 63.540297][ T6368] vivid-002: disconnect [ 64.097154][ T56] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 64.124987][ T6382] bond0: entered promiscuous mode [ 64.126509][ T6382] bond_slave_0: entered promiscuous mode [ 64.128269][ T6382] bond_slave_1: entered promiscuous mode [ 64.151145][ T6363] vivid-002: reconnect [ 64.315350][ T6385] fuse: Bad value for 'fd' [ 65.422310][ T39] audit: type=1804 audit(1737143591.112:4): pid=6410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.88" name="/newroot/24/file0/file0" dev="9p" ino=38928746 res=1 errno=0 [ 65.466992][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'. [ 65.567504][ T39] audit: type=1326 audit(1737143591.262:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.0.90" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe0579 code=0x0 [ 65.592411][ T39] audit: type=1326 audit(1737143591.282:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.2.98" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x0 [ 65.675641][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.91'. [ 65.862999][ T6426] vivid-001: disconnect [ 66.423221][ T6433] dlm: no locking on control device [ 66.552360][ T6421] vivid-001: reconnect [ 66.703650][ T39] audit: type=1326 audit(1737143592.392:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.1.103" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x0 [ 66.948787][ T6449] FAULT_INJECTION: forcing a failure. [ 66.948787][ T6449] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 66.952698][ T6449] CPU: 1 UID: 0 PID: 6449 Comm: syz.3.96 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 66.955840][ T6449] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.958961][ T6449] Call Trace: [ 66.959931][ T6449] [ 66.960808][ T6449] dump_stack_lvl+0x16c/0x1f0 [ 66.962199][ T6449] should_fail_ex+0x497/0x5b0 [ 66.963576][ T6449] _copy_from_iter+0x29b/0x1400 [ 66.965142][ T6449] ? preempt_schedule_common+0x44/0xc0 [ 66.966813][ T6449] ? __pfx__copy_from_iter+0x10/0x10 [ 66.968364][ T6449] ? __virt_addr_valid+0x2d3/0x590 [ 66.969861][ T6449] ? __virt_addr_valid+0x2e0/0x590 [ 66.971350][ T6449] ? __virt_addr_valid+0x5e/0x590 [ 66.972802][ T6449] ? __phys_addr_symbol+0x30/0x80 [ 66.974277][ T6449] ? __check_object_size+0x488/0x710 [ 66.975869][ T6449] netlink_sendmsg+0x813/0xd70 [ 66.977256][ T6449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.978766][ T6449] ____sys_sendmsg+0x9ae/0xb40 [ 66.980158][ T6449] ? __pfx_____sys_sendmsg+0x10/0x10 [ 66.981688][ T6449] ? get_compat_msghdr+0x11b/0x170 [ 66.983178][ T6449] ___sys_sendmsg+0x135/0x1e0 [ 66.984581][ T6449] ? __pfx____sys_sendmsg+0x10/0x10 [ 66.986081][ T6449] ? __pfx_lock_release+0x10/0x10 [ 66.987532][ T6449] ? trace_lock_acquire+0x14e/0x1f0 [ 66.989037][ T6449] ? __fget_files+0x206/0x3a0 [ 66.990414][ T6449] __sys_sendmsg+0x16e/0x220 [ 66.991758][ T6449] ? __pfx___sys_sendmsg+0x10/0x10 [ 66.993241][ T6449] __do_fast_syscall_32+0x73/0x120 [ 66.994831][ T6449] do_fast_syscall_32+0x32/0x80 [ 66.996236][ T6449] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 66.998059][ T6449] RIP: 0023:0xf7fef579 [ 66.999242][ T6449] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 67.004722][ T6449] RSP: 002b:00000000f510455c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 67.007066][ T6449] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000020000340 [ 67.009224][ T6449] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 67.011446][ T6449] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 67.013679][ T6449] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 67.015948][ T6449] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 67.018282][ T6449] [ 67.483545][ T6457] rdma_rxe: rxe_newlink: failed to add bond0 [ 67.803663][ T74] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 67.813928][ T39] audit: type=1804 audit(1737143593.502:8): pid=6471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.104" name="/newroot/28/file0/file0" dev="9p" ino=38928746 res=1 errno=0 [ 67.964567][ T74] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 67.969289][ T74] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 67.972364][ T74] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 67.976499][ T74] usb 7-1: config 0 interface 0 has no altsetting 0 [ 67.979365][ T74] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 67.982707][ T74] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 67.987326][ T74] usb 7-1: config 0 interface 0 has no altsetting 0 [ 67.990778][ T74] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 67.993323][ T74] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 67.997828][ T74] usb 7-1: config 0 interface 0 has no altsetting 0 [ 68.001577][ T74] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.004258][ T74] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 68.008677][ T74] usb 7-1: config 0 interface 0 has no altsetting 0 [ 68.012559][ T74] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.015586][ T74] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 68.018824][ T74] usb 7-1: config 0 interface 0 has no altsetting 0 [ 68.022389][ T74] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.025013][ T74] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 68.028130][ T74] usb 7-1: config 0 interface 0 has no altsetting 0 [ 68.031146][ T74] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.033781][ T74] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 68.036874][ T74] usb 7-1: config 0 interface 0 has no altsetting 0 [ 68.039590][ T74] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.042183][ T74] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 68.045347][ T74] usb 7-1: config 0 interface 0 has no altsetting 0 [ 68.048995][ T74] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 68.051763][ T74] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 68.054280][ T74] usb 7-1: Product: syz [ 68.055588][ T74] usb 7-1: Manufacturer: syz [ 68.056986][ T74] usb 7-1: SerialNumber: syz [ 68.059559][ T74] usb 7-1: config 0 descriptor?? [ 68.064105][ T74] yurex 7-1:0.0: Could not find endpoints [ 68.084276][ T6475] fuse: Bad value for 'fd' [ 68.288745][ T5940] usb 7-1: USB disconnect, device number 6 [ 68.784836][ T39] audit: type=1326 audit(1737143594.482:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6483 comm="syz.3.108" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x0 [ 68.936615][ T39] audit: type=1326 audit(1737143594.632:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.3.117" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x0 [ 70.081473][ T39] audit: type=1804 audit(1737143595.772:11): pid=6528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.116" name="/newroot/27/file0/file0" dev="9p" ino=38928746 res=1 errno=0 [ 70.109178][ T6534] rdma_rxe: rxe_newlink: failed to add bond0 [ 70.311822][ T39] audit: type=1326 audit(1737143596.002:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.1.122" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x0 [ 70.353665][ T5940] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 70.504870][ T5940] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 70.508417][ T5940] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.511215][ T5940] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 70.514490][ T5940] usb 7-1: config 0 interface 0 has no altsetting 0 [ 70.517469][ T5940] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.520453][ T5940] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 70.523672][ T5940] usb 7-1: config 0 interface 0 has no altsetting 0 [ 70.527149][ T5940] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.529719][ T5940] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 70.533105][ T5940] usb 7-1: config 0 interface 0 has no altsetting 0 [ 70.536352][ T5940] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.538895][ T5940] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 70.542027][ T5940] usb 7-1: config 0 interface 0 has no altsetting 0 [ 70.544875][ T5940] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.547449][ T5940] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 70.550578][ T5940] usb 7-1: config 0 interface 0 has no altsetting 0 [ 70.554084][ T5940] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.556645][ T5940] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 70.559963][ T5940] usb 7-1: config 0 interface 0 has no altsetting 0 [ 70.562848][ T5940] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.565416][ T5940] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 70.568511][ T5940] usb 7-1: config 0 interface 0 has no altsetting 0 [ 70.571483][ T5940] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.574064][ T5940] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 70.577186][ T5940] usb 7-1: config 0 interface 0 has no altsetting 0 [ 70.581128][ T5940] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 70.583916][ T5940] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 70.586294][ T5940] usb 7-1: Product: syz [ 70.587509][ T5940] usb 7-1: Manufacturer: syz [ 70.588870][ T5940] usb 7-1: SerialNumber: syz [ 70.592635][ T5940] usb 7-1: config 0 descriptor?? [ 70.596132][ T5940] yurex 7-1:0.0: Could not find endpoints [ 70.765618][ T1412] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.767731][ T1412] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.797721][ T74] usb 7-1: USB disconnect, device number 7 [ 71.679385][ T6579] rdma_rxe: rxe_newlink: failed to add bond0 [ 71.944298][ T1013] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 72.106235][ T1013] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 72.109519][ T1013] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 72.112211][ T1013] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 72.115901][ T1013] usb 6-1: config 0 interface 0 has no altsetting 0 [ 72.118771][ T1013] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 72.121294][ T1013] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 72.127176][ T1013] usb 6-1: config 0 interface 0 has no altsetting 0 [ 72.131093][ T1013] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 72.133877][ T1013] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 72.137065][ T1013] usb 6-1: config 0 interface 0 has no altsetting 0 [ 72.139859][ T1013] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 72.142418][ T1013] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 72.147398][ T1013] usb 6-1: config 0 interface 0 has no altsetting 0 [ 72.150485][ T1013] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 72.153015][ T1013] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 72.156357][ T1013] usb 6-1: config 0 interface 0 has no altsetting 0 [ 72.159127][ T1013] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 72.161750][ T1013] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 72.166597][ T1013] usb 6-1: config 0 interface 0 has no altsetting 0 [ 72.169331][ T1013] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 72.171937][ T1013] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 72.175594][ T1013] usb 6-1: config 0 interface 0 has no altsetting 0 [ 72.178723][ T1013] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 72.181297][ T1013] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 28514, setting to 64 [ 72.186509][ T1013] usb 6-1: config 0 interface 0 has no altsetting 0 [ 72.190089][ T1013] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 72.192636][ T1013] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 72.195579][ T1013] usb 6-1: Product: syz [ 72.196852][ T1013] usb 6-1: Manufacturer: syz [ 72.198214][ T1013] usb 6-1: SerialNumber: syz [ 72.200560][ T1013] usb 6-1: config 0 descriptor?? [ 72.205127][ T1013] yurex 6-1:0.0: Could not find endpoints [ 72.406530][ T1013] usb 6-1: USB disconnect, device number 2 [ 72.797931][ T6606] 9pnet: Unknown protocol version 9p200 [ 72.803305][ T6606] lo speed is unknown, defaulting to 1000 [ 72.805126][ T6606] lo speed is unknown, defaulting to 1000 [ 72.815311][ T6606] lo speed is unknown, defaulting to 1000 [ 72.833852][ T6606] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 72.843929][ T6606] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 72.861083][ T6606] lo speed is unknown, defaulting to 1000 [ 72.874289][ T6606] lo speed is unknown, defaulting to 1000 [ 72.876403][ T6606] lo speed is unknown, defaulting to 1000 [ 72.879180][ T6606] lo speed is unknown, defaulting to 1000 [ 73.006200][ T6611] fuse: Bad value for 'rootmode' [ 73.740343][ T6636] tap0: tun_chr_ioctl cmd 1074025672 [ 73.741992][ T6636] tap0: ignored: set checksum enabled [ 73.803322][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.145'. [ 74.150479][ T6662] 9pnet_virtio: no channels available for device syz [ 74.210880][ T6662] tap0: tun_chr_ioctl cmd 1074025672 [ 74.212446][ T6662] tap0: ignored: set checksum enabled [ 74.590979][ T6674] rdma_rxe: rxe_newlink: failed to add bond0 [ 74.843175][ T39] audit: type=1326 audit(1737143600.532:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.1.150" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x0 [ 74.853663][ T1013] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 75.015861][ T1013] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 75.019177][ T1013] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.021756][ T1013] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10 [ 75.026705][ T1013] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26466, setting to 1024 [ 75.029990][ T1013] usb 7-1: config 0 interface 0 has no altsetting 0 [ 75.033306][ T1013] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.037735][ T1013] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10 [ 75.041327][ T1013] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26466, setting to 1024 [ 75.045285][ T1013] usb 7-1: config 0 interface 0 has no altsetting 0 [ 75.049082][ T1013] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.051609][ T1013] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10 [ 75.056655][ T1013] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26466, setting to 1024 [ 75.060633][ T1013] usb 7-1: config 0 interface 0 has no altsetting 0 [ 75.064797][ T1013] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.067347][ T1013] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10 [ 75.070946][ T1013] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26466, setting to 1024 [ 75.074265][ T1013] usb 7-1: config 0 interface 0 has no altsetting 0 [ 75.077209][ T1013] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.080631][ T1013] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10 [ 75.084607][ T1013] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26466, setting to 1024 [ 75.087682][ T1013] usb 7-1: config 0 interface 0 has no altsetting 0 [ 75.090767][ T1013] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.093303][ T1013] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10 [ 75.103656][ T1013] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26466, setting to 1024 [ 75.106785][ T1013] usb 7-1: config 0 interface 0 has no altsetting 0 [ 75.114115][ T1013] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.116811][ T1013] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10 [ 75.120814][ T1013] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26466, setting to 1024 [ 75.124774][ T1013] usb 7-1: config 0 interface 0 has no altsetting 0 [ 75.128228][ T1013] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.130773][ T1013] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10 [ 75.134275][ T1013] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26466, setting to 1024 [ 75.137406][ T1013] usb 7-1: config 0 interface 0 has no altsetting 0 [ 75.142751][ T1013] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 75.145423][ T1013] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 75.147827][ T1013] usb 7-1: Product: syz [ 75.149414][ T1013] usb 7-1: Manufacturer: syz [ 75.150903][ T1013] usb 7-1: SerialNumber: syz [ 75.154707][ T1013] usb 7-1: config 0 descriptor?? [ 75.157330][ T6674] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 75.164162][ T1013] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 75.284457][ T6694] fuse: Bad value for 'rootmode' [ 75.424272][ C3] usb 7-1: yurex_control_callback - control failed: -71 [ 75.424451][ T74] usb 7-1: USB disconnect, device number 8 [ 75.432004][ T74] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 75.894850][ T1320] cfg80211: failed to load regulatory.db [ 75.947916][ T6708] netlink: 28 bytes leftover after parsing attributes in process `syz.1.157'. [ 75.950669][ T6708] netlink: 32 bytes leftover after parsing attributes in process `syz.1.157'. [ 75.975010][ T6708] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.977668][ T6708] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.065074][ T6704] can: request_module (can-proto-3) failed. [ 76.489309][ T6720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.159'. [ 76.540592][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.161'. [ 76.708307][ T39] audit: type=1326 audit(1737143602.392:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6732 comm="syz.0.162" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe0579 code=0x0 [ 77.591830][ T6750] rdma_rxe: rxe_newlink: failed to add bond0 [ 77.826749][ T6751] fuse: Bad value for 'rootmode' [ 77.843661][ T5940] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 78.011478][ T5940] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 78.015238][ T5940] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 78.017517][ T5940] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10 [ 78.020748][ T5940] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26466, setting to 1024 [ 78.023700][ T5940] usb 5-1: config 0 interface 0 has no altsetting 0 [ 78.028165][ T5940] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 78.031200][ T5940] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10 [ 78.034661][ T5940] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26466, setting to 1024 [ 78.037509][ T5940] usb 5-1: config 0 interface 0 has no altsetting 0 [ 78.039972][ T5940] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 78.042266][ T5940] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10 [ 78.045703][ T5940] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26466, setting to 1024 [ 78.049640][ T5940] usb 5-1: config 0 interface 0 has no altsetting 0 [ 78.053262][ T5940] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 78.056305][ T5940] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10 [ 78.059163][ T5940] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26466, setting to 1024 [ 78.062413][ T5940] usb 5-1: config 0 interface 0 has no altsetting 0 [ 78.074001][ T5940] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 78.076407][ T5940] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10 [ 78.079456][ T5940] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26466, setting to 1024 [ 78.083137][ T5940] usb 5-1: config 0 interface 0 has no altsetting 0 [ 78.086409][ T5940] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 78.088975][ T5940] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10 [ 78.092104][ T5940] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26466, setting to 1024 [ 78.095475][ T5940] usb 5-1: config 0 interface 0 has no altsetting 0 [ 78.098753][ T5940] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 78.101286][ T5940] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10 [ 78.104516][ T5940] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26466, setting to 1024 [ 78.107716][ T5940] usb 5-1: config 0 interface 0 has no altsetting 0 [ 78.110977][ T5940] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 78.113486][ T5940] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10 [ 78.116667][ T5940] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26466, setting to 1024 [ 78.121879][ T5940] usb 5-1: config 0 interface 0 has no altsetting 0 [ 78.125887][ T5940] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 78.128534][ T5940] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 78.131091][ T5940] usb 5-1: Product: syz [ 78.132299][ T5940] usb 5-1: Manufacturer: syz [ 78.133720][ T5940] usb 5-1: SerialNumber: syz [ 78.137455][ T5940] usb 5-1: config 0 descriptor?? [ 78.139458][ T6750] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 78.143345][ T5940] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 78.396500][ C3] usb 5-1: yurex_control_callback - control failed: -71 [ 78.401265][ T5940] usb 5-1: USB disconnect, device number 3 [ 78.408939][ T5940] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 78.950629][ T39] audit: type=1326 audit(1737143604.642:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.2.174" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x0 [ 79.717563][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'. [ 79.785463][ T6790] vivid-003: disconnect [ 80.500836][ T6788] vivid-003: reconnect [ 80.585021][ T6801] fuse: Unknown parameter 'use00000000000000000000' [ 80.754737][ T6813] tap0: tun_chr_ioctl cmd 1074025672 [ 80.756407][ T6813] tap0: ignored: set checksum enabled [ 80.773786][ T39] audit: type=1804 audit(1737143606.452:16): pid=6813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.183" name="/newroot/41/file0/file0" dev="9p" ino=38928746 res=1 errno=0 [ 80.932304][ T39] audit: type=1804 audit(1737143606.622:17): pid=6811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.183" name="/newroot/41/file0/file0" dev="9p" ino=38928746 res=1 errno=0 [ 81.639352][ T39] audit: type=1326 audit(1737143607.332:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.0.187" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe0579 code=0x0 [ 82.019912][ T6846] tap0: tun_chr_ioctl cmd 1074025672 [ 82.022130][ T6846] tap0: ignored: set checksum enabled [ 82.077088][ T39] audit: type=1804 audit(1737143607.772:19): pid=6846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.189" name="/newroot/43/file0/file0" dev="9p" ino=38928746 res=1 errno=0 [ 82.442705][ T6858] tap0: tun_chr_ioctl cmd 1074025672 [ 82.444195][ T6858] tap0: ignored: set checksum enabled [ 82.445617][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.192'. [ 82.525134][ T39] audit: type=1804 audit(1737143608.222:20): pid=6858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.191" name="/newroot/44/file0/file0" dev="9p" ino=38928746 res=1 errno=0 [ 82.638670][ T6867] vivid-001: disconnect [ 83.314162][ T6861] vivid-001: reconnect [ 83.862446][ T6903] rdma_rxe: rxe_newlink: failed to add bond0 [ 83.866957][ T39] audit: type=1326 audit(1737143609.562:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.2.200" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x0 [ 83.933229][ T6907] tap0: tun_chr_ioctl cmd 1074025672 [ 83.934908][ T6907] tap0: ignored: set checksum enabled [ 83.939063][ T39] audit: type=1804 audit(1737143609.632:22): pid=6907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.199" name="/newroot/54/file0/file0" dev="9p" ino=38928746 res=1 errno=0 [ 84.123676][ T6051] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 84.385183][ T6051] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 84.388233][ T6051] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.390857][ T6051] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10 [ 84.394131][ T6051] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26502, setting to 1024 [ 84.397359][ T6051] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.400649][ T6051] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.403297][ T6051] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10 [ 84.406593][ T6051] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26502, setting to 1024 [ 84.409913][ T6051] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.412611][ T6051] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.415402][ T6051] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10 [ 84.418750][ T6051] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26502, setting to 1024 [ 84.422000][ T6051] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.425401][ T6051] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.428078][ T6051] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10 [ 84.431303][ T6051] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26502, setting to 1024 [ 84.434796][ T6051] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.437459][ T6051] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.440156][ T6051] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10 [ 84.445182][ T6051] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26502, setting to 1024 [ 84.448414][ T6051] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.455084][ T6051] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.457747][ T6051] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10 [ 84.461003][ T6051] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26502, setting to 1024 [ 84.464943][ T6051] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.467602][ T6051] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.470282][ T6051] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10 [ 84.473467][ T6051] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26502, setting to 1024 [ 84.476971][ T6051] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.479626][ T6051] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.482330][ T6051] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10 [ 84.485576][ T6051] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26502, setting to 1024 [ 84.488775][ T6051] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.492222][ T6051] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 84.495099][ T6051] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 84.497538][ T6051] usb 5-1: Product: syz [ 84.498873][ T6051] usb 5-1: Manufacturer: syz [ 84.500316][ T6051] usb 5-1: SerialNumber: syz [ 84.503490][ T6051] usb 5-1: config 0 descriptor?? [ 84.506289][ T6903] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 84.510875][ T6051] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 84.697318][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'. [ 84.712250][ T56] usb 5-1: USB disconnect, device number 4 [ 84.717810][ T56] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 84.841821][ T6921] syz0: rxe_newlink: already configured on bond0 [ 84.915761][ T6923] vivid-000: disconnect [ 85.093711][ T1320] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 85.251906][ T1320] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 85.256244][ T1320] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.259173][ T1320] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10 [ 85.262318][ T1320] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26466, setting to 1024 [ 85.269485][ T1320] usb 8-1: config 0 interface 0 has no altsetting 0 [ 85.272592][ T1320] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.275859][ T1320] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10 [ 85.280330][ T1320] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26466, setting to 1024 [ 85.286015][ T1320] usb 8-1: config 0 interface 0 has no altsetting 0 [ 85.289266][ T1320] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.292502][ T1320] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10 [ 85.297049][ T1320] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26466, setting to 1024 [ 85.301368][ T1320] usb 8-1: config 0 interface 0 has no altsetting 0 [ 85.309466][ T1320] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.313034][ T1320] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10 [ 85.317420][ T1320] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26466, setting to 1024 [ 85.321735][ T1320] usb 8-1: config 0 interface 0 has no altsetting 0 [ 85.328180][ T1320] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.331695][ T1320] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10 [ 85.337044][ T1320] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26466, setting to 1024 [ 85.341408][ T1320] usb 8-1: config 0 interface 0 has no altsetting 0 [ 85.347609][ T1320] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.350965][ T1320] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10 [ 85.354895][ T1320] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26466, setting to 1024 [ 85.358936][ T1320] usb 8-1: config 0 interface 0 has no altsetting 0 [ 85.364803][ T1320] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.367385][ T1320] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10 [ 85.370572][ T1320] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26466, setting to 1024 [ 85.374599][ T1320] usb 8-1: config 0 interface 0 has no altsetting 0 [ 85.378129][ T1320] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.380968][ T1320] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 110, changing to 10 [ 85.384904][ T1320] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26466, setting to 1024 [ 85.388127][ T1320] usb 8-1: config 0 interface 0 has no altsetting 0 [ 85.391505][ T1320] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 85.394972][ T1320] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 85.397354][ T1320] usb 8-1: Product: syz [ 85.398580][ T1320] usb 8-1: Manufacturer: syz [ 85.399941][ T1320] usb 8-1: SerialNumber: syz [ 85.402640][ T1320] usb 8-1: config 0 descriptor?? [ 85.406146][ T6921] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 85.414352][ T1320] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 85.556606][ T6917] vivid-000: reconnect [ 85.672435][ C3] usb 8-1: yurex_control_callback - control failed: -71 [ 85.675778][ T5940] usb 8-1: USB disconnect, device number 6 [ 85.679507][ T5940] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 86.078449][ T47] [ 86.079201][ T47] ====================================================== [ 86.081194][ T47] WARNING: possible circular locking dependency detected [ 86.083170][ T47] 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 Not tainted [ 86.087566][ T47] ------------------------------------------------------ [ 86.090135][ T47] khugepaged/47 is trying to acquire lock: [ 86.092307][ T47] ffffe8ffac438ff0 (&per_cpu_ptr(pool->acomp_ctx, cpu)->mutex){+.+.}-{4:4}, at: zswap_store+0x910/0x2600 [ 86.095963][ T47] [ 86.095963][ T47] but task is already holding lock: [ 86.098482][ T47] ffffffff8df4f160 (fs_reclaim){+.+.}-{0:0}, at: __alloc_pages_noprof+0xa8b/0x25b0 [ 86.101949][ T47] [ 86.101949][ T47] which lock already depends on the new lock. [ 86.101949][ T47] [ 86.104909][ T47] [ 86.104909][ T47] the existing dependency chain (in reverse order) is: [ 86.107449][ T47] [ 86.107449][ T47] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 86.109571][ T47] fs_reclaim_acquire+0x102/0x150 [ 86.111426][ T47] __kmalloc_cache_node_noprof+0x55/0x3f0 [ 86.113540][ T47] zswap_cpu_comp_prepare+0xc9/0x470 [ 86.115268][ T47] cpuhp_invoke_callback+0x20c/0xa10 [ 86.116923][ T47] cpuhp_issue_call+0x1c0/0x980 [ 86.118470][ T47] __cpuhp_state_add_instance_cpuslocked+0x1a4/0x3c0 [ 86.120519][ T47] __cpuhp_state_add_instance+0xd7/0x2e0 [ 86.122281][ T47] zswap_pool_create+0x41c/0x710 [ 86.123875][ T47] zswap_setup+0x402/0x810 [ 86.125297][ T47] zswap_init+0x2c/0x40 [ 86.126664][ T47] do_one_initcall+0x128/0x630 [ 86.128170][ T47] kernel_init_freeable+0x58f/0x8b0 [ 86.129811][ T47] kernel_init+0x1c/0x2b0 [ 86.131201][ T47] ret_from_fork+0x45/0x80 [ 86.132614][ T47] ret_from_fork_asm+0x1a/0x30 [ 86.134136][ T47] [ 86.134136][ T47] -> #0 (&per_cpu_ptr(pool->acomp_ctx, cpu)->mutex){+.+.}-{4:4}: [ 86.137539][ T47] __lock_acquire+0x249e/0x3c40 [ 86.139689][ T47] lock_acquire.part.0+0x11b/0x380 [ 86.141757][ T47] __mutex_lock+0x19b/0xa60 [ 86.143625][ T47] zswap_store+0x910/0x2600 [ 86.145472][ T47] swap_writepage+0x3b6/0x1120 [ 86.147158][ T47] shmem_writepage+0xf7b/0x1490 [ 86.148767][ T47] pageout+0x3b2/0xaa0 [ 86.150100][ T47] shrink_folio_list+0x3025/0x42d0 [ 86.151702][ T47] evict_folios+0x6e7/0x1a50 [ 86.153167][ T47] try_to_shrink_lruvec+0x61e/0xa80 [ 86.154818][ T47] shrink_one+0x3e3/0x7b0 [ 86.156218][ T47] shrink_node+0xbf0/0x3f20 [ 86.157678][ T47] do_try_to_free_pages+0x35f/0x1a30 [ 86.159334][ T47] try_to_free_pages+0x2ae/0x6b0 [ 86.160972][ T47] __alloc_pages_noprof+0xb0c/0x25b0 [ 86.162598][ T47] __folio_alloc_noprof+0x11/0x90 [ 86.164116][ T47] alloc_charge_folio+0x2bd/0x980 [ 86.165624][ T47] collapse_huge_page+0x1b2/0x30b0 [ 86.167563][ T47] hpage_collapse_scan_pmd+0x53b/0x1210 [ 86.169281][ T47] khugepaged+0x1135/0x15f0 [ 86.170762][ T47] kthread+0x2c1/0x3a0 [ 86.172065][ T47] ret_from_fork+0x45/0x80 [ 86.173561][ T47] ret_from_fork_asm+0x1a/0x30 [ 86.175055][ T47] [ 86.175055][ T47] other info that might help us debug this: [ 86.175055][ T47] [ 86.177942][ T47] Possible unsafe locking scenario: [ 86.177942][ T47] [ 86.180020][ T47] CPU0 CPU1 [ 86.181788][ T47] ---- ---- [ 86.183375][ T47] lock(fs_reclaim); [ 86.184516][ T47] lock(&per_cpu_ptr(pool->acomp_ctx, cpu)->mutex); [ 86.187240][ T47] lock(fs_reclaim); [ 86.189177][ T47] lock(&per_cpu_ptr(pool->acomp_ctx, cpu)->mutex); [ 86.191165][ T47] [ 86.191165][ T47] *** DEADLOCK *** [ 86.191165][ T47] [ 86.193579][ T47] 1 lock held by khugepaged/47: [ 86.195052][ T47] #0: ffffffff8df4f160 (fs_reclaim){+.+.}-{0:0}, at: __alloc_pages_noprof+0xa8b/0x25b0 [ 86.198251][ T47] [ 86.198251][ T47] stack backtrace: [ 86.199861][ T47] CPU: 2 UID: 0 PID: 47 Comm: khugepaged Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 86.203026][ T47] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.206178][ T47] Call Trace: [ 86.207238][ T47] [ 86.208221][ T47] dump_stack_lvl+0x116/0x1f0 [ 86.209703][ T47] print_circular_bug+0x41c/0x610 [ 86.211202][ T47] check_noncircular+0x31a/0x400 [ 86.212679][ T47] ? __pfx_check_noncircular+0x10/0x10 [ 86.214454][ T47] ? lock_acquire.part.0+0x11b/0x380 [ 86.216170][ T47] ? lockdep_lock+0xc6/0x200 [ 86.217562][ T47] ? __pfx_lockdep_lock+0x10/0x10 [ 86.219224][ T47] __lock_acquire+0x249e/0x3c40 [ 86.220692][ T47] ? __pfx___lock_acquire+0x10/0x10 [ 86.222246][ T47] ? kasan_save_stack+0x42/0x60 [ 86.223738][ T47] ? kasan_save_stack+0x33/0x60 [ 86.225128][ T47] ? kasan_save_track+0x14/0x30 [ 86.226693][ T47] ? __kasan_slab_alloc+0x89/0x90 [ 86.228241][ T47] lock_acquire.part.0+0x11b/0x380 [ 86.229726][ T47] ? zswap_store+0x910/0x2600 [ 86.231078][ T47] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 86.232747][ T47] ? rcu_is_watching+0x12/0xc0 [ 86.234132][ T47] ? trace_lock_acquire+0x14e/0x1f0 [ 86.235614][ T47] ? zswap_store+0x910/0x2600 [ 86.237035][ T47] ? lock_acquire+0x2f/0xb0 [ 86.238608][ T47] ? zswap_store+0x910/0x2600 [ 86.239959][ T47] __mutex_lock+0x19b/0xa60 [ 86.241383][ T47] ? zswap_store+0x910/0x2600 [ 86.242741][ T47] ? zswap_store+0x910/0x2600 [ 86.244077][ T47] ? __pfx___mutex_lock+0x10/0x10 [ 86.245579][ T47] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 86.247118][ T47] ? kmem_cache_alloc_node_noprof+0x219/0x3b0 [ 86.248888][ T47] ? zswap_store+0x862/0x2600 [ 86.250264][ T47] ? zswap_store+0x910/0x2600 [ 86.251679][ T47] zswap_store+0x910/0x2600 [ 86.252972][ T47] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 86.254567][ T47] ? swap_swapcount+0x18e/0x220 [ 86.255957][ T47] ? __pfx_zswap_store+0x10/0x10 [ 86.257662][ T47] ? swap_swapcount+0x13c/0x220 [ 86.259151][ T47] ? __mutex_unlock_slowpath+0x164/0x690 [ 86.260748][ T47] ? __pfx_swp_swap_info+0x10/0x10 [ 86.262216][ T47] ? __pfx_lock_release+0x10/0x10 [ 86.263649][ T47] swap_writepage+0x3b6/0x1120 [ 86.265008][ T47] shmem_writepage+0xf7b/0x1490 [ 86.266394][ T47] ? __pfx_shmem_writepage+0x10/0x10 [ 86.268115][ T47] ? inode_to_bdi+0x9e/0x160 [ 86.269875][ T47] ? folio_clear_dirty_for_io+0x112/0x800 [ 86.271499][ T47] pageout+0x3b2/0xaa0 [ 86.272662][ T47] ? __pfx_pageout+0x10/0x10 [ 86.273992][ T47] ? __pfx_folio_referenced_one+0x10/0x10 [ 86.275609][ T47] ? __pfx_folio_lock_anon_vma_read+0x10/0x10 [ 86.277331][ T47] ? __pfx_invalid_folio_referenced_vma+0x10/0x10 [ 86.279212][ T47] ? lock_acquire+0x2f/0xb0 [ 86.280515][ T47] ? folio_evictable+0x2e/0x270 [ 86.281909][ T47] shrink_folio_list+0x3025/0x42d0 [ 86.283371][ T47] ? rcu_is_watching+0x12/0xc0 [ 86.284740][ T47] ? __pfx_shrink_folio_list+0x10/0x10 [ 86.286286][ T47] ? isolate_folios+0x1c57/0x3830 [ 86.287900][ T47] ? hlock_class+0x4e/0x130 [ 86.289220][ T47] ? mark_lock+0xb5/0xc60 [ 86.290743][ T47] ? mark_held_locks+0x9f/0xe0 [ 86.292125][ T47] evict_folios+0x6e7/0x1a50 [ 86.293458][ T47] ? __pfx_evict_folios+0x10/0x10 [ 86.295009][ T47] ? mem_cgroup_get_nr_swap_pages+0x20/0x120 [ 86.296711][ T47] ? sc_swappiness+0xd4/0x190 [ 86.298429][ T47] try_to_shrink_lruvec+0x61e/0xa80 [ 86.300007][ T47] ? find_held_lock+0x2d/0x110 [ 86.301468][ T47] ? __pfx_try_to_shrink_lruvec+0x10/0x10 [ 86.303095][ T47] ? shrink_node+0xbd0/0x3f20 [ 86.304437][ T47] shrink_one+0x3e3/0x7b0 [ 86.306067][ T47] ? shrink_node+0xbd0/0x3f20 [ 86.307977][ T47] shrink_node+0xbf0/0x3f20 [ 86.309727][ T47] ? hlock_class+0x4e/0x130 [ 86.311028][ T47] ? shrink_node+0x93e/0x3f20 [ 86.312450][ T47] ? __pfx_shrink_node+0x10/0x10 [ 86.314010][ T47] ? __pfx_mark_lock+0x10/0x10 [ 86.315384][ T47] ? hlock_class+0x4e/0x130 [ 86.316848][ T47] ? do_try_to_free_pages+0x35f/0x1a30 [ 86.318991][ T47] do_try_to_free_pages+0x35f/0x1a30 [ 86.321127][ T47] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 86.323140][ T47] ? __pfx_lock_release+0x10/0x10 [ 86.324662][ T47] try_to_free_pages+0x2ae/0x6b0 [ 86.326111][ T47] ? __pfx_try_to_free_pages+0x10/0x10 [ 86.327677][ T47] ? lock_acquire+0x2f/0xb0 [ 86.329113][ T47] ? fs_reclaim_acquire+0xae/0x150 [ 86.330716][ T47] ? fs_reclaim_acquire+0xae/0x150 [ 86.332232][ T47] __alloc_pages_noprof+0xb0c/0x25b0 [ 86.333762][ T47] ? hlock_class+0x4e/0x130 [ 86.335126][ T47] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 86.336745][ T47] ? __pfx_mark_lock+0x10/0x10 [ 86.338259][ T47] ? __pfx_mark_lock+0x10/0x10 [ 86.339706][ T47] ? __pfx_mark_lock+0x10/0x10 [ 86.341085][ T47] ? mark_lock+0xb5/0xc60 [ 86.342335][ T47] ? mark_lock+0xb5/0xc60 [ 86.343638][ T47] ? __pfx___lock_acquire+0x10/0x10 [ 86.345150][ T47] ? find_held_lock+0x2d/0x110 [ 86.346526][ T47] __folio_alloc_noprof+0x11/0x90 [ 86.348061][ T47] alloc_charge_folio+0x2bd/0x980 [ 86.349502][ T47] collapse_huge_page+0x1b2/0x30b0 [ 86.350976][ T47] ? lock_acquire.part.0+0x11b/0x380 [ 86.352571][ T47] ? __pfx_collapse_huge_page+0x10/0x10 [ 86.354156][ T47] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 86.355752][ T47] ? rcu_is_watching+0x12/0xc0 [ 86.357354][ T47] ? do_raw_spin_lock+0x12d/0x2c0 [ 86.358931][ T47] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 86.360497][ T47] ? find_held_lock+0x2d/0x110 [ 86.361941][ T47] hpage_collapse_scan_pmd+0x53b/0x1210 [ 86.363521][ T47] ? __pfx_hpage_collapse_scan_pmd+0x10/0x10 [ 86.365358][ T47] ? __pfx___might_resched+0x10/0x10 [ 86.366870][ T47] khugepaged+0x1135/0x15f0 [ 86.368256][ T47] ? __pfx_khugepaged+0x10/0x10 [ 86.369732][ T47] ? lock_acquire.part.0+0x11b/0x380 [ 86.371237][ T47] ? find_held_lock+0x1/0x110 [ 86.372595][ T47] ? __kthread_parkme+0xb7/0x220 [ 86.374032][ T47] ? __pfx_autoremove_wake_function+0x10/0x10 [ 86.375924][ T47] ? lockdep_hardirqs_on+0x7c/0x110 [ 86.377431][ T47] ? __kthread_parkme+0x148/0x220 [ 86.378990][ T47] ? __pfx_khugepaged+0x10/0x10 [ 86.380488][ T47] kthread+0x2c1/0x3a0 [ 86.381679][ T47] ? _raw_spin_unlock_irq+0x23/0x50 [ 86.383250][ T47] ? __pfx_kthread+0x10/0x10 [ 86.384579][ T47] ret_from_fork+0x45/0x80 [ 86.385875][ T47] ? __pfx_kthread+0x10/0x10 [ 86.387271][ T47] ret_from_fork_asm+0x1a/0x30 [ 86.388675][ T47] VM DIAGNOSIS: 19:53:31 Registers: info registers vcpu 0 CPU#0 RAX=000000000022a26c RBX=0000000000000000 RCX=ffffffff8b1a8889 RDX=ffffed1005686fee RSI=ffffffff8bb17280 RDI=ffffffff81703079 RBP=fffffbfff1b52ef8 RSP=ffffffff8da07e20 R8 =0000000000000000 R9 =ffffed1005686fed R10=ffff88802b437f6b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8da977c0 R14=ffffffff901cf7d0 R15=0000000000000000 RIP=ffffffff8b1a9c6f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020ddc000 CR3=0000000067ec6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000080000 RBX=0000000000001000 RCX=ffffc9000cc04000 RDX=0000000000080000 RSI=0000000000000246 RDI=ffff88802303f230 RBP=0000000000000000 RSP=ffffc90021ac7b40 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000001000 R11=00000000000a201e R12=000000007f1c8000 R13=ffff8880226ca800 R14=0000000000000000 R15=0000000000001000 RIP=ffffffff88c175b1 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020e36000 CR3=0000000068040000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100687000000000 0000022500000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85145dd5 RDI=ffffffff9a66a200 RBP=ffffffff9a66a1c0 RSP=ffffc900006e5c30 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e33312e36 R12=0000000000000000 R13=0000000000000030 R14=ffffffff85145d70 R15=0000000000000000 RIP=ffffffff85145dff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f51e00c9 CR3=000000004d212000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000040000001 RCX=ffffffff815bcece RDX=ffff8880226e2440 RSI=00000000ffffffff RDI=0000000000000005 RBP=1ffff92000759f97 RSP=ffffc90003acfca8 R8 =0000000000000005 R9 =00000000ffffffff R10=00000000ffffffff R11=0000000000000000 R12=0000000000000000 R13=ffffc90003acfcd8 R14=0000000000000000 R15=0000000000000004 RIP=ffffffff81994e4c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002f2eeffc CR3=0000000024de6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000