last executing test programs: 9.159239892s ago: executing program 2 (id=3): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x5, 0x20001000, 0xffffffffffffffff, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000000)={0x3, 0x20000000, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001380)='blkio.bfq.idle_time\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) openat$cdrom(0xffffff9c, &(0x7f0000000280), 0x0, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000012c0)=[@window={0x3, 0x1, 0x8}, @timestamp, @window={0x3, 0x8000, 0x627}, @mss={0x2, 0x4}, @sack_perm, @timestamp, @sack_perm], 0x7) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) 8.677154017s ago: executing program 2 (id=5): r0 = socket(0x10, 0x803, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000001040)={0x0, 0x0}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x2}, 0x10}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104fcffffff000000000000000046df121ab00a6f2e7a9992bf45f057dbf9cb040ce19f7d85dd668f49b76760af330aed697a6f70dacafc6fe0716f0c15d834128754cef19bdfa39f0849ba95", @ANYRES32=0x0, @ANYBLOB="00250000000000001c0012800b000100697036746e6c00000c00028006000f0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 8.394051236s ago: executing program 2 (id=7): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x12, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 8.322338256s ago: executing program 2 (id=9): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x5b0f, &(0x7f0000000180)={0x0, 0xfffffffc, 0x80, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) chdir(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) eventfd2(0x0, 0x80800) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x96b, 0xb, 0x400}) syz_open_dev$dri(&(0x7f0000000100), 0xcaf8, 0x40000) r3 = syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xfff, 0x9, 0x9}) prlimit64(0xffffffffffffffff, 0xd, &(0x7f0000000040)={0x8}, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000140)={r4}) 7.864320657s ago: executing program 1 (id=11): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x288082, 0x52) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r4, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000400)={0x0, 0xf20f, 0x40, 0x3, 0x1b}, 0x0, &(0x7f0000000200), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x1, 0x0, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101401, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x7, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf5, 0x4, 0x8080ffa, 0x5, 0x0, 0x9, 0x0, 0x1000004, 0x1, 0x5, 0xfff7ffa8, 0x7ffffffd, 0x1ef, 0x1, 0x2000000f, 0x55, 0x8, 0x4008, 0x4, 0x100008, 0x6, 0x10, 0xee, 0x4, 0x7ffd]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) unshare(0x26020480) r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) fchdir(r3) sendmsg$nl_generic(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x28, 0x3c, 0x40c, 0x70bd2a, 0x25dfdbfc, {0x1}, [@typed={0x8, 0xcc, 0x0, 0x0, @fd=r5}, @nested={0xc, 0x6a, 0x0, 0x1, [@nested={0x4, 0xe}, @typed={0x4, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0xc840) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000540)="b88a000000000000000000008100", 0x5bc}], 0x1}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c20000010011ab01ec4fb4788e667e5651d5390e7961c6bdeaf9f998a7ef852e97a8f58a79153cae7c113be28f86199888f1c60d67aed97739de3d0833be8cb2a05e15946eb90c4ac6c90d1bf5"], 0x0) 6.583730377s ago: executing program 1 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d03, 0x0, 0x100}]}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x1, @private=0xa010101}]}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r2, @ANYRES32=r5], 0x1c, 0x2400e044}, 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/reset\x00', 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}}, 0x1) sendmmsg$inet6(r7, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) write$uinput_user_dev(r7, &(0x7f0000000640)={'syz1\x00', {0xc, 0x1000, 0x318c, 0x4}, 0x1b, [0x5, 0xfffffff8, 0x6, 0xa0, 0x1, 0x1, 0xfffffffd, 0x4, 0x10000, 0x1, 0x6, 0x1, 0x3577, 0x0, 0x5, 0x7, 0x1000, 0x222000, 0x7, 0xa, 0x4, 0xa692, 0x60000, 0xffffffff, 0x8, 0xd, 0xffffffff, 0x7, 0x10001, 0x7, 0x4, 0x5, 0x8, 0x4a0, 0xb35, 0x0, 0x8, 0x80000000, 0x4, 0x4, 0x401, 0x9, 0x8, 0x2, 0x0, 0x0, 0x8, 0x2, 0x0, 0x5, 0x0, 0x0, 0x3, 0x3, 0x3, 0x6, 0xfffffffb, 0x0, 0x10, 0x200, 0x80, 0x2db, 0x6, 0x1], [0x5, 0xa1f, 0x4, 0x6, 0xfffffffa, 0x6, 0x5, 0x0, 0x8d7, 0x2, 0x8, 0x2, 0x7fffffff, 0x8, 0x4, 0xffffff01, 0xffff, 0x8, 0x7fffffff, 0x7, 0x7f, 0x0, 0x6, 0x2, 0x4, 0x1, 0x4, 0x0, 0x8000, 0x3, 0xffffffff, 0x9, 0x5, 0x0, 0x3f9, 0x1, 0xffff, 0x36c, 0x7f, 0x2, 0x7, 0x5, 0x8001, 0x7, 0x0, 0xffff, 0x1, 0x7, 0x0, 0x6f, 0x8000, 0x6c, 0x6, 0xff, 0x9530, 0x10000, 0x83, 0x6, 0x1, 0xfffffff8, 0x400, 0x3fe, 0x62, 0x8], [0x0, 0x9, 0x40, 0xfffffff7, 0x8, 0x9, 0x93d6, 0xfff, 0x10000, 0xb2e3, 0x9, 0x1, 0x6, 0x1800, 0x3, 0xa2, 0x2, 0xfffffffd, 0x0, 0xc276, 0x7, 0x46b5, 0x10000, 0x89d, 0x1d71, 0x2, 0x4, 0x0, 0x0, 0x8fae, 0x2, 0xc, 0x4, 0x9, 0x6, 0x544, 0x1, 0x6, 0x5, 0x2, 0x9, 0x6c, 0x8, 0x5, 0x9, 0xa, 0x5de, 0x0, 0x7ff, 0x9, 0x9, 0xffffffff, 0x2, 0x9, 0x4c3, 0x1, 0x3, 0xe, 0xa8e, 0xf, 0x8, 0xb757, 0x6, 0x9], [0x2, 0x1, 0x8, 0x8b, 0x1, 0x7, 0x2, 0x8, 0xe9, 0x80, 0x28fa, 0x7ff, 0xca8, 0xf, 0x2, 0x6, 0x0, 0x7, 0x80000000, 0xffffffff, 0x2, 0x0, 0x2, 0x3, 0x4, 0x3, 0x80, 0x7ff, 0x7, 0x7, 0x401, 0x0, 0x6, 0x6, 0x80000000, 0xfffffffa, 0x0, 0x3, 0x5, 0x200, 0x9, 0x4, 0x9, 0x3, 0x2, 0xa, 0x7, 0x2, 0x7, 0x8001, 0x0, 0xfffffff7, 0x3, 0x9, 0x1000, 0x81, 0xec19, 0x1, 0x100, 0x9, 0x3, 0x9, 0x3, 0x4a]}, 0x45c) write(r6, &(0x7f0000000200)='1', 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/reset\x00', 0x1, 0x0) write(r8, &(0x7f0000000400)='1', 0x1) r9 = openat(r7, &(0x7f0000000340)='./sys/bus/pci/devices/0000:00:02.0/reset\x00', 0x474381, 0x120) write(r9, &(0x7f0000000600)='1', 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="090527bd7000fcdbdf25021800ff000000000000", @ANYRESOCT=r8, @ANYBLOB="080002000a01010214000600000000000000000005000000ffffffff", @ANYRES32=r0, @ANYRES64], 0x34}, 0x1, 0x0, 0x0, 0x4040014}, 0x20004810) 6.32271843s ago: executing program 2 (id=14): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x5b0f, &(0x7f0000000180)={0x0, 0xfffffffc, 0x80, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) chdir(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) eventfd2(0x0, 0x80800) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x96b, 0xb, 0x400}) syz_open_dev$dri(&(0x7f0000000100), 0xcaf8, 0x40000) r4 = syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0xfff, 0x9, 0x9}) prlimit64(0xffffffffffffffff, 0xd, &(0x7f0000000040)={0x8}, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000140)={r5}) 5.953365943s ago: executing program 0 (id=15): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getrlimit(0x3, &(0x7f0000000180)) r1 = getpid() syz_open_dev$MSR(&(0x7f00000001c0), 0x7, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = dup(0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}}) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, 0x0, 0x0) write$uinput_user_dev(r4, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f00000800410072786500140033007767320000000000000000000000000066129cbdaaf92ea305126427a766b1c085924cd6ad57b03cfe9655f622d77d2aeea86454e08d702ca2d6392ca31ef21b722d78da5d90886bb0db32b0e33c89a5e901bb4e0379f25665d395238e6730ad37288567b268fe7f1586d588e526e7"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) pipe(0x0) 5.554157133s ago: executing program 1 (id=18): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getrlimit(0x3, &(0x7f0000000180)) r1 = getpid() syz_open_dev$MSR(&(0x7f00000001c0), 0x7, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = dup(0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}}) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, 0x0, 0x0) write$uinput_user_dev(r4, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f00000800410072786500140033007767320000000000000000000000000066129cbdaaf92ea305126427a766b1c085924cd6ad57b03cfe9655f622d77d2aeea86454e08d702ca2d6392ca31ef21b722d78da5d90886bb0db32b0e33c89a5e901bb4e0379f25665d395238e6730ad37288567b268fe7f1586d588e526e7"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) pipe(0x0) 5.21802408s ago: executing program 3 (id=19): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x5b0f, &(0x7f0000000180)={0x0, 0xfffffffc, 0x80, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) chdir(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) eventfd2(0x0, 0x80800) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x96b, 0xb, 0x400}) syz_open_dev$dri(&(0x7f0000000100), 0xcaf8, 0x40000) r3 = syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xfff, 0x9, 0x9}) prlimit64(0xffffffffffffffff, 0xd, &(0x7f0000000040)={0x8}, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000140)={r4}) 4.717178306s ago: executing program 2 (id=20): syz_emit_ethernet(0x2a, &(0x7f0000000580)={@local, @random="008212924e1f", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x7}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @void}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x71bd28, 0x25dfdbfe, {0xa, 0x10, 0x71}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000040) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) ioctl$VIDIOC_S_FBUF(r4, 0x402c560b, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)="bbf6e3f524ec28b878e95edca4a2b40f8938430f84a67915d0380e55597ba1e0a02c550422c411476ef514aa2515c2284b95c83ad71abd152ce2591586ec", {0x3, 0x1, 0x38416761, 0x2, 0x5, 0x16db, 0x6, 0x1ff}}) r5 = syz_usb_connect$uac3(0x5, 0xce, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x4064, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc, 0x3, 0x1, 0x7e, 0x20, 0xf1, {0x8, 0xb, 0x1, 0x0, 0x1, 0x23, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x3c, 0x8}, [@feature_unit={0x1d, 0x24, 0x7, 0x6, 0x2, [0xd, 0x0, 0x2, 0x1, 0xa, 0x7]}, @mixer_unit={0xa, 0x24, 0x5, 0x1, 0x60, "63a0a2f316"}, @multiply_unit={0xb, 0x24, 0xd, 0x1, 0x3, 0x800000}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x9c}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x1, 0x5, {0xa, 0x25, 0x25, 0x9, 0x91, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x34}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x401, 0xa, 0x5, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0x6, 0x16, {0xa, 0x25, 0x25, 0x1, 0x8, 0x8}}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x7, 0x81, 0x9, 0x40, 0x37}, 0x7b, &(0x7f0000000300)={0x5, 0xf, 0x7b, 0x5, [@generic={0x53, 0x10, 0xa, "5ebefce788db2ac8142cbbaef9f9abdd213c5be0753cc2b69b4bb34e59d0dd1026b9740d3d9a719a8746eb8ee4a1b69a2a9658c924a60fa096e5f6d8893cfd4f2618aeb1cbbe0f5a79cd38ed5978b21a"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x0, 0x9, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x3, 0x401, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x0, 0x0, 0x9ee1}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xa, 0x4, 0x6}]}, 0x6, [{0x8f, &(0x7f0000000380)=@string={0x8f, 0x3, "7f64bd858ec4c174fa9e5ada381c609dadb6fe607a96016afc5302596662de3cc1ec4e70a4aa9e0e28440131c9b6e0f4571d861b1f72a7ec603d38e2f42edcde520dee10a7a071752c99a1b3d22544e431ec0b17a8aaddcc9233fedef48a31ada990959c3dbc087ddccfb323eb4011b8aa0d49dec47f00bc766367f51f1f7631f39ca049a2cf5b0049747c331b"}}, {0xdb, &(0x7f0000000440)=@string={0xdb, 0x3, "d9c77b42585b6af1a12de73d480f5e8094d52d4145b1f8a533fc6a605b8e08f3e6ce7787aea53915ba33d32a8c74af1441c84fd4f07e3a9df36a54bf14548b3e3a936c9312264b9c2ca16d8eb47cb95587c288c5e91bd272aa5bc444880608365425ddb8c6e748fcb72a7912a4f8850a6ad512925acc69febed7b7cbbbaecfe627bfb1fbc32161b1a960982de9669d0bbdf848b1930c24559be4837cfbeb36d7e9123d097edfab94de34f396664b81f68dc06aa421b12238e1a0c390b3987e728c06ea98448052b9daef64fee8e6caae04da201b3afeb48221"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x48}}, {0xe, &(0x7f00000005c0)=@string={0xe, 0x3, "5a1c41342fec26688802c7b1"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1407}}]}) syz_usb_disconnect(r5) write(r4, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) 4.074328744s ago: executing program 3 (id=21): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) 3.944222289s ago: executing program 3 (id=22): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getrlimit(0x3, &(0x7f0000000180)) r1 = getpid() syz_open_dev$MSR(&(0x7f00000001c0), 0x7, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffc"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = dup(0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}}) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, 0x0, 0x0) write$uinput_user_dev(r4, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f00000800410072786500140033007767320000000000000000000000000066129cbdaaf92ea305126427a766b1c085924cd6ad57b03cfe9655f622d77d2aeea86454e08d702ca2d6392ca31ef21b722d78da5d90886bb0db32b0e33c89a5e901bb4e0379f25665d395238e6730ad37288567b268fe7f1586d588e526e7"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) pipe(0x0) 3.214403016s ago: executing program 0 (id=23): r0 = fsopen(&(0x7f0000002800)='openpromfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[], 0x0}, 0x94) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v2to_da_alloc', 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x800000000080, 0x4, 0x1}, {}, 0x70bd25, 0x0, 0x2, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x148}}, 0x4810) getsockopt$inet_int(r1, 0x0, 0x5, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) setsockopt$inet_int(r1, 0x0, 0xa, &(0x7f0000000000)=0x6, 0x4) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffffffffffe44) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r4, 0x8e, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r3, 0x0}]) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000002600)='net/psched\x00') r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x54, r6, 0x113, 0x0, 0x400, {0x41}, [{@nsim={{0xe}, {0xffffffffffffff08, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x87}, {0xc}, {0xc}}]}, 0x54}}, 0x800) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@ipv4_newroute={0x1c, 0x18, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x3}}, 0x1c}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_tables_matches\x00') read$FUSE(r7, &(0x7f0000000500)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x1c, &(0x7f0000002640)=ANY=[@ANYBLOB="180000000000000000000000200000021811000058330531ba51c43b035cb465204777bd58df6bc1d00e38263bde91c97ca28f81947ed8d1080d2a228c4ee60e3280aa0109380cb34346a9ecd96dc5b98745415f2bc076e3d91207cf4abede91447b8c5f2c527eb5e06c0000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES64=r7, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001811000086612d157b693932bca3e16f48682d5e8f19", @ANYRES64=r7, @ANYBLOB="0000000000000000b702000000002a728500000017000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000400000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x35, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002540)={r9, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) keyctl$search(0xa, 0x0, &(0x7f00000025c0)='ceph\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@getlink={0x20, 0x12, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x2000a004}, 0x40010) 3.179224261s ago: executing program 1 (id=24): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x5b0f, &(0x7f0000000180)={0x0, 0xfffffffc, 0x80, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) chdir(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) eventfd2(0x0, 0x80800) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x96b, 0xb, 0x400}) syz_open_dev$dri(&(0x7f0000000100), 0xcaf8, 0x40000) r4 = syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0xfff, 0x9, 0x9}) prlimit64(0xffffffffffffffff, 0xd, &(0x7f0000000040)={0x8}, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000140)={r5}) 2.744153811s ago: executing program 0 (id=25): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x5, 0x20001000, 0xffffffffffffffff, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000000)={0x3, 0x20000000, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001380)='blkio.bfq.idle_time\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$inet_udp(0x2, 0x2, 0x0) openat$cdrom(0xffffff9c, &(0x7f0000000280), 0x0, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000012c0)=[@window={0x3, 0x1, 0x8}, @timestamp, @window={0x3, 0x8000, 0x627}, @mss={0x2, 0x4}, @sack_perm, @timestamp, @sack_perm], 0x7) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) 2.326297883s ago: executing program 0 (id=26): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x5b0f, &(0x7f0000000180)={0x0, 0xfffffffc, 0x80, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) chdir(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) eventfd2(0x0, 0x80800) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x96b, 0xb, 0x400}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xfff, 0x9, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x96e, 0xb, 0x400}) prlimit64(0xffffffffffffffff, 0xd, &(0x7f0000000040)={0x8}, &(0x7f0000000080)) close_range(r3, r4, 0x0) 1.928380124s ago: executing program 3 (id=27): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x5b0f, &(0x7f0000000180)={0x0, 0xfffffffc, 0x80, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) chdir(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) eventfd2(0x0, 0x80800) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x96b, 0xb, 0x400}) r4 = syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0xfff, 0x9, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x96e, 0xb, 0x400}) prlimit64(0xffffffffffffffff, 0xd, &(0x7f0000000040)={0x8}, &(0x7f0000000080)) close_range(r3, 0xffffffffffffffff, 0x0) 1.359012202s ago: executing program 1 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d03, 0x0, 0x100}]}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x1, @private=0xa010101}]}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r2, @ANYRES32=r5], 0x1c, 0x2400e044}, 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/reset\x00', 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/165, 0xee, 0x1, 0x0}, &(0x7f0000000180)=0x40) write$uinput_user_dev(r7, &(0x7f0000000640)={'syz1\x00', {0xc, 0x1000, 0x318c, 0x4}, 0x1b, [0x5, 0xfffffff8, 0x6, 0xa0, 0x1, 0x1, 0xfffffffd, 0x4, 0x10000, 0x1, 0x6, 0x1, 0x3577, 0x0, 0x5, 0x7, 0x1000, 0x222000, 0x7, 0xa, 0x4, 0xa692, 0x60000, 0xffffffff, 0x8, 0xd, 0xffffffff, 0x7, 0x10001, 0x7, 0x4, 0x5, 0x8, 0x4a0, 0xb35, 0x0, 0x8, 0x80000000, 0x4, 0x4, 0x401, 0x9, 0x8, 0x2, 0x0, 0x0, 0x8, 0x2, 0x0, 0x5, 0x0, 0x0, 0x3, 0x3, 0x3, 0x6, 0xfffffffb, 0x0, 0x10, 0x200, 0x80, 0x2db, 0x6, 0x1], [0x5, 0xa1f, 0x4, 0x6, 0xfffffffa, 0x6, 0x5, 0x0, 0x8d7, 0x2, 0x8, 0x2, 0x7fffffff, 0x8, 0x4, 0xffffff01, 0xffff, 0x8, 0x7fffffff, 0x7, 0x7f, 0x0, 0x6, 0x2, 0x4, 0x1, 0x4, 0x0, 0x8000, 0x3, 0xffffffff, 0x9, 0x5, 0x0, 0x3f9, 0x1, 0xffff, 0x36c, 0x7f, 0x2, 0x7, 0x5, 0x8001, 0x7, 0x0, 0xffff, 0x1, 0x7, 0x0, 0x6f, 0x8000, 0x6c, 0x6, 0xff, 0x9530, 0x10000, 0x83, 0x6, 0x1, 0xfffffff8, 0x400, 0x3fe, 0x62, 0x8], [0x0, 0x9, 0x40, 0xfffffff7, 0x8, 0x9, 0x93d6, 0xfff, 0x10000, 0xb2e3, 0x9, 0x1, 0x6, 0x1800, 0x3, 0xa2, 0x2, 0xfffffffd, 0x0, 0xc276, 0x7, 0x46b5, 0x10000, 0x89d, 0x1d71, 0x2, 0x4, 0x0, 0x0, 0x8fae, 0x2, 0xc, 0x4, 0x9, 0x6, 0x544, 0x1, 0x6, 0x5, 0x2, 0x9, 0x6c, 0x8, 0x5, 0x9, 0xa, 0x5de, 0x0, 0x7ff, 0x9, 0x9, 0xffffffff, 0x2, 0x9, 0x4c3, 0x1, 0x3, 0xe, 0xa8e, 0xf, 0x8, 0xb757, 0x6, 0x9], [0x2, 0x1, 0x8, 0x8b, 0x1, 0x7, 0x2, 0x8, 0xe9, 0x80, 0x28fa, 0x7ff, 0xca8, 0xf, 0x2, 0x6, 0x0, 0x7, 0x80000000, 0xffffffff, 0x2, 0x0, 0x2, 0x3, 0x4, 0x3, 0x80, 0x7ff, 0x7, 0x7, 0x401, 0x0, 0x6, 0x6, 0x80000000, 0xfffffffa, 0x0, 0x3, 0x5, 0x200, 0x9, 0x4, 0x9, 0x3, 0x2, 0xa, 0x7, 0x2, 0x7, 0x8001, 0x0, 0xfffffff7, 0x3, 0x9, 0x1000, 0x81, 0xec19, 0x1, 0x100, 0x9, 0x3, 0x9, 0x3, 0x4a]}, 0x45c) write(r6, &(0x7f0000000200)='1', 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/reset\x00', 0x1, 0x0) write(r8, &(0x7f0000000400)='1', 0x1) r9 = openat(r7, &(0x7f0000000340)='./sys/bus/pci/devices/0000:00:02.0/reset\x00', 0x474381, 0x120) write(r9, &(0x7f0000000600)='1', 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r6) r11 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="090527bd7000fcdbdf25021800ff000000000000", @ANYRESOCT=r8, @ANYBLOB="080002000a01010214000600000000000000000005000000ffffffff", @ANYRES32=r0, @ANYRES64], 0x34}, 0x1, 0x0, 0x0, 0x4040014}, 0x20004810) 1.21920817s ago: executing program 0 (id=29): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="020000e4030000000400000001000000840000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000380)=r1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000710300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000280)=0x5) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load ecryptfs trusted:tr00000000000000000164 '], 0x35, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f0000000500)={0x3, 0x7ffffffe}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000440)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x31, 0x25, 0x35]}}, {@usrquota}, {@usrquota}, {@huge_always}, {@quota}, {@size={'size', 0x3d, [0x38]}}, {@quota}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x33]}}}}]}) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x5, [{0x1, 0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x6}, 0x28) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001e00350028bd7000fef7df2500000000893b43de890d2503e0e073c57fac9a6d5881eee7bf52d1609c3008d4fb6a69c2c6c54693f2d4087cd63707309e11f8bba512edac5e01c14c36334966890863c65d"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x80) r6 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v2to_da_alloc', 0x0) 323.656719ms ago: executing program 1 (id=30): add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r0 = socket$inet6(0xa, 0x805, 0x0) io_setup(0x9, &(0x7f00000000c0)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/cpu_byteorder', 0x28201, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x42, 0x0, &(0x7f0000000040)=0x87) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000640)=0x4) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sync() sync() r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) sync() r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r2, @ANYRES32=0x0, @ANYBLOB="0300008008000200030000000800020000000000140001"], 0x48}}, 0x44004) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100015800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22ffe6) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x4c0302, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) close(r2) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000440)="0000365d61fca41779e9733f7439fd45f5df0b594193adb2db2f863b750afccbf4a2290c0824c43036fec5516188b7b8b762afe567d7cdabfea496d9973261ec724ec05406085dc92c9f68af5f70d2e8cc6de95c8b2c625573935473345d426dfb48c5f554e23f99884ee24fb46067b03ab8a5881e0f8b82613a35e4885ee128602b5e7877fa3a991688beb0cba3368dbfe0a3d0c7620255262f80f222b047749888eab35e12a5df52c923e901ed10d8012004cf07e9d1fdcf5b83fce872a053c291c1c521437883776a66ed6dfa2df6c7ff30fa3907a2e4e661c91a3855383ddc1a81c01f5b461748dc53ae30108ef4bd0a30def669c2c3abd42863ec30eaa6df4d85b9fbec746f503ec8f8e07618d0c81d575e2064f3285b1a9cf0612d4c7d3aad69c4fc836211f6214319e83b8f5d4b3b8343438e7a31af05ec1c69bbebca08be3efeb82148f30845ea634dbc6a620974ddd9b491b937d86c34a39217ea0ced43c8957171dc98fb0f7d7e5b9a3aa6c4038aba939547bf3da212e9c7044a3b0323a78965f6ef9db3aa5742c0d73df495b885222640b008ac10c189c0f3b5fba55fe27b8bab55f8f3559d5ad2448846c67829c58107fe81f88e56aaa4e13c868a673eb8bb9f55a60ec07f133cfbdd71", 0x1d0}, {&(0x7f00000002c0)="0f8312d44451e1c4f13244b3f70bdc3a61ae0e5fc11df39ae818d9738e627ec5cfe3deafddc937400e28eba69a80ed60f6e58a65f51a028e1a1888552ec973627ba98acfefbddcc4cab2dc27abb8d4a455bd94093b66869737cee9a1854b8bc396a09ba81ae043f187d5d25594a003341a11f7304c438ac1dc0b2233db2dabb31e0df24255d4ab227289315ed42e3a7fa5954bcf917214894e3aed8da29fa2fb9e7fdb496d3cbae36e10d503bbd17add9a60950df187208e3cb069565b594631f9b34361c71c36d0c4530695", 0xcc}], 0x2) 278.531284ms ago: executing program 3 (id=31): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0xc}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) ioctl$FE_SET_PROPERTY(r1, 0x40086f52, &(0x7f0000000000)={0x1f, &(0x7f00000001c0)=[{0x34, '\x00', @st={0x4, [{0x2}, {0x3, @svalue=0x7}, {0x0, @svalue=0x7}, {0x3, @svalue=0xfffffffffffffffc}]}, 0x2}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r4, 0xc138fd11, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000008ff") ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000009b40)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x80000000, 0x4, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x40000001, 0x0, 0x0, 0x40000}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) ioctl$BSG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000100)=0x7fff) ioctl$PPPIOCSPASS(r0, 0x40087447, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0xce, 0x0, 0xfffffffe}]}) close(0x3) 171.650332ms ago: executing program 0 (id=32): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x5b0f, &(0x7f0000000180)={0x0, 0xfffffffc, 0x80, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) chdir(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) eventfd2(0x0, 0x80800) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x96b, 0xb, 0x400}) r4 = syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x400000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0xfff, 0x9, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x96e, 0xb, 0x400}) prlimit64(0xffffffffffffffff, 0xd, &(0x7f0000000040)={0x8}, &(0x7f0000000080)) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=33): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_setup(0x6d4, &(0x7f00000003c0)={0x0, 0xc3b1, 0x800, 0x2, 0x82}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_URING_CMD=@ublk_cmd_sqes=@ublk_get_queue_affinity_sqe={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0x80207501, 0x0, 0x0, 0x0, 0x1, 0x2000000000000003, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0, 0x3}}) syz_io_uring_setup(0x1f00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2000}}) r8 = mmap$IORING_OFF_SQES(0x0, 0x7, 0x4, 0x11, 0xffffffffffffffff, 0x10000000) r9 = dup(r1) r10 = syz_io_uring_setup(0x7dae, &(0x7f0000000240)={0x0, 0x400069ee, 0xc00, 0x5, 0x50}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x4d2c11947fe9151f, {0x0, r14}}) syz_io_uring_submit(r2, r6, r8, &(0x7f00000000c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x20, 0x0, r9, r1, 0x0, 0x2, 0x0, 0x1, {0x0, r14}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) r17 = gettid() r18 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r18, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r16, @ANYBLOB="089805000750050008001300", @ANYRES32=r17, @ANYBLOB="08002c00050000001400030076"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000003c0)=0x514f, 0x4) r19 = socket$inet6_udp(0xa, 0x2, 0x0) r20 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r20, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000390427bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="efdf7806c375fe8b1400128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x5821c98b097a09f2) setsockopt$IP6T_SO_SET_REPLACE(r19, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x238, 0x3a8, 0x3a8, 0x238, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [0x0, 0x0, 0xffffffff], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x104, 0x14c, 0x700, {}, [@inet=@rpfilter={{0x24}}, @common=@unspec=@limit={{0x3c}, {0x10000000, 0x8000001, 0x0, 0x0, 0x0, 0x0, 0x4}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x35c) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f00000002c0)={r19}) r21 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$fuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r21, 0x8004e500, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:18576' (ED25519) to the list of known hosts. [ 64.544007][ T5731] cgroup: Unknown subsys name 'net' [ 64.661780][ T5731] cgroup: Unknown subsys name 'cpuset' [ 64.666859][ T5731] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.643761][ T5731] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.102904][ T5742] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.112238][ T5746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.112347][ T5749] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.116117][ T5746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.121161][ T5749] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.127523][ T5749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.128570][ T5746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.131069][ T5749] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.133322][ T5753] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.136920][ T5749] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.139207][ T5753] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.142209][ T5749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.146473][ T5753] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.150899][ T5753] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.151203][ T5749] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.152517][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.153384][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.166105][ T5753] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.178345][ T5753] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.183241][ T5753] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.711895][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.715116][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.718025][ T5740] bridge_slave_0: entered allmulticast mode [ 70.720950][ T5740] bridge_slave_0: entered promiscuous mode [ 70.729888][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.732188][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.734403][ T5740] bridge_slave_1: entered allmulticast mode [ 70.737082][ T5740] bridge_slave_1: entered promiscuous mode [ 70.796046][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.811031][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.859493][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.861719][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.863942][ T5744] bridge_slave_0: entered allmulticast mode [ 70.866636][ T5744] bridge_slave_0: entered promiscuous mode [ 70.878546][ T5740] team0: Port device team_slave_0 added [ 70.889339][ T5740] team0: Port device team_slave_1 added [ 70.891858][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.894039][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.897688][ T5744] bridge_slave_1: entered allmulticast mode [ 70.901633][ T5744] bridge_slave_1: entered promiscuous mode [ 70.945452][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.947763][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.951385][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.955708][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.962017][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.969610][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.980755][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.990423][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.992856][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.001089][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.044335][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.047624][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.049861][ T5743] bridge_slave_0: entered allmulticast mode [ 71.052941][ T5743] bridge_slave_0: entered promiscuous mode [ 71.057795][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.060227][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.062446][ T5743] bridge_slave_1: entered allmulticast mode [ 71.065221][ T5743] bridge_slave_1: entered promiscuous mode [ 71.074411][ T5744] team0: Port device team_slave_0 added [ 71.081321][ T5744] team0: Port device team_slave_1 added [ 71.140530][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.155246][ T5740] hsr_slave_0: entered promiscuous mode [ 71.158548][ T5740] hsr_slave_1: entered promiscuous mode [ 71.161615][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.164792][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.173164][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.177878][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.181038][ T5750] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.183945][ T5750] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.186676][ T5750] bridge_slave_0: entered allmulticast mode [ 71.189939][ T5750] bridge_slave_0: entered promiscuous mode [ 71.204519][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.207576][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.217105][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.234354][ T5750] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.237180][ T5750] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.239630][ T5750] bridge_slave_1: entered allmulticast mode [ 71.242422][ T5750] bridge_slave_1: entered promiscuous mode [ 71.272741][ T5743] team0: Port device team_slave_0 added [ 71.284456][ T5750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.302990][ T5743] team0: Port device team_slave_1 added [ 71.306572][ T5750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.365700][ T5744] hsr_slave_0: entered promiscuous mode [ 71.368526][ T5744] hsr_slave_1: entered promiscuous mode [ 71.370867][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 71.372671][ T5744] Cannot create hsr debugfs directory [ 71.385226][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.388276][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.398828][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.411492][ T5750] team0: Port device team_slave_0 added [ 71.414432][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.417071][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.425400][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.450494][ T5750] team0: Port device team_slave_1 added [ 71.514777][ T5743] hsr_slave_0: entered promiscuous mode [ 71.518519][ T5743] hsr_slave_1: entered promiscuous mode [ 71.521442][ T5743] debugfs: 'hsr0' already exists in 'hsr' [ 71.523764][ T5743] Cannot create hsr debugfs directory [ 71.526624][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.529207][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.539208][ T5750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.555077][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.557651][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.568284][ T5750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.702290][ T5750] hsr_slave_0: entered promiscuous mode [ 71.704608][ T5750] hsr_slave_1: entered promiscuous mode [ 71.706693][ T5750] debugfs: 'hsr0' already exists in 'hsr' [ 71.708607][ T5750] Cannot create hsr debugfs directory [ 71.790819][ T5740] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.802115][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.805186][ T5740] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.812149][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.836951][ T5740] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.845220][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.848614][ T5740] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.855749][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.971686][ T5744] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.976872][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.980792][ T5744] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.985985][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.990541][ T5744] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.996839][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.009483][ T5744] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.013825][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.060813][ T5743] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.068095][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.070935][ T5743] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.076487][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.080333][ T5743] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.086692][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.090496][ T5743] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.096569][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.161233][ T5750] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.165562][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.168790][ T5750] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.175920][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.191197][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.196233][ T5750] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.202296][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.205122][ T5750] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.209628][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.229634][ T5753] Bluetooth: hci0: command tx timeout [ 72.235823][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.237769][ T5753] Bluetooth: hci3: command tx timeout [ 72.238472][ T5746] Bluetooth: hci2: command tx timeout [ 72.238504][ T5095] Bluetooth: hci1: command tx timeout [ 72.270456][ T222] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.273224][ T222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.283514][ T222] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.286937][ T222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.354170][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.389514][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.406684][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.426578][ T222] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.428845][ T222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.436486][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.442764][ T222] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.445022][ T222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.456400][ T5750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.462012][ T222] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.464582][ T222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.478455][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.481116][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.520033][ T5750] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.535527][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.537912][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.546225][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.549047][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.715494][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.757984][ T5740] veth0_vlan: entered promiscuous mode [ 72.767049][ T5740] veth1_vlan: entered promiscuous mode [ 72.785173][ T5740] veth0_macvtap: entered promiscuous mode [ 72.799526][ T5740] veth1_macvtap: entered promiscuous mode [ 72.817121][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.832709][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.837986][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.845944][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.893369][ T5743] veth0_vlan: entered promiscuous mode [ 72.904450][ T5750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.916766][ T5743] veth1_vlan: entered promiscuous mode [ 72.938450][ T5744] veth0_vlan: entered promiscuous mode [ 72.959236][ T5744] veth1_vlan: entered promiscuous mode [ 72.993678][ T5743] veth0_macvtap: entered promiscuous mode [ 73.000362][ T222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.006518][ T5743] veth1_macvtap: entered promiscuous mode [ 73.007634][ T222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.038439][ T5818] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.059542][ T5744] veth0_macvtap: entered promiscuous mode [ 73.081634][ T775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.082113][ T5750] veth0_vlan: entered promiscuous mode [ 73.084425][ T775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.093746][ T5744] veth1_macvtap: entered promiscuous mode [ 73.103224][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.114522][ T5750] veth1_vlan: entered promiscuous mode [ 73.125940][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.148361][ T5790] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.149512][ T5740] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.160693][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.165647][ T5740] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 73.175025][ T5740] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 73.183873][ T5740] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 73.196333][ T5740] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 73.198312][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.236233][ T5750] veth0_macvtap: entered promiscuous mode [ 73.251522][ T5750] veth1_macvtap: entered promiscuous mode [ 73.295173][ T222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.299628][ T222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.326037][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.331762][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.336257][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.339783][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.398147][ T222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.403270][ T222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.430581][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.467271][ T775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.472600][ T5818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.479769][ T775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.488040][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.525469][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.529451][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.575546][ T222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.578099][ T5818] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.578146][ T5818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.578369][ T5818] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.587364][ T222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.590723][ T5818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.618348][ T5826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.621978][ T5826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.625233][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.635663][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.642694][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.645971][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.646003][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.662470][ T5898] FAULT_INJECTION: forcing a failure. [ 73.662470][ T5898] name failslab, interval 1, probability 0, space 0, times 1 [ 73.662561][ T5898] CPU: 0 UID: 0 PID: 5898 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 73.662574][ T5898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.662611][ T5898] Call Trace: [ 73.662623][ T5898] [ 73.662628][ T5898] dump_stack_lvl+0x100/0x190 [ 73.662645][ T5898] should_fail_ex.cold+0x5/0xa [ 73.662659][ T5898] should_failslab+0xc2/0x120 [ 73.662675][ T5898] __kmalloc_cache_noprof+0x91/0x6c0 [ 73.662687][ T5898] ? drm_atomic_commit_alloc+0xb8/0x120 [ 73.662707][ T5898] drm_atomic_commit_alloc+0xb8/0x120 [ 73.662722][ T5898] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 73.662739][ T5898] ? rcu_is_watching+0x12/0xc0 [ 73.662753][ T5898] ? trace_contention_end+0x126/0x160 [ 73.662766][ T5898] ? drm_client_modeset_commit_locked+0x4c/0x580 [ 73.662783][ T5898] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 73.662799][ T5898] ? drm_master_internal_acquire+0x21/0x80 [ 73.662813][ T5898] ? __mutex_lock+0x26d/0x1bd0 [ 73.662838][ T5898] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 73.662854][ T5898] drm_client_modeset_commit_locked+0x14d/0x580 [ 73.662873][ T5898] drm_fb_helper_pan_display+0x32d/0xa40 [ 73.662893][ T5898] fb_pan_display+0x195/0x820 [ 73.662904][ T5898] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 73.662918][ T5898] ? queue_delayed_work_on+0x122/0x1e0 [ 73.662936][ T5898] bit_update_start+0x48/0x1f0 [ 73.662949][ T5898] fbcon_switch+0x1119/0x19f0 [ 73.662963][ T5898] ? __pfx_fbcon_switch+0x10/0x10 [ 73.662981][ T5898] ? __pfx_bit_cursor+0x10/0x10 [ 73.662991][ T5898] ? fbcon_cursor+0x24c/0x5e0 [ 73.663005][ T5898] csi_J+0x872/0xad0 [ 73.663021][ T5898] csi_ECMA.constprop.0+0x51e/0x3b60 [ 73.663037][ T5898] ? find_held_lock+0x2b/0x80 [ 73.663050][ T5898] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 73.663070][ T5898] do_con_write+0x3660/0x4a30 [ 73.663085][ T5898] ? trace_contention_end+0x126/0x160 [ 73.663096][ T5898] ? __mutex_lock+0x26d/0x1bd0 [ 73.663114][ T5898] ? __pfx___mutex_lock+0x10/0x10 [ 73.663128][ T5898] ? __pfx_do_con_write+0x10/0x10 [ 73.663143][ T5898] ? add_softcursor+0x23d/0x290 [ 73.663159][ T5898] ? con_write+0x93/0xb0 [ 73.663175][ T5898] con_write+0x23/0xb0 [ 73.663189][ T5898] n_tty_write+0x431/0x1160 [ 73.663207][ T5898] ? __pfx_n_tty_write+0x10/0x10 [ 73.663216][ T5898] ? __kasan_kmalloc+0xaa/0xb0 [ 73.663231][ T5898] ? __pfx_woken_wake_function+0x10/0x10 [ 73.663243][ T5898] ? rcu_is_watching+0x12/0xc0 [ 73.663255][ T5898] ? file_tty_write.isra.0+0x694/0x890 [ 73.663269][ T5898] ? kfree+0x1e5/0x6c0 [ 73.663279][ T5898] ? __pfx_n_tty_write+0x10/0x10 [ 73.663290][ T5898] file_tty_write.isra.0+0x4d2/0x890 [ 73.663309][ T5898] vfs_write+0x6ac/0x1050 [ 73.663338][ T5898] ? __pfx_tty_write+0x10/0x10 [ 73.663354][ T5898] ? __pfx_vfs_write+0x10/0x10 [ 73.663363][ T5898] ? find_held_lock+0x2b/0x80 [ 73.663386][ T5898] ksys_write+0x12a/0x250 [ 73.663396][ T5898] ? __pfx_ksys_write+0x10/0x10 [ 73.663405][ T5898] ? ksys_write+0x1ac/0x250 [ 73.663414][ T5898] ? __pfx_ksys_write+0x10/0x10 [ 73.663428][ T5898] __do_fast_syscall_32+0xe7/0x970 [ 73.663442][ T5898] ? lockdep_hardirqs_on+0x78/0x100 [ 73.663456][ T5898] do_fast_syscall_32+0x32/0x70 [ 73.663470][ T5898] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.663483][ T5898] RIP: 0023:0xf7fd2fec [ 73.663497][ T5898] Code: Unable to access opcode bytes at 0xf7fd2fc2. [ 73.663510][ T5898] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 73.663520][ T5898] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 73.663526][ T5898] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.663532][ T5898] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 73.663548][ T5898] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 73.663555][ T5898] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.663569][ T5898] [ 73.695081][ T5902] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2'. [ 73.695915][ T5896] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2'. [ 73.824704][ T5907] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5'. [ 73.829395][ T5899] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2'. [ 73.959895][ T5910] team0: Port device vlan2 added [ 73.979939][ T5910] UDC core: g1: couldn't find an available UDC or it's busy [ 73.999781][ T5912] team0: Port device vlan0 added [ 74.055371][ T5916] bond0: entered promiscuous mode [ 74.056996][ T5916] bond_slave_0: entered promiscuous mode [ 74.059119][ T5916] bond_slave_1: entered promiscuous mode [ 74.063078][ T5916] batadv0: entered promiscuous mode [ 74.066477][ T5916] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 74.195312][ T5916] bond0: left promiscuous mode [ 74.196914][ T5916] bond_slave_0: left promiscuous mode [ 74.199051][ T5916] bond_slave_1: left promiscuous mode [ 74.202942][ T5916] batadv0: left promiscuous mode [ 74.236854][ T5905] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 74.239852][ T5905] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 74.240648][ T5905] vhci_hcd vhci_hcd.0: Device attached [ 74.297677][ T5919] faux_driver vgem: [drm] Unknown color mode 1024; guessing buffer size. [ 74.437564][ T5746] Bluetooth: hci0: command tx timeout [ 74.440697][ T5753] Bluetooth: hci2: command tx timeout [ 74.442520][ T5753] Bluetooth: hci1: command tx timeout [ 74.445672][ T5095] Bluetooth: hci3: command tx timeout [ 74.824217][ T5905] wg2 speed is unknown, defaulting to 1000 [ 74.828777][ T5905] wg2 speed is unknown, defaulting to 1000 [ 74.832550][ T5905] wg2 speed is unknown, defaulting to 1000 [ 74.847931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 74.961383][ T5905] infiniband syz2: set active [ 74.963779][ T5905] infiniband syz2: added wg2 [ 74.971660][ T5888] wg2 speed is unknown, defaulting to 1000 [ 74.990143][ T5905] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 74.995935][ T5905] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 75.002401][ T5905] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 75.026494][ T5905] RDS/IB: syz2: added [ 75.028709][ T5905] smc: adding ib device syz2 with port count 1 [ 75.030925][ T5905] smc: ib device syz2 port 1 has no pnetid [ 75.044311][ T5905] wg2 speed is unknown, defaulting to 1000 [ 75.193003][ T5905] wg2 speed is unknown, defaulting to 1000 [ 75.241624][ T5833] wg2 speed is unknown, defaulting to 1000 [ 75.276687][ T5920] vhci_hcd: connection closed [ 75.280533][ T5826] vhci_hcd vhci_hcd.0: stop threads [ 75.283966][ T5826] vhci_hcd vhci_hcd.0: release socket [ 75.286639][ T5826] vhci_hcd vhci_hcd.0: disconnect device [ 75.418388][ T5905] wg2 speed is unknown, defaulting to 1000 [ 75.545535][ T5905] wg2 speed is unknown, defaulting to 1000 [ 75.879932][ T5935] e1000e 0000:00:02.0: resetting [ 75.922029][ T5935] e1000e 0000:00:02.0: reset done [ 75.925201][ T5935] e1000e 0000:00:02.0: resetting [ 75.961427][ T5935] e1000e 0000:00:02.0: reset done [ 75.987775][ T5936] trusted_key: encrypted_key: hex blob is missing [ 76.066002][ T5936] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 76.087378][ T5936] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 76.468381][ T64] Bluetooth: hci1: command tx timeout [ 76.468465][ T5746] Bluetooth: hci2: command tx timeout [ 76.473047][ T5095] Bluetooth: hci0: command tx timeout [ 76.474803][ T5753] Bluetooth: hci3: command tx timeout [ 76.713134][ T5944] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16'. [ 76.721842][ T5944] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 77.036736][ T5952] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 77.039473][ T5952] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 77.046296][ T5952] vhci_hcd vhci_hcd.0: Device attached [ 77.174718][ T5955] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 77.177557][ T5955] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 77.181314][ T5955] vhci_hcd vhci_hcd.0: Device attached [ 77.327898][ T5888] usb 38-1: SetAddress Request (3) to port 0 [ 77.328067][ T5888] usb 38-1: new SuperSpeed USB device number 3 using vhci_hcd [ 77.410374][ T5952] syz2: rxe_newlink: already configured on wg2 [ 77.477667][ T5833] usb 40-1: SetAddress Request (2) to port 0 [ 77.480439][ T5833] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 77.761646][ T5955] rdma_rxe: rxe_newlink: failed to add wg2 [ 77.967593][ T149] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 78.117503][ T149] usb 7-1: Using ep0 maxpacket: 16 [ 78.122277][ T149] usb 7-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 0.40 [ 78.131989][ T149] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.135132][ T149] usb 7-1: Product: У [ 78.137159][ T149] usb 7-1: Manufacturer: 쟙䉻存ⶡ㷧཈聞햔䄭녅ꗸﰳ恪蹛컦蝷ꖮᔹ㎺⫓璌ᒯ졁푏绰鴺櫳뽔吔㺋錺鍬☒鱋ꄬ蹭粴喹슇얈ᯩ狒宪䓄ڈ㘈╔룝ﱈ⪷ቹઅ핪鈒챚﹩ힾ쮷꺻뼧ﮱ⇃녡悩⶘曩஝녈ಓ唤粃휶ዩऽ钫㓞雳䭦삍ꑪ넡㠢ꃡ郃颳牾ڌ飪聄륒﹤껊ᬠ︺芴 [ 78.151576][ T149] usb 7-1: SerialNumber: H [ 78.375287][ T149] gspca_main: ov519-2.14.0 probing 041e:4064 [ 78.379237][ T149] ov519 7-1:1.0: reg_w 5a failed -71 [ 78.547524][ T5746] Bluetooth: hci1: command tx timeout [ 78.557581][ T5746] Bluetooth: hci2: command tx timeout [ 78.557638][ T5095] Bluetooth: hci0: command tx timeout [ 78.561476][ T5753] Bluetooth: hci3: command tx timeout [ 78.578946][ T5966] vhci_hcd vhci_hcd.0: remove, state 1 [ 78.589114][ T5966] usb usb38: USB disconnect, device number 1 [ 78.789011][ T5973] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 78.791615][ T5973] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 78.921119][ T5973] vhci_hcd vhci_hcd.0: Device attached [ 79.221209][ T852] usb 44-1: SetAddress Request (2) to port 0 [ 79.223262][ T852] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 79.412595][ T5986] netlink: 48 bytes leftover after parsing attributes in process `syz.0.23'. [ 79.427058][ T5971] rdma_rxe: rxe_newlink: failed to add wg2 [ 80.618962][ T5953] vhci_hcd: connection reset by peer [ 80.627099][ T5818] vhci_hcd vhci_hcd.0: stop threads [ 80.631610][ T5818] vhci_hcd vhci_hcd.0: release socket [ 80.635930][ T5818] vhci_hcd vhci_hcd.0: disconnect device [ 81.116623][ T5956] vhci_hcd: connection reset by peer [ 81.121760][ T5818] vhci_hcd vhci_hcd.1: stop threads [ 81.123536][ T5818] vhci_hcd vhci_hcd.1: release socket [ 81.126793][ T5818] vhci_hcd vhci_hcd.1: disconnect device [ 81.199958][ T5999] e1000e 0000:00:02.0: resetting [ 81.216535][ T60] cfg80211: failed to load regulatory.db [ 81.242652][ T5999] e1000e 0000:00:02.0: reset done [ 81.246660][ T5999] e1000e 0000:00:02.0: resetting [ 81.282807][ T5999] e1000e 0000:00:02.0: reset done [ 81.491801][ T6003] trusted_key: encrypted_key: hex blob is missing [ 81.530676][ T6003] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 81.540176][ T6003] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 81.750268][ T5974] vhci_hcd: connection reset by peer [ 81.753228][ T5818] vhci_hcd vhci_hcd.3: stop threads [ 81.755111][ T5818] vhci_hcd vhci_hcd.3: release socket [ 81.756959][ T5818] vhci_hcd vhci_hcd.3: disconnect device [ 82.195057][ T6008] i2c i2c-1: dtv_property_process_set: SET cmd 0x80000100 undefined [ 82.250717][ T6008] netlink: 16 bytes leftover after parsing attributes in process `syz.3.31'. [ 82.388017][ T5888] usb 38-1: device descriptor read/8, error -110 [ 82.510744][ T5888] usb usb38-port1: attempt power cycle [ 82.525909][ T6011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 82.529363][ T6016] v: renamed from veth0_vlan (while UP) [ 82.547759][ T5833] usb 40-1: device descriptor read/8, error -110 [ 82.560036][ T5966] vhci_hcd vhci_hcd.0: USB bus 38 deregistered [ 82.562129][ T5818] vhci_hcd vhci_hcd.0: stop threads [ 82.563802][ T5818] vhci_hcd vhci_hcd.0: release socket [ 82.568530][ T5818] vhci_hcd vhci_hcd.0: disconnect device [ 82.570898][ T5818] vhci_hcd vhci_hcd.0: stop threads [ 82.576116][ T5818] vhci_hcd vhci_hcd.0: release socket [ 82.580229][ T5966] vhci_hcd vhci_hcd.0: remove, state 4 [ 82.581962][ T5818] ================================================================== [ 82.584537][ T5818] BUG: KASAN: slab-use-after-free in vhci_cleanup_unlink_list+0x44/0x456 [ 82.587264][ T5818] Read of size 4 at addr ffff88802a3546a0 by task kworker/u32:3/5818 [ 82.591065][ T5818] [ 82.592087][ T5818] CPU: 3 UID: 0 PID: 5818 Comm: kworker/u32:3 Not tainted syzkaller #0 PREEMPT(full) [ 82.592101][ T5818] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.592121][ T5818] Workqueue: usbip_event event_handler [ 82.592140][ T5818] Call Trace: [ 82.592144][ T5818] [ 82.592149][ T5818] dump_stack_lvl+0x100/0x190 [ 82.592162][ T5818] print_report+0x13d/0x4b0 [ 82.592179][ T5818] ? __virt_addr_valid+0x239/0x430 [ 82.592193][ T5818] ? vhci_cleanup_unlink_list+0x44/0x456 [ 82.592207][ T5818] kasan_report+0xdf/0x1c0 [ 82.592223][ T5818] ? vhci_cleanup_unlink_list+0x44/0x456 [ 82.592239][ T5818] vhci_cleanup_unlink_list+0x44/0x456 [ 82.592256][ T5818] vhci_shutdown_connection.cold+0x165/0x37c [ 82.592271][ T5818] event_handler+0x216/0x570 [ 82.592284][ T5818] process_one_work+0xa23/0x1940 [ 82.592302][ T5818] ? __pfx_process_one_work+0x10/0x10 [ 82.592319][ T5818] ? __pfx_event_handler+0x10/0x10 [ 82.592331][ T5818] worker_thread+0x5ef/0xe50 [ 82.592349][ T5818] ? kthread+0x13a/0x450 [ 82.592362][ T5818] ? __pfx_worker_thread+0x10/0x10 [ 82.592377][ T5818] kthread+0x370/0x450 [ 82.592390][ T5818] ? __pfx_kthread+0x10/0x10 [ 82.592404][ T5818] ret_from_fork+0x72b/0xd50 [ 82.592418][ T5818] ? __pfx_ret_from_fork+0x10/0x10 [ 82.592431][ T5818] ? __switch_to+0x800/0x10f0 [ 82.592440][ T5818] ? __pfx_kthread+0x10/0x10 [ 82.592454][ T5818] ret_from_fork_asm+0x1a/0x30 [ 82.592471][ T5818] [ 82.592475][ T5818] [ 82.592666][ T6016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33'. [ 82.595361][ T5818] Allocated by task 1: [ 82.595370][ T5818] kasan_save_stack+0x30/0x50 [ 82.595383][ T5818] kasan_save_track+0x14/0x30 [ 82.595395][ T5818] __kasan_kmalloc+0xaa/0xb0 [ 82.595406][ T5818] __kmalloc_noprof+0x322/0x820 [ 82.657761][ T5818] __usb_create_hcd+0x5e/0xac0 [ 82.659780][ T5818] vhci_hcd_probe+0x1a5/0x4e0 [ 82.661406][ T5818] platform_probe+0x106/0x1d0 [ 82.663298][ T5818] really_probe+0x241/0xa60 [ 82.665223][ T5818] __driver_probe_device+0x20e/0x450 [ 82.667477][ T5818] driver_probe_device+0x4a/0x140 [ 82.669514][ T5818] __device_attach_driver+0x1df/0x320 [ 82.671735][ T5818] bus_for_each_drv+0x159/0x1e0 [ 82.673782][ T5818] __device_attach+0x1e4/0x4d0 [ 82.675804][ T5818] device_initial_probe+0xaf/0xd0 [ 82.677949][ T5818] bus_probe_device+0x64/0x160 [ 82.679826][ T5818] device_add+0x121d/0x1970 [ 82.681462][ T5818] platform_device_add+0x35a/0x800 [ 82.683227][ T5818] platform_device_register_full+0x5cf/0x830 [ 82.685177][ T5818] vhci_hcd_init+0x1a1/0x2f0 [ 82.686954][ T5818] do_one_initcall+0x11d/0x700 [ 82.688949][ T5818] kernel_init_freeable+0x6ea/0x7b0 [ 82.691147][ T5818] kernel_init+0x1f/0x1e0 [ 82.692971][ T5818] ret_from_fork+0x72b/0xd50 [ 82.694917][ T5818] ret_from_fork_asm+0x1a/0x30 [ 82.696591][ T5818] [ 82.697627][ T5818] Freed by task 5966: [ 82.699300][ T5818] kasan_save_stack+0x30/0x50 [ 82.701274][ T5818] kasan_save_track+0x14/0x30 [ 82.703270][ T5818] kasan_save_free_info+0x3b/0x70 [ 82.705144][ T5818] __kasan_slab_free+0x5f/0x80 [ 82.706730][ T5818] kfree+0x22b/0x6c0 [ 82.708062][ T5818] usb_put_hcd+0x149/0x1f0 [ 82.709854][ T5818] vhci_hcd_remove+0xb5/0x1b0 [ 82.711855][ T5818] platform_remove+0x5f/0x80 [ 82.713731][ T5818] device_remove+0xcb/0x180 [ 82.715581][ T5818] device_release_driver_internal+0x44e/0x620 [ 82.718065][ T5818] unbind_store+0xf8/0x110 [ 82.719917][ T5818] drv_attr_store+0x74/0xb0 [ 82.721417][ T5818] sysfs_kf_write+0xf2/0x150 [ 82.723263][ T5818] kernfs_fop_write_iter+0x3e0/0x5f0 [ 82.725446][ T5818] vfs_write+0x6ac/0x1050 [ 82.727260][ T5818] ksys_write+0x12a/0x250 [ 82.728946][ T5818] __do_fast_syscall_32+0xe7/0x970 [ 82.731040][ T5818] do_fast_syscall_32+0x32/0x70 [ 82.733063][ T5818] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 82.735690][ T5818] [ 82.736709][ T5818] Last potentially related work creation: [ 82.737494][ T5966] usb usb37: USB disconnect, device number 1 [ 82.739108][ T5818] kasan_save_stack+0x30/0x50 [ 82.739134][ T5818] kasan_record_aux_stack+0xa7/0xc0 [ 82.739149][ T5818] insert_work+0x36/0x230 [ 82.739171][ T5818] __queue_work+0x9bc/0x12b0 [ 82.739193][ T5818] queue_work_on+0x1a9/0x1e0 [ 82.739216][ T5818] usb_hcd_giveback_urb+0x330/0x4a0 [ 82.739233][ T5818] usb_hcd_poll_rh_status+0x5b3/0x7e0 [ 82.739248][ T5818] vhci_shutdown_connection.cold+0x2ae/0x37c [ 82.739272][ T5818] event_handler+0x216/0x570 [ 82.739290][ T5818] process_one_work+0xa23/0x1940 [ 82.739312][ T5818] worker_thread+0x5ef/0xe50 [ 82.739335][ T5818] kthread+0x370/0x450 [ 82.739356][ T5818] ret_from_fork+0x72b/0xd50 [ 82.739375][ T5818] ret_from_fork_asm+0x1a/0x30 [ 82.739397][ T5818] [ 82.739402][ T5818] Second to last potentially related work creation: [ 82.739408][ T5818] kasan_save_stack+0x30/0x50 [ 82.739428][ T5818] kasan_record_aux_stack+0xa7/0xc0 [ 82.739443][ T5818] insert_work+0x36/0x230 [ 82.739463][ T5818] __queue_work+0x9bc/0x12b0 [ 82.739485][ T5818] queue_work_on+0x1a9/0x1e0 [ 82.739506][ T5818] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 82.739518][ T5818] usb_hcd_submit_urb+0xab7/0x2150 [ 82.739532][ T5818] usb_submit_urb+0x827/0x19b0 [ 82.739548][ T5818] usb_start_wait_urb+0x10e/0x580 [ 82.739564][ T5818] usb_control_msg+0x328/0x4b0 [ 82.739580][ T5818] hub_ext_port_status+0x152/0x600 [ 82.739596][ T5818] hub_port_reset+0x7c1/0x1bd0 [ 82.739613][ T5818] hub_port_init+0x1f2/0x37f0 [ 82.739633][ T5818] hub_event+0x2ead/0x4420 [ 82.739651][ T5818] process_one_work+0xa23/0x1940 [ 82.739670][ T5818] worker_thread+0x5ef/0xe50 [ 82.739690][ T5818] kthread+0x370/0x450 [ 82.739710][ T5818] ret_from_fork+0x72b/0xd50 [ 82.739729][ T5818] ret_from_fork_asm+0x1a/0x30 [ 82.739750][ T5818] [ 82.739754][ T5818] The buggy address belongs to the object at ffff88802a354000 [ 82.739754][ T5818] which belongs to the cache kmalloc-8k of size 8192 [ 82.739769][ T5818] The buggy address is located 1696 bytes inside of [ 82.739769][ T5818] freed 8192-byte region [ffff88802a354000, ffff88802a356000) [ 82.739786][ T5818] [ 82.739791][ T5818] The buggy address belongs to the physical page: [ 82.739801][ T5818] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a350 [ 82.739817][ T5818] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 82.739837][ T5818] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 82.739854][ T5818] page_type: f5(slab) [ 82.739870][ T5818] raw: 00fff00000000040 ffff88801bc43180 dead000000000122 0000000000000000 [ 82.739886][ T5818] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 82.739901][ T5818] head: 00fff00000000040 ffff88801bc43180 dead000000000122 0000000000000000 [ 82.739916][ T5818] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 82.739932][ T5818] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 82.739947][ T5818] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 82.739957][ T5818] page dumped because: kasan: bad access detected [ 82.739967][ T5818] page_owner tracks the page as allocated [ 82.739972][ T5818] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 10911654106, free_ts 0 [ 82.740002][ T5818] post_alloc_hook+0xfd/0x120 [ 82.740019][ T5818] get_page_from_freelist+0xf48/0x3530 [ 82.740037][ T5818] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 82.740056][ T5818] new_slab+0xa2/0x640 [ 82.740072][ T5818] refill_objects+0xe3/0x410 [ 82.740088][ T5818] __pcs_replace_empty_main+0x376/0x680 [ 82.740105][ T5818] __kmalloc_noprof+0x66d/0x820 [ 82.740124][ T5818] __usb_create_hcd+0x5e/0xac0 [ 82.740138][ T5818] vhci_hcd_probe+0xf3/0x4e0 [ 82.740158][ T5818] platform_probe+0x106/0x1d0 [ 82.740178][ T5818] really_probe+0x241/0xa60 [ 82.740201][ T5818] __driver_probe_device+0x20e/0x450 [ 82.869593][ T5818] driver_probe_device+0x4a/0x140 [ 82.871199][ T5818] __device_attach_driver+0x1df/0x320 [ 82.872906][ T5818] bus_for_each_drv+0x159/0x1e0 [ 82.874436][ T5818] __device_attach+0x1e4/0x4d0 [ 82.875961][ T5818] page_owner free stack trace missing [ 82.877639][ T5818] [ 82.878404][ T5818] Memory state around the buggy address: [ 82.880161][ T5818] ffff88802a354580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.882657][ T5818] ffff88802a354600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.885213][ T5818] >ffff88802a354680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.887674][ T5818] ^ [ 82.889292][ T5818] ffff88802a354700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.891745][ T5818] ffff88802a354780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.894278][ T5818] ================================================================== [ 82.901315][ T5818] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 82.903697][ T5818] CPU: 3 UID: 0 PID: 5818 Comm: kworker/u32:3 Not tainted syzkaller #0 PREEMPT(full) [ 82.906666][ T5818] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.909799][ T5818] Workqueue: usbip_event event_handler [ 82.911547][ T5818] Call Trace: [ 82.912576][ T5818] [ 82.913518][ T5818] dump_stack_lvl+0x100/0x190 [ 82.914962][ T5818] vpanic+0x552/0x970 [ 82.916205][ T5818] ? __pfx_vpanic+0x10/0x10 [ 82.917603][ T5818] ? vhci_cleanup_unlink_list+0x44/0x456 [ 82.919322][ T5818] panic+0xd1/0xe0 [ 82.920525][ T5818] ? __pfx_panic+0x10/0x10 [ 82.921945][ T5818] ? vhci_cleanup_unlink_list+0x44/0x456 [ 82.923727][ T5818] ? preempt_schedule_common+0x42/0xc0 [ 82.925441][ T5818] ? check_panic_on_warn+0x1f/0x90 [ 82.927093][ T5818] check_panic_on_warn.cold+0x19/0x34 [ 82.928787][ T5818] end_report.part.0+0x3a/0x90 [ 82.930309][ T5818] kasan_report.cold+0xe/0x18 [ 82.931813][ T5818] ? vhci_cleanup_unlink_list+0x44/0x456 [ 82.933613][ T5818] vhci_cleanup_unlink_list+0x44/0x456 [ 82.935350][ T5818] vhci_shutdown_connection.cold+0x165/0x37c [ 82.937236][ T5818] event_handler+0x216/0x570 [ 82.938726][ T5818] process_one_work+0xa23/0x1940 [ 82.940257][ T5818] ? __pfx_process_one_work+0x10/0x10 [ 82.941886][ T5818] ? __pfx_event_handler+0x10/0x10 [ 82.943566][ T5818] worker_thread+0x5ef/0xe50 [ 82.945043][ T5818] ? kthread+0x13a/0x450 [ 82.946395][ T5818] ? __pfx_worker_thread+0x10/0x10 [ 82.948030][ T5818] kthread+0x370/0x450 [ 82.949246][ T5818] ? __pfx_kthread+0x10/0x10 [ 82.950655][ T5818] ret_from_fork+0x72b/0xd50 [ 82.952123][ T5818] ? __pfx_ret_from_fork+0x10/0x10 [ 82.953748][ T5818] ? __switch_to+0x800/0x10f0 [ 82.955238][ T5818] ? __pfx_kthread+0x10/0x10 [ 82.956716][ T5818] ret_from_fork_asm+0x1a/0x30 [ 82.958235][ T5818] [ 82.959838][ T5818] Kernel Offset: disabled [ 82.961216][ T5818] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:34:32 Registers: info registers vcpu 0 CPU#0 EAX=00000000 EBX=f73e7ff4 ECX=f540d5ec EDX=00000000 ESI=00000000 EDI=00000000 EBP=00000000 ESP=f540d500 EIP=f70465a3 EFL=00000286 [--S--P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 f540db40 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 00003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000c3782f3 CR3=000000006b411000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff97fbbfe8 RBX=00000000000001a6 RCX=0000000000000241 RDX=ffffffff966cfa38 RSI=0000000000000241 RDI=ffffffff97f348f8 RBP=0000000000000030 RSP=ffffc9000706e988 R8 =ffffffff966cfa68 R9 =000000000000009c R10=ffffc9000706eb20 R11=0000000000000000 R12=ffffffff81e50820 R13=ffffc9000706ea30 R14=ffffffff81e51630 R15=ffffffff97f348f8 RIP=ffffffff81e520f7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096ce6000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000e22ffe6 CR3=000000006b411000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000003353e3cdc7 RBX=ffff88802b423d80 RCX=00000000000006e0 RDX=0000000000000033 RSI=ffffffff81f98fa5 RDI=ffff88802a332540 RBP=0000001334623890 RSP=ffffc9000705f9c0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff92000e0bf42 R13=0000000000000001 R14=0000000000000001 R15=ffff88802b423dc0 RIP=ffffffff81f98fb8 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096de6000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000080ff4000 CR3=000000006c986000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a0f635 RDI=ffffffff9b9f0520 RBP=ffffffff9b9f04e0 RSP=ffffc90004f1f560 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000031383554 R12=0000000000000000 R13=0000000000000031 R14=ffffffff9b6f01e9 R15=ffffffff85a0f5d0 RIP=ffffffff85a0f65f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ee6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000080ff4000 CR3=000000006b588000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=00000000fffc0000 Opmask02=00000000ffff7fdf Opmask03=0000000000000000 Opmask04=00000000fffff7ff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005573a9ad2f30 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005573a9ad3000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007facc6152c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38336e6f6d627375 2f6e6f6d6273752f 302e6463685f6963 68762f6d726f6674 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000065766f6d6572 0000000000000021 000000000062642e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 003a6166703a756b 733a302e30312d35 33712d6370727663 3a3174633a554d45 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a29393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3351284350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000