last executing test programs: 11.352732061s ago: executing program 0 (id=25): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x44842) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002080)=@newqdisc={0x880, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xe, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x5}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x2}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x4}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @qdisc_kind_options=@q_tbf={{0x8}, {0x814, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x18ed}, @TCA_TBF_PTAB={0x404, 0x3, [0x9, 0x7, 0x9, 0x8, 0x6, 0xfffffffd, 0x3, 0x7, 0x800, 0x4, 0x7, 0x9, 0x5, 0x7, 0x4, 0x101, 0x4, 0x7d91e19d, 0x5, 0x2, 0xffff366c, 0x2e, 0x552, 0x4, 0x5, 0x9, 0x5, 0x7, 0x185, 0x6, 0x1, 0x3, 0x7, 0xe, 0x0, 0x7fff, 0x9, 0x40, 0x80000000, 0x401, 0x76, 0x4, 0x8047, 0x101, 0x80, 0x5, 0x0, 0x5, 0xffffffff, 0xffffffff, 0x800, 0x8, 0x10, 0x9, 0x0, 0x7d43, 0xb, 0x5, 0x2, 0xf58, 0x3ff, 0x6, 0xffff, 0x62d, 0x1, 0x0, 0xbea, 0xe, 0x800, 0xf, 0x5, 0xf7, 0xff, 0x5, 0xd, 0x9, 0x5, 0x9e59, 0x3, 0x3a7f, 0x7, 0x5, 0x8, 0x81, 0x3, 0x5c9412dc, 0x5, 0x5, 0x4, 0xfffff000, 0x8, 0x8315, 0x2, 0x9, 0x7ff, 0x100, 0xe, 0x80000000, 0xff, 0x7fff, 0xd, 0x0, 0xfffffffc, 0xe, 0x1, 0x2, 0xe87, 0x3, 0x7ff, 0x9, 0x4, 0xdd94, 0xe, 0x7, 0xffffffff, 0x0, 0x8000, 0x4, 0x10001, 0x1, 0x6, 0xf6, 0x0, 0x2, 0x100, 0x37, 0xf1b, 0x3, 0x9, 0x1, 0x4, 0x6, 0xf, 0x800, 0xf9, 0x4, 0x8000, 0x1, 0x0, 0x9, 0x0, 0xffff, 0x942, 0x1ff, 0x5, 0x8, 0x1, 0x7fffffff, 0xffffffff, 0x7f, 0x1, 0x40, 0x10000, 0xea3, 0xffffffc5, 0x100, 0xffffffc0, 0x2, 0x6, 0x42d6, 0xad7, 0x6, 0x4, 0x1, 0x3b, 0x8, 0x5405, 0x0, 0x8, 0x7fffffff, 0xbbd, 0x40000000, 0x5, 0x5, 0x7f, 0x4, 0x9, 0x3, 0x7, 0xb, 0x5, 0x5, 0x7ff, 0x1, 0xed, 0x40, 0x3, 0x800, 0x5, 0x6, 0x6, 0x3, 0x8c1, 0x8, 0x0, 0x7, 0x7, 0x3, 0xffff3817, 0x2, 0x5, 0x8001, 0x7, 0xbc6, 0x2, 0x0, 0xfffffffe, 0x8, 0x9, 0x8, 0xb1c, 0x0, 0x235, 0x0, 0x1, 0x81, 0xd9, 0x8, 0x2, 0x10000, 0x4, 0x7, 0x12, 0x9, 0x2, 0x40, 0x5, 0x7, 0x3, 0x1, 0x1a, 0x5, 0x4, 0x579f, 0x101, 0x467, 0x3, 0x800, 0x200, 0xff, 0xfffff106, 0xf2b, 0x4, 0xeb0, 0x6, 0x7f, 0x8, 0x10, 0xab, 0x5, 0x4, 0x10000, 0x5, 0x3eb8, 0x3, 0x40]}, @TCA_TBF_PTAB={0x404, 0x3, [0x80, 0x2, 0xff, 0x6, 0x4, 0xb8, 0x0, 0x400, 0x9, 0x4, 0x7, 0x7, 0x1, 0x3556, 0x8, 0x5, 0xa, 0x1, 0x4, 0x2, 0x5, 0xfffffff8, 0x9, 0x8, 0x800, 0x7e8, 0x3, 0xe, 0x9, 0x9, 0x8, 0x6, 0x5, 0x19, 0x7, 0x1, 0x0, 0xcdf, 0x5, 0xb, 0x80, 0x200, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x7, 0x40, 0x1, 0x0, 0x6540, 0x3a, 0x9e, 0x7, 0x42, 0x2, 0x7, 0xb05c, 0x8, 0x7ff, 0xfffffffc, 0xa, 0x5, 0x7f, 0x1, 0x1, 0x5, 0x8901, 0xdd10, 0x7, 0xfffffff3, 0xa75c, 0x0, 0x4, 0x2, 0xf2, 0x9, 0x5, 0xfffffffc, 0x0, 0x100, 0x10000, 0x4, 0x9, 0x7, 0x0, 0x0, 0x9, 0xeb2a, 0x2, 0x8, 0x2, 0x4ec, 0x207e7b06, 0x0, 0x6, 0x6, 0x82, 0x4, 0xfff, 0x1ff, 0x6, 0x0, 0x80000000, 0x6, 0x6, 0x81, 0x3, 0x5, 0x401, 0x2, 0x0, 0x0, 0x2a, 0x785c, 0x698, 0xc2c7, 0x40, 0x7, 0x6, 0x2, 0x83, 0x1, 0x4, 0x8, 0x0, 0x1, 0x5, 0x7, 0x0, 0x0, 0x5, 0x11ae6ab6, 0xb1, 0x1f, 0x8, 0x0, 0x30000, 0x800, 0x5, 0x8000, 0x0, 0xfffffffc, 0x7, 0x5, 0x8, 0xfff, 0x0, 0x9, 0x5, 0xd42, 0x2, 0x8, 0x4, 0xffffffff, 0x0, 0x7, 0x6, 0x1, 0x5, 0x80000000, 0x9067, 0x3ff, 0x6, 0x4, 0x9, 0xffffffff, 0xf64f, 0xffffffff, 0x800, 0x6, 0x3, 0x9, 0x6, 0x2, 0x401, 0xe, 0x1b, 0x0, 0xfffffff7, 0x7, 0x10001, 0x2, 0x9, 0x5, 0x8, 0x2b, 0x2, 0x1, 0xf2, 0x7, 0x0, 0x7c6, 0x9, 0x5, 0x0, 0x3, 0xec, 0x7, 0xfffffffe, 0x1, 0x30a, 0x80, 0x6, 0x9, 0xffffffff, 0x8, 0x7, 0x8, 0x7, 0x80, 0x7, 0x6, 0x6, 0xb, 0x1, 0x9, 0xff, 0x7, 0x1, 0x0, 0x80, 0x8, 0x0, 0x7, 0x1, 0x0, 0xff, 0x8, 0x101, 0x6, 0xfff, 0x5, 0x400, 0x4, 0x6, 0xf, 0xfb17, 0x6, 0x2335, 0x4, 0x10000, 0x6, 0x3, 0xfffffffb, 0x736, 0x0, 0x1, 0x1, 0x8, 0x5, 0xffffffff, 0xe, 0x8]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x7f}}]}, 0x880}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r6, 0x18000000000002a0, 0xf0, 0x0, &(0x7f0000000540)="b90103600040f000009e0ff008001fffa697e4ece3e8bea5cf118e6877e544ffe1000040f156614822cad60200017f020001be3e7d2a182ff8bad1e7d7315c6ff5a287e9b2e56941abc3e79f692364b29bfdcc0f3dfc425cd6f51b9636694318877e524a0f88274eaf0ed085696d08924b567000801c714d1cc09422173010f5245f37d095b36e409217b651b0ee389de50a2404cf010458aa2d0cc0fe0a71c37301bf21b3c74c4f09bc98de7fd919410c8ff5ba6778a9d87793d8af0b7cb167f48316bb1b94b3ed0550d4c9e2b48d89413dd479b48ae119de500695d8360488a91e40b4f8702c4e891f8ba82b0aa13c", 0x0, 0x3e8, 0x6000000000000000, 0x1cb, 0x21, &(0x7f0000000880)="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", &(0x7f0000000180)="552a5049ade8b6f8aac840d29a7746dd182602363ee0d43d650bc8028745d51ab0"}, 0x4c) socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 9.455988327s ago: executing program 3 (id=28): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_io_uring_setup(0x5, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') socket$netlink(0x10, 0x3, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r3, 0x0, &(0x7f0000000800)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x198, 0x30, 0x1, 0x0, 0x0, {}, [{0x184, 0x1, [@m_gact={0x138, 0x0, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x974, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x87e, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x0, 0x7, 0x1, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x10, 0x25, 0x0, 0xf8, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xc9, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x10ce, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x68d, 0x6, 0xe, 0x170}}]}, {0x93, 0x6, "14da7bb219f7468dc19c75e517445604737269ffdeac4689bbf2048eda7552c9812b46bc2dc98feb248f965fa1aa6f730d424e0be643be8fb763dc4aec287a5ca8d4d5a42a6b1b3032e34384b677abd2a2646329bb9e74ead424ef4b313790806bd090ea1cc58a6680f4236249f829a93a489e8d0f0d7fbd39745401ff2d11331f88e05cb52efeb08b9a580661a2f6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x3ffd, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0x1}, {0xc, 0x8, {0x4, 0x1}}}}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) write$cgroup_pid(r2, &(0x7f0000000000)=r4, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 8.47396018s ago: executing program 0 (id=31): syz_io_uring_setup(0x57a0, &(0x7f0000000080)={0x0, 0xd498, 0x40, 0x1, 0x348}, &(0x7f0000000100), &(0x7f0000000140)) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xc8) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xa0, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x2, 0x1, 0x6, 0x0, 0xf5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x4e, 0x663, 0x8}, {0x6, 0x24, 0x1a, 0x3, 0x1a}, [@mdlm={0x15, 0x24, 0x12, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x3, 0x81, 0x3, 0x1, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x7, 0x8, 0xd, 0x5, 0x7f}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xdc, 0x1, 0xf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x20, 0x3, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x2, 0x10}}}}}}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x10000, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r4, &(0x7f00000007c0)={0x2020}, 0x2020) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xc8) dup3(r6, r5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000040)={@host}) 7.445574425s ago: executing program 3 (id=33): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002c40)=@newtfilter={0x98, 0x2c, 0x400, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0x15}, {0xfff9, 0x8}, {0x18, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x7}}, @filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'syz_tun\x00'}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x30, 0x2, [@TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff3}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xe, 0x5}}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x60}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x10, 0x6}}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x42}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x98}}, 0x0) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x118) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x198b, 0x10100, 0x0, 0x3aa, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x402, @loopback}], 0x1c) sendto$inet6(r8, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000300), 0x8) r9 = openat$rdma_cm(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) syz_io_uring_submit(r6, r7, 0x0) bind$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x2, 0x3}, 0x2}}, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180004000000000000000000000000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_drvinfo={0x33, "dabb6386f6d73094a90d1fdb507195e485f544228032f04eff6b7454b702570f", "6aabb3257fbc4eb5a702000000a9b0bfed5a88511bfa36cd4d6206598017dffa", "3323b7b8cd277c616d9206e6fd2d56ff18c6adb2b5f90e30b32158c846051324", "193d5bf82fba97515dda05e0637ba9fbf81e49d4f1b5508a4c95637915581fbc", "d87badb8a826b9f7474cf73cc0ade30d0cd9c5a00f9025f55d18c2764e77d3fe", "14d3094839a1d8e1ef22cffc"}}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002980)=[{{&(0x7f0000000340)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000440)="b5a6b9e37723bed6857568596077df3c764d4fb81f20d66e4aadc2f1b0a997413a94ffd03c403726b2731c2ba3fb1b284c1722c85e4d9e19a4db406af785998efdb6aa9c6f76aa598fd5870234ad348481d1cfe4b4b9af892d9ca9a190ed16a64b3fa17df4f5fc5d339ae3423546b5d695e82da5f3629fed300222f3e2f048c852566ebcf4c89df342076dd9d1fcea086e579ca7ea8685f3679f7062a36426e33e359f9ddecbcdf3898968c5960b34439de891baa7e4f90b9203a4fe3fe774707af470cf7c634997cecfcc9204412faca48df9c934c3cf6e146ffd146dcdaa2850f89455df673a", 0xe7}, {&(0x7f0000000600)="ab107c3a411c2c717205154e1456d1d40200c65b5b8f8a3f7f47fbeb46930449667e39028f87e11bfbfe87f8c9ab1a7c2a2e0c4fdc42545b666971b9885c00fdeaf67ae255ff9953e64fa20fc77b3fce4951c16fd0905a72a65119639452770895b0898987fcf532c500ea62ab063039b307aa79fc6fd564f73d7ae4354ab1d6f2e4dc2dde20273666b11993a7cd234b4d5c712a70fdba1c1ea0a6959f61c8e70729", 0xa2}, {&(0x7f0000000540)="90eb028a4138af3dd0f64588", 0xc}, {&(0x7f0000000900)="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", 0xfd8}, {&(0x7f0000000580)="5eae572c18c69fac74fec4862d76168cc199", 0x12}], 0x5}}, {{&(0x7f00000007c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000840)=[{&(0x7f0000001900)="f5c69139b138f581a0c928e55521ba08a105570883d9122e3b44142aabc5091a8e1cf4d6c7b2af682a7351f444c47983e199874d9254eac06ae8b3ae761b99ddaa7ee5c3780e6b52e75d5f44a0d2af7c8f583ed322e4eaa06c667ef7f86a92f949afc41c1bb5aa40e1aef27c81fd", 0x6e}, {&(0x7f0000001a00)="e8e6d20ac2b6a7951d3bfacae9cc4c446245cf9ff4f3d3e92ec25bae63e853babe1d24282e14e267028154db40d06b98b10753e1a4d3947d1c44171515d8d5ab56a07686699b0270bbce8bd9b5256a2461a9ca05ad8c0f39f0153e8328ea502bbe27126b4004134f8a8e5ba41a56703e5f4f109d2d2d197a89ef935b4778d3fa44488ca4958d1655ed7a4b1c1a5061ee5729b35ef8ef0523a978d1a83f6b40eb64dfea39254f66787c58bb89dd6b45b875c5c55cce10d2d621872de6ad438cf9446b507fd0eab2a962a06438401af6c654b3b1", 0xd3}, {&(0x7f0000001b00)="6961e93c2054dee86f05fa065a972525bd7e6e64d558a6ef93ccfeb624d6da291e6e2365fe0dd267f157c5a562a12fcc06e7f14937fd905a90a2ce2804ec19599845672e271657fcf1db56bbe312ed0784f5fcdad56fb81aacf20b08d3b1e18660d574bee51771e231f3d915f14bc02157ad108e184cd52fab605e0c0f06393aa7d788197ce306cdec09d0d6a78f8bda0226c5b2aef5a3d64fbaf35ee0db5f9f811f02d37cb76e4c55301a5415a2d7de660efc29b8bc409d998e02e64de3ac1967288428bf5f", 0xc6}, {&(0x7f0000000800)="6b08e545a735c0a1b58bd3", 0xb}], 0x4, &(0x7f0000000880)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}], 0x18}}, {{&(0x7f0000001c00)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000001ec0)=[{&(0x7f0000001c40)="89c09e627558627b14a1cbeb12d15fe6eb25a278adc83447fd42cbc6f1e5987765888a6bc9634cf6e094fb7c2bfc32d1a64f50b25937bf6c3d1651775010dfe836fabbdb0b0c67d3427be4bf971f846cc0a7eac6e53ec3af7d855e65f4110601be5ba0e3e9d6cb26f5e1ea39cee77d4712e70270f847f50a31dcf1213adc4e0394463017d2", 0x85}, {&(0x7f0000001d00)="c41383e465b052124e4fa0759c825ec430e9206112ddf7910dd718860fef420784a056afbd88d9e407376e36ba766b5c8252133ecd941649ef2e796cb67fae8a22f610027585b1ea7814d3eaf23444f992caca56140deeafefe281b1b9769a072edf938b5bc6a892e52ea7bd71d839c1a82cbc642c05fe475a8402785a1c6849bc1794ec21339127dcb273fd5b655e85248c72742a7e114b4acb10db9efc2facc455fe54a35c2b51ec2a4de73ada36231767c2e22a6f892b1612a0cf8343ea68cfdd7a8ab86a07a53de9abf721d175c8", 0xd0}, {&(0x7f0000001e00)="399d7f8f8a67c70181eb0bfc421de15ab70be4a4d300747f76bd13f4394a5bdff80b36d8d50cb84aa3a0c44eddfb7a13efb2956cf1d1bd4b1c302c552638f33b993b61a12e690932b262a40754c00abe90192c89ea9c16abc9689650177c42866d209fbacdbe1d29b9f7dbce196c116b5f14fd4077", 0x75}], 0x3, &(0x7f0000001f00)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r1, @empty, @dev={0xac, 0x14, 0x14, 0x3c}}}}], 0x18}}, {{&(0x7f0000001f40)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000002180)=[{&(0x7f0000001f80)="9511aeaeccbb9044826256a080e5ab966e8cf7e20ae70d6ef70681f9744c204c4f0d7785c5a1ead62f22761387b29fe45cb9f1ef9066dc4c2150834d896a876aae0afd657ab00a3faf4a2052f984e9a84b9da35c095b8be049da0909d5ce45d70bf53e077f245d6aa3db5f318bf34df163ff917da2eb8c", 0x77}, {&(0x7f0000002000)="97ff98a21db2d2b9c0ce62d553d017f1265385d91f70b3a2202e47453df994a033bc45f9677b54559e", 0x29}, {&(0x7f0000002040)="c08d2201ece5fff55d33a63b6200d5bdd713113d87c1eb999620d8a35a55bf0a5bc459e5d4916754dfa58b9df27c6a80bbd4d24c53617c5a61b11ad3d38c22101b71fdc100acc19ad110b30dbb138ebbc4ad8965d3fda587dde74c79e5d1c11102abea4e771499dedc4f8ba2ff5d9eae3c41fef8fd5ecf607936f134348ac7388fcae0d03f43a1a1098479540bbfdf49a362304b8bc0cf9f468b058f4a18cc43d9d9a887ae097116ddfb942c1c48b045c0e5deac79", 0xb5}, {&(0x7f0000002100)="833e4ba7c9f54934a8721a23112c213d9028017a7e6a1e92c42ceee7c6c801696dd7a9ce0737bb8c9784ba289e60bc183e565052484b3629d7d5bc23ed68716634d77b9846f32ebcc4b3b6a8956d06", 0x4f}], 0x4, &(0x7f0000002a40)=ANY=[@ANYBLOB="1000000000000000010000000200000010000000000000000200000002000000180000000000000008000000", @ANYRES32=r1, @ANYBLOB="ac1414bb7f00000110000000000000000100000005000000180000000000000008000000", @ANYRES32=r1, @ANYBLOB="ac1414aaac1414aa9c0000000000000007000000891b210a010100640101007f000001e0000002ac1e0001e00000014410ad40000004000000000900000000832bfae000000164010101ffffffffffffffff0a0101027f000001ac1e01010a010102ffffffffe0000001440c97300000000900007fff8327d0ac1414bbe0000002ac1414bbac14143ce000000200000000ffffffffffffffff0a01010294040000000000180000000000000008000000", @ANYRES32=r9, @ANYBLOB="ac1414aaca1414bb91f1ce4b0991cfa6050f292b1a88af32cf801b327dd469c3e6f8a16123936b71f9585fd4b8f0cb96a7ec31ab0e7ab196c679fbeef2f83e2c072b89b6bb4ef9c9f3f8f75974829afec1cff7f0069efbe69ac41ea98619f1d901c3f8de80a31cb4f2810d9f4c605f2394632c43d6022a30f3b739f5af55c90c0a1cc6111cfd8149902ae2dd00b7fc0481a72de033778697198de0e22cbbd75b594c3d15c147de9f3d1b24a11b51b65cc66bb43f2c"], 0x114}}, {{&(0x7f0000002300)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f00000025c0)=[{&(0x7f0000002340)}, {&(0x7f0000002400)="2682c603344139df8daf6a993fda25c9edc12c5359dbb489dc7771813f8248e73ea94016187e956909bb26473298aa8c3670995a263d143e84f62bb7319fedd3a7cd757a5ed430b1405d7dde8a065519452a06153b54af74d7d6e3e688bc3cfa448f6de1f931673fd036e65678edb5c3d836485d5e59d3142be6093068bbde2c823da5c2c052e394df566ffa42271ea00819c3ebe814db82b6f987e149168a3656c8d65d0eb9d3a374e8f5fc25361d9a5e4923449b5f180bea5542fdad8211", 0xbf}, {&(0x7f00000024c0)="98549026a56fb25627db532a7af7a42802aaeadd19130c4d1222207bb4b3569e3d8b529e4549ab26b059dcc866ac06f793039016b6a1650adad6e12cfdfbed16f12970750c0354884680b48040df33ac04f04728d94200aa39f13d0ef6b37e63fbeb403322fc17176b7e45ce446352cc1d4e59f36899ab93fe6e7c7f925d4e1c62649db011f2952797a4524e24661531adabf45d183cb9a851cd438554cfba92f496b0f8ed4d0cb18fb725fee5083ec67bcf2fb2f4627f39bd0633eed4a21ee7b5bd7c53a922cec8f398f01a251a79fb20fa8853007be5cff9af875a03dbcf74861063a15f1be1e359a5bd8642db4de870bf79", 0xf3}], 0x3}}, {{&(0x7f0000002600)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000028c0)=[{&(0x7f0000002640)="ce39616315686ed36476dc6529bdc43181fc7a80b2ff3013b88a6eaad56e319b0009a6a95995fe5cf2a7595771b2d53848f031804dfa4e25b59e608bdacc3f837fe05d254ebf7c9b980fc46fed8a2d96e82956c703e1e1925163b1b7e693d69fa92c11cf4f284bdf839a1f1926af90fdce7a48503cae021ef6e55b0be5335cf96c", 0x81}, {&(0x7f0000002700)="1d39b40f9beb8a47f487646a021e5eb6aa075d310d4be9dc34e2ec2d3da6eb244291a7694f4190e6e64e726482c9", 0x2e}, {&(0x7f0000002740)="cf396de623b27fdd934ec51bfe1da581ef9ede7b0b13b741dcfb91912e19fa7f2537ddeecde7ef767eceb80440", 0x2d}, {&(0x7f0000002780)="d58ac26512", 0x5}, {&(0x7f00000027c0)="c5c9e262f980876abaca6af1e15731689c65b5e2ff3a7f56559e6e8ff896f9206b947e234c00e7b38127e90fa8c56152ea7af4264fb3c1a43296bd830d1db7032d8ba2ab8892497030b5806ba8dbbdd9277d73306bc014e884d0752c578f6a35a023fc428e32c4025dc47eb1d3059b807ea3560b5b89f68bb461d070efb2b57a23f26fa3ff92d9395ca5794dd5477aa0f8a9197769cafddcee0e7649129ad10bb405ff65b10a88027b7165fd716e57a6a5375e879e11", 0xb6}], 0x5, &(0x7f0000002900)=ANY=[@ANYBLOB="180000000000000008000000", @ANYRES32=r1, @ANYBLOB="ac1414bb00004000180200000000000000001000890b25a814143e09000000000800"/44, @ANYRES32=r1, @ANYBLOB="640101010a010100"], 0x48}}], 0x6, 0x6c011) msgget$private(0x0, 0x100) 7.136758029s ago: executing program 1 (id=34): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x204, 0x0) get_robust_list(0x0, &(0x7f00000014c0)=0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r2}, 0x18) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000011140100000000000000000208004b0013000000"], 0x18}}, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(0xffffffffffffffff, &(0x7f0000003e40), 0x3fffffffffffe3d, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x80) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000200)={{0x2, 0x4e21, @remote}, {0x1}, 0x10, {0x2, 0x4e21, @multicast2}, 'nicvf0\x00'}) bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @remote}, 0x1c) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000500", @ANYRES16=r8, @ANYBLOB="310428bd7000000000001600000018000180140002006e657464657673696d3000000000000005000200000000000500030001"], 0x3c}}, 0x0) setsockopt$MRT_FLUSH(r6, 0x0, 0xd1, &(0x7f0000000000)=0x5872a4d6c3edc95e, 0x4) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"]) 6.536084965s ago: executing program 3 (id=35): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x204, 0x0) get_robust_list(0x0, &(0x7f00000014c0)=0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000011140100000000000000000208004b0013000000"], 0x18}}, 0x0) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x80) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000200)={{0x2, 0x4e21, @remote}, {0x1}, 0x10, {0x2, 0x4e21, @multicast2}, 'nicvf0\x00'}) bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @remote}, 0x1c) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000500", @ANYBLOB="310428bd7000000000001600000018000180140002006e657464657673696d3000000000000005000200000000000500030001"], 0x3c}}, 0x0) setsockopt$MRT_FLUSH(r7, 0x0, 0xd1, &(0x7f0000000000)=0x5872a4d6c3edc95e, 0x4) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"]) 6.184074337s ago: executing program 1 (id=37): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x204, 0x0) get_robust_list(0x0, &(0x7f00000014c0)=0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000011140100000000000000000208004b0013000000"], 0x18}}, 0x0) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x80) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000200)={{0x2, 0x4e21, @remote}, {0x1}, 0x10, {0x2, 0x4e21, @multicast2}, 'nicvf0\x00'}) bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @remote}, 0x1c) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x3c}}, 0x0) setsockopt$MRT_FLUSH(r7, 0x0, 0xd1, &(0x7f0000000000)=0x5872a4d6c3edc95e, 0x4) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"]) 5.740366378s ago: executing program 3 (id=38): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) shmget$private(0x0, 0xc000, 0x1000, &(0x7f000025d000/0xc000)=nil) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) close(r4) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) 5.661082563s ago: executing program 1 (id=39): syz_open_dev$usbmon(&(0x7f0000001980), 0x1, 0x10280) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc2354000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x40000007, @loopback={0x700}}, @ib={0x1b, 0x0, 0x0, {"00fb0700000000f3ff000000009a00"}, 0x4, 0x2, 0x2}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r4, 0x9}}, 0x10) close(r3) setregid(0xffffffffffffffff, 0x0) setuid(0xee01) syz_io_uring_setup(0x109, 0x0, 0x0, &(0x7f0000000080)) chdir(0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) listen(r5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$evdev(&(0x7f0000007bc0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.166114676s ago: executing program 0 (id=40): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000000380)=0x9) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b05, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r3, 0x8b20, &(0x7f0000000040)) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYRES64=r4], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000580)=ANY=[@ANYRESHEX=r0, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0x18, 0x0, &(0x7f0000000340)="63eced8e4cdc3f0a08ceee495b6244dbc45edf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r9 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000180)={0x1, @win={{0x101, 0xfffffffd, 0xffff, 0x10000}, 0x4, 0x9, &(0x7f0000000500)={{0x1, 0x2}, &(0x7f0000000400)={{0x80000000, 0x2, 0x9a, 0x9}, &(0x7f00000003c0)={{0x200, 0x9, 0x80000001, 0x4}}}}, 0x0, &(0x7f0000000c00)="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", 0x9}}) 4.990335661s ago: executing program 2 (id=41): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141181) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x5417, &(0x7f0000000740)={0x0, 0xc26a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000100), &(0x7f00000001c0)) r2 = fsopen(&(0x7f0000000000)='configfs\x00', 0x1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006"], 0x69) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000f60000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r6, &(0x7f0000000000)=[{&(0x7f00000028c0)=""/4098, 0x1002}], 0x1) close(r4) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r3, &(0x7f0000000180)=[{&(0x7f00000007c0)="00214717a707001d0000030640710a069d317ebbaaa6b6eb35cc265143ba38207d9590ffea0bdc8900033a639a6e65bb66e2", 0x32}], 0x1, 0x807, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x8, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90644}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 4.725324918s ago: executing program 1 (id=42): io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f00000016c0)=""/4126, 0x101e}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='ext4_da_write_pages\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000100001040000", @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800b00010062726964676500000c00028005001700"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r7, 0x8949, &(0x7f0000000000)) 2.943241658s ago: executing program 3 (id=43): socket$nl_crypto(0x10, 0x3, 0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0xd) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x3, 0x1, 0x8000000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x4, 0x4, 0x624, 0xffffffff, 0x3e4, 0x3e4, 0x0, 0xfeffffff, 0xffffffff, 0x55c, 0x55c, 0x55c, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @broadcast}, [], [], 'veth0_to_bond\x00', 'veth0_to_bridge\x00', {}, {}, 0x3a}, 0x2f2, 0x2f8, 0x31c, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}, @common=@ipv6header={{0x24}, {0x88, 0x14, 0x1}}]}, @REJECT={0x24}}, {{@ipv6={@remote, @remote, [], [0x0, 0xffffff00], 'rose0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xf}}}, {{@uncond, 0x0, 0x154, 0x178, 0x0, {}, [@common=@ipv6header={{0x24}, {0x0, 0x1}}, @common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, [0x0, 0x0, 0x0, 0xff]}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x680) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00"/14], 0x48) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_io_uring_setup(0x468d, &(0x7f0000000680)={0x0, 0x9b92, 0x8, 0xfffffffe, 0x226, 0x0, r4}, &(0x7f0000000300), &(0x7f0000000380)) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) r6 = socket(0x1e, 0x4, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000580)={&(0x7f00000001c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="d80000000314000026a57000fbdbdf250900020073797a320000000008004100727865001400330070696d367265673000000000000000000900020073797a32000000000800410072786500140033007465616d5f736c6176655f31000000000900020073797a30000000000800410072786500140033006e657464657673696d300000000000000900020073797a3100000000080041007278650014003300776732000000000000000000000000000900020073797a3100000000080041007278650014003b0076657468305f746f5f7465616d000000"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) connect$tipc(r6, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r6, r4, 0x0, 0x8010002b) 2.881779141s ago: executing program 2 (id=44): syz_open_dev$usbmon(&(0x7f0000001980), 0x1, 0x10280) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc2354000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r3, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x40000007, @loopback={0x700}}, @ib={0x1b, 0x0, 0x0, {"00fb0700000000f3ff000000009a00"}, 0x4, 0x2, 0x2}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r3, 0x9}}, 0x10) close(r2) setregid(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x109, 0x0, 0x0, &(0x7f0000000080)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) 2.881292426s ago: executing program 1 (id=45): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b00010067656e65766500000400090008000400e1ff0022"], 0x3c}}, 0x0) syz_io_uring_setup(0x6a95, 0x0, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x1885, 0x80, 0x2}, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) syz_io_uring_setup(0x24fa, 0x0, &(0x7f0000000100), 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000280)=""/239, 0xef) read$char_usb(r3, 0x0, 0x0) write$char_usb(r3, 0x0, 0x0) syz_usb_disconnect(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000004300010125bd04dc000000000000000000000000000000007a854d49f7394611369a7557709c229b8f870434f37f22aecff0644f29c25e0f00d5707ccb5df7a8a8502dcaf396e8fecadb2bc1f2f72a057b1ec69f67d21a6efe392155798a3f401d038c5881d6afc15e71ead23d4bc297a3d156721675f453ae7e509ab6ba0fc8a591ca90371da32011a0785a62003e5bffd2ded526055125d91ae05af241afc4d32772c825e8dff1265e9e21ed5d02dc16649d6980387d76848fc8408859264c8488b596bfd701ae979eae5b2007371b39"], 0x14}, 0x1, 0x0, 0x0, 0x4004849}, 0x24000040) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={0x50, r8, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @mon_options]}, 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) socket$kcm(0x10, 0x2, 0x4) 2.857231066s ago: executing program 0 (id=46): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904008100000000030000000000000800040006020000", 0x24) (fail_nth: 1) 2.856919495s ago: executing program 0 (id=47): syz_io_uring_setup(0x57a0, &(0x7f0000000080)={0x0, 0xd498, 0x40, 0x1, 0x348}, &(0x7f0000000100), &(0x7f0000000140)) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xc8) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xa0, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x2, 0x1, 0x6, 0x0, 0xf5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x4e, 0x663, 0x8}, {0x6, 0x24, 0x1a, 0x3, 0x1a}, [@mdlm={0x15, 0x24, 0x12, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x3, 0x81, 0x3, 0x1, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x7, 0x8, 0xd, 0x5, 0x7f}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xdc, 0x1, 0xf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x20, 0x3, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x2, 0x10}}}}}}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x10000, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r4, &(0x7f00000007c0)={0x2020}, 0x2020) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b5000000"], 0xc8) dup3(r6, r5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000040)={@host}) 2.644938177s ago: executing program 2 (id=48): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) shmget$private(0x0, 0xc000, 0x1000, &(0x7f000025d000/0xc000)=nil) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) close(r4) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) 1.688106475s ago: executing program 2 (id=49): ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x40187014, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r0, 0x0, 0x4000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 1.687574909s ago: executing program 2 (id=50): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x88441) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000080)={0x4, 0x0, 0x803, 0x0, 0x0, 0x4, 0x0}) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) getpid() r2 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$describe(0x6, r2, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000340)=0x4) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r7, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) getsockopt$inet6_tcp_buf(r7, 0x6, 0xd, 0x0, &(0x7f0000000280)) bind$alg(r7, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f0000000000)='.+-:\x00', &(0x7f0000000540)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x13\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\\h\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc\xdc\n\x88\xfc\xcci\xc1\xe8\xf8\x1e6&\bE\x8f\x9b\xc6\x8d0\xa7 -\xecC8O*7\xfa&\xf9\aC\xab\x03g\x06\xda\x8c)\xae\xe3\x16\x9dz\x87\xd6OZX\xa4\xee\xa7\xebe\x14Qp\x96\x00\xd0VK\xe2$i\xd4\xcb-\xd4\x82w\x13\x98\xfcW\x9d\xff\xed\xd4\x14;]\xf8\xccS\xddl\x96v\x97\x988\xa7sQ\x1aN\xbdU.\x89\\\xfa\xc2\xcd\xde', &(0x7f0000000100)='security.', 0x0, &(0x7f0000000480)='+.\x00', 0x0]}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mq_notify(r7, &(0x7f0000000300)={0x0, 0x3e, 0x4, @tid=r3}) 1.559982716s ago: executing program 1 (id=51): syz_io_uring_setup(0x57a0, &(0x7f0000000080)={0x0, 0xd498, 0x40, 0x1, 0x348}, &(0x7f0000000100), &(0x7f0000000140)) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, 0x0, 0xc8) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x10000, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r4, &(0x7f00000007c0)={0x2020}, 0x2020) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xc8) dup3(r6, r5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000040)={@host}) 730.115722ms ago: executing program 3 (id=52): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) creat(&(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x3) mount$9p_virtio(&(0x7f0000000580), &(0x7f0000000480)='./file0\x00', &(0x7f0000000100), 0x1000816, 0x0) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x0, 0xea60}}) chdir(0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10408, 0x8}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r7, r5) 148.213312ms ago: executing program 2 (id=53): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x400, &(0x7f0000000a40)=ANY=[@ANYRESDEC=r0, @ANYRES16]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0x4c, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x3, @loopback, 0x6}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000040)={r5}, 0x8) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f0000000280)) shutdown(0xffffffffffffffff, 0x1) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r2, @ANYRES16=0x0, @ANYRES8=r0], 0xdc}, 0x1, 0x0, 0x0, 0x20004020}, 0x20000840) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 0s ago: executing program 0 (id=54): io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f00000016c0)=""/4126, 0x101e}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='ext4_da_write_pages\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000100001040000", @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800b00010062726964676500000c00028005001700"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r7, 0x8949, &(0x7f0000000000)) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:20997' (ED25519) to the list of known hosts. [ 40.718759][ T5861] cgroup: Unknown subsys name 'net' [ 40.877447][ T5861] cgroup: Unknown subsys name 'cpuset' [ 40.881653][ T5861] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 41.754850][ T5861] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.236896][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.242256][ T5959] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.245048][ T5959] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.247694][ T5959] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.250037][ T5959] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.252895][ T5959] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.253659][ T5953] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.255994][ T5959] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.258242][ T5953] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.260116][ T5959] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.262130][ T5953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.262595][ T5960] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.263278][ T5960] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.265203][ T5959] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.268461][ T5962] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.270833][ T5959] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.273572][ T5962] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.275549][ T5959] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.278060][ T5962] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.282129][ T5959] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.507764][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 45.561043][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 45.582704][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 45.646463][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.649658][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.652181][ T5955] bridge_slave_0: entered allmulticast mode [ 45.655309][ T5955] bridge_slave_0: entered promiscuous mode [ 45.701021][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.703683][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.709373][ T5955] bridge_slave_1: entered allmulticast mode [ 45.713122][ T5955] bridge_slave_1: entered promiscuous mode [ 45.736918][ T5956] chnl_net:caif_netlink_parms(): no params data found [ 45.761768][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.788346][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.843113][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.845646][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.848411][ T5946] bridge_slave_0: entered allmulticast mode [ 45.851088][ T5946] bridge_slave_0: entered promiscuous mode [ 45.868655][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.870939][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.873170][ T5945] bridge_slave_0: entered allmulticast mode [ 45.876190][ T5945] bridge_slave_0: entered promiscuous mode [ 45.916872][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.919136][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.921483][ T5946] bridge_slave_1: entered allmulticast mode [ 45.924075][ T5946] bridge_slave_1: entered promiscuous mode [ 45.941480][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.943824][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.946259][ T5945] bridge_slave_1: entered allmulticast mode [ 45.948878][ T5945] bridge_slave_1: entered promiscuous mode [ 46.009476][ T5955] team0: Port device team_slave_0 added [ 46.029325][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.063110][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.068826][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.074755][ T5955] team0: Port device team_slave_1 added [ 46.077813][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.080729][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.083063][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.086275][ T5956] bridge_slave_0: entered allmulticast mode [ 46.088869][ T5956] bridge_slave_0: entered promiscuous mode [ 46.177580][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.179846][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.182178][ T5956] bridge_slave_1: entered allmulticast mode [ 46.184935][ T5956] bridge_slave_1: entered promiscuous mode [ 46.201879][ T5946] team0: Port device team_slave_0 added [ 46.218374][ T5945] team0: Port device team_slave_0 added [ 46.235494][ T5946] team0: Port device team_slave_1 added [ 46.237909][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.240100][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.249113][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.254152][ T5945] team0: Port device team_slave_1 added [ 46.257481][ T5956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.274425][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.276629][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.284663][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.303099][ T5956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.335722][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.338534][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.347514][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.354641][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.356875][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.364828][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.400659][ T5956] team0: Port device team_slave_0 added [ 46.407455][ T5956] team0: Port device team_slave_1 added [ 46.409734][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.411915][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.419921][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.424220][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.426551][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.434572][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.498176][ T5955] hsr_slave_0: entered promiscuous mode [ 46.500420][ T5955] hsr_slave_1: entered promiscuous mode [ 46.503191][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.505643][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.514434][ T5956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.519855][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.522147][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.530388][ T5956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.580985][ T5946] hsr_slave_0: entered promiscuous mode [ 46.583282][ T5946] hsr_slave_1: entered promiscuous mode [ 46.585754][ T5946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.588213][ T5946] Cannot create hsr debugfs directory [ 46.622784][ T5945] hsr_slave_0: entered promiscuous mode [ 46.625366][ T5945] hsr_slave_1: entered promiscuous mode [ 46.627577][ T5945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.630028][ T5945] Cannot create hsr debugfs directory [ 46.700256][ T5956] hsr_slave_0: entered promiscuous mode [ 46.702461][ T5956] hsr_slave_1: entered promiscuous mode [ 46.704592][ T5956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.707017][ T5956] Cannot create hsr debugfs directory [ 47.033972][ T5955] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.039344][ T5955] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.043477][ T5955] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.051664][ T5955] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.078442][ T5945] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.083063][ T5945] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.087601][ T5945] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.091491][ T5945] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.133310][ T5946] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.139918][ T5946] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.144107][ T5946] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.149217][ T5946] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.193527][ T5956] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.201641][ T5956] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.206187][ T5956] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.210053][ T5956] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.227584][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.254840][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.268406][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.284465][ T1249] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.286740][ T1249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.291450][ T1249] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.293742][ T1249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.296457][ T5954] Bluetooth: hci1: command tx timeout [ 47.304949][ T5954] Bluetooth: hci0: command tx timeout [ 47.305019][ T5310] Bluetooth: hci2: command tx timeout [ 47.306681][ T5959] Bluetooth: hci3: command tx timeout [ 47.316094][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.326601][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.332565][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.335056][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.351574][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.354880][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.368945][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.390002][ T1249] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.392278][ T1249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.404215][ T1253] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.406559][ T1253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.413165][ T5956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.439993][ T5956] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.451727][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.454011][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.460059][ T1249] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.462310][ T1249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.479786][ T5946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.521754][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.538195][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.560029][ T5955] veth0_vlan: entered promiscuous mode [ 47.571445][ T5955] veth1_vlan: entered promiscuous mode [ 47.588928][ T5945] veth0_vlan: entered promiscuous mode [ 47.596445][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.602159][ T5945] veth1_vlan: entered promiscuous mode [ 47.618583][ T5955] veth0_macvtap: entered promiscuous mode [ 47.623591][ T5955] veth1_macvtap: entered promiscuous mode [ 47.628456][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.648745][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.651448][ T5945] veth0_macvtap: entered promiscuous mode [ 47.658145][ T5946] veth0_vlan: entered promiscuous mode [ 47.662331][ T5945] veth1_macvtap: entered promiscuous mode [ 47.667753][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.678798][ T5946] veth1_vlan: entered promiscuous mode [ 47.686193][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.689125][ T5955] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.692070][ T5955] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.696161][ T5955] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.698988][ T5955] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.710823][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.725966][ T5945] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.728720][ T5945] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.731494][ T5945] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.734200][ T5945] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.742758][ T5956] veth0_vlan: entered promiscuous mode [ 47.755595][ T5946] veth0_macvtap: entered promiscuous mode [ 47.760527][ T5946] veth1_macvtap: entered promiscuous mode [ 47.781032][ T5956] veth1_vlan: entered promiscuous mode [ 47.788111][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.790745][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.797117][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.810824][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.815077][ T1253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.817475][ T1253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.822834][ T5946] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.826255][ T5946] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.828957][ T5946] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.831676][ T5946] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.848656][ T5956] veth0_macvtap: entered promiscuous mode [ 47.852220][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.854937][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.865995][ T5956] veth1_macvtap: entered promiscuous mode [ 47.876445][ T5955] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.887337][ T1253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.889816][ T1253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.897114][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.900018][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.902452][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.910899][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.918336][ T5956] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.921113][ T5956] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.923849][ T5956] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.926950][ T5956] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.945227][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.947708][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.979033][ T6033] qrtr: Invalid version 0 [ 47.995140][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.997586][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.019007][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.021419][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.030908][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 48.034302][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 48.038181][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 48.040740][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 48.044166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 48.046989][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 48.049708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 48.052941][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 48.056065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 48.058612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 48.104557][ T6045] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.404576][ T6013] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 48.914527][ T6013] usb 8-1: Using ep0 maxpacket: 8 [ 48.921186][ T6013] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 48.924483][ T6013] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 48.929332][ T6013] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 48.934178][ T6013] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 48.950491][ T6013] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 48.964755][ T6013] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 48.967463][ T6013] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 48.970925][ T6013] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 48.987209][ T6013] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 48.997972][ T6013] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 49.003651][ T6013] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 49.011035][ T6013] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 49.014695][ T6013] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 49.022854][ T6013] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 49.026320][ T6013] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 49.032354][ T6013] usb 8-1: string descriptor 0 read error: -22 [ 49.034329][ T6013] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 49.037355][ T6013] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.054326][ T6013] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 49.156225][ T6047] qrtr: Invalid version 0 [ 49.374850][ T5954] Bluetooth: hci2: command tx timeout [ 49.374973][ T5959] Bluetooth: hci0: command tx timeout [ 49.374983][ T5310] Bluetooth: hci3: command tx timeout [ 49.375383][ T5959] Bluetooth: hci1: command tx timeout [ 49.443234][ T24] usb 8-1: USB disconnect, device number 2 [ 49.940816][ T6045] Set syz1 is full, maxelem 65536 reached [ 50.003809][ T6060] virtiofs: Unknown parameter '{hi׶M?3`!grN{69͵vm4ē' [ 50.012523][ T6060] ata1.00: invalid cdb length 6 [ 50.320377][ T6067] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8'. [ 50.322344][ T6066] sctp: [Deprecated]: syz.3.7 (pid 6066) Use of struct sctp_assoc_value in delayed_ack socket option. [ 50.322344][ T6066] Use struct sctp_sack_info instead [ 51.103352][ T6079] netdevsim netdevsim1: Direct firmware load for 0PqD"2NktTWj%N failed with error -2 [ 51.107318][ T6079] netdevsim netdevsim1: Falling back to sysfs fallback for: 0PqD"2NktTWj%N [ 51.474717][ T5962] Bluetooth: hci1: command tx timeout [ 51.476537][ T5962] Bluetooth: hci3: command tx timeout [ 51.478235][ T5962] Bluetooth: hci0: command tx timeout [ 51.479911][ T5962] Bluetooth: hci2: command tx timeout [ 51.482132][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 51.727277][ T6090] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12'. [ 51.757134][ T6065] Set syz1 is full, maxelem 65536 reached [ 52.102724][ T6102] qrtr: Invalid version 0 [ 52.625861][ T6106] input: syz0 as /devices/virtual/input/input5 [ 52.967086][ T6107] qrtr: Invalid version 0 [ 53.547236][ T5310] Bluetooth: hci2: command tx timeout [ 53.549048][ T5310] Bluetooth: hci0: command tx timeout [ 53.550823][ T5310] Bluetooth: hci3: command tx timeout [ 53.553073][ T5310] Bluetooth: hci1: command tx timeout [ 53.914535][ T1473] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 54.028560][ T6139] mmap: syz.0.19 (6139) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.074470][ T1473] usb 8-1: Using ep0 maxpacket: 8 [ 54.077618][ T1473] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 54.079875][ T1473] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 54.083471][ T1473] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 54.087311][ T1473] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 54.090778][ T1473] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 54.096709][ T1473] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 54.100262][ T1473] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 54.105419][ T1473] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 54.109654][ T1473] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 54.113736][ T1473] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 54.120396][ T1473] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 54.123180][ T1473] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 54.134484][ T1473] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 54.138154][ T1473] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 54.152156][ T1473] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 54.159108][ T1473] usb 8-1: string descriptor 0 read error: -22 [ 54.161442][ T1473] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 54.164602][ T1473] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.192762][ T1473] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 54.914798][ T837] usb 8-1: USB disconnect, device number 3 [ 55.299629][ T6155] trusted_key: syz.1.23 sent an empty control message without MSG_MORE. [ 56.655089][ T6180] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 58.599408][ T6192] qrtr: Invalid version 0 [ 59.005900][ T6199] qrtr: Invalid version 0 [ 60.043199][ T6212] netdevsim netdevsim3: Direct firmware load for 0PqD"2NktTWj%N failed with error -2 [ 60.049959][ T6212] netdevsim netdevsim3: Falling back to sysfs fallback for: 0PqD"2NktTWj%N [ 60.249993][ T6202] qrtr: Invalid version 0 [ 61.071819][ T6223] warning: `syz.2.36' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 62.543078][ T6246] process 'syz.2.41' launched './file0' with NULL argv: empty string added [ 62.577914][ T6246] netlink: 'syz.2.41': attribute type 1 has an invalid length. [ 62.691251][ T6250] netlink: 28 bytes leftover after parsing attributes in process `syz.1.42'. [ 62.699852][ T6245] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 63.469081][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 64.035389][ T6265] FAULT_INJECTION: forcing a failure. [ 64.035389][ T6265] name failslab, interval 1, probability 0, space 0, times 1 [ 64.039112][ T6265] CPU: 3 UID: 0 PID: 6265 Comm: syz.0.46 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 64.039126][ T6265] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.039133][ T6265] Call Trace: [ 64.039137][ T6265] [ 64.039141][ T6265] dump_stack_lvl+0x16c/0x1f0 [ 64.039160][ T6265] should_fail_ex+0x512/0x640 [ 64.039175][ T6265] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 64.039192][ T6265] should_failslab+0xc2/0x120 [ 64.039203][ T6265] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 64.039217][ T6265] ? find_held_lock+0x2b/0x80 [ 64.039227][ T6265] ? __alloc_skb+0x2b2/0x380 [ 64.039244][ T6265] __alloc_skb+0x2b2/0x380 [ 64.039258][ T6265] ? __pfx___alloc_skb+0x10/0x10 [ 64.039274][ T6265] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 64.039288][ T6265] netlink_alloc_large_skb+0x69/0x130 [ 64.039301][ T6265] netlink_sendmsg+0x6a1/0xdd0 [ 64.039314][ T6265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.039330][ T6265] sock_write_iter+0x4fc/0x5b0 [ 64.039344][ T6265] ? __pfx_sock_write_iter+0x10/0x10 [ 64.039360][ T6265] ? bpf_lsm_file_permission+0x9/0x10 [ 64.039371][ T6265] ? security_file_permission+0x71/0x210 [ 64.039385][ T6265] ? rw_verify_area+0xcf/0x680 [ 64.039399][ T6265] vfs_write+0x6c7/0x1150 [ 64.039413][ T6265] ? __pfx_sock_write_iter+0x10/0x10 [ 64.039426][ T6265] ? __pfx_vfs_write+0x10/0x10 [ 64.039439][ T6265] ? find_held_lock+0x2b/0x80 [ 64.039456][ T6265] ksys_write+0x1f8/0x250 [ 64.039470][ T6265] ? __pfx_ksys_write+0x10/0x10 [ 64.039485][ T6265] ? rcu_is_watching+0x12/0xc0 [ 64.039497][ T6265] __do_fast_syscall_32+0x7c/0x3a0 [ 64.039508][ T6265] do_fast_syscall_32+0x32/0x80 [ 64.039517][ T6265] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.039530][ T6265] RIP: 0023:0xf7f26579 [ 64.039538][ T6265] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 64.039547][ T6265] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 64.039556][ T6265] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 64.039562][ T6265] RDX: 0000000000000024 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.039568][ T6265] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 64.039573][ T6265] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 64.039579][ T6265] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.039590][ T6265] [ 64.084527][ T6013] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 64.128296][ T6267] qrtr: Invalid version 0 [ 64.304523][ T6013] usb 6-1: Using ep0 maxpacket: 8 [ 64.312143][ T6013] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 64.320668][ T6013] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 64.623845][ T6013] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 64.628688][ T6013] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 64.632825][ T6013] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 64.638101][ T6013] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 64.640555][ T6013] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 64.644080][ T6013] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 64.647870][ T6013] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 64.651438][ T6013] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 64.658634][ T6013] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 64.661120][ T6013] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 64.664886][ T6013] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 64.669021][ T6013] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 64.673994][ T6013] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 64.682805][ T6013] usb 6-1: string descriptor 0 read error: -22 [ 64.684913][ T6013] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 64.687729][ T6013] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.694255][ T6013] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 65.057926][ T1473] usb 6-1: USB disconnect, device number 2 [ 65.064038][ T6273] adutux: No device or device unplugged -19 [ 65.066054][ T6275] adutux: No device or device unplugged -19 [ 65.682109][ T6278] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 65.855025][ T5962] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 66.327572][ T6287] kernel profiling enabled (shift: 17) [ 66.583387][ T6286] qrtr: Invalid version 0 [ 66.900840][ T6291] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 66.903424][ T6291] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 66.949715][ T6291] vhci_hcd vhci_hcd.0: Device attached [ 67.374486][ T1459] usb 44-1: SetAddress Request (2) to port 0 [ 67.375303][ T6300] netlink: 28 bytes leftover after parsing attributes in process `syz.0.54'. [ 67.376491][ T1459] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 67.803777][ T6297] ======================================================= [ 67.803777][ T6297] WARNING: The mand mount option has been deprecated and [ 67.803777][ T6297] and is ignored by this kernel. Remove the mand [ 67.803777][ T6297] option from the mount to silence this warning. [ 67.803777][ T6297] ======================================================= [ 67.826924][ T6292] vhci_hcd: connection reset by peer [ 67.830409][ T92] vhci_hcd: stop threads [ 67.832048][ T92] vhci_hcd: release socket [ 67.833843][ T92] vhci_hcd: disconnect device [ 67.887635][ T61] ref_tracker: reference already released. [ 67.889649][ T61] ref_tracker: allocated in: [ 67.891089][ T61] netdev_watchdog_up+0x183/0x200 [ 67.892595][ T61] netif_carrier_on+0xfb/0x120 [ 67.894073][ T61] e1000_watchdog+0xd13/0x1520 [ 67.895628][ T61] process_one_work+0x9cc/0x1b70 [ 67.897290][ T61] worker_thread+0x6c8/0xf10 [ 67.898963][ T61] kthread+0x3c5/0x780 [ 67.900434][ T61] ret_from_fork+0x5d7/0x6f0 [ 67.901890][ T61] ret_from_fork_asm+0x1a/0x30 [ 67.903444][ T61] ref_tracker: freed in: [ 67.904770][ T61] dev_deactivate_many+0x28d/0xd50 [ 67.904899][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 67.906367][ T61] dev_deactivate+0xf8/0x1c0 [ 67.911554][ T61] linkwatch_do_dev+0x11e/0x160 [ 67.913590][ T61] __linkwatch_run_queue+0x2aa/0x8a0 [ 67.915779][ T61] linkwatch_event+0x8f/0xc0 [ 67.917700][ T61] process_one_work+0x9cc/0x1b70 [ 67.919740][ T61] worker_thread+0x6c8/0xf10 [ 67.921645][ T61] kthread+0x3c5/0x780 [ 67.923129][ T61] ret_from_fork+0x5d7/0x6f0 [ 67.924606][ T61] ret_from_fork_asm+0x1a/0x30 [ 67.927212][ T61] ------------[ cut here ]------------ [ 67.929608][ T61] WARNING: CPU: 0 PID: 61 at lib/ref_tracker.c:255 ref_tracker_free+0x61a/0x830 [ 67.932877][ T61] Modules linked in: [ 67.935180][ T61] CPU: 0 UID: 0 PID: 61 Comm: kworker/u32:3 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 67.940558][ T61] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.944970][ T61] Workqueue: events_unbound linkwatch_event [ 67.947431][ T61] RIP: 0010:ref_tracker_free+0x61a/0x830 [ 67.949689][ T61] Code: 00 44 8b 73 18 31 ff 44 89 f6 e8 11 0f b1 fc 45 85 f6 0f 85 a6 00 00 00 e8 c3 13 b1 fc 48 8b 34 24 48 89 ef e8 67 60 74 06 90 <0f> 0b 90 bb ea ff ff ff e9 50 fd ff ff e8 a4 13 b1 fc 4c 8d 6d 44 [ 67.957248][ T61] RSP: 0018:ffffc900007cf8a8 EFLAGS: 00010202 [ 67.959756][ T61] RAX: 0000000000000201 RBX: ffff88802807ad00 RCX: 0000000000000000 [ 67.962991][ T61] RDX: 0000000000000202 RSI: ffffffff8de13e6d RDI: 0000000000000001 [ 67.966349][ T61] RBP: ffff888023660610 R08: 0000000000000001 R09: 0000000000000001 [ 67.968960][ T61] R10: ffffffff90a83057 R11: 0000000000000001 R12: 1ffff920000f9f17 [ 67.972103][ T61] R13: ffffc900007cf8d8 R14: 0000000002e00309 R15: ffff88802807ad18 [ 67.975449][ T61] FS: 0000000000000000(0000) GS:ffff888097561000(0000) knlGS:0000000000000000 [ 67.979090][ T61] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.981796][ T61] CR2: 00007f588f289492 CR3: 00000000687d7000 CR4: 0000000000352ef0 [ 67.985225][ T61] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 67.988491][ T61] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 67.991886][ T61] Call Trace: [ 67.993322][ T61] [ 67.994713][ T61] ? __pfx_ref_tracker_free+0x10/0x10 [ 67.996971][ T61] ? dev_deactivate_many+0x28d/0xd50 [ 67.998751][ T61] ? dev_deactivate+0xf8/0x1c0 [ 68.000397][ T61] ? linkwatch_do_dev+0x11e/0x160 [ 68.002363][ T61] ? __linkwatch_run_queue+0x2aa/0x8a0 [ 68.004771][ T61] ? linkwatch_event+0x8f/0xc0 [ 68.006289][ T61] ? process_one_work+0x9cc/0x1b70 [ 68.008111][ T61] ? worker_thread+0x6c8/0xf10 [ 68.009618][ T61] ? kthread+0x3c5/0x780 [ 68.010992][ T61] ? ret_from_fork+0x5d7/0x6f0 [ 68.012457][ T61] ? ret_from_fork_asm+0x1a/0x30 [ 68.013975][ T61] ? netif_freeze_queues+0x17d/0x1e0 [ 68.015698][ T61] dev_deactivate_many+0x28d/0xd50 [ 68.017445][ T61] ? __pfx_dev_deactivate_many+0x10/0x10 [ 68.019392][ T61] ? ref_tracker_free+0x341/0x830 [ 68.020997][ T61] ? __pfx_ref_tracker_free+0x10/0x10 [ 68.022690][ T61] ? mark_held_locks+0x49/0x80 [ 68.024301][ T61] dev_deactivate+0xf8/0x1c0 [ 68.025908][ T61] ? __pfx_dev_deactivate+0x10/0x10 [ 68.027600][ T61] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.029446][ T61] linkwatch_do_dev+0x11e/0x160 [ 68.031006][ T61] __linkwatch_run_queue+0x2aa/0x8a0 [ 68.032667][ T61] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 68.034571][ T61] linkwatch_event+0x8f/0xc0 [ 68.036013][ T61] ? __pfx_linkwatch_event+0x10/0x10 [ 68.037945][ T61] ? rcu_is_watching+0x12/0xc0 [ 68.039818][ T61] process_one_work+0x9cc/0x1b70 [ 68.041415][ T61] ? __pfx_process_one_work+0x10/0x10 [ 68.043142][ T61] ? assign_work+0x1a0/0x250 [ 68.044721][ T61] worker_thread+0x6c8/0xf10 [ 68.046218][ T61] ? __pfx_worker_thread+0x10/0x10 [ 68.047920][ T61] kthread+0x3c5/0x780 [ 68.049226][ T61] ? __pfx_kthread+0x10/0x10 [ 68.050735][ T61] ? rcu_is_watching+0x12/0xc0 [ 68.052241][ T61] ? __pfx_kthread+0x10/0x10 [ 68.053702][ T61] ret_from_fork+0x5d7/0x6f0 [ 68.055225][ T61] ? __pfx_kthread+0x10/0x10 [ 68.056630][ T61] ret_from_fork_asm+0x1a/0x30 [ 68.058467][ T61] [ 68.059765][ T61] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 68.062697][ T61] CPU: 0 UID: 0 PID: 61 Comm: kworker/u32:3 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 68.067630][ T61] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.072039][ T61] Workqueue: events_unbound linkwatch_event [ 68.074513][ T61] Call Trace: [ 68.075932][ T61] [ 68.077201][ T61] dump_stack_lvl+0x3d/0x1f0 [ 68.079163][ T61] panic+0x71c/0x800 [ 68.080850][ T61] ? __pfx_panic+0x10/0x10 [ 68.082779][ T61] ? show_trace_log_lvl+0x29b/0x3e0 [ 68.084931][ T61] ? check_panic_on_warn+0x1f/0xb0 [ 68.086941][ T61] ? ref_tracker_free+0x61a/0x830 [ 68.088778][ T61] check_panic_on_warn+0xab/0xb0 [ 68.090350][ T61] __warn+0xf6/0x3c0 [ 68.091597][ T61] ? ref_tracker_free+0x61a/0x830 [ 68.093131][ T61] report_bug+0x3c3/0x580 [ 68.094504][ T61] ? ref_tracker_free+0x61a/0x830 [ 68.096088][ T61] handle_bug+0x184/0x210 [ 68.097716][ T61] exc_invalid_op+0x17/0x50 [ 68.099710][ T61] asm_exc_invalid_op+0x1a/0x20 [ 68.101610][ T61] RIP: 0010:ref_tracker_free+0x61a/0x830 [ 68.103508][ T61] Code: 00 44 8b 73 18 31 ff 44 89 f6 e8 11 0f b1 fc 45 85 f6 0f 85 a6 00 00 00 e8 c3 13 b1 fc 48 8b 34 24 48 89 ef e8 67 60 74 06 90 <0f> 0b 90 bb ea ff ff ff e9 50 fd ff ff e8 a4 13 b1 fc 4c 8d 6d 44 [ 68.111173][ T61] RSP: 0018:ffffc900007cf8a8 EFLAGS: 00010202 [ 68.113656][ T61] RAX: 0000000000000201 RBX: ffff88802807ad00 RCX: 0000000000000000 [ 68.116866][ T61] RDX: 0000000000000202 RSI: ffffffff8de13e6d RDI: 0000000000000001 [ 68.120215][ T61] RBP: ffff888023660610 R08: 0000000000000001 R09: 0000000000000001 [ 68.123384][ T61] R10: ffffffff90a83057 R11: 0000000000000001 R12: 1ffff920000f9f17 [ 68.126132][ T61] R13: ffffc900007cf8d8 R14: 0000000002e00309 R15: ffff88802807ad18 [ 68.128627][ T61] ? ref_tracker_free+0x619/0x830 [ 68.130241][ T61] ? __pfx_ref_tracker_free+0x10/0x10 [ 68.131953][ T61] ? dev_deactivate_many+0x28d/0xd50 [ 68.133637][ T61] ? dev_deactivate+0xf8/0x1c0 [ 68.135416][ T61] ? linkwatch_do_dev+0x11e/0x160 [ 68.137426][ T61] ? __linkwatch_run_queue+0x2aa/0x8a0 [ 68.139153][ T61] ? linkwatch_event+0x8f/0xc0 [ 68.140709][ T61] ? process_one_work+0x9cc/0x1b70 [ 68.142340][ T61] ? worker_thread+0x6c8/0xf10 [ 68.143865][ T61] ? kthread+0x3c5/0x780 [ 68.145237][ T61] ? ret_from_fork+0x5d7/0x6f0 [ 68.146826][ T61] ? ret_from_fork_asm+0x1a/0x30 [ 68.148715][ T61] ? netif_freeze_queues+0x17d/0x1e0 [ 68.150529][ T61] dev_deactivate_many+0x28d/0xd50 [ 68.152157][ T61] ? __pfx_dev_deactivate_many+0x10/0x10 [ 68.153904][ T61] ? ref_tracker_free+0x341/0x830 [ 68.155523][ T61] ? __pfx_ref_tracker_free+0x10/0x10 [ 68.157677][ T61] ? mark_held_locks+0x49/0x80 [ 68.159404][ T61] dev_deactivate+0xf8/0x1c0 [ 68.160894][ T61] ? __pfx_dev_deactivate+0x10/0x10 [ 68.162567][ T61] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.164438][ T61] linkwatch_do_dev+0x11e/0x160 [ 68.165945][ T61] __linkwatch_run_queue+0x2aa/0x8a0 [ 68.167891][ T61] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 68.170191][ T61] linkwatch_event+0x8f/0xc0 [ 68.172040][ T61] ? __pfx_linkwatch_event+0x10/0x10 [ 68.174145][ T61] ? rcu_is_watching+0x12/0xc0 [ 68.176105][ T61] process_one_work+0x9cc/0x1b70 [ 68.178120][ T61] ? __pfx_process_one_work+0x10/0x10 [ 68.180393][ T61] ? assign_work+0x1a0/0x250 [ 68.182059][ T61] worker_thread+0x6c8/0xf10 [ 68.183657][ T61] ? __pfx_worker_thread+0x10/0x10 [ 68.185338][ T61] kthread+0x3c5/0x780 [ 68.186707][ T61] ? __pfx_kthread+0x10/0x10 [ 68.188236][ T61] ? rcu_is_watching+0x12/0xc0 [ 68.189849][ T61] ? __pfx_kthread+0x10/0x10 [ 68.191687][ T61] ret_from_fork+0x5d7/0x6f0 [ 68.193301][ T61] ? __pfx_kthread+0x10/0x10 [ 68.194811][ T61] ret_from_fork_asm+0x1a/0x30 [ 68.196472][ T61] [ 68.198254][ T61] Kernel Offset: disabled [ 68.199940][ T61] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:50:00 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000069 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85580b55 RDI=ffffffff9b06da40 RBP=ffffffff9b06da00 RSP=ffffc900007cf200 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000069 R14=ffffffff9b06da00 R15=ffffffff85580af0 RIP=ffffffff85580b7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097561000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f588f289492 CR3=00000000687d7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81a90c96 RDX=ffff88806e628000 RSI=0000000000000000 RDI=0000000000000005 RBP=ffffffff93cc6c80 RSP=ffffc90006597b70 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=00000000000f4240 R13=ffffc90006597d60 R14=0000000000000001 R15=ffff88802b327d00 RIP=ffffffff81bb8252 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097661000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f9d4ffc CR3=000000006ef2d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000047f900000000 0000017600000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=ffffffff8e5c4700 RCX=ffffffff8b442e88 RDX=ffff8880278dc880 RSI=ffffffff8b442b8f RDI=ffffffff8e5c4700 RBP=dffffc0000000000 RSP=ffffc90006e17a98 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffffff8b442b8f R13=000000000000023d R14=0000000000000001 R15=ffff888023100fc0 RIP=ffffffff8197ff75 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097761000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f2072304 CR3=000000006a258000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000047f900000000 0000017600000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000dd4cb RBX=0000000000000003 RCX=ffffffff8b7c3be9 RDX=0000000000000000 RSI=ffffffff8de13e6d RDI=ffffffff8c1563e0 RBP=ffffed1003866000 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =ffffed10056a6645 R10=ffff88802b53322b R11=ffffffff9b00e510 R12=0000000000000003 R13=ffff88801c330000 R14=ffffffff90a83050 R15=0000000000000000 RIP=ffffffff8b7c274f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097861000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f51772a3 CR3=00000000247cc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563895da3c50 0000563895da3c50 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff76a76af0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3023206532353462 6133336434626667 2d32383030302d72 656c6c616b7a7973 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20296c6c75662854 504d454552502030 2320653235346261 333364346266672d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 32383030302d7265 6c6c616b7a79732d 3263722d302e3631 2e36206465746e69 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 617420746f4e2033 3a3233752f72656b 726f776b203a6d6d 6f43203136203a44 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 49502030203a4449 552030203a555043 205d313654202020 5b5d303831353339 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000