last executing test programs: 6.829488289s ago: executing program 1 (id=61): creat(&(0x7f00000001c0)='./file0\x00', 0x8) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x42, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11641e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x20, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x647b}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = getpgid(0xffffffffffffffff) sched_getattr(r3, &(0x7f0000000180)={0x38}, 0x38, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SHUTDOWN={0x22, 0x6e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x100006, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r6, 0x0, 0x80, 0x5, 0x9, 0x0, {0xa, 0xff, 0x1c, 0x3, 0x7, 0x401, 0xfff5, 0xa, 0x0, 0x53, 0x8001, 0x7e9, 0x401, 0x5, "cb630dab3a0338057401a192419598961f50dc45c87d55b42a28b8f01c0e0e7a"}}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f00000001c0)={0x5, r2, 0x3a, {0x3, 0x3ff}, 0x8}, 0x1) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x766c618eb221465a) 5.422794541s ago: executing program 1 (id=65): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) 4.422086522s ago: executing program 0 (id=67): creat(&(0x7f00000001c0)='./file0\x00', 0x8) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x42, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11641e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x20, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x647b}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = getpgid(0xffffffffffffffff) sched_getattr(r3, &(0x7f0000000180)={0x38}, 0x38, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_open_dev$video(&(0x7f0000000780), 0x8000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SHUTDOWN={0x22, 0x6e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x100006, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r6, 0x0, 0x80, 0x5, 0x9, 0x0, {0xa, 0xff, 0x1c, 0x3, 0x7, 0x401, 0xfff5, 0xa, 0x0, 0x53, 0x8001, 0x7e9, 0x401, 0x5, "cb630dab3a0338057401a192419598961f50dc45c87d55b42a28b8f01c0e0e7a"}}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f00000001c0)={0x5, r2, 0x3a, {0x3, 0x3ff}, 0x8}, 0x1) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r7 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x766c618eb221465a) quotactl_fd$Q_SETINFO(r7, 0xffffffff80000600, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffffc, 0x0, 0x4}) 4.421863879s ago: executing program 3 (id=68): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1", 0x12}], 0x1}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x54, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) listen(0xffffffffffffffff, 0x0) unshare(0x22020400) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x4}, &(0x7f0000000340), &(0x7f0000000300)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r5, 0x5501) syz_open_dev$evdev(&(0x7f0000000340), 0xaa54, 0x248000) ioctl$UI_DEV_DESTROY(r5, 0x5502) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6cc8cb5d00"/20, @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000020027000000000008000a00"], 0x6c}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) 4.376313883s ago: executing program 1 (id=69): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)=@rc, 0x80, 0x0, 0x0, &(0x7f00000006c0)=""/67, 0x43}, 0x2002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0cc5640, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000004380), 0x101602, 0x0) read$FUSE(r8, &(0x7f00000020c0)={0x2020}, 0xffffffffffffff5c) sched_setaffinity(r1, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000500)="e306644c2f0b801228a9253e", 0xc, 0xfffffffffffffffd) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 3.669226603s ago: executing program 2 (id=70): r0 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x802) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc25c4110, &(0x7f0000002700)={0x0, [[0x1, 0x0, 0x0, 0x9, 0xb, 0xb36c], [0x8, 0x500, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x0, 0x4, 0x3, 0x0, 0xffffffff]], '\x00', [{0xffffffff, 0x0, 0x0, 0x1, 0x1}, {0x7fffffff, 0x0, 0x0, 0x1}, {0x0, 0xe}, {0x5}, {}, {0x0, 0x2}, {}, {}, {0xfffffefc}, {0x2}, {}, {0x8ef}], '\x00', 0x4d}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000f9b8170e0400000000000800007bb7bf9565b16d56793bf39e64060604e2e4da871a520fc1c1e4fbacfed9d60a865a7c5da0bb19698873ff26dd6a65a0e0c2e22498e4f2ca8445fa28e6ef7bc9cf585d1c84c705c0d6a3189597fef4192d1dd637b372577af534e29728eb613eb76439e3808068901cf76db4745e743de78f344c75f4817c28cd2d6f907bd8c829a49235c08b035361e9930f08076a93d36d61eb6f9eba0a51fdc3b16a4c0bbcece1cf79", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000004000085000000010000008500000050"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r2}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000180)=0xc, 0x4) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f00000000c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2481, 0x0) ioctl$SNAPSHOT_UNFREEZE(r4, 0x3302) 3.599799319s ago: executing program 2 (id=71): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) creat(0x0, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e21, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, @encap={0x1c, 0x4, {0x2}}]}, 0x170}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x14) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r9 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x100, 0x1c4) openat(r9, &(0x7f0000000040)='./file0\x00', 0x18801, 0x100) ioctl$sock_ifreq(0xffffffffffffffff, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x1c, r2, 0xb97534d5fe9704cf, 0x0, 0xfffffffc, {{0x12}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x4040004) 3.314987225s ago: executing program 1 (id=72): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000012c0)=0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2063569a"}}) poll(&(0x7f0000000440)=[{r1, 0x8009}], 0x1, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000640)=""/4096, 0x1000, 0x2000, &(0x7f0000000380)=@generic={0x11, "d71d9c1bf36be386b8195be2f96732daece168ab8c4756fcaaaaa57ab4d9fa9c5e136c872457faea878081b25c7ac9863e328325d3608f7b92b91789fb2322981d60e78ecebc51a8a848ac66a135cbf9adb555f5fff1d2552ce4b120288f1c606bebc17e3b75c547a1c41ac89d1be3f0e179d586d665ef8397dfdbdaa865"}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x3) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f0000000080)={0x0, 0x1, 0x400000}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000024c0)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002480)={&(0x7f00000023c0)={0x8c, 0x2, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_TUPLE_MASTER={0x44, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x99}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x36}}]}, @CTA_LABELS_MASK={0x14, 0x17, [0x80000001, 0x0, 0x2, 0x2]}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x100}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000035c0)=ANY=[@ANYBLOB="2000000000000000000000000000000600074000000000040003800000000000"], 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x0) mount$pvfs2(&(0x7f00000001c0), 0x0, &(0x7f0000000300), 0x20, &(0x7f0000000280)={[{'rng\x00'}, {'\x00'}, {'#'}, {'/dev/vim2m\x00'}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@smackfsroot={'smackfsroot', 0x3d, '++'}}]}) 3.266967239s ago: executing program 0 (id=73): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) creat(0x0, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x150, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2}}]}, 0x150}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x14) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r9 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x100, 0x1c4) openat(r9, &(0x7f0000000040)='./file0\x00', 0x18801, 0x100) ioctl$sock_ifreq(0xffffffffffffffff, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x1c, r2, 0xb97534d5fe9704cf, 0x0, 0xfffffffc, {{0x12}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x4040004) 3.116892497s ago: executing program 3 (id=74): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) 2.330180428s ago: executing program 0 (id=75): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x2710, 0x1, 0x0, 0x1000, &(0x7f000023a000/0x1000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000040)=0xa, 0x4) sendto$inet6(r4, &(0x7f0000000380)="5849a8cf679a4d7e84cfc89465d277de28637cbb090ab4c94ec65eebf3f827899f3129a8933214a46180d3d8539aba0dfa8edfebaded5e0affc131eb9683ea72727766857fde4157c12093a838be765761547ef13cfba94fab90403dc123e8c478e7b1be5f1a4d5a818a0eb64fbdabb40071d7d2f57c7c9bb4a6be6d4c06245603f01006df4c8655a870f08b39e97d5855c8602af1e7fac763a6d1f7d8b21efc1b565c2bb55f8a75e763db49386ea3dd", 0xb0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e595e5fb3172b8fc94fe9185633ff84974096e32e8d6ce93ad1488698052714e15b7763bfe3d117e145752db35e4553df3a7d153ee8c27ebc9342e6eecf4d1b92e4ac8c64700aec62c72fd06f652ebc960a30868729b4b249183381de3f1879286998f3493e664e810b0cc7816d", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) sendmmsg$inet6(r4, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001340)="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", 0x769}], 0x1}}], 0x1, 0x11) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x401}}}, 0x7) syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280), &(0x7f0000000200)) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRESOCT=r0], 0xe8}, 0x1, 0x0, 0x0, 0xc804}, 0x0) 2.142901458s ago: executing program 3 (id=76): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2481, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) 2.128901723s ago: executing program 2 (id=77): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0xd61, &(0x7f0000000740)={0x0, 0x1c2b, 0x800, 0x0, 0x301, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x0) syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x80900) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB], 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) 2.050148759s ago: executing program 3 (id=78): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1", 0x12}], 0x1}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x54, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x400, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) listen(0xffffffffffffffff, 0x0) unshare(0x22020400) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x4}, &(0x7f0000000340), &(0x7f0000000300)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r5, 0x5501) syz_open_dev$evdev(&(0x7f0000000340), 0xaa54, 0x248000) ioctl$UI_DEV_DESTROY(r5, 0x5502) sendmsg$nl_route(r0, 0x0, 0x0) 1.416110343s ago: executing program 1 (id=79): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)}) mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000340)={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x7, 0x2, 0x1, 0x400, 0x3, 0x20}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0xd, 0x800) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x6, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$afs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c460403ad03000000000000000002003e00000000000103000038000000000000000ff300000000200001000400000000000000000003"], 0x58) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 1.260212988s ago: executing program 0 (id=80): r0 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x802) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc25c4110, &(0x7f0000002700)={0x0, [[0x1, 0x0, 0x0, 0x9, 0xb, 0xb36c], [0x8, 0x500, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x0, 0x4, 0x3, 0x0, 0xffffffff]], '\x00', [{0xffffffff, 0x0, 0x0, 0x1, 0x1}, {0x7fffffff, 0x0, 0x0, 0x1}, {0x0, 0xe}, {0x5}, {}, {0x0, 0x2}, {}, {}, {0xfffffefc}, {0x2}, {}, {0x8ef}], '\x00', 0x4d}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000f9b8170e0400000000000800007bb7bf9565b16d56793bf39e64060604e2e4da871a520fc1c1e4fbacfed9d60a865a7c5da0bb19698873ff26dd6a65a0e0c2e22498e4f2ca8445fa28e6ef7bc9cf585d1c84c705c0d6a3189597fef4192d1dd637b372577af534e29728eb613eb76439e3808068901cf76db4745e743de78f344c75f4817c28cd2d6f907bd8c829a49235c08b035361e9930f08076a93d36d61eb6f9eba0a51fdc3b16a4c0bbcece1cf79", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000000100000085000000500000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r2}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000180)=0xc, 0x4) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f00000000c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2481, 0x0) ioctl$SNAPSHOT_UNFREEZE(r4, 0x3302) 1.259706448s ago: executing program 0 (id=81): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0xc6, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x28}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = socket$inet(0x2, 0x3, 0x1f) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f00000000c0)) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x1ffffa, 0x2, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180), &(0x7f00000001c0)) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x44}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000640)={0x0, 0x7, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011005704000000000000000010000000", @ANYRES32=r9], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r12, @ANYBLOB="240005ff03000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r11, @ANYBLOB="050000000000000083b71671000008000300", @ANYRES32=r12, @ANYBLOB="63000e0080000000ffffffffffff08021100000008021100000090000000000000000000640082180104f99702040406070401000400052606ac264535a7d15d92ed3883177b0403cbc09fa3dbf799bd588a59887355f0766d272c4f077e250300386b0008000c006400000008000d000000000034001b80040002000400030004000200050001000f0000000500010030000000040002000400020004000200050001001b000000"], 0xc4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) r13 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r13, 0x227b, &(0x7f00000000c0)=0x1) 1.120066537s ago: executing program 3 (id=82): creat(&(0x7f00000001c0)='./file0\x00', 0x8) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x42, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11641e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x20, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x647b}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = getpgid(0xffffffffffffffff) sched_getattr(r3, &(0x7f0000000180)={0x38}, 0x38, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_open_dev$video(&(0x7f0000000780), 0x8000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SHUTDOWN={0x22, 0x6e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x100006, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r6, 0x0, 0x80, 0x5, 0x9, 0x0, {0xa, 0xff, 0x1c, 0x3, 0x7, 0x401, 0xfff5, 0xa, 0x0, 0x53, 0x8001, 0x7e9, 0x401, 0x5, "cb630dab3a0338057401a192419598961f50dc45c87d55b42a28b8f01c0e0e7a"}}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f00000001c0)={0x5, r2, 0x3a, {0x3, 0x3ff}, 0x8}, 0x1) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r7 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x766c618eb221465a) quotactl_fd$Q_SETINFO(r7, 0xffffffff80000600, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffffc, 0x0, 0x4}) 950.015124ms ago: executing program 2 (id=83): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) creat(0x0, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x150, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2}}]}, 0x150}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x14) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r9 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x100, 0x1c4) openat(r9, &(0x7f0000000040)='./file0\x00', 0x18801, 0x100) ioctl$sock_ifreq(0xffffffffffffffff, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x1c, r2, 0xb97534d5fe9704cf, 0x0, 0xfffffffc, {{0x12}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x4040004) 893.366566ms ago: executing program 0 (id=84): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) 407.96667ms ago: executing program 1 (id=85): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x2710, 0x1, 0x0, 0x1000, &(0x7f000023a000/0x1000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000040)=0xa, 0x4) sendto$inet6(r4, &(0x7f0000000380)="5849a8cf679a4d7e84cfc89465d277de28637cbb090ab4c94ec65eebf3f827899f3129a8933214a46180d3d8539aba0dfa8edfebaded5e0affc131eb9683ea72727766857fde4157c12093a838be765761547ef13cfba94fab90403dc123e8c478e7b1be5f1a4d5a818a0eb64fbdabb40071d7d2f57c7c9bb4a6be6d4c06245603f01006df4c8655a870f08b39e97d5855c8602af1e7fac763a6", 0x9a, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e595e5fb3172b8fc94fe9185633ff84974096e32e8d6ce93ad1488698052714e15b7763bfe3d117e145752db35e4553df3a7d153ee8c27ebc9342e6eecf4d1b92e4ac8c64700aec62c72fd06f652ebc960a30868729b4b249183381de3f1879286998f3493e664e810b0cc7816d", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) sendmmsg$inet6(r4, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001340)="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", 0x769}], 0x1}}], 0x1, 0x11) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x401}}}, 0x7) syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280), &(0x7f0000000200)) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRESOCT=r0], 0xe8}, 0x1, 0x0, 0x0, 0xc804}, 0x0) 76.944079ms ago: executing program 2 (id=86): r0 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x802) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc25c4110, &(0x7f0000002700)={0x0, [[0x1, 0x0, 0x0, 0x9, 0xb, 0xb36c], [0x8, 0x500, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x0, 0x4, 0x3, 0x0, 0xffffffff]], '\x00', [{0xffffffff, 0x0, 0x0, 0x1, 0x1}, {0x7fffffff, 0x0, 0x0, 0x1}, {0x0, 0xe}, {0x5}, {}, {0x0, 0x2}, {}, {}, {0xfffffefc}, {0x2}, {}, {0x8ef}], '\x00', 0x4d}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000f9b8170e0400000000000800007bb7bf9565b16d56793bf39e64060604e2e4da871a520fc1c1e4fbacfed9d60a865a7c5da0bb19698873ff26dd6a65a0e0c2e22498e4f2ca8445fa28e6ef7bc9cf585d1c84c705c0d6a3189597fef4192d1dd637b372577af534e29728eb613eb76439e3808068901cf76db4745e743de78f344c75f4817c28cd2d6f907bd8c829a49235c08b035361e9930f08076a93d36d61eb6f9eba0a51fdc3b16a4c0bbcece1cf79d380c801f08334afb24d1a72c9bc041dba52e4d001f5e1062a", @ANYRES32=0x0, @ANYRES32], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r2}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000180)=0xc, 0x4) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f00000000c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2481, 0x0) 72.785901ms ago: executing program 3 (id=87): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f00000012c0)=0x2) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2063569a"}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000640)=""/4096, 0x1000, 0x2000, &(0x7f0000000380)=@generic={0x11, "d71d9c1bf36be386b8195be2f96732daece168ab8c4756fcaaaaa57ab4d9fa9c5e136c872457faea878081b25c7ac9863e328325d3608f7b92b91789fb2322981d60e78ecebc51a8a848ac66a135cbf9adb555f5fff1d2552ce4b120288f1c606bebc17e3b75c547a1c41ac89d1be3f0e179d586d665ef8397dfdbdaa865"}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x3) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000080)={0x0, 0x1, 0x400000}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000024c0)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002480)={&(0x7f00000023c0)={0x8c, 0x2, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_TUPLE_MASTER={0x44, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x99}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x36}}]}, @CTA_LABELS_MASK={0x14, 0x17, [0x80000001, 0x0, 0x2, 0x2]}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x100}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x2c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x87e}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2c1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000035c0)=ANY=[@ANYBLOB="2000000000000000000000000000000600074000000000040003800000000000"], 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x0) mount$pvfs2(&(0x7f00000001c0), 0x0, &(0x7f0000000300), 0x20, &(0x7f0000000280)={[{'rng\x00'}, {'\x00'}, {'#'}, {'/dev/vim2m\x00'}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@smackfsroot={'smackfsroot', 0x3d, '++'}}]}) 0s ago: executing program 2 (id=88): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x2710, 0x1, 0x0, 0x1000, &(0x7f000023a000/0x1000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000040)=0xa, 0x4) sendto$inet6(r4, &(0x7f0000000380)="5849a8cf679a4d7e84cfc89465d277de28637cbb090ab4c94ec65eebf3f827899f3129a8933214a46180d3d8539aba0dfa8edfebaded5e0affc131eb9683ea72727766857fde4157c12093a838be765761547ef13cfba94fab90403dc123e8c478e7b1be5f1a4d5a818a0eb64fbdabb40071d7d2f57c7c9bb4a6be6d4c06245603f01006df4c8655a870f08b39e97d5855c8602af1e7fac763a6d1f7d8b21efc1b565c2bb55f8a75e763db49386ea3dd", 0xb0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e595e5fb3172b8fc94fe9185633ff84974096e32e8d6ce93ad1488698052714e15b7763bfe3d117e145752db35e4553df3a7d153ee8c27ebc9342e6eecf4d1b92e4ac8c64700aec62c72fd06f652ebc960a30868729b4b249183381de3f1879286998f3493e664e810b0cc7816d", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) sendmmsg$inet6(r4, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001340)="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", 0x769}], 0x1}}], 0x1, 0x11) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x401}}}, 0x7) syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280), &(0x7f0000000200)) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRESOCT=r0], 0xe8}, 0x1, 0x0, 0x0, 0xc804}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:29114' (ED25519) to the list of known hosts. [ 41.099964][ T5929] cgroup: Unknown subsys name 'net' [ 41.245148][ T5929] cgroup: Unknown subsys name 'cpuset' [ 41.248063][ T5929] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.061170][ T5929] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 43.859398][ T5947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 43.863348][ T5947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 43.865845][ T5947] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 43.868481][ T5947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 43.870703][ T5947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 43.873176][ T5947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 43.873992][ T5951] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 43.875399][ T5947] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 43.875840][ T5952] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 43.876624][ T5952] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 43.876865][ T5952] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 43.877242][ T5952] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 43.877898][ T5951] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 43.878111][ T5951] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 43.878397][ T5951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 43.878747][ T5951] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 43.878930][ T5951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 43.879303][ T5951] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 43.881300][ T5952] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 43.896610][ T5954] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 43.899183][ T5952] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 43.902493][ T5954] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 43.908521][ T5954] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 43.910574][ T5954] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.030806][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 44.035708][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 44.117630][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 44.126004][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 44.166486][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.168870][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.170948][ T5949] bridge_slave_0: entered allmulticast mode [ 44.173652][ T5949] bridge_slave_0: entered promiscuous mode [ 44.205794][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.207836][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.209817][ T5949] bridge_slave_1: entered allmulticast mode [ 44.211919][ T5949] bridge_slave_1: entered promiscuous mode [ 44.235614][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.237641][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.239652][ T5941] bridge_slave_0: entered allmulticast mode [ 44.241873][ T5941] bridge_slave_0: entered promiscuous mode [ 44.275602][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.277869][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.279955][ T5940] bridge_slave_0: entered allmulticast mode [ 44.282034][ T5940] bridge_slave_0: entered promiscuous mode [ 44.285075][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.287065][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.289031][ T5941] bridge_slave_1: entered allmulticast mode [ 44.291141][ T5941] bridge_slave_1: entered promiscuous mode [ 44.294933][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.309744][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.311748][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.314605][ T5940] bridge_slave_1: entered allmulticast mode [ 44.316763][ T5940] bridge_slave_1: entered promiscuous mode [ 44.334491][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.337789][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.340302][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.342970][ T5945] bridge_slave_0: entered allmulticast mode [ 44.345814][ T5945] bridge_slave_0: entered promiscuous mode [ 44.369476][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.380981][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.383183][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.385183][ T5945] bridge_slave_1: entered allmulticast mode [ 44.387272][ T5945] bridge_slave_1: entered promiscuous mode [ 44.391597][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.396750][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.425050][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.439834][ T5949] team0: Port device team_slave_0 added [ 44.442900][ T5949] team0: Port device team_slave_1 added [ 44.482136][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.486081][ T5940] team0: Port device team_slave_0 added [ 44.488878][ T5941] team0: Port device team_slave_0 added [ 44.498807][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.502180][ T5940] team0: Port device team_slave_1 added [ 44.504788][ T5941] team0: Port device team_slave_1 added [ 44.506926][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.508865][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.516449][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.552915][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.554857][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.561798][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.572452][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.574490][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.581987][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.586229][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.588891][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.596391][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.610115][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.612058][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.619081][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.623640][ T5945] team0: Port device team_slave_0 added [ 44.628548][ T5945] team0: Port device team_slave_1 added [ 44.645672][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.648064][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.655859][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.671538][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.673604][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.680668][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.703561][ T5940] hsr_slave_0: entered promiscuous mode [ 44.705488][ T5940] hsr_slave_1: entered promiscuous mode [ 44.715979][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.717916][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.725212][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.752689][ T5949] hsr_slave_0: entered promiscuous mode [ 44.755251][ T5949] hsr_slave_1: entered promiscuous mode [ 44.757828][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.760316][ T5949] Cannot create hsr debugfs directory [ 44.771584][ T5941] hsr_slave_0: entered promiscuous mode [ 44.773999][ T5941] hsr_slave_1: entered promiscuous mode [ 44.776456][ T5941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.778583][ T5941] Cannot create hsr debugfs directory [ 44.826907][ T5945] hsr_slave_0: entered promiscuous mode [ 44.829366][ T5945] hsr_slave_1: entered promiscuous mode [ 44.831370][ T5945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.834097][ T5945] Cannot create hsr debugfs directory [ 44.986201][ T5940] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 44.990937][ T5940] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 44.994522][ T5940] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.000080][ T5940] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.013293][ T5945] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.018081][ T5945] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.022387][ T5945] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.027149][ T5945] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.059387][ T5941] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.066614][ T5941] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.073974][ T5941] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.077363][ T5941] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.096439][ T5949] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.100246][ T5949] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.104901][ T5949] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.108273][ T5949] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.146350][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.162083][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.175200][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.182352][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.184477][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.189150][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.197181][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.199520][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.203372][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.205625][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.212729][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.217822][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.219809][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.236614][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.244562][ T777] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.247090][ T777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.257916][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.259919][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.264319][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.278360][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.294150][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.296141][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.302657][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.304703][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.348022][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.357309][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.369112][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.389172][ T5945] veth0_vlan: entered promiscuous mode [ 45.390980][ T5940] veth0_vlan: entered promiscuous mode [ 45.404018][ T5945] veth1_vlan: entered promiscuous mode [ 45.406327][ T5940] veth1_vlan: entered promiscuous mode [ 45.414798][ T5941] veth0_vlan: entered promiscuous mode [ 45.419069][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.421371][ T5941] veth1_vlan: entered promiscuous mode [ 45.431579][ T5941] veth0_macvtap: entered promiscuous mode [ 45.438598][ T5941] veth1_macvtap: entered promiscuous mode [ 45.444140][ T5945] veth0_macvtap: entered promiscuous mode [ 45.454642][ T5940] veth0_macvtap: entered promiscuous mode [ 45.458441][ T5945] veth1_macvtap: entered promiscuous mode [ 45.461900][ T5940] veth1_macvtap: entered promiscuous mode [ 45.468878][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.478892][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.482792][ T5949] veth0_vlan: entered promiscuous mode [ 45.487821][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.490855][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.495236][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.498932][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.501801][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.504705][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.507508][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.510627][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.514169][ T5941] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.516758][ T5941] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.519222][ T5941] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.521905][ T5941] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.526465][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.529424][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.533578][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.537119][ T5940] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.539548][ T5940] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.542209][ T5940] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.544974][ T5940] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.555631][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.558533][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.561150][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.564168][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.567792][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.570117][ T5949] veth1_vlan: entered promiscuous mode [ 45.578713][ T5945] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.581270][ T5945] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.584081][ T5945] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.586491][ T5945] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.622749][ T5949] veth0_macvtap: entered promiscuous mode [ 45.638074][ T5949] veth1_macvtap: entered promiscuous mode [ 45.641371][ T777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.644070][ T777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.651280][ T777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.654275][ T777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.659364][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.661560][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.661849][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.666677][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.669315][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.672145][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.676059][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.678961][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.682093][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.692080][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.695546][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.698207][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.701180][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.704089][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.706956][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.710171][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.713537][ T777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.715965][ T777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.718178][ T5949] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.721427][ T5949] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.724056][ T5949] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.726486][ T5949] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.736800][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.740487][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.748276][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.750846][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.783911][ T777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.785519][ T5940] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 45.786323][ T777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.799987][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.802197][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.892977][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 45.928998][ T5954] Bluetooth: hci2: command tx timeout [ 45.930875][ T5954] Bluetooth: hci0: command tx timeout [ 45.932710][ T5954] Bluetooth: hci3: command tx timeout [ 45.995026][ T67] Bluetooth: hci1: command tx timeout [ 46.046349][ T6016] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 46.050564][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 46.136213][ T6019] netlink: 'syz.3.4': attribute type 32 has an invalid length. [ 46.138833][ T6019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 46.141555][ T6019] netlink: 'syz.3.4': attribute type 32 has an invalid length. [ 46.160880][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 46.481449][ T6033] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.498298][ T6033] wireguard0: entered promiscuous mode [ 46.500001][ T6033] wireguard0: entered allmulticast mode [ 46.572996][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 46.884066][ T6045] input: syz1 as /devices/virtual/input/input5 [ 46.981985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 46.985302][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 46.988248][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 46.991339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 47.186826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 47.256611][ T6052] netlink: 'syz.3.6': attribute type 1 has an invalid length. [ 47.289155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 47.318615][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 47.451767][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 47.493411][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 47.494180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 47.496050][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 47.616212][ T6044] wireguard0: entered promiscuous mode [ 47.618441][ T6044] wireguard0: entered allmulticast mode [ 48.004581][ T67] Bluetooth: hci0: command tx timeout [ 48.072957][ T67] Bluetooth: hci1: command tx timeout [ 48.682949][ T6087] netlink: 'syz.2.10': attribute type 32 has an invalid length. [ 48.692419][ T6087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'. [ 48.715206][ T6087] netlink: 'syz.2.10': attribute type 32 has an invalid length. [ 49.134696][ T6097] wireguard0: entered promiscuous mode [ 49.136360][ T6097] wireguard0: entered allmulticast mode [ 49.740295][ T6127] netlink: 'syz.0.13': attribute type 1 has an invalid length. [ 49.744305][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 49.744497][ T6128] random: crng reseeded on system resumption [ 49.799105][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 50.015628][ T6135] input: syz1 as /devices/virtual/input/input6 [ 50.255138][ T67] Bluetooth: hci0: command tx timeout [ 50.255143][ T5954] Bluetooth: hci1: command tx timeout [ 50.353193][ T6137] wireguard0: entered promiscuous mode [ 50.355161][ T6137] wireguard0: entered allmulticast mode [ 50.554388][ T5954] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 50.562975][ T5954] Bluetooth: hci3: Injecting HCI hardware error event [ 50.565721][ T5954] Bluetooth: hci3: hardware error 0x00 [ 50.777604][ T6148] netlink: 'syz.3.18': attribute type 1 has an invalid length. [ 50.811422][ T6142] wireguard0: entered promiscuous mode [ 50.813744][ T6142] wireguard0: entered allmulticast mode [ 50.821557][ T6148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18'. [ 50.925522][ T6152] netlink: 'syz.0.17': attribute type 32 has an invalid length. [ 50.927741][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17'. [ 50.930240][ T6152] netlink: 'syz.0.17': attribute type 32 has an invalid length. [ 51.032991][ T67] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 51.035633][ T67] Bluetooth: hci2: Injecting HCI hardware error event [ 51.038218][ T67] Bluetooth: hci2: hardware error 0x00 [ 51.169010][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18'. [ 51.468403][ T6169] wireguard0: entered promiscuous mode [ 51.472255][ T6169] wireguard0: entered allmulticast mode [ 51.979111][ T5305] Bluetooth: hci3: unexpected event for opcode 0x0401 [ 51.982875][ T6193] wireguard0: entered promiscuous mode [ 51.990246][ T6193] wireguard0: entered allmulticast mode [ 52.313003][ T5305] Bluetooth: hci1: command tx timeout [ 52.632962][ T5954] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 52.825488][ T6205] wireguard0: entered promiscuous mode [ 52.827065][ T6205] wireguard0: entered allmulticast mode [ 53.193567][ T67] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 53.282522][ T6213] wireguard0: entered promiscuous mode [ 53.285056][ T6213] wireguard0: entered allmulticast mode [ 54.474447][ T67] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 54.477161][ T67] Bluetooth: hci0: Injecting HCI hardware error event [ 54.480116][ T67] Bluetooth: hci0: hardware error 0x00 [ 54.647023][ T5954] Bluetooth: hci0: unexpected event for opcode 0x0401 [ 54.652712][ T6228] wireguard0: entered promiscuous mode [ 54.654547][ T6228] wireguard0: entered allmulticast mode [ 55.020610][ T6238] netlink: 'syz.0.30': attribute type 32 has an invalid length. [ 55.023119][ T6238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30'. [ 55.025845][ T6238] netlink: 'syz.0.30': attribute type 32 has an invalid length. [ 55.283211][ T6237] kAFS: No cell specified [ 55.285408][ T6237] process 'syz.3.28' launched './file0' with NULL argv: empty string added [ 55.422616][ T6248] input: syz1 as /devices/virtual/input/input7 [ 55.957914][ T6270] netlink: 'syz.0.33': attribute type 1 has an invalid length. [ 55.967120][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'. [ 56.021123][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'. [ 56.378981][ T6282] input: syz1 as /devices/virtual/input/input8 [ 56.558245][ T67] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 56.837190][ T6280] wireguard0: entered promiscuous mode [ 56.838855][ T6280] wireguard0: entered allmulticast mode [ 57.296063][ T6299] wireguard0: entered promiscuous mode [ 57.297804][ T6299] wireguard0: entered allmulticast mode [ 57.350878][ T6308] wireguard0: entered promiscuous mode [ 57.352620][ T6308] wireguard0: entered allmulticast mode [ 57.466658][ T6307] wireguard0: entered promiscuous mode [ 57.468763][ T6307] wireguard0: entered allmulticast mode [ 58.197812][ T6321] netlink: 'syz.0.39': attribute type 1 has an invalid length. [ 58.201298][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.39'. [ 58.269945][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.39'. [ 58.424305][ T6327] netlink: 'syz.2.41': attribute type 32 has an invalid length. [ 58.426643][ T6327] netlink: 'syz.2.41': attribute type 32 has an invalid length. [ 59.256818][ T6349] input: syz1 as /devices/virtual/input/input9 [ 59.516036][ T6356] Unknown status report in ack skb [ 60.295341][ T6375] netlink: 'syz.1.46': attribute type 32 has an invalid length. [ 60.298694][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.46'. [ 60.301209][ T6375] netlink: 'syz.1.46': attribute type 32 has an invalid length. [ 60.432406][ T6380] wireguard0: entered promiscuous mode [ 60.434039][ T6380] wireguard0: entered allmulticast mode [ 60.536665][ T6384] netlink: 'syz.0.48': attribute type 32 has an invalid length. [ 60.538783][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'. [ 60.541064][ T6384] netlink: 'syz.0.48': attribute type 32 has an invalid length. [ 60.652988][ T67] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 60.655401][ T67] Bluetooth: hci1: Injecting HCI hardware error event [ 60.658152][ T67] Bluetooth: hci1: hardware error 0x00 [ 60.814979][ T5954] Bluetooth: hci1: unexpected event for opcode 0x0401 [ 61.015961][ T6378] wireguard0: entered promiscuous mode [ 61.029121][ T6378] wireguard0: entered allmulticast mode [ 61.487356][ T6396] wireguard0: entered promiscuous mode [ 61.488061][ T6400] random: crng reseeded on system resumption [ 61.492937][ T6396] wireguard0: entered allmulticast mode [ 62.059444][ T6415] netlink: 'syz.3.53': attribute type 32 has an invalid length. [ 62.061690][ T6415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.53'. [ 62.064752][ T6415] netlink: 'syz.3.53': attribute type 32 has an invalid length. [ 62.542722][ T6432] input: syz1 as /devices/virtual/input/input10 [ 62.802952][ T67] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 63.168756][ T6457] netlink: 'syz.3.56': attribute type 1 has an invalid length. [ 63.177878][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'. [ 63.234976][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'. [ 63.815373][ T6469] random: crng reseeded on system resumption [ 63.844286][ T6471] random: crng reseeded on system resumption [ 64.014135][ T6475] netlink: 'syz.3.58': attribute type 32 has an invalid length. [ 64.016353][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.58'. [ 64.018701][ T6475] netlink: 'syz.3.58': attribute type 32 has an invalid length. [ 64.909571][ T6505] wireguard0: entered promiscuous mode [ 64.911185][ T6505] wireguard0: entered allmulticast mode [ 65.074655][ T6506] wireguard0: entered promiscuous mode [ 65.076314][ T6506] wireguard0: entered allmulticast mode [ 66.258724][ T6523] input: syz1 as /devices/virtual/input/input11 [ 67.060259][ T6533] input: syz1 as /devices/virtual/input/input12 [ 67.086749][ T6537] random: crng reseeded on system resumption [ 68.139325][ T6546] netlink: 'syz.2.71': attribute type 32 has an invalid length. [ 68.141653][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.71'. [ 68.144371][ T6546] netlink: 'syz.2.71': attribute type 32 has an invalid length. [ 68.652705][ T6592] random: crng reseeded on system resumption [ 68.903815][ T6611] input: syz1 as /devices/virtual/input/input13 [ 69.041823][ T6593] wireguard0: entered promiscuous mode [ 69.044193][ T6593] wireguard0: entered allmulticast mode [ 69.472026][ T6619] random: crng reseeded on system resumption [ 69.561628][ T6622] netlink: 'syz.0.81': attribute type 1 has an invalid length. [ 69.599967][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 69.659083][ T6627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 70.128983][ T6628] kAFS: No cell specified [ 70.686288][ T6655] wireguard0: entered promiscuous mode [ 70.706135][ T6658] random: crng reseeded on system resumption [ 70.707338][ T6655] wireguard0: entered allmulticast mode [ 70.812992][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.814947][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.820815][ T1413] ================================================================== [ 70.823020][ T1413] BUG: KASAN: slab-use-after-free in tty_write_room+0x7d/0x90 [ 70.825095][ T1413] Read of size 8 at addr ffff88806931d020 by task aoe_tx0/1413 [ 70.828847][ T1413] [ 70.829513][ T1413] CPU: 1 UID: 0 PID: 1413 Comm: aoe_tx0 Not tainted 6.14.0-rc7-syzkaller #0 [ 70.829525][ T1413] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.829532][ T1413] Call Trace: [ 70.829536][ T1413] [ 70.829540][ T1413] dump_stack_lvl+0x116/0x1f0 [ 70.829580][ T1413] print_report+0xc3/0x670 [ 70.829590][ T1413] ? __virt_addr_valid+0x5e/0x590 [ 70.829601][ T1413] ? __phys_addr+0xc6/0x150 [ 70.829611][ T1413] kasan_report+0xd9/0x110 [ 70.829620][ T1413] ? tty_write_room+0x7d/0x90 [ 70.829630][ T1413] ? tty_write_room+0x7d/0x90 [ 70.829640][ T1413] tty_write_room+0x7d/0x90 [ 70.829649][ T1413] handle_tx+0x151/0x630 [ 70.829660][ T1413] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 70.829675][ T1413] dev_hard_start_xmit+0x9a/0x7b0 [ 70.829690][ T1413] __dev_queue_xmit+0x7f0/0x43e0 [ 70.829705][ T1413] ? __pfx___dev_queue_xmit+0x10/0x10 [ 70.829718][ T1413] ? __pfx___lock_acquire+0x10/0x10 [ 70.829733][ T1413] ? __pfx___lock_acquire+0x10/0x10 [ 70.829748][ T1413] ? lock_acquire.part.0+0x11b/0x380 [ 70.829763][ T1413] ? find_held_lock+0x2d/0x110 [ 70.829774][ T1413] ? find_held_lock+0x2d/0x110 [ 70.829785][ T1413] ? tx+0xa8/0x190 [ 70.829796][ T1413] ? __pfx_lock_release+0x10/0x10 [ 70.829810][ T1413] ? lock_acquire+0x2f/0xb0 [ 70.829825][ T1413] tx+0xcc/0x190 [ 70.829835][ T1413] ? __pfx_tx+0x10/0x10 [ 70.829845][ T1413] kthread+0x1e7/0x3c0 [ 70.829861][ T1413] ? __pfx_kthread+0x10/0x10 [ 70.829877][ T1413] ? __pfx_default_wake_function+0x10/0x10 [ 70.829893][ T1413] ? lockdep_hardirqs_on+0x7c/0x110 [ 70.829907][ T1413] ? __kthread_parkme+0x148/0x220 [ 70.829917][ T1413] ? __pfx_kthread+0x10/0x10 [ 70.829933][ T1413] kthread+0x3af/0x750 [ 70.829945][ T1413] ? __pfx_kthread+0x10/0x10 [ 70.829958][ T1413] ? __pfx_kthread+0x10/0x10 [ 70.829970][ T1413] ret_from_fork+0x45/0x80 [ 70.829984][ T1413] ? __pfx_kthread+0x10/0x10 [ 70.829996][ T1413] ret_from_fork_asm+0x1a/0x30 [ 70.830011][ T1413] [ 70.830014][ T1413] [ 70.883089][ T1413] Allocated by task 6637: [ 70.884287][ T1413] kasan_save_stack+0x33/0x60 [ 70.885596][ T1413] kasan_save_track+0x14/0x30 [ 70.886901][ T1413] __kasan_kmalloc+0xaa/0xb0 [ 70.888188][ T1413] alloc_tty_struct+0x98/0x8d0 [ 70.889506][ T1413] tty_init_dev.part.0+0x1e/0x660 [ 70.890872][ T1413] tty_init_dev+0x60/0x80 [ 70.892049][ T1413] ptmx_open+0x10d/0x360 [ 70.893211][ T1413] chrdev_open+0x237/0x6a0 [ 70.894420][ T1413] do_dentry_open+0x735/0x1c40 [ 70.895738][ T1413] vfs_open+0x82/0x3f0 [ 70.896851][ T1413] path_openat+0x1e88/0x2d80 [ 70.898071][ T1413] do_filp_open+0x20c/0x470 [ 70.899280][ T1413] do_sys_openat2+0x17a/0x1e0 [ 70.900564][ T1413] __ia32_compat_sys_openat+0x16e/0x210 [ 70.902024][ T1413] __do_fast_syscall_32+0x73/0x120 [ 70.903422][ T1413] do_fast_syscall_32+0x32/0x80 [ 70.904751][ T1413] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 70.906477][ T1413] [ 70.907149][ T1413] Freed by task 6153: [ 70.908258][ T1413] kasan_save_stack+0x33/0x60 [ 70.909550][ T1413] kasan_save_track+0x14/0x30 [ 70.910842][ T1413] kasan_save_free_info+0x3b/0x60 [ 70.912242][ T1413] __kasan_slab_free+0x51/0x70 [ 70.913575][ T1413] kfree+0x2c4/0x4d0 [ 70.914660][ T1413] process_one_work+0x9c5/0x1ba0 [ 70.916015][ T1413] worker_thread+0x6c8/0xf00 [ 70.917266][ T1413] kthread+0x3af/0x750 [ 70.918357][ T1413] ret_from_fork+0x45/0x80 [ 70.919599][ T1413] ret_from_fork_asm+0x1a/0x30 [ 70.920909][ T1413] [ 70.921580][ T1413] Last potentially related work creation: [ 70.923128][ T1413] kasan_save_stack+0x33/0x60 [ 70.924424][ T1413] kasan_record_aux_stack+0xb8/0xd0 [ 70.925852][ T1413] insert_work+0x36/0x230 [ 70.927052][ T1413] __queue_work+0x97e/0x10f0 [ 70.928330][ T1413] queue_work_on+0x11a/0x140 [ 70.929614][ T1413] release_tty+0x4de/0x5d0 [ 70.930840][ T1413] tty_release_struct+0xb7/0xe0 [ 70.932146][ T1413] tty_release+0xe25/0x1410 [ 70.933457][ T1413] __fput+0x3ff/0xb70 [ 70.934561][ T1413] task_work_run+0x14e/0x250 [ 70.935791][ T1413] syscall_exit_to_user_mode+0x27b/0x2a0 [ 70.937292][ T1413] __do_fast_syscall_32+0x80/0x120 [ 70.938669][ T1413] do_fast_syscall_32+0x32/0x80 [ 70.939987][ T1413] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 70.941732][ T1413] [ 70.942415][ T1413] The buggy address belongs to the object at ffff88806931d000 [ 70.942415][ T1413] which belongs to the cache kmalloc-cg-2k of size 2048 [ 70.946312][ T1413] The buggy address is located 32 bytes inside of [ 70.946312][ T1413] freed 2048-byte region [ffff88806931d000, ffff88806931d800) [ 70.950019][ T1413] [ 70.950708][ T1413] The buggy address belongs to the physical page: [ 70.952430][ T1413] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x69318 [ 70.954738][ T1413] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 70.956959][ T1413] memcg:ffff88804bf06001 [ 70.958081][ T1413] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 70.960122][ T1413] page_type: f5(slab) [ 70.961230][ T1413] raw: 04fff00000000040 ffff88801b050140 dead000000000122 0000000000000000 [ 70.963529][ T1413] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff88804bf06001 [ 70.965792][ T1413] head: 04fff00000000040 ffff88801b050140 dead000000000122 0000000000000000 [ 70.968081][ T1413] head: 0000000000000000 0000000000080008 00000000f5000000 ffff88804bf06001 [ 70.970363][ T1413] head: 04fff00000000003 ffffea0001a4c601 ffffffffffffffff 0000000000000000 [ 70.972735][ T1413] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 70.975110][ T1413] page dumped because: kasan: bad access detected [ 70.976847][ T1413] page_owner tracks the page as allocated [ 70.978365][ T1413] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6593, tgid 6572 (syz.0.75), ts 69034348073, free_ts 68796136229 [ 70.983865][ T1413] post_alloc_hook+0x181/0x1b0 [ 70.985130][ T1413] get_page_from_freelist+0xfce/0x2f80 [ 70.986596][ T1413] __alloc_frozen_pages_noprof+0x221/0x2470 [ 70.988182][ T1413] alloc_pages_mpol+0x1fc/0x540 [ 70.989495][ T1413] new_slab+0x23d/0x330 [ 70.990640][ T1413] ___slab_alloc+0xc5d/0x1720 [ 70.991924][ T1413] __slab_alloc.constprop.0+0x56/0xb0 [ 70.993342][ T1413] __kmalloc_node_track_caller_noprof+0x2f1/0x510 [ 70.995051][ T1413] kmemdup_noprof+0x29/0x60 [ 70.996286][ T1413] neigh_sysctl_register+0xb3/0x640 [ 70.997685][ T1413] addrconf_sysctl_register+0xb9/0x1f0 [ 70.999215][ T1413] ipv6_add_dev+0xa6f/0x13f0 [ 71.000456][ T1413] addrconf_notify+0x53e/0x19c0 [ 71.001797][ T1413] notifier_call_chain+0xb7/0x410 [ 71.003211][ T1413] call_netdevice_notifiers_info+0xbe/0x140 [ 71.004844][ T1413] register_netdevice+0x17c2/0x1eb0 [ 71.006281][ T1413] page last free pid 6603 tgid 6603 stack trace: [ 71.008024][ T1413] free_frozen_pages+0x6db/0xfb0 [ 71.009400][ T1413] __put_partials+0x14c/0x170 [ 71.010717][ T1413] qlist_free_all+0x4e/0x120 [ 71.012017][ T1413] kasan_quarantine_reduce+0x195/0x1e0 [ 71.013513][ T1413] __kasan_slab_alloc+0x69/0x90 [ 71.014833][ T1413] kmem_cache_alloc_noprof+0x226/0x3d0 [ 71.016311][ T1413] getname_flags.part.0+0x4c/0x550 [ 71.017696][ T1413] getname+0x8d/0xe0 [ 71.018766][ T1413] do_sys_openat2+0x104/0x1e0 [ 71.020029][ T1413] __x64_sys_openat+0x175/0x210 [ 71.021354][ T1413] do_syscall_64+0xcd/0x250 [ 71.022579][ T1413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.024160][ T1413] [ 71.024811][ T1413] Memory state around the buggy address: [ 71.026312][ T1413] ffff88806931cf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 71.028430][ T1413] ffff88806931cf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 71.030560][ T1413] >ffff88806931d000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.032702][ T1413] ^ [ 71.034064][ T1413] ffff88806931d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.036202][ T1413] ffff88806931d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.038333][ T1413] ================================================================== [ 71.040519][ C1] vkms_vblank_simulate: vblank timer overrun [ 71.042149][ T1413] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 71.044089][ T1413] CPU: 1 UID: 0 PID: 1413 Comm: aoe_tx0 Not tainted 6.14.0-rc7-syzkaller #0 [ 71.046346][ T1413] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.049188][ T1413] Call Trace: [ 71.050092][ T1413] [ 71.050918][ T1413] dump_stack_lvl+0x3d/0x1f0 [ 71.052191][ T1413] panic+0x71d/0x800 [ 71.053253][ T1413] ? mark_held_locks+0x9f/0xe0 [ 71.054563][ T1413] ? __pfx_panic+0x10/0x10 [ 71.055765][ T1413] ? irqentry_exit+0x3b/0x90 [ 71.056999][ T1413] ? lockdep_hardirqs_on+0x7c/0x110 [ 71.058413][ T1413] ? check_panic_on_warn+0x1f/0xb0 [ 71.059831][ T1413] check_panic_on_warn+0xab/0xb0 [ 71.061152][ T1413] end_report+0x117/0x180 [ 71.062319][ T1413] kasan_report+0xe9/0x110 [ 71.063581][ T1413] ? tty_write_room+0x7d/0x90 [ 71.064886][ T1413] ? tty_write_room+0x7d/0x90 [ 71.066194][ T1413] tty_write_room+0x7d/0x90 [ 71.067460][ T1413] handle_tx+0x151/0x630 [ 71.068639][ T1413] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 71.070256][ T1413] dev_hard_start_xmit+0x9a/0x7b0 [ 71.071658][ T1413] __dev_queue_xmit+0x7f0/0x43e0 [ 71.073029][ T1413] ? __pfx___dev_queue_xmit+0x10/0x10 [ 71.074510][ T1413] ? __pfx___lock_acquire+0x10/0x10 [ 71.075895][ T1413] ? __pfx___lock_acquire+0x10/0x10 [ 71.077303][ T1413] ? lock_acquire.part.0+0x11b/0x380 [ 71.078760][ T1413] ? find_held_lock+0x2d/0x110 [ 71.080068][ T1413] ? find_held_lock+0x2d/0x110 [ 71.081377][ T1413] ? tx+0xa8/0x190 [ 71.082418][ T1413] ? __pfx_lock_release+0x10/0x10 [ 71.083773][ T1413] ? lock_acquire+0x2f/0xb0 [ 71.084971][ T1413] tx+0xcc/0x190 [ 71.085978][ T1413] ? __pfx_tx+0x10/0x10 [ 71.087115][ T1413] kthread+0x1e7/0x3c0 [ 71.088212][ T1413] ? __pfx_kthread+0x10/0x10 [ 71.089523][ T1413] ? __pfx_default_wake_function+0x10/0x10 [ 71.091107][ T1413] ? lockdep_hardirqs_on+0x7c/0x110 [ 71.092516][ T1413] ? __kthread_parkme+0x148/0x220 [ 71.093813][ T1413] ? __pfx_kthread+0x10/0x10 [ 71.095099][ T1413] kthread+0x3af/0x750 [ 71.096199][ T1413] ? __pfx_kthread+0x10/0x10 [ 71.097417][ T1413] ? __pfx_kthread+0x10/0x10 [ 71.098675][ T1413] ret_from_fork+0x45/0x80 [ 71.099906][ T1413] ? __pfx_kthread+0x10/0x10 [ 71.101138][ T1413] ret_from_fork_asm+0x1a/0x30 [ 71.102423][ T1413] [ 71.103690][ T1413] Kernel Offset: disabled [ 71.104857][ T1413] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:10:03 Registers: info registers vcpu 0 CPU#0 RAX=000000000018839f RBX=0000000000000000 RCX=ffffffff8b556469 RDX=0000000000000000 RSI=ffffffff8b6cfbe0 RDI=ffffffff8bd35a60 RBP=fffffbfff1bd2ee8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed1005686f85 R10=ffff88802b437c2b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de97740 R14=ffffffff90628b10 R15=0000000000000000 RIP=ffffffff8b55784f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000565c84c0 CR3=000000005b2b2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853e91d5 RDI=ffffffff9ab71ea0 RBP=ffffffff9ab71e60 RSP=ffffc90007b0f430 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000066 R14=ffffffff9ab71e60 R15=0000000000000000 RIP=ffffffff853e91ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002f2f5ffc CR3=000000005b2b2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=cfdf09dd483b5602 RBX=96d0a5ea75cb9b86 RCX=ffffffff8195c82e RDX=fffffbfff2dd839b RSI=0000000000000008 RDI=ffffffff96ec1cd0 RBP=ffffffff96ed82c8 RSP=ffffc9000db06f40 R8 =0000000000000000 R9 =fffffbfff2dd839a R10=ffffffff96ec1cd7 R11=0000000000000001 R12=0000000000000000 R13=ffff888025714880 R14=00000000000000a8 R15=ffff888025715398 RIP=ffffffff8196871b RFL=00000883 [-OS---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000c27e81d CR3=000000004f670000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f738cff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000076bcd RBX=0000000000000003 RCX=ffffffff8b556469 RDX=0000000000000000 RSI=ffffffff8b6cfbe0 RDI=ffffffff8bd35a60 RBP=ffffed1003ad0910 RSP=ffffc900004afe08 R8 =0000000000000001 R9 =ffffed10056e6f85 R10=ffff88802b737c2b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d684880 R14=ffffffff90628b10 R15=0000000000000000 RIP=ffffffff8b55784f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000c390cb1 CR3=000000004c482000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000