last executing test programs: 9.529757637s ago: executing program 0 (id=36): r0 = request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0xfffffffffffffffb) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f00000005c0)="8c75eaf4b34c888db5a23db94d582c5e499e66e2831a0ecc1d49ec50af8dd9e9ca288749568cd32db708d3b7a4870c01a8500d77c2ad3c352076a94576edf3a20f9f3a743d717020caee2ec7884d7e124608f3971b0ee802f873d6066f13715d35566f5174ccdf385c1d92d322e97182ce1ac5f71965bf9f35f4d7fffaf535644f032f199f27f348a340bf15550a1d7f7887c4f2729c65149fe078f4cbb0f8c80049626412c97223f0cfadb14a9279b8d2f65c249729e3bb01ed03e8b69933", 0xffffffff}, 0x38) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x83) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x261c, 0x800, 0x7, 0x3b3}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x30, 0x0, r2, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x28}, 0x0, 0x2000c000}) io_uring_enter(r4, 0x3516, 0x0, 0x4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000930018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000b70900000000000055090100000000007b00000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x694}) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) sendto$inet6(r7, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 8.085908049s ago: executing program 0 (id=40): r0 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_io_uring_setup(0x4899, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0xf7fffffe, 0x0, 0x0, r0}, &(0x7f0000000300), &(0x7f0000000100)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = gettid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setown(r2, 0x8, r1) sendmsg$inet(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000780)='\x00', 0x1}], 0x1}, 0x4044881) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dir(0xffffff9c, &(0x7f0000000240)='./file0\x00', 0x80, 0x48) r5 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b00000000b06f896d5b8325b09b3d3048cc1400066981b72afd5731601c7a6d05c1dde6d56308485f742358a3a1ffcb5bf44cc406779762"], 0x4c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000000906010200800000000000000100ffff200007800c00018008000140e000000208000a40000000070500030002000000090002351394143d279c0073797a3100000000050001000700000098f0c65483f81a3856493a1be5f028c4bd33ad869fc6221864b976d77dbcd8daa5f3baa0489fc20ca0"], 0x48}, 0x1, 0x0, 0x0, 0x20040804}, 0x40c0080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) r9 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f00000003c0)) bind$alg(r9, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r9, 0x117, 0x5, 0x0, 0xb) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="206259ed7a8902de32a7e3b3700c813960a12c74072df6a4b634af6b9ac0eb29293e59c3f053c93eb843aa58037a010000002beb614330902328b6abc358d9ddc256d7e98185979a53feb0da2ac01bdfd58c49d706097efd87ef70febe43d06ce83ba5d92fc5cdc53903dc3b8a9329ca4da69ab123eb2137ab11cc9af1efc410f8be09ce8a56c20da7b304e651c70c20406f7ec87247a83e53d5eb4984abb565c5453bfe93911439bdbf4635b828fc2072f6c8fb875666abd3bad6042d996c906a93db8769c0ee2ca2aa7af49800"/218], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) recvmmsg(r10, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x2, 0x60, 0x0) syz_usb_control_io(r5, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x8050) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) 6.873518486s ago: executing program 3 (id=45): r0 = socket(0x25, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x401}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r5, &(0x7f0000000000)="14000000140005b7ffccca38b9000000010860eb", 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r7 = socket(0x23, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000800)={'bridge0\x00', &(0x7f0000000240)=@ethtool_coalesce={0xf, 0x0, 0x101, 0xc3a5, 0x9, 0x1ff, 0x4, 0x2, 0xfffffff6, 0x7fb, 0x1, 0xc99d, 0x2, 0x9, 0x8d, 0x7ff, 0x2, 0xa98, 0x8, 0x6, 0x10000040, 0x3, 0xfa}}) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) close(0x3) 5.776788521s ago: executing program 2 (id=49): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000280)='skb_copy_datagram_iovec\x00', r5}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r8, 0x5412, &(0x7f0000000400)=0x13) poll(&(0x7f00000002c0)=[{r8, 0x400f}], 0x1, 0xe7f5) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0xd) recvmsg$unix(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) listen(0xffffffffffffffff, 0x100) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, r9, 0x1, 0x70fd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x34, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xf}, @broadcast, @device_a, @initial, {0x3, 0x5}, @value=@ver_80211n={0x0, 0x787e, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x2f, @val={0x8c, 0x10, {0xaf9, "14078d51157f", @short="5d369d41d8e65fd4"}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x10) move_mount(r0, 0x0, 0xffffffffffffffff, 0x0, 0x67) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.635369076s ago: executing program 2 (id=50): r0 = request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0xfffffffffffffffb) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f00000005c0)="8c75eaf4b34c888db5a23db94d582c5e499e66e2831a0ecc1d49ec50af8dd9e9ca288749568cd32db708d3b7a4870c01a8500d77c2ad3c352076a94576edf3a20f9f3a743d717020caee2ec7884d7e124608f3971b0ee802f873d6066f13715d35566f5174ccdf385c1d92d322e97182ce1ac5f71965bf9f35f4d7fffaf535644f032f199f27f348a340bf15550a1d7f7887c4f2729c65149fe078f4cbb0f8c80049626412c97223f0cfadb14a9279b8d2f65c249729e3bb01ed03e8b69933", 0xffffffff}, 0x38) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x83) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x261c, 0x800, 0x7, 0x3b3}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x30, 0x0, r2, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x28}, 0x0, 0x2000c000}) io_uring_enter(r4, 0x3516, 0x0, 0x4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000930018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000b70900000000000055090100000000007b00000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x694}) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) sendto$inet6(r7, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa0, 0x30, 0x20, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_ct={0x40, 0x2, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "6e47421bfc3b23da0cec9749e78f8794"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 5.512077642s ago: executing program 3 (id=51): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(0xffffffffffffffff, 0xfffffffc) openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x154, 0x30, 0x1, 0x0, 0x0, {}, [{0x140, 0x1, [@m_ct={0x44, 0x1d, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffc}}}]}, {0x4}, {0xc}, {0xc}}}, @m_simple={0xb0, 0x1d, 0x0, 0x0, {{0xb}, {0x4}, {0x82, 0x6, "8866abe0f5958ed909f684030b38825cd3bcbc4a9975518df2a8aae4d70087ff5e6d18198a083a0d9b64b03ff917511410c55bb47464293d61ab2445e1234a3b29055ac65159a647d68afb580d5a20a3f3c57254bb84eba19de43c2eac3df1e91d70cf2019f6f10cec0c3532e0861e353f8235f3279e018cbc04e9635670"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4004040) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12140, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CAP_XEN_HVM(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0x26, 0x0, 0x40}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r3, r3, 0x0, 0x101) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, 0x0, &(0x7f00000002c0)) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000700)={'filter\x00', 0x0, [0x9, 0x9]}, &(0x7f0000000780)=0x44) r5 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x2}, [@NDA_DST_MAC={0xa, 0x1, @random="a1742a0ec923"}]}, 0x28}}, 0x0) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) 5.193111543s ago: executing program 2 (id=53): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r2) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x0, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000190001000000000000000a00fe880000000000000000000000000101ac1414aa0000000000200000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bind$netrom(0xffffffffffffffff, &(0x7f0000000640)={{0x3, @null}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) mount(&(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='gfs2\x00', 0x0, &(0x7f00000035c0)='quota') sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280300002d00090027bd700000000000040000001303"], 0x328}}, 0x84) listen(r0, 0x8) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x0, 0x1ea7, 0x907, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2d, 0x2, 0x3, 0x1, 0x3, 0x5, {0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0xd97}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x2, 0xa}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x1, 0x2, 0xff}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x250, 0x6, 0x1, 0x8, 0x20, 0x8}, 0x5, &(0x7f0000000380)={0x5, 0xf, 0x5}, 0x2, [{0xff, &(0x7f00000004c0)=@string={0xff, 0x3, "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"}}, {0x11, &(0x7f00000003c0)=@string={0x11, 0x3, "e5dedb58739458b71b3f0d71984682"}}]}) 4.985914765s ago: executing program 0 (id=54): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r3, 0x8926, 0x0) r4 = syz_io_uring_setup(0xa39, &(0x7f00000000c0)={0x0, 0xfdc8, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1812bc4fe800000000feffba000000e1cf85cf4d272a2a53f4d5b49beba9ed08283d", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000304fc914ed400"/26, @ANYRES32=0x0, @ANYBLOB="a5fdad88000000001c0012800b0001006970766c616e00000c000280060002000200000008000500", @ANYRES32=r10, @ANYBLOB], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r11, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r11, 0xaf02, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000050000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000002a97850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r12}, 0xc) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r12, 0x68758000) recvmsg(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc0045543, &(0x7f0000000180)=0xf) 3.749518671s ago: executing program 1 (id=55): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) iopl(0x3) rt_sigsuspend(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xf, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = io_uring_setup(0x1de0, &(0x7f0000000440)) io_uring_register$IORING_REGISTER_FILES2(r4, 0x8, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000000)=0x7fffffff) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x6000000, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@cgroup, r0, 0x1b, 0x6, 0xffffffffffffffff, @void, @value=r8}, 0x20) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7ff, 0x200006, 0x2, 0x4964, 0x9}) socket$nl_generic(0x10, 0x3, 0x10) 3.440924801s ago: executing program 0 (id=56): socket(0x10, 0x80002, 0xfffffffe) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000001540), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x8, 0x3a, '\xb7\x05$\xe6\x18\xdb\xd8\x16\f>\xd9%.*\xfc\x05\xb3\x1e\x89\x93\'\xd7\xad5\xf1\x9a\xdb\xcb\x13\a\x99\xa9\x8e\x98\xb9\v\x87\xfe\xeb\x8c\xa4:U:H\xf1\xbf<\xd9\xe8\xf7\xe9%\fa\x10\xf3\xd4\xc6b\x15f<\xb4q \x18\xcdu\x18W\x84\x98{\x82\xfe>n\xdf\x89\xf2Rj\xd9\xae\xcd\xe0\xdb\xa5y\xbd\xdfb\xbe\\9vz\xa0\x14\xa4B', 0x3a, '\n\x83\xdf \xefp\x99,g\xd8\x02M\x1f\xaf\x84W\xf6\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xce/3\xce\x02lr\x8b\x1a\xdf\xa9S\a#\x8a\xd2\xe90X\xc2\xbd#.\x0f\x00\x00\x00\x00\x00\x00\x00\x00\xed0\x14', 0x3a, './bus'}, 0xce) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x3, 0x2c, {}, {0xee01}, 0x5, 0x1}) getpid() r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = syz_clone(0x2000211, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r2, 0xc, &(0x7f0000000180)=0xbb, &(0x7f0000000200)=0xfe) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e00, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockname(r1, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f0000000300)=0x80) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$full(0xffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r4, 0x8004500b, &(0x7f0000000140)=0x2a) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xf8, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010800000000000010000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x301000, 0x0) openat$dir(0xffffff9c, &(0x7f0000000080)='./file0\x00', 0xec003, 0x62) 3.145144063s ago: executing program 3 (id=57): openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8200, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb, [{}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0xfffffffe}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000031404002ab1000f4938c29ebda883bd7000ffdbdf250900020073797a32000000000800410073697700140033007465616d5f73"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) writev(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x0, 0x123c80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r5, 0x8004550f, &(0x7f0000002a40)) connect$inet6(r4, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r6, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r6, 0x540a, 0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9}}}, 0x24}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.832477437s ago: executing program 1 (id=58): r0 = request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0xfffffffffffffffb) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f00000005c0)="8c75eaf4b34c888db5a23db94d582c5e499e66e2831a0ecc1d49ec50af8dd9e9ca288749568cd32db708d3b7a4870c01a8500d77c2ad3c352076a94576edf3a20f9f3a743d717020caee2ec7884d7e124608f3971b0ee802f873d6066f13715d35566f5174ccdf385c1d92d322e97182ce1ac5f71965bf9f35f4d7fffaf535644f032f199f27f348a340bf15550a1d7f7887c4f2729c65149fe078f4cbb0f8c80049626412c97223f0cfadb14a9279b8d2f65c249729e3bb01ed03e8b69933", 0xffffffff}, 0x38) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x83) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x261c, 0x800, 0x7, 0x3b3}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x30, 0x0, r2, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x28}, 0x0, 0x2000c000}) io_uring_enter(r4, 0x3516, 0x0, 0x4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000930018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000b70900000000000055090100000000007b00000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = userfaultfd(0x801) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) sendto$inet6(r7, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa0, 0x30, 0x20, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_ct={0x40, 0x2, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "6e47421bfc3b23da0cec9749e78f8794"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 2.124083677s ago: executing program 0 (id=59): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f0000000000)=0x3, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x68, r4, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x3}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xcc}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x6}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x27}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xfc00}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x7a}, @NL80211_MESHCONF_NOLEARN={0x5}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8c044}, 0x800) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r7) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r9 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r8, r9, 0x0, 0x106f) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x109280, 0x0) ioctl$FBIOBLANK(r10, 0x4611, 0x3) r11 = syz_open_dev$dri(&(0x7f00000000c0), 0x181, 0xd0e01) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) 1.784157062s ago: executing program 1 (id=60): r0 = openat$mixer(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) pwrite64(r1, &(0x7f0000000080)="7c20fc4593ce36c91cb772f20d6f2a5b53f0c066c3", 0x15, 0xd084) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) write$qrtrtun(r3, &(0x7f0000000780)="9d8dfa5e53b6183d874f9e93a18dd009a09582ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315424fa0a1622da79faba7978890", 0x4d) write$UHID_INPUT(r3, &(0x7f0000001300)={0x8, {"af0014920c989bde943127351c7e048fe805d44569c987d51286ac5e80b0961cfe3629729c82e28c53b31e3ecbb8722bff9c0906027d5cb6fbd929cb4b5e657cc88a443809e6a720828c27b6519e7c18904d67528373733934aa5240afd60544d489e1ec3779ac45095c12c6c5f13c086306dfbbd31926b74150ff2c87db2be1d995e9b3a16fb7360de12618b05d94c291acfcdab84c919de60133f54a0a18d2517c1d0de417ae39fec1c9fa306573205051a9880da1f213b9a27c22b72d42d92b7b260b41bcc1868a0404936774ea5209f02929ec3eef4298818ddb708de6c0e1fda05436037d7d4042d2de3adebc8a62f58ec6ccb4160435c4393ba913250b56ec2fce544a01a5a3ce4363fd497fb256910f31e9416f5b719d64f931bd6d71b54787841b3e49e01fe6ac9598ddb5ef1aeb3d1cabb75845d46806a494b6cf89ec9c8203b92dd0dadc5a3c02545cd005b5f26b7d2b848cb684cb58245d591472d5109e7fbe1175656d729fdd689af57802b33d7d53d427aa57eb0af7a63d9f73be83cd9c12bd06463083b4cc853aad416e9faf484fa069d3b7599b6fc6d94152811403201b91da2547ff6721b0ea237c37464b47b3b4f37384e50ba5773a63356991a5abef659e089cc95e5c3b6d8428115efcf9e89e2743b167d7b9824392d868c159fd1264bea8b9b8b26769d15a27df3af350e2a6e9e37b35c153bf980e8ad15de3b0f3add5f98eb2cbc03eeb2b04e6fb032991d7a88b14c7d2cf2959fc4ed27c4c93c13f5760d0803f10afb91effb45967b4793c58e4bc2e4348c93b4e59f1544a01e89530f6056cda3f972050ae79d9297af71cce0d82c764db2422967f05c9847715c66321e8ab0075a361e8fd78a956074945e687ec1ad01f8dfeb7f3ae2c25daff35617a5d752ad5b019689f10c789d0196f73011f5a4e002aebb676ccb2d8b92ff6c1eb60de10ed0d42f2d19fe96786938eca0fd09a3f16f7b52ef806183282c05ff9fccf96abd096b442c73c494c78c4161ce0599bf6e637664f5dbefa129e69a0d53525d77f871716052385649c1249a402a4a9ecadfd7182a4aba3fc48d76890dfe8a5442ff1b833b95fdb7ae5f052e5c18e9b0ad482ed80c4567f0d0645e6525e3390195b3a4314ab063ffca639d2b181efe15d5bb09e967900fd55ad9db7f6ba99268e0d7e2785c5b14f801b16b6fe9966bb3fa88352bc2ca79aa9a77ec5f9c271dcc62b6124a4d5ed1014fa6eb98521d4be4ca4323311d39e44002e71469326056d98af69fd42eed1dfec48d191587b35e2641abe8c80a2553b92cb43feea49505b5b5ca35dfaf06c693730033ebcad45b6b8026d4722b5c7e13d69269808f438816f77a7b1ed2d31ab44968657e70a51e8d98e520e3628014a09e55f36ca5c4c630d687b20e5a7bdfd6d43613fd3738c8ec1464561586987388885b7a424c949a3110e5de795ffdcf1ef43fb8b5b0364cdb0e9a62c1c6922f08125d456f0ee5d58fa670ff071a8d5b57c06efe30d960f9a67d3dd7dd6ec13c799f9b89d90593ba794c5c582f8bd583af0a59043a1da36cee8e2cc173610960e33300ec48cf7281887ffe66e7ec113a29ed339556d84d638ae9554bb20f2a7695da8bcad10e5f155fe5d54eb511087f7abb4a8ae9e78e233b1e079a44c9cdf2529ed3166c24f80a2bda3b2dfdd2e1c2f650cc35fccf8cb17c03681c6f379f535eeaf46caa1dd95f0b72ea6cf301f2d713844b36c7e90e052528f04a668e1dc5ed11e95bbb86268c712af3f6c77d538c9d3dafeceaacc7ba6b20d9266d75c7470d627725700bfd36a9faf5488532a0871a00e18466f3499e3e3270513168d05f52472045b8558d3fb7880805b6fe3a56b3df9eaea72d147f94ee09e763fcf66d0c71b708fb842bbe619eeeaf483fa717864ab435ca03503285591364727a3615582c80d2023897f7bfdda9b00d095ec11f42482f3851a9232ed09ec6733d54020a9e3b98cb3a014f094e9d968672632a30f967a6d2f00c64fb0aefbeb64510edca5496c9f69379f71412f08fe6afeeb604040a42f00290bc04a40f66f0b84c9c6d7e4d1bc213ed49142215b259be08a0a305c68cbec769ce195ea62b7a2ce632da0a98b469284fd7802bb8c47943ac1c8a7a2b0ee36ed45cde2d13cc00ecc11ca9516d9e917fa28d703566b8d5743c5aba0da662f0446768c6d0df6773d1b0c46dac6a6213aa7b5095a8bd9f34048394a8baac9ec65d740ad8acb8eb683702eaf509c30b547bf355561ca00841efdccd413295a430344d17d2d5f4f435d0a33fafe1b4f6826e9d91436b379cc46039551997e54692487562f65a406b769f2856d37c87a73e2e3738c9afdfa5e0f088bbd2799c7c722c23a7cc37266af557beecb9cc8340bc76ba85a147530f3a9bd8cfe82358c0d799f0687540d463e0f010d1e914f043027284292bf31af75301e27689910393e41f877832797dd7c184249e7b2ec0a79b0decb9a3eead5b3c82ac60fe1485829bf75b8af597b5fd9e47460ebb6d809733eb790027094b019ef2bfb76d75876a5e1e312e80e841c5e074c78b35be6a4070c99372dbb13dc27966a8d448b8e3225b11af907985f3142d41da70a682166814fce9e535cca37058bbb3a02894f6ada82c266e763f431d7e1926da2fc86805b02d6af712c82e7a36e667bd3091661be9cc0cdbd3b3cc690594cf8bac39dd9dac1f883cfb0e500759b0e5dc36721b3ed452addc26d39733a2d76d852d897298009dea9546bae66e9aac7f35277e025d440ca93fdec4bbd58970a130fc79056af96f81b0461ef0e16d4fb12014313438a4bb95b2f9cac98e24a713ed14b539ceddf55e90b6c000044a24be6597e2c5a397a772d7c493ad53a05d6076b584ee7c1615ee7f9de627ac9d7d0d4a12b5a080a9c4977da436704bc9eb9f1d25ba91498e4b575550a69aab83e9157a910c4b2907ea97bcc171dcb7ff6fa982dee16d5c5aaaf93fcc225a6c67c96e54ead190f9c6f949b8025988a46d29c86cf18623882d5aa996a3ece81881ba63e0e7d62b585a179631c7e22f924be7aad5699af389c6651c92848153007d9929683648c8a3fb102a50d9a3e9c83e6cabeae5f97d7faad7a803f8c6dbd9237fa4bec7b33db2cc4db5cd7b3baf1c4f4ddc1f16ec6484cbd1adecab06617045b2d5bac8d1bf97a37ed2780a967a678095a6849cabd87256dbe46f52c960ba8ead52e666a131abfb019d2ac7dd2b055bf91168322b23821a522d241f27a2e7ef892d589a0e55b606167e53b0725a089cae5ef65f02f8a2f32dedb370bf2dc34dac5218be294e755915b399cece7e5c3fa887909961a3d626e4a43bab7edd193a9bc0a7a764640943a635fec7722ff8b3add819b26b78c4e54ff970c15d6b27971cd135d288f081a66e792a8ee5b2d89d5945a99f4216ac21fd9a61e305b4a908f4cbe38e5ccd5eab65f5962877a570524809dffa4ca0ed90d505601d7d244273f20cc47feca7259bd1362e334be459e25a59d4873fc8ede03744c88599a5e5f2a6fb0ca08d085e40c8bd71a0777f7715153e71f4a67f6bb73bbbcd766a9dd4287671dcf6b7daacc4f4b81b32ea0d0381fc32807fe9393249e596d3d5ae4bc5a1cb3e48d63478679eb381fbe8cafd2c6890ba29c1af695f2597c6b472a163b7584dde7327933b9d5e88e0d77e3a3d526a619966dde7f82c7ab7a67a59ded2c880ee0e2f736f054b7d99cc68df48c28d76ab12762c85d07a1f3215d3d4ef2ebd65b0f7eacf62ec12997ccdada731992513263a06e063c27eccfdb3c9d1199136c1a2c3d6b5ea6b2e96c9aa6be3bfbda408b2779ad4eba91809a495c1b872e40d49b0acf4b19b4677e6ea8d07b9a621816c4c5f0e5aa364d4803567da0b2b646604563b31aaa298130576690cbab52bf1ddad7c64a7a416ceb36d6b3202f377ed003e8d74cabd4a6a7be18c95716022cc30c45157d6743785746cf8b0e21ec3208336ab0a43ad9c058fffa3021f84ca8b037dea55254ab944493ca03d025a4b42df3e5b830b81471cddf81fd14aed18e45cfed27b1ef015827942f833a0eee4cc0fcd57f0180f83f32e17d27e4784e42eb1a256404aa6e12f9daabddb907230b20693f3bc74723be6808d95c6463ef7bb6bc4a756fdc805ef4077303e5cd504e6c1754ee8303ee92b94808782984f75c0df49436d3859c092133b0545dac0d8f84fc95a1f0f38e4ecbe3f935d33e86b97bb11ca6f502a602bc7e05b4e6514ddc8ae4d8231874b350b32f96ff6cfbe03f1bf5a0fda73c15eca00afe85c026f5e34e699910ab16502b224b8f383a9a863ca351a1e87c17baadb3f7141aa1295a2a6be4d88d1347da9c356ba9b3bfcc678b58add1b224a0c9b7c3cc4c828abc56acd320e8a8ad22da90a0cf6ae40a471c150581da040297aed0e4889c5963bd8c1415acecbd932f9acda87315e3b2dade276b8324dc7d95141cdd8c4fba82c834a95f9efeb2c74c31e7fd32f96a6a68d9e9942c0bdc55bedd1617e47420877b9f640094a37ceea39656468215ebe789a277f585adc1cc0285b53e33afae1616b0806aeed78b6cc4da54e3bdfa3d49ead4e4fa3623f86a4dfa3042ed403684c62a5d148a30c99c24c3cf9a8858e02800e49e0eed84472a559c9f208f6c3310050e4c5948320b5b4eeefe583bb0bcc0bc01356e76e3465f66a7d0c56ca7abc069db5bd7ad20ec01307f391b5bc890b5034271ee31d5bd374a9422a08ce949667512c8d0bb60eb5d4d22fa0e2a5d172edc7b7386abe63222ef8fc5c676828a1441c5ed19ed5827b0d73d568efc51f46f65ea4f205ac26924d6a7f11477fe23049e0de65bd534c81756556c1cd8bc70b3ce71e4e13d44500773e0767bc735c98f0e1d06dc79e43b946a2faaf698e188cf5909e433edbc546beffcbdea76064ff9d5d56273ca05af42c541b896bc5a942665599c9a8f52db36dbd6d42e8f9bb3446df5f44e3971eb408d0c63381b4aa5997441e01a5eff9fa51d82b7d60d8c3ead784e50b562db074b19e855e8290896b808611c40ed7e0691f758103208900d69cd4c86310318d339eeb473b4bea27be94622560cf35416eea7333bb72110afe202dfcc55c755ed32ea9b4851378b554546b52ebd71b90828733ac3040daf1e3d23bfcadd20bb9248731ab11155aebd259b7e693ebad5d43e6a85f14ea317f31eca905634f9e8d5b1ff73dc5dbd2bbeef6c2965932c885969e00e1939685b472c097b4504c9e6f273e1038045e5ac4010ac232288b77de7d3433a143292f145465b6d1f9020aa4f8405bda4310059b82ad8fd41e698a7824456e11f44e577dc5d5a0eb93b98421a2867c3d40627f9061c1d5689205915c7a91da42348ad3bd12038d84175bddaee423b73c93aebf873c850ef44d66324a80ad0cf268998d71fac6988cb0b1879ebcb6c4c3bce2c45daf73db246bc55fb8221341ef760f5f5264113a437e03cbcf03bb276cdc4100138afc6a1eeb9d90e7f43ce8abbd8be6b9c5b54920f76f07d1557167292feb4c970da3f582d40c0661af8f043e01db8016e2600f655175fa7d705bda3a14d1733ccf6603b7f8709b71f2046211468460791330234fa21f417e6a68cdb1d4496808923a87d02f0ebfb09e102a7c9f7c870c082d6993d10e0de2dbe119ac811848661ab30ab8d7a528acf262bf7d21c2f235e5638be58171b61bed99ac3fef801562aabcf3feff77fe9498d09de3e9c3cf18914392433030595aa31d9c79abc29350a2a2a1d0c2f311246", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x5}, 0x18) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, &(0x7f00000000c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000040)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0x1810, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.688581933s ago: executing program 2 (id=61): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000280)='skb_copy_datagram_iovec\x00', r4}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, &(0x7f0000000400)=0x13) poll(&(0x7f00000002c0)=[{r7, 0x400f}], 0x1, 0xe7f5) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0xd) recvmsg$unix(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) listen(0xffffffffffffffff, 0x100) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) move_mount(r0, 0x0, 0xffffffffffffffff, 0x0, 0x67) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 1.646124128s ago: executing program 3 (id=62): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000580)=0x803, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x4000000, &(0x7f0000000640)={0x11, 0x19, r1, 0x1, 0xa, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d80000001c0081044e81f782db44b9040a1d080214000000020003a118000c000300000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x52, 0x0, 0x0, 0x7400}, 0x20000080) 1.582049702s ago: executing program 3 (id=63): syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000200)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "003a04", 0x1c, 0x3a, 0x0, @remote, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x514, 0x1, @local, 0x7, 0x1, 0xa, 0x5b}}}}}}, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = openat$bsg(0xffffff9c, &(0x7f0000000000), 0x442100, 0x0) sendto$unix(r1, &(0x7f0000000080)="ca27dbeabc112d0a9212259b6f82caac514a7e319bdbfb1b1e95a12433abb9b8df9c6fd80a2a459eb2983a7012d98d8da4a7804b961e8ce510225c67ce9cb916270d6c6fc9ab795f664a4e", 0x4b, 0x1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r2, &(0x7f0000000000)=0x7, r2, 0x0, 0x7, 0x0) write$binfmt_elf32(r0, &(0x7f00000003c0)=ANY=[], 0xfc6e) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) r3 = getpgid(0x0) socket$unix(0x1, 0x5, 0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x40a82, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x10, 0x8100) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f0000000000)={0x980900, 0x7, @value=0x2}) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000200)='geneve0\x00'}) syz_clone(0x0, 0x0, 0xf5ff, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x402c5839, &(0x7f00000004c0)={0x0, 0x1, 0x3, 0x1404}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x311) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0604250c"], 0x9) 1.581812044s ago: executing program 2 (id=64): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) iopl(0x3) rt_sigsuspend(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xf, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = io_uring_setup(0x1de0, &(0x7f0000000440)) io_uring_register$IORING_REGISTER_FILES2(r4, 0x8, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000000)=0x7fffffff) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x6000000, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@cgroup, r0, 0x1b, 0x6, 0xffffffffffffffff, @void, @value=r8}, 0x20) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7ff, 0x200006, 0x2, 0x4964, 0x9}) socket$nl_generic(0x10, 0x3, 0x10) listxattr(&(0x7f0000000100)='./file2\x00', &(0x7f00000002c0)=""/225, 0xe1) 1.531156459s ago: executing program 3 (id=65): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x53, &(0x7f0000000100)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x70bd2a, 0x0, "", [@policy_type={0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, 0x0, 0x0, 0x4040810, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x7}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xfffffffc, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r4 = io_uring_setup(0x5491, &(0x7f00000001c0)={0x0, 0x554, 0x1, 0xfffffffc, 0x211}) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000000)={'\x00', 0x2, 0x6f11, 0xb, 0xfffffffffffffeff, 0x11c3adec}) r5 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x40, 0x2, 0xfffffffc, 0x0, r4}, 0x0, 0x0) io_uring_enter(r5, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 1.133945735s ago: executing program 0 (id=66): r0 = request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0xfffffffffffffffb) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f00000005c0)="8c75eaf4b34c888db5a23db94d582c5e499e66e2831a0ecc1d49ec50af8dd9e9ca288749568cd32db708d3b7a4870c01a8500d77c2ad3c352076a94576edf3a20f9f3a743d717020caee2ec7884d7e124608f3971b0ee802f873d6066f13715d35566f5174ccdf385c1d92d322e97182ce1ac5f71965bf9f35f4d7fffaf535644f032f199f27f348a340bf15550a1d7f7887c4f2729c65149fe078f4cbb0f8c80049626412c97223f0cfadb14a9279b8d2f65c249729e3bb01ed03e8b69933", 0xffffffff}, 0x38) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x83) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x261c, 0x800, 0x7, 0x3b3}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x30, 0x0, r2, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x28}, 0x0, 0x2000c000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000930018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000b70900000000000055090100000000007b00000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = userfaultfd(0x801) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) sendto$inet6(r6, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa0, 0x30, 0x20, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_ct={0x40, 0x2, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "6e47421bfc3b23da0cec9749e78f8794"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 1.088471571s ago: executing program 1 (id=67): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="6c0461675527ee5000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x15, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fcffffff000000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000080850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfb}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x100}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048050}, 0x11) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x20, r5, 0x1, 0x70bd2e, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20020070}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$unix(0x1, 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r4) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="200028bd7000ffdbdf00000000000800270002000000080026008f09000008002600a309000008002700020000000800270001000000080027000200000007f3a100b200000800a000090000000800a00001000000"], 0x64}, 0x1, 0x0, 0x0, 0x60}, 0x20000015) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r10, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r13) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r13, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r14, @ANYBLOB="08001b"], 0x30}}, 0x0) r15 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r15, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x10000) 951.028074ms ago: executing program 1 (id=68): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) iopl(0x3) rt_sigsuspend(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xf, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = io_uring_setup(0x1de0, &(0x7f0000000440)) io_uring_register$IORING_REGISTER_FILES2(r4, 0x8, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000000)=0x7fffffff) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x6000000, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@cgroup, r0, 0x1b, 0x6, 0xffffffffffffffff, @void, @value}, 0x20) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7ff, 0x200006, 0x2, 0x4964, 0x9}) socket$nl_generic(0x10, 0x3, 0x10) listxattr(&(0x7f0000000100)='./file2\x00', &(0x7f00000002c0)=""/225, 0xe1) 74.245201ms ago: executing program 2 (id=69): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000000000000000001"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0100000001"], 0x48) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[], 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl']) 0s ago: executing program 1 (id=70): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x7, 0x4, 0x20, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r5, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r5, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) sendmsg$802154_raw(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="eb", 0x1}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) sendmmsg$alg(r5, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:25232' (ED25519) to the list of known hosts. [ 47.338935][ T5932] cgroup: Unknown subsys name 'net' [ 47.505948][ T5932] cgroup: Unknown subsys name 'cpuset' [ 47.511636][ T5932] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.622473][ T5932] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.440454][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.443708][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.446238][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.449113][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.451780][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.458034][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.461125][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.463888][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.466577][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.469467][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.484782][ T5952] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.489970][ T5952] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.498617][ T5945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.499178][ T5950] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.502301][ T5945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.503905][ T5950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.506172][ T5945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.508246][ T5950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.513323][ T5950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.515791][ T5950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.766851][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 52.790895][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 52.841813][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 53.002078][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.005755][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.008740][ T5943] bridge_slave_0: entered allmulticast mode [ 53.012187][ T5943] bridge_slave_0: entered promiscuous mode [ 53.017339][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 53.056958][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.059969][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.062966][ T5943] bridge_slave_1: entered allmulticast mode [ 53.067177][ T5943] bridge_slave_1: entered promiscuous mode [ 53.199973][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.203129][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.205609][ T5948] bridge_slave_0: entered allmulticast mode [ 53.208339][ T5948] bridge_slave_0: entered promiscuous mode [ 53.226499][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.228793][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.231043][ T5951] bridge_slave_0: entered allmulticast mode [ 53.233939][ T5951] bridge_slave_0: entered promiscuous mode [ 53.238272][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.250389][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.252644][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.255056][ T5948] bridge_slave_1: entered allmulticast mode [ 53.257695][ T5948] bridge_slave_1: entered promiscuous mode [ 53.260228][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.263804][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.266792][ T5951] bridge_slave_1: entered allmulticast mode [ 53.270554][ T5951] bridge_slave_1: entered promiscuous mode [ 53.300402][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.382896][ T5943] team0: Port device team_slave_0 added [ 53.415287][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.419503][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.423693][ T5943] team0: Port device team_slave_1 added [ 53.439858][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.442245][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.444667][ T5955] bridge_slave_0: entered allmulticast mode [ 53.447252][ T5955] bridge_slave_0: entered promiscuous mode [ 53.451381][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.469308][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.523281][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.525580][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.527900][ T5955] bridge_slave_1: entered allmulticast mode [ 53.530585][ T5955] bridge_slave_1: entered promiscuous mode [ 53.593232][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.595441][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.604365][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.609382][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.611690][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.619621][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.653971][ T5948] team0: Port device team_slave_0 added [ 53.658846][ T5951] team0: Port device team_slave_0 added [ 53.689489][ T5948] team0: Port device team_slave_1 added [ 53.696695][ T5951] team0: Port device team_slave_1 added [ 53.723765][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.755701][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.758624][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.769338][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.796091][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.798415][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.806258][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.811540][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.852480][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.855875][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.866720][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.872048][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.874093][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.881319][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.927122][ T5943] hsr_slave_0: entered promiscuous mode [ 53.929666][ T5943] hsr_slave_1: entered promiscuous mode [ 53.934806][ T5955] team0: Port device team_slave_0 added [ 53.939427][ T5955] team0: Port device team_slave_1 added [ 54.044954][ T5951] hsr_slave_0: entered promiscuous mode [ 54.047552][ T5951] hsr_slave_1: entered promiscuous mode [ 54.049913][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.052668][ T5951] Cannot create hsr debugfs directory [ 54.074625][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.076748][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.084948][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.090026][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.092223][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.100301][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.106363][ T5948] hsr_slave_0: entered promiscuous mode [ 54.108562][ T5948] hsr_slave_1: entered promiscuous mode [ 54.110621][ T5948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.113013][ T5948] Cannot create hsr debugfs directory [ 54.305819][ T5955] hsr_slave_0: entered promiscuous mode [ 54.308215][ T5955] hsr_slave_1: entered promiscuous mode [ 54.310632][ T5955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.313612][ T5955] Cannot create hsr debugfs directory [ 54.543737][ T5950] Bluetooth: hci3: command tx timeout [ 54.543745][ T5952] Bluetooth: hci2: command tx timeout [ 54.543799][ T5945] Bluetooth: hci0: command tx timeout [ 54.543825][ T63] Bluetooth: hci1: command tx timeout [ 54.568034][ T5943] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.577261][ T5943] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.581715][ T5943] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.586578][ T5943] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.619303][ T5951] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.625220][ T5951] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.634387][ T5951] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.640002][ T5951] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.693506][ T5948] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.707336][ T5948] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.724007][ T5948] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.729820][ T5948] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.763611][ T5955] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.768139][ T5955] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.778898][ T5955] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.785394][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.788830][ T5955] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.822817][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.827102][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.844124][ T1256] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.847243][ T1256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.863466][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.865696][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.876853][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.897854][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.900022][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.905353][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.907616][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.935942][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.972973][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.986586][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.989613][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.001595][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.004604][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.014267][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.034300][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.046054][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.048262][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.052044][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.054245][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.109978][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.138603][ T5943] veth0_vlan: entered promiscuous mode [ 55.145728][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.155942][ T5943] veth1_vlan: entered promiscuous mode [ 55.174416][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.190208][ T5951] veth0_vlan: entered promiscuous mode [ 55.199589][ T5943] veth0_macvtap: entered promiscuous mode [ 55.206481][ T5951] veth1_vlan: entered promiscuous mode [ 55.209921][ T5943] veth1_macvtap: entered promiscuous mode [ 55.224013][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.234668][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.254913][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.264387][ T5948] veth0_vlan: entered promiscuous mode [ 55.272217][ T5943] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.275347][ T5943] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.278183][ T5943] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.280869][ T5943] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.289214][ T5948] veth1_vlan: entered promiscuous mode [ 55.305209][ T5951] veth0_macvtap: entered promiscuous mode [ 55.316395][ T5955] veth0_vlan: entered promiscuous mode [ 55.320443][ T5951] veth1_macvtap: entered promiscuous mode [ 55.335345][ T5955] veth1_vlan: entered promiscuous mode [ 55.357844][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.379245][ T5948] veth0_macvtap: entered promiscuous mode [ 55.384555][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.391861][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.392717][ T5948] veth1_macvtap: entered promiscuous mode [ 55.395195][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.402644][ T5951] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.408412][ T5951] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.412071][ T5951] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.415804][ T5951] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.421787][ T5955] veth0_macvtap: entered promiscuous mode [ 55.430357][ T5955] veth1_macvtap: entered promiscuous mode [ 55.450486][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.453004][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.455069][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.470123][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.477046][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.485453][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.489643][ T5955] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.492425][ T5955] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.495747][ T5955] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.498885][ T5955] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.507921][ T5943] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.518434][ T5948] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.522083][ T5948] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.526233][ T5948] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.529679][ T5948] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.554195][ T1256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.556632][ T1256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.597029][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.599526][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.610086][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.613399][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.639442][ T1256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.642016][ T1256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.673782][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.686710][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.689608][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.692706][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.743229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 55.746956][ T6035] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 55.748824][ T6036] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2'. [ 55.787664][ T6029] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 55.789906][ T6029] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 55.793916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 55.801397][ T6029] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 55.806761][ T6029] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 55.809197][ T6029] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 55.812925][ T6029] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 55.828235][ T6029] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 55.830820][ T6029] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 55.837182][ T6029] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 55.844451][ T6029] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 55.846541][ T6029] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 55.858248][ T6029] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 55.973537][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 55.977386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 55.986188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 56.088264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 56.088335][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 56.103277][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.190638][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 56.190795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 56.278243][ T6044] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 56.280643][ T6044] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 56.282672][ T6044] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 56.284920][ T6044] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 56.343548][ T6048] Zero length message leads to an empty skb [ 56.714163][ T6013] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 56.733589][ T6053] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 56.735725][ T6053] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 56.737701][ T6053] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 56.739727][ T6053] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 56.874774][ T6057] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 56.876796][ T6057] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 56.878932][ T6057] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 56.880929][ T6057] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 56.916313][ T6013] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 56.966378][ T6013] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 56.971348][ T6013] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.974961][ T6013] usb 8-1: Product: syz [ 56.977124][ T6013] usb 8-1: Manufacturer: syz [ 56.979263][ T6013] usb 8-1: SerialNumber: syz [ 57.023790][ T6013] usb 8-1: config 0 descriptor?? [ 57.076755][ T6013] hub 8-1:0.0: bad descriptor, ignoring hub [ 57.079194][ T6013] hub 8-1:0.0: probe with driver hub failed with error -5 [ 57.108612][ T6013] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input5 [ 57.434066][ T6051] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 59.102741][ T63] Bluetooth: hci3: command 0x040f tx timeout [ 59.103467][ T5952] Bluetooth: hci2: command 0x040f tx timeout [ 59.107280][ T5952] Bluetooth: hci1: command 0x040f tx timeout [ 59.109759][ T5952] Bluetooth: hci0: command 0x040f tx timeout [ 59.863549][ T6083] syz.1.12 uses obsolete (PF_INET,SOCK_PACKET) [ 60.003775][ T10] usb 8-1: USB disconnect, device number 2 [ 60.097258][ T6092] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 60.099989][ T6092] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 60.102087][ T6092] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 60.104211][ T6092] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 60.264112][ T6104] ======================================================= [ 60.264112][ T6104] WARNING: The mand mount option has been deprecated and [ 60.264112][ T6104] and is ignored by this kernel. Remove the mand [ 60.264112][ T6104] option from the mount to silence this warning. [ 60.264112][ T6104] ======================================================= [ 60.276156][ T6104] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 61.293333][ T6112] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 61.295499][ T6112] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 61.297523][ T6112] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 61.299439][ T6112] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 61.526192][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20'. [ 62.610101][ T63] Bluetooth: hci1: unexpected event for opcode 0xa76a [ 63.261526][ T6148] blktrace: Concurrent blktraces are not allowed on sg0 [ 63.273162][ T63] Bluetooth: hci0: command 0x040f tx timeout [ 63.353352][ T5950] Bluetooth: hci3: command 0x040f tx timeout [ 63.354530][ T63] Bluetooth: hci2: command 0x040f tx timeout [ 63.368084][ T6149] mmap: syz.0.26 (6149) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 64.565264][ T6164] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 64.567677][ T6164] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 64.570679][ T6164] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 64.572799][ T6164] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 64.737466][ T53] cfg80211: failed to load regulatory.db [ 65.221213][ T6182] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 65.226850][ T6182] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 65.229827][ T6182] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 65.254037][ T6182] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 66.745254][ T6193] warning: `syz.3.37' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 66.911894][ T6204] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 66.932945][ T6205] blktrace: Concurrent blktraces are not allowed on sg0 [ 67.063132][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 67.083141][ T53] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.193658][ T63] Bluetooth: hci0: command 0x040f tx timeout [ 67.225878][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.229231][ T29] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 67.232012][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.234598][ T53] usb 5-1: config 0 has no interfaces? [ 67.237932][ T29] usb 7-1: config 0 descriptor?? [ 67.239121][ T53] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 67.247113][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.251365][ T53] usb 5-1: Product: syz [ 67.253284][ T53] usb 5-1: Manufacturer: syz [ 67.255195][ T53] usb 5-1: SerialNumber: syz [ 67.259718][ T53] usb 5-1: config 0 descriptor?? [ 67.273213][ T63] Bluetooth: hci3: command 0x040f tx timeout [ 67.273673][ T5950] Bluetooth: hci2: command 0x040f tx timeout [ 67.273700][ T5952] Bluetooth: hci1: command 0x040f tx timeout [ 67.455775][ T29] usbhid 7-1:0.0: can't add hid device: -71 [ 67.460545][ T29] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 67.465573][ T29] usb 7-1: USB disconnect, device number 2 [ 67.468033][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'. [ 67.797314][ T6212] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.813126][ T6212] input: syz1 as /devices/virtual/input/input6 [ 67.863116][ T6215] veth1_to_team: entered promiscuous mode [ 67.866800][ T6215] veth0: entered promiscuous mode [ 67.879043][ T6212] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 67.893165][ T6186] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 68.070941][ T6217] sit0: entered allmulticast mode [ 68.143214][ T6186] usb 7-1: Using ep0 maxpacket: 32 [ 68.146826][ T6186] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.150054][ T6186] usb 7-1: New USB device found, idVendor=0f11, idProduct=3321, bcdDevice= 0.40 [ 68.152778][ T6186] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.156864][ T6186] usb 7-1: config 0 descriptor?? [ 68.329469][ T6222] netlink: 'syz.3.45': attribute type 4 has an invalid length. [ 68.587153][ T6186] usbhid 7-1:0.0: can't add hid device: -71 [ 68.592498][ T6186] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 68.605542][ T6186] usb 7-1: USB disconnect, device number 3 [ 68.644134][ T6211] veth0: left promiscuous mode [ 68.646099][ T6211] veth1_to_team: left promiscuous mode [ 69.263250][ T5950] Bluetooth: hci0: command 0x040f tx timeout [ 69.351541][ T5950] Bluetooth: hci3: command 0x040f tx timeout [ 69.353662][ T5952] Bluetooth: hci2: command 0x040f tx timeout [ 69.356168][ T63] Bluetooth: hci1: command 0x040f tx timeout [ 69.821734][ T839] usb 5-1: USB disconnect, device number 2 [ 69.891291][ T6248] process 'syz.3.51' launched '/dev/fd/8' with NULL argv: empty string added [ 70.381165][ T6252] netlink: 36 bytes leftover after parsing attributes in process `syz.0.54'. [ 70.816506][ T6254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'. [ 70.830741][ T6254] syz.2.53: attempt to access beyond end of device [ 70.830741][ T6254] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 70.835717][ T6254] gfs2: error -5 reading superblock [ 70.866119][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.868416][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.003200][ T13] sl0: compressed packet ignored [ 71.343154][ T63] Bluetooth: hci0: command 0x040f tx timeout [ 71.423322][ T5952] Bluetooth: hci1: command 0x040f tx timeout [ 71.425928][ T5952] Bluetooth: hci2: command 0x040f tx timeout [ 71.428694][ T63] Bluetooth: hci3: command 0x040f tx timeout [ 71.546601][ T6277] blktrace: Concurrent blktraces are not allowed on sg0 [ 71.700579][ T6282] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 71.702762][ T6282] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 71.705035][ T6282] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 71.707364][ T6282] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 72.300185][ T6301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.57'. [ 72.303997][ T6301] bridge_slave_1: left allmulticast mode [ 72.305906][ T6301] bridge_slave_1: left promiscuous mode [ 72.309065][ T6301] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.707613][ T6301] bridge_slave_0: left allmulticast mode [ 72.709645][ T6301] bridge_slave_0: left promiscuous mode [ 72.711453][ T6301] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.743769][ T5944] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 73.200848][ T6315] netlink: 'syz.1.60': attribute type 10 has an invalid length. [ 73.203889][ T6315] netlink: 40 bytes leftover after parsing attributes in process `syz.1.60'. [ 73.229825][ T6312] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.261162][ T6315] team0: Port device geneve0 added [ 73.308261][ T63] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 73.317715][ T6312] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.459421][ T6312] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.528321][ T6312] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.566716][ T6329] blktrace: Concurrent blktraces are not allowed on sg0 [ 73.614710][ T6326] block nbd3: NBD_DISCONNECT [ 73.671874][ T6312] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.678750][ T6312] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.694533][ T6312] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.712871][ T6312] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.743253][ T63] Bluetooth: hci1: command 0x040f tx timeout [ 73.823202][ T63] Bluetooth: hci3: command 0x040f tx timeout [ 73.825140][ T63] Bluetooth: hci2: command 0x040f tx timeout [ 73.843631][ T6333] netlink: 'syz.1.67': attribute type 10 has an invalid length. [ 73.882271][ T6333] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 74.229646][ T6340] blktrace: Concurrent blktraces are not allowed on sg0 [ 74.892193][ T6342] ------------[ cut here ]------------ [ 74.894490][ T6342] WARNING: CPU: 3 PID: 6342 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 74.898166][ T6342] Modules linked in: [ 74.901544][ T6342] CPU: 3 UID: 0 PID: 6342 Comm: syz.2.69 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 74.907569][ T6342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.912029][ T6342] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 74.915316][ T6342] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 7f b2 6a 09 83 fe 0a 0f 86 0a fe ff ff 80 3d 6a 11 7c 0e 00 75 0b c6 05 61 11 7c 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 74.922101][ T6342] RSP: 0018:ffffc9000d5678c8 EFLAGS: 00010246 [ 74.924232][ T6342] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 74.927135][ T6342] RDX: 0000000000000000 RSI: 0000000000000028 RDI: 0000000000040d40 [ 74.930310][ T6342] RBP: 0010000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 74.934714][ T6342] R10: 0010000000000000 R11: 0000000000000001 R12: 0000000000000028 [ 74.937998][ T6342] R13: 1ffff92001aacf2e R14: 0010000000000000 R15: 0000000000000028 [ 74.942403][ T6342] FS: 0000000000000000(0000) GS:ffff888097861000(0063) knlGS:00000000f509eb40 [ 74.946215][ T6342] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 74.948676][ T6342] CR2: 00000000f30e7000 CR3: 000000000e16a000 CR4: 0000000000352ef0 [ 74.951232][ T6342] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.953775][ T6342] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.956269][ T6342] Call Trace: [ 74.957357][ T6342] [ 74.958317][ T6342] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 74.960280][ T6342] ? kasan_quarantine_put+0x10a/0x240 [ 74.962011][ T6342] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.963748][ T6342] ? kfree+0x2b4/0x4d0 [ 74.965089][ T6342] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 74.966908][ T6342] ? p9_client_clunk+0x12a/0x170 [ 74.968465][ T6342] ? p9_client_clunk+0x12f/0x170 [ 74.970054][ T6342] ? v9fs_fid_get_acl+0x7a/0x120 [ 74.971666][ T6342] __alloc_pages_noprof+0xb/0x1b0 [ 74.973358][ T6342] ___kmalloc_large_node+0x84/0x1e0 [ 74.975017][ T6342] ? v9fs_fid_get_acl+0x7a/0x120 [ 74.975045][ T6342] __kmalloc_large_node_noprof+0x1c/0x70 [ 74.975061][ T6342] __kmalloc_noprof.cold+0xc/0x61 [ 74.975080][ T6342] ? __pfx_iget5_locked+0x10/0x10 [ 74.975092][ T6342] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 74.975115][ T6342] v9fs_fid_get_acl+0x7a/0x120 [ 74.975135][ T6342] v9fs_get_acl+0xee/0x530 [ 74.975154][ T6342] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 74.975171][ T6342] v9fs_mount+0x4fd/0xa30 [ 74.975182][ T6342] ? rcu_is_watching+0x12/0xc0 [ 74.975194][ T6342] ? __pfx_v9fs_mount+0x10/0x10 [ 74.975207][ T6342] ? apparmor_capable+0x114/0x1d0 [ 74.975220][ T6342] ? __pfx_v9fs_mount+0x10/0x10 [ 74.975231][ T6342] legacy_get_tree+0x109/0x220 [ 74.975248][ T6342] vfs_get_tree+0x8e/0x340 [ 74.975262][ T6342] path_mount+0x1414/0x2020 [ 74.975279][ T6342] ? kmem_cache_free+0x2d1/0x4d0 [ 74.975295][ T6342] ? __pfx_path_mount+0x10/0x10 [ 74.975311][ T6342] ? getname_flags.part.0+0x1c5/0x550 [ 74.975326][ T6342] ? putname+0x154/0x1a0 [ 74.975338][ T6342] __ia32_sys_mount+0x28b/0x310 [ 74.975355][ T6342] ? __pfx___ia32_sys_mount+0x10/0x10 [ 74.975374][ T6342] ? rcu_is_watching+0x12/0xc0 [ 74.975407][ T6342] __do_fast_syscall_32+0x7c/0x3a0 [ 74.975423][ T6342] do_fast_syscall_32+0x32/0x80 [ 74.975434][ T6342] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 74.975465][ T6342] RIP: 0023:0xf70ae579 [ 74.975475][ T6342] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 74.975486][ T6342] RSP: 002b:00000000f509e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 74.975499][ T6342] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800003c0 [ 74.975506][ T6342] RDX: 0000000080000b80 RSI: 0000000000000000 RDI: 0000000080000580 [ 74.975514][ T6342] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 74.975522][ T6342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.975530][ T6342] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.975544][ T6342] [ 74.975550][ T6342] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 74.975560][ T6342] CPU: 3 UID: 0 PID: 6342 Comm: syz.2.69 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 74.975574][ T6342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.975581][ T6342] Call Trace: [ 74.975585][ T6342] [ 74.975589][ T6342] dump_stack_lvl+0x3d/0x1f0 [ 74.975606][ T6342] panic+0x71c/0x800 [ 74.975622][ T6342] ? __pfx_panic+0x10/0x10 [ 74.975638][ T6342] ? show_trace_log_lvl+0x29b/0x3e0 [ 74.975660][ T6342] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 74.975677][ T6342] check_panic_on_warn+0xab/0xb0 [ 74.975693][ T6342] __warn+0xf6/0x3c0 [ 74.975708][ T6342] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 74.975726][ T6342] report_bug+0x3c3/0x580 [ 74.975741][ T6342] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 74.975758][ T6342] handle_bug+0x184/0x210 [ 74.975769][ T6342] exc_invalid_op+0x17/0x50 [ 74.975781][ T6342] asm_exc_invalid_op+0x1a/0x20 [ 74.975791][ T6342] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 74.975808][ T6342] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 7f b2 6a 09 83 fe 0a 0f 86 0a fe ff ff 80 3d 6a 11 7c 0e 00 75 0b c6 05 61 11 7c 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 74.975818][ T6342] RSP: 0018:ffffc9000d5678c8 EFLAGS: 00010246 [ 74.975827][ T6342] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 74.975833][ T6342] RDX: 0000000000000000 RSI: 0000000000000028 RDI: 0000000000040d40 [ 74.975840][ T6342] RBP: 0010000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 74.975846][ T6342] R10: 0010000000000000 R11: 0000000000000001 R12: 0000000000000028 [ 74.975853][ T6342] R13: 1ffff92001aacf2e R14: 0010000000000000 R15: 0000000000000028 [ 74.975874][ T6342] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 74.975893][ T6342] ? kasan_quarantine_put+0x10a/0x240 [ 74.975908][ T6342] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.975927][ T6342] ? kfree+0x2b4/0x4d0 [ 74.975939][ T6342] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 74.975954][ T6342] ? p9_client_clunk+0x12a/0x170 [ 74.975972][ T6342] ? p9_client_clunk+0x12f/0x170 [ 74.975986][ T6342] ? v9fs_fid_get_acl+0x7a/0x120 [ 74.976004][ T6342] __alloc_pages_noprof+0xb/0x1b0 [ 74.976020][ T6342] ___kmalloc_large_node+0x84/0x1e0 [ 74.976036][ T6342] ? v9fs_fid_get_acl+0x7a/0x120 [ 74.976054][ T6342] __kmalloc_large_node_noprof+0x1c/0x70 [ 74.976069][ T6342] __kmalloc_noprof.cold+0xc/0x61 [ 74.976086][ T6342] ? __pfx_iget5_locked+0x10/0x10 [ 74.976097][ T6342] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 74.976118][ T6342] v9fs_fid_get_acl+0x7a/0x120 [ 74.976137][ T6342] v9fs_get_acl+0xee/0x530 [ 74.976155][ T6342] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 74.976172][ T6342] v9fs_mount+0x4fd/0xa30 [ 74.976183][ T6342] ? rcu_is_watching+0x12/0xc0 [ 74.976194][ T6342] ? __pfx_v9fs_mount+0x10/0x10 [ 74.976207][ T6342] ? apparmor_capable+0x114/0x1d0 [ 74.976219][ T6342] ? __pfx_v9fs_mount+0x10/0x10 [ 74.976230][ T6342] legacy_get_tree+0x109/0x220 [ 74.976247][ T6342] vfs_get_tree+0x8e/0x340 [ 74.976260][ T6342] path_mount+0x1414/0x2020 [ 74.976277][ T6342] ? kmem_cache_free+0x2d1/0x4d0 [ 74.976293][ T6342] ? __pfx_path_mount+0x10/0x10 [ 74.976309][ T6342] ? getname_flags.part.0+0x1c5/0x550 [ 74.976322][ T6342] ? putname+0x154/0x1a0 [ 74.976334][ T6342] __ia32_sys_mount+0x28b/0x310 [ 74.976351][ T6342] ? __pfx___ia32_sys_mount+0x10/0x10 [ 74.976370][ T6342] ? rcu_is_watching+0x12/0xc0 [ 74.976382][ T6342] __do_fast_syscall_32+0x7c/0x3a0 [ 74.976394][ T6342] do_fast_syscall_32+0x32/0x80 [ 74.976404][ T6342] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 74.976418][ T6342] RIP: 0023:0xf70ae579 [ 74.976426][ T6342] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 74.976436][ T6342] RSP: 002b:00000000f509e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 74.976446][ T6342] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800003c0 [ 74.976452][ T6342] RDX: 0000000080000b80 RSI: 0000000000000000 RDI: 0000000080000580 [ 74.976459][ T6342] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 74.976465][ T6342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.976472][ T6342] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.976485][ T6342] [ 74.978527][ T6342] Kernel Offset: disabled VM DIAGNOSIS: 12:20:10 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffffc9000464f448 RCX=ffffc9000464f2dc RDX=1ffff920008c9e9d RSI=ffffffff89bb00f4 RDI=ffffc9000464f454 RBP=ffffc9000464f4e8 RSP=ffffc9000464f368 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=00000000000110d4 R12=ffffffff81a708a0 R13=ffffc9000464f448 R14=0000000000000000 R15=ffff888027b62440 RIP=ffffffff81a70977 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097561000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000080006000 CR3=0000000069d9f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff976aacf8 RBX=00000000000000e3 RCX=ffffffff95d34b70 RDX=0000000000000144 RSI=ffffc9000382f0d0 RDI=ffffffff97684bf8 RBP=0000000000000030 RSP=ffffc9000382f030 R8 =ffffffff95da2bc8 R9 =0000000000000202 R10=ffffc9000382f1d0 R11=0000000000000001 R12=ffffffff81978bf0 R13=ffffc9000382f0d0 R14=ffffffff81979700 R15=ffffffff976aac88 RIP=ffffffff8197abf3 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097661000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7394570 CR3=0000000065386000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 00e000bc00000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff8161a8e3 RBX=0000000000000002 RCX=ffffc90000539000 RDX=ffffc90000537d01 RSI=ffffc90000537dd0 RDI=ffffc90000537dd0 RBP=ffffc90000537e20 RSP=ffffc90000537d10 R8 =ffffffff913c911c R9 =0000000000000000 R10=0000000000000000 R11=0000000000006aad R12=ffffc90000537e28 R13=ffffc90000537dd8 R14=ffffc90000537dd8 R15=ffffc90000537e0c RIP=ffffffff816a7cc3 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbf55f43300 ffffffff 00c00000 GS =0000 ffff888097761000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f0eb4184 CR3=0000000048100000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 951fffffffff820f 9a90ffffffff820f 9ec5ffffffff820f 9c6bffffffff820f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9e52ffffffff820f 9528ffffffff822d 15c9ffffffff820f 9d0bffffffff820f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9fa3ffffffff820f 9c79ffffffff820f 91b4ffffffff820f 974cffffffff820f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7b3cffffffff820f 7f43ffffffff820f 7a00ffffffff820f 7309ffffffff820f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 768affffffff820f 7c57ffffffff820f 78a7ffffffff820f 7646ffffffff820f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7d1cffffffff820f 7280ffffffff820f 7a34ffffffff820f 7a77ffffffff820f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7418ffffffff820f 70d2ffffffff820f 7a5cffffffff820f 78e4ffffffff820f ZMM24=1ac169641ac16964 1ac169641ac16964 1ac169641ac16964 1ac169641ac16964 1ac169641ac16964 1ac169641ac16964 1ac169641ac16964 1ac169641ac16964 ZMM25=c2265982c2265982 c2265982c2265982 c2265982c2265982 c2265982c2265982 c2265982c2265982 c2265982c2265982 c2265982c2265982 c2265982c2265982 ZMM26=051b5cf3051b5cf3 051b5cf3051b5cf3 051b5cf3051b5cf3 051b5cf3051b5cf3 051b5cf3051b5cf3 051b5cf3051b5cf3 051b5cf3051b5cf3 051b5cf3051b5cf3 ZMM27=de1c1259de1c1259 de1c1259de1c1259 de1c1259de1c1259 de1c1259de1c1259 de1c1259de1c1259 de1c1259de1c1259 de1c1259de1c1259 de1c1259de1c1259 ZMM28=00000200000001ff 000001fe000001fd 000001fc000001fb 000001fa000001f9 000001f8000001f7 000001f6000001f5 000001f4000001f3 000001f2000001f1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=ba040000ba040000 ba040000ba040000 ba040000ba040000 ba040000ba040000 ba040000ba040000 ba040000ba040000 ba040000ba040000 ba040000ba040000 info registers vcpu 3 CPU#3 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85580e15 RDI=ffffffff9b06da80 RBP=ffffffff9b06da40 RSP=ffffc9000d567230 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=000000000000002e R14=ffffffff9b06da40 R15=ffffffff85580db0 RIP=ffffffff85580e3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097861000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f30e7000 CR3=000000000e16a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001000000100008 0000000000000004 000c001a00100000 0014010000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000c000000080004 001c000e00000000 0000000000000000 0044000000200000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00120000000039b2 8200000000140000 001c0000000e0014 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000800080000 0048000000600000 007400001ba40000 1bbc00001bd40000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1bec00001c000000 1c1800001c2c0000 1c4400001c580000 005800001c700000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c88000000740000 005400001ca40000 1cb800001cdc0000 1cd000001cf40000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1d0800001d1c0000 1d3000001d440000 1d6800001d800000 1da00000001d0000 ZMM24=1ac169641ac16964 1ac169641ac16964 1ac169641ac16964 1ac169641ac16964 1ac169641ac16964 1ac169641ac16964 1ac169641ac16964 1ac169641ac16964 ZMM25=c2265982c2265982 c2265982c2265982 c2265982c2265982 c2265982c2265982 c2265982c2265982 c2265982c2265982 c2265982c2265982 c2265982c2265982 ZMM26=051b5cf3051b5cf3 051b5cf3051b5cf3 051b5cf3051b5cf3 051b5cf3051b5cf3 051b5cf3051b5cf3 051b5cf3051b5cf3 051b5cf3051b5cf3 051b5cf3051b5cf3 ZMM27=de1c1259de1c1259 de1c1259de1c1259 de1c1259de1c1259 de1c1259de1c1259 de1c1259de1c1259 de1c1259de1c1259 de1c1259de1c1259 de1c1259de1c1259 ZMM28=000000800000007f 0000007e0000007d 0000007c0000007b 0000007a00000079 0000007800000077 0000007600000075 0000007400000073 0000007200000071 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=b7040000b7040000 b7040000b7040000 b7040000b7040000 b7040000b7040000 b7040000b7040000 b7040000b7040000 b7040000b7040000 b7040000b7040000