last executing test programs: 4.440824195s ago: executing program 2 (id=137): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000340)={0x9, 0x0, 0x10000000, 0x515f3157, 0x15, "78e114100985a79874342a70e113343972d01f"}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) recvmmsg(r5, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000180)=""/62, 0x3e}, {&(0x7f00000002c0)=""/168, 0xa8}, {&(0x7f0000000580)=""/240, 0xf0}, {&(0x7f0000000440)=""/106, 0x6a}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f00000007c0)=""/197, 0xc5}, {&(0x7f0000000680)=""/180, 0xb4}, {&(0x7f0000001900)=""/228, 0xe4}], 0x9}, 0xcf2}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0xa, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x0, 0x3}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) 4.150866421s ago: executing program 2 (id=139): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) (async) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x0, "9b4d3948"}, @main=@item_4={0x3, 0x0, 0xb, "0577f5d2"}, @local=@item_4={0x3, 0x2, 0x0, "6d1fa409"}]}}, 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000d40), 0x0, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) 3.779242421s ago: executing program 3 (id=148): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_DELRULE={0x11c, 0x8, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x8}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0xb8, 0x7, 0x1, 0x0, "52c7f27fb99128ca79cd3e5617ff7d914b119dc39560ba2bffb9bbae83b7fbbede1b3823cfd4d6e9c09bd09fb03de3278023762d833f57a86543fa3600b5a6e4d7ab92168b14ebc90490ae8d8d1bbf70d89d4d28c3798e5bd3e8ad6afcd1be6b20753423b31da1710bb11fafdc086472ab8186e03e9c4fec97622f8b4b170026e2ce41f2579da99065eb1f37b91709b4a1ed3bfba686555779be154de0ae020e1ffedc94704dda95f864597518d057a3d10a5236"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x21}]}]}], {0x14}}, 0x144}, 0x1, 0x0, 0x0, 0x24040800}, 0x4004000) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000180)={0x0, 0x482, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0xfffffffffffffdfb, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14}]}}]}, 0x148}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = dup(r8) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r12 = dup(r11) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000071000040"]) r13 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0x141c00, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010000000000000000002ed400000000000001410000001c001700000000000000006574683a73797a6b2dfd7277510e0000"], 0x38}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x30, r15, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x41000}, 0x24028024) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r13, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r15, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x931, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x14040080}, 0x404c010) 3.468145179s ago: executing program 3 (id=149): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f00000000c0)="00fbff008600000000003271a5bf00", 0x20) getsockopt$inet_tcp_buf(r3, 0x6, 0x21, &(0x7f0000000340)=""/252, &(0x7f0000000100)=0xfc) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="050034008b080000080026006c001901050000005f211d7e6a706dd06766eb76c4baa37d1ab1c9e509efa91dbeb5c4cf6729e2b7ab939952236c4e0851b525ef8fd1578ef59a41f33eb353ebd055409b04a35daaa6910a0c467dbb6f6a42164656ffe91979a5a41d6cfaea4e08d0c146012a1994290d85cdda3ec821aa"], 0x34}}, 0x0) 3.443202722s ago: executing program 3 (id=151): r0 = memfd_create(&(0x7f0000002180)='\xa3\xcb\x04=\x827\xe7\x81S\bD\xd8K| \x8b\xdb\xb1\x03\xd0\x9d2\x9es\x19_=#n_\xeb\xbdR\xfd`U\xa7k\xd0\xd8\xd2\xc0\x91\xc1\x98#\r\xa7\x16\xfd@\xd7V*^\xcf\x9f\b1\xce3\vN\xa6\x01\xb5\xb5\xba\xdc\xc8\xda\xd2\apY\vu\x80\xa9\x14X\xcf!\xd3W\'\xb44#\xf6\x7fHS\xa6l\x17\x97\x80\xea\xc5+T\xe3\"\xda\x14\xfe,\xf3\\\xeb\x1cp\xd6\xc1\b\xec\xe1\x94\xdf\xdb\xa1\xf7=B\xb2\x94o\xd5{\xd2_\x93\xa1)\xdem\'H\\e\x8bu\xbcVw\xaeb\xa1b\xb1\xc1\f\x9f0\x93\x0f\x16,\xeb!Z\xa9\\\xf7B\xf8L\x05\xc7\xf7q\x9d_\xb4\xbb3i[t\xb6\xbc\x824\x7f\xd7\xb7 \xd4\x7fUE\xcb7\xe3\xb4\xb6\xa0\xd8\x1b\a8\xfe$\xa1\x12&\xb2\xfc\xfb\x12U\xb9u\xb4=\xa5\x9e\x1f`\x05q5\xee\xde\xdf\xba\xc4\xc5q\x8bk\xf1\x9c\xc3\xa4w\xf9!^#\x8c', 0x4) ftruncate(r0, 0x200000) preadv(r0, &(0x7f0000002100)=[{&(0x7f00000007c0)=""/80, 0x50}], 0x2, 0x1fffff, 0x0) 3.43840289s ago: executing program 3 (id=153): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='io.max\x00', 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1503"], 0x0, 0x23d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000), &(0x7f0000000180)={'U+', 0x10000}, 0x16, 0x3) ioctl$TUNSETOFFLOAD(r0, 0x4010744d, 0x20000000) close(r0) 3.330750487s ago: executing program 3 (id=154): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x20041, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000200)={@host}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f00000001c0)={@hyper}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f00000002c0)={@hyper}) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000000)=0x27) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x27, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x40}, 0x18) syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x80000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x8e, 0x180000504) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none}, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x10) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x0) 2.610926848s ago: executing program 2 (id=159): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet(0x2, 0x80000, 0x200) listen(r1, 0x8001) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x10001}, 0x1c) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 2.610621564s ago: executing program 0 (id=160): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x7b, 0x6d89, 0x8000000000000000, 0x2c, 0x8, 0x1, 0x3, 0x81, 0x800, 0x853d, 0x8000000000000001, 0xfffffffffffffd03, 0x0, 0x400, 0x1000, 0x1], 0x3000, 0x225041}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4008801}, 0x4008010) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffe) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000000)={[], 0x0, 0x29}) 2.610397263s ago: executing program 2 (id=161): socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6(0xa, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fe00}], 0x1, 0x0, 0x0, 0x2b) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x5, @empty}, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000140)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = io_uring_setup(0x177f, &(0x7f0000000340)={0x0, 0x5a27}) r5 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) read$hiddev(r5, &(0x7f0000000740)=""/43, 0x2b) close_range(r4, 0xffffffffffffffff, 0x0) r6 = memfd_create(&(0x7f0000002180)='\xa3\xcb\x04=\x827\xe7\x81S\bD\xd8K| \x8b\xdb\xb1\x03\xd0\x9d2\x9es\x19_=#n_\xeb\xbdR\xfd`U\xa7k\xd0\xd8\xd2\xc0\x91\xc1\x98#\r\xa7\x16\xfd@\xd7V*^\xcf\x9f\b1\xce3\vN\xa6\x01\xb5\xb5\xba\xdc\xc8\xda\xd2\apY\vu\x80\xa9\x14X\xcf!\xd3W\'\xb44#\xf6\x7fHS\xa6l\x17\x97\x80\xea\xc5+T\xe3\"\xda\x14\xfe,\xf3\\\xeb\x1cp\xd6\xc1\b\xec\xe1\x94\xdf\xdb\xa1\xf7=B\xb2\x94o\xd5{\xd2_\x93\xa1)\xdem\'H\\e\x8bu\xbcVw\xaeb\xa1b\xb1\xc1\f\x9f0\x93\x0f\x16,\xeb!Z\xa9\\\xf7B\xf8L\x05\xc7\xf7q\x9d_\xb4\xbb3i[t\xb6\xbc\x824\x7f\xd7\xb7 \xd4\x7fUE\xcb7\xe3\xb4\xb6\xa0\xd8\x1b\a8\xfe$\xa1\x12&\xb2\xfc\xfb\x12U\xb9u\xb4=\xa5\x9e\x1f`\x05q5\xee\xde\xdf\xba\xc4\xc5q\x8bk\xf1\x9c\xc3\xa4w\xf9!^#\x8c', 0x4) ftruncate(r6, 0x200000) preadv(r6, &(0x7f0000002100)=[{&(0x7f00000007c0)=""/80, 0x50}], 0x2, 0x1fffff, 0x0) dup3(r1, r3, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/11, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x5, 0x0, 0x280d0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb"], 0x0, 0x29, 0x0, 0x1, 0x9, 0x0, @void, @value}, 0x20) 2.430400209s ago: executing program 0 (id=164): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000000100)={&(0x7f0000000680)=[0x6, 0x5, 0x4, 0x40, 0x400, 0xc, 0xffffffff, 0x6, 0x113, 0x8000, 0x1f3, 0xb96, 0x0, 0x80, 0x8, 0x8000, 0x10, 0xffffffa2, 0x0, 0x6, 0x8, 0x54, 0x9, 0x2, 0x8, 0x7fff, 0x6, 0x5, 0x7, 0x7, 0x4230, 0x1, 0xfffffe00, 0x2, 0x7f, 0x9, 0x8, 0x100, 0x0, 0x2, 0xbe023ccf, 0x400, 0x0, 0x26, 0x9, 0x34, 0xffff7110, 0x2, 0x6, 0x7, 0x0, 0x3, 0xfd0, 0xf, 0x8, 0xdd, 0xbc, 0xffffffff, 0xf, 0x6, 0x1, 0x10001, 0x37d, 0x5, 0x1, 0x9e4, 0x7, 0x6, 0x80, 0x4, 0x7, 0x3, 0x80000000, 0x7, 0x52, 0x583, 0xfff, 0xa, 0x8000, 0x1, 0x80000000, 0x0, 0x9, 0x24, 0x8, 0x80e, 0x5, 0x7ff, 0x4, 0xfffffff9, 0x8, 0x3, 0x8, 0x80, 0x25d5, 0x10001, 0x9, 0x1, 0x5, 0x8, 0xfffffffa, 0xa, 0x1, 0x400, 0x4, 0xfffffffe, 0x7, 0x81, 0x4, 0x0, 0xe, 0x1, 0xf, 0x8001, 0x2, 0x6, 0xdf, 0xe1b7, 0x8, 0x6, 0x8, 0x5, 0x3c, 0x791, 0x800, 0x80000000, 0xfffff000, 0x0, 0xf, 0x7e3c, 0xd581, 0x4, 0x4, 0x9, 0xffffff33, 0x7, 0x3, 0x3, 0x7, 0x9, 0x3, 0x3, 0x28cd, 0x9, 0x7, 0xfffffffe, 0x9, 0xf73, 0x0, 0x99, 0x12, 0x12e6cc15, 0xfffffffd, 0x4, 0x7fff, 0x9, 0x1, 0x6e8, 0x4787, 0x6, 0xe, 0x8, 0x2, 0x9, 0x3b1, 0x6612, 0x1fa, 0x101, 0xfffff515, 0x3, 0x1, 0x3ff, 0x7, 0x4, 0x5bf, 0x1, 0x7, 0x8, 0x7fffffff, 0x9, 0x7, 0x1, 0xc4, 0x5, 0x7, 0x8, 0xc, 0x4, 0xa6d8, 0xc, 0x6, 0x1000, 0x10000, 0x1, 0x0, 0x3, 0xfffffff9, 0x4e, 0x5, 0x7, 0x4, 0x3, 0x400, 0x6, 0x0, 0xfffffff8, 0x4, 0x7, 0x10000, 0xffff, 0x5, 0x9, 0x8, 0x28, 0x7, 0x80000000, 0xe, 0x21c9, 0xda, 0x2, 0x5, 0x0, 0x8, 0x1, 0x2, 0x8000, 0xb5, 0xfff, 0x7, 0xae, 0x1, 0x90e0, 0x3, 0x10000, 0x5, 0x5, 0xfffffe01, 0x81, 0x9, 0x1, 0xfffffff9, 0x10001, 0x3, 0xeab, 0x7, 0x68, 0xf, 0x81, 0x3, 0x40, 0x2, 0x4, 0x100, 0xfffffff7, 0x1a75, 0x7, 0x1, 0x755, 0x5, 0xadde, 0x1000, 0xc510, 0x3, 0x0, 0x8001, 0x9, 0x8000, 0x7, 0x8, 0x981e8474, 0x6a5, 0x7bb7, 0x1d, 0xea, 0x3, 0x4, 0x1, 0x8c, 0x9, 0x7f, 0x751, 0xd5b1, 0xff, 0xfffffff8, 0x4, 0x1ff, 0x4, 0x5, 0x3, 0x100, 0x10000, 0xae9a, 0x1, 0x40000, 0x6, 0x9, 0x40, 0x7, 0xfffffcdb, 0x1, 0x401, 0x7f, 0x80000000, 0xd6e, 0x9, 0x8, 0x9, 0x7, 0x70, 0x1, 0xd, 0x6, 0x1, 0xe1, 0x9, 0x6, 0x0, 0x7, 0xd12, 0x5, 0x535, 0x2, 0xfdee, 0x200, 0x8, 0x9, 0xd2e, 0x1, 0xba2a, 0x2, 0x7, 0x5d, 0x2, 0x0, 0x8e, 0x21bd, 0x101, 0x5, 0x2, 0x0, 0x7, 0x7, 0xbf11, 0x3, 0x5, 0x2, 0x400, 0x31, 0x9, 0x5, 0x5, 0x7, 0x3, 0x6, 0x81, 0x9, 0x8, 0xffffbe54, 0xfffffffa, 0x2, 0x7, 0x4, 0x2, 0x6, 0x2, 0x9, 0x0, 0x0, 0x6, 0xc, 0xe, 0x9, 0x2, 0x9, 0x62, 0x0, 0x1, 0x8, 0x4, 0x101, 0xc657, 0x3, 0x80000001, 0x40, 0x1, 0x2b5c, 0x7, 0xfffffffc, 0x6, 0x10, 0x419c5f7, 0xffffffff, 0xf, 0x2, 0x3, 0x9, 0xe6, 0x1, 0x1, 0x0, 0xfffffffd, 0x3ba, 0x2, 0x400, 0x2, 0x3, 0x401, 0x2, 0x2, 0x8, 0x0, 0x10000, 0x9, 0x1ff, 0xfffffff0, 0xfffffff7, 0x7577, 0x5, 0x10001, 0xba3, 0x10000, 0x3, 0xf, 0x9, 0x3ff, 0x1, 0x3, 0x7, 0x7fb8, 0x120000, 0x7, 0x4, 0x2, 0x2, 0xa, 0x4a64, 0x6, 0xa, 0x8, 0x1, 0xac7, 0x6, 0x4, 0x6, 0x3, 0x8, 0x3, 0xab2f, 0x6, 0x101, 0x7ff, 0x6, 0x9, 0x9, 0x5, 0x8ad40, 0x2, 0x1, 0x5, 0xffff, 0x9, 0x7, 0x7, 0x1, 0x6, 0xd0, 0x8, 0x3, 0x7, 0x0, 0x2, 0x8, 0x7, 0xa1, 0x0, 0x2, 0x49, 0x1, 0xffff7b69, 0xf83, 0xcb, 0x80000000, 0x4, 0x81, 0x4, 0x7, 0x9, 0x400, 0x414a, 0x7, 0x4, 0x1, 0x5, 0xb, 0x2, 0x7, 0xffffffff, 0x5, 0x1, 0x10001, 0x3, 0x40, 0x71, 0x7, 0x0, 0x9bb, 0x86c, 0xfff, 0x930, 0x1000, 0x3, 0x3, 0x9, 0xd1, 0xffff, 0x6, 0x400, 0x5, 0xfffffffc, 0x6407, 0x8001, 0x6, 0x9, 0x7, 0x7fffffff, 0xffffffc3, 0xc000000, 0xffffffff, 0x4, 0xfffffff8, 0x3, 0x7, 0x200000, 0x4, 0x9, 0x9, 0x7, 0x6, 0x18000000, 0x7, 0xfffffff7, 0xe, 0x80, 0xfffff001, 0x4, 0x0, 0x9, 0x5, 0x0, 0x7ff, 0x47, 0x5, 0x2, 0xfcd6, 0x4, 0x0, 0x1, 0x1, 0x4, 0x2, 0x4, 0x9, 0x69a1, 0x2, 0x1, 0xa, 0x1, 0x0, 0x1, 0x1, 0x2, 0xbc5, 0x2, 0x1, 0x5a4776a8, 0xffffffff, 0x1, 0xaee, 0x3, 0xf2, 0x4, 0x100, 0x1, 0x3, 0x2d3, 0x852, 0x9, 0x1000, 0x7, 0xe, 0x0, 0x2, 0x8, 0x4, 0x88a, 0x1000, 0x7fff, 0xea29, 0x1, 0x7, 0x81, 0x1, 0x1, 0x1, 0x4, 0x3, 0x6, 0x3, 0x7, 0x7ff, 0x200, 0x2, 0x80000000, 0x7, 0x4465, 0x10, 0x1, 0x7, 0x2135, 0x1, 0x7, 0x7, 0x3, 0xff, 0x1, 0xfffff000, 0x200000, 0x10000, 0x7fffffff, 0x7f, 0xfffffff6, 0x0, 0x5, 0xdb75, 0x6, 0x7, 0x0, 0x8, 0xedc0, 0x800, 0x7fff, 0x7ff, 0x3482, 0x0, 0x8f2, 0x33, 0x8, 0x8, 0x3, 0x1, 0xc, 0x1, 0x1, 0x5, 0xfff, 0xee27, 0x0, 0x46, 0x400, 0x0, 0x0, 0xe, 0x80, 0x5, 0x80000000, 0x2, 0x24, 0x1, 0x1, 0x1ff, 0x6, 0x9, 0x0, 0x5, 0x1, 0xd0, 0x0, 0xb6, 0x7f, 0x3, 0x3, 0xfa6, 0xfffffffe, 0x10001, 0x2, 0x1d2e57c7, 0x40000, 0x2, 0x3, 0x5, 0x6532, 0x9, 0x7, 0xc3fe, 0x2e74, 0x4, 0x1, 0x3, 0xffff4ed8, 0x20, 0x2, 0xfffffff9, 0x8, 0x5, 0x7, 0x7f, 0x2e, 0x3, 0x0, 0x7, 0x1, 0x9, 0x1000, 0x8, 0x0, 0x2, 0xb6, 0xd81, 0x1, 0xc, 0x3162, 0xc9, 0x7, 0x0, 0x1, 0x5112dbfe, 0x1, 0x10, 0xd, 0x3, 0x630, 0x9, 0x8, 0x7fffffff, 0xffffffff, 0x7, 0x7, 0xff, 0x2, 0x3, 0x3, 0x20000, 0x5, 0x9, 0x8, 0x1, 0x4, 0x1, 0x0, 0x753c2a7d, 0x7, 0x8, 0x1, 0x7, 0x69b6, 0x2, 0x2, 0x81, 0xf44, 0x0, 0x6, 0xf0000000, 0x10000, 0x9, 0x3, 0x1, 0x8, 0xffffffff, 0x2, 0x10000, 0x3, 0x9, 0x1, 0x1c9, 0x400, 0x7, 0x80, 0x2, 0x3, 0x7fffffff, 0x2, 0x40, 0x96, 0x7f, 0x7c93, 0x2, 0x7, 0xac71, 0x200, 0xdf2, 0x10001, 0x9, 0x0, 0x8001, 0x2000000, 0x1, 0x10001, 0x5, 0x8, 0x60000, 0x0, 0x2, 0x2, 0x1, 0x5, 0x7ff, 0xffffffff, 0x7f, 0x5, 0x4, 0x1, 0x3, 0x80000001, 0x5, 0x4, 0x3, 0xbf, 0x0, 0x8, 0x5, 0x1000, 0xffffffff, 0x7fffffff, 0x800, 0xdabe, 0x6, 0x3, 0x5, 0xdbcc, 0x6, 0x9, 0x8, 0x5, 0xfffffffa, 0x2, 0x9, 0x8, 0x1, 0x9, 0x81, 0x8, 0x61223570, 0x28eb, 0x8, 0x2, 0x2, 0x7, 0x9, 0x0, 0x5, 0x5, 0x80000001, 0x0, 0x8, 0xc, 0x8, 0x2000000, 0x9, 0xd, 0x6d, 0x1ff, 0xfffffffa, 0x8, 0x8, 0x3ff, 0x3, 0x8000, 0x2, 0x4, 0x7, 0x10, 0x0, 0x1, 0xd, 0x7, 0x7, 0xa, 0x0, 0xf, 0x4b3, 0x8000, 0x1ff, 0x9, 0x0, 0x80, 0x80, 0x39bc, 0xffffffff, 0x5, 0x2, 0x4, 0x3, 0x8, 0x9, 0x8, 0x300000, 0xffffffff, 0x4, 0x2, 0x0, 0x1, 0xfba0, 0xe2d3, 0x401, 0x8001, 0x480, 0x0, 0x8, 0x10000, 0x5, 0x5, 0x7fc, 0x5, 0x3, 0xa075, 0x9, 0x10001, 0xd, 0x0, 0x5, 0x2, 0x2, 0xfffffff7, 0x5, 0x1, 0xfffffffb, 0x8, 0xfffffffb, 0x8000, 0x80, 0x0, 0x2, 0x8, 0x3, 0x3, 0x3, 0x3, 0x5, 0x835, 0x3, 0x8, 0x7, 0x0, 0x2, 0x4, 0x5, 0x7fffffff, 0x8, 0x60000000, 0x6, 0x1, 0xb920, 0x8, 0x7fff, 0x10000, 0x1, 0x6, 0x0, 0x77a1, 0x2, 0x7, 0x3, 0x80000001, 0x4, 0x5, 0x2, 0x578, 0xffffffff, 0x0, 0x9, 0xff35, 0xee22, 0x8, 0x101, 0x72, 0x0, 0x7, 0x3, 0x1, 0x200, 0x4c, 0x2, 0x6, 0x7, 0x3, 0x2, 0x6, 0x881a, 0x6, 0x10001, 0x5, 0x2, 0x27c6cfec, 0x6, 0x8, 0x1a, 0xff, 0xb, 0x8, 0x303a, 0xfffffff8, 0xb, 0x1, 0x0, 0xa8, 0x8, 0xd0, 0x1ff, 0x9, 0x9, 0x8, 0x3, 0x3, 0x9, 0x997, 0x80000001, 0xd1, 0x6, 0x1, 0x3, 0x2, 0x6, 0x2, 0x7], 0x3, 0x400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async, rerun: 64) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @empty}}, 0x24) (async) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) (async, rerun: 64) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) (async, rerun: 64) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mount$9p_xen(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x24000, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (async) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r6, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xf, 0x0, 0x0, r5, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) (async) r7 = eventfd2(0x2, 0x100001) io_submit(r6, 0x1, &(0x7f0000000240)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x4, r7, &(0x7f0000000040)="0d01eb97b893c26f24b1047cbd019756a5fa46d6d67e57dfe9becf5994b3e8ffecee975cf024ada61fbc6fd5ce46a3db97adeb1548acad127b9489f9bf1bda", 0x3f, 0x7, 0x0, 0x3, r7}]) 2.429813548s ago: executing program 3 (id=165): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, r2, {0x7, 0x1f, 0x8000000, 0x60a}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8d}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) read(r4, &(0x7f0000000200)=""/201, 0xc9) ioprio_set$pid(0x2, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x28}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f00000004c0)=0x100000) fcntl$lock(r5, 0x5, &(0x7f0000000200)) 2.300250454s ago: executing program 0 (id=167): listen(0xffffffffffffffff, 0x146) keyctl$revoke(0x3, 0x0) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="97018006b452b6df5decd3a286f4a896e7c7f84bd31788f180b19f0c655e2370ddf543c0721097888a9faa1987ec1f94ff001a886764b8e840322f2297fa50e1ffdc690fb0d33ef6c99f2f5cc5b0c8668e4a3d1cd49daae20cdc69148353", 0x5e, 0xfffffffffffffff8) keyctl$get_security(0x11, r0, &(0x7f0000000100)=""/136, 0x88) r1 = add_key$fscrypt_provisioning(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)={0x2, 0x0, @c}, 0x29, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000280)=0x0) keyctl$set_timeout(0xf, r1, 0x3) keyctl$set_timeout(0xf, r1, 0x100) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f00000002c0)='\x00', &(0x7f0000000300)) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, r4, r5, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, r5, 0x0, &(0x7f0000000440)='*#%$\x00', &(0x7f0000000480)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000004c0)='user\x00', &(0x7f0000000500)=@chain={'key_or_keyring:', r0}) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000540)='pkcs7_test\x00', &(0x7f0000000580)='user\x00') r6 = openat$dlm_monitor(0xffffff9c, &(0x7f00000005c0), 0x2000, 0x0) r7 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000680)={r7, 0x43, 0x1000}, 0x0, &(0x7f00000006c0)="89b527e03255131f946b4594925a042869756ed5c07f106da0c3ae75c79336d8c523a1e93898d67d024c549a342eb45a2af8f9a34a526e72e8adfea7dd444fd2b9ffb6", &(0x7f0000000740)=""/4096) sched_setscheduler(r3, 0x7, &(0x7f0000001740)=0x4) keyctl$search(0xa, r7, &(0x7f0000001780)='.dead\x00', &(0x7f00000017c0)={'syz', 0x2}, r4) futex(&(0x7f0000001800)=0x1, 0xc, 0x2, 0xffffffffffffffff, &(0x7f0000001840)=0x1, 0x2) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000018c0), r6) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000001a40)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001900)={0xc8, r8, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5909}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0xc8}}, 0x20000000) io_setup(0x6, &(0x7f0000001a80)=0x0) clock_gettime(0x0, &(0x7f0000001b00)={0x0, 0x0}) io_pgetevents(r9, 0x207, 0x1, &(0x7f0000001ac0)=[{}], &(0x7f0000001b40)={r10, r11+10000000}, &(0x7f0000001bc0)={&(0x7f0000001b80)={[0x9, 0x7]}, 0x8}) r12 = request_key(&(0x7f0000001c00)='cifs.idmap\x00', &(0x7f0000001c40)={'syz', 0x0}, &(0x7f0000001c80)='-[\x00', r4) keyctl$unlink(0x9, r12, r5) fcntl$setsig(r6, 0xa, 0x3f) 2.163668418s ago: executing program 0 (id=170): socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6(0xa, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fe00}], 0x1, 0x0, 0x0, 0x2b) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x5, @empty}, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000140)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = io_uring_setup(0x177f, &(0x7f0000000340)={0x0, 0x5a27}) r4 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) read$hiddev(r4, &(0x7f0000000740)=""/43, 0x2b) close_range(r3, 0xffffffffffffffff, 0x0) r5 = memfd_create(&(0x7f0000002180)='\xa3\xcb\x04=\x827\xe7\x81S\bD\xd8K| \x8b\xdb\xb1\x03\xd0\x9d2\x9es\x19_=#n_\xeb\xbdR\xfd`U\xa7k\xd0\xd8\xd2\xc0\x91\xc1\x98#\r\xa7\x16\xfd@\xd7V*^\xcf\x9f\b1\xce3\vN\xa6\x01\xb5\xb5\xba\xdc\xc8\xda\xd2\apY\vu\x80\xa9\x14X\xcf!\xd3W\'\xb44#\xf6\x7fHS\xa6l\x17\x97\x80\xea\xc5+T\xe3\"\xda\x14\xfe,\xf3\\\xeb\x1cp\xd6\xc1\b\xec\xe1\x94\xdf\xdb\xa1\xf7=B\xb2\x94o\xd5{\xd2_\x93\xa1)\xdem\'H\\e\x8bu\xbcVw\xaeb\xa1b\xb1\xc1\f\x9f0\x93\x0f\x16,\xeb!Z\xa9\\\xf7B\xf8L\x05\xc7\xf7q\x9d_\xb4\xbb3i[t\xb6\xbc\x824\x7f\xd7\xb7 \xd4\x7fUE\xcb7\xe3\xb4\xb6\xa0\xd8\x1b\a8\xfe$\xa1\x12&\xb2\xfc\xfb\x12U\xb9u\xb4=\xa5\x9e\x1f`\x05q5\xee\xde\xdf\xba\xc4\xc5q\x8bk\xf1\x9c\xc3\xa4w\xf9!^#\x8c', 0x4) ftruncate(r5, 0x200000) 1.680917803s ago: executing program 1 (id=173): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x50, r2, 0x1, 0x70bd29, 0x1000000, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x1}, {0x5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r3, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0xfc}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 1.680416407s ago: executing program 1 (id=174): r0 = io_uring_setup(0x7ce3, &(0x7f0000000040)={0x0, 0x3d60, 0x800, 0x0, 0x2ed}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000004, 0x2010, r0, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000), 0x0, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) time(0x0) syz_emit_ethernet(0xa1, &(0x7f0000000380)=ANY=[@ANYRES32=0x41424344], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000135addad67000000000000000000000009000100"], 0x34}}, 0x40040) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000000000000000800"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000ddffffff400000000000"], 0x48) bpf$BPF_MAP_FREEZE(0x4, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000001"]) syz_emit_ethernet(0x223, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) remap_file_pages(&(0x7f0000b4e000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000040)={0x2}) socket$inet6_sctp(0xa, 0x1, 0x84) 1.270574627s ago: executing program 2 (id=175): socket$xdp(0x2c, 0x3, 0x0) r0 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305720, &(0x7f00000004c0)={0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000180), 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='pagemap\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) madvise(&(0x7f0000569000/0x2000)=nil, 0x2000, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') connect$inet6(r1, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3450, &(0x7f0000000380)={0x0, 0x0, 0x1, 0x0, 0x52}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r5, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x4000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x10, 0x3, 0xfffffffe) 981.067103ms ago: executing program 0 (id=176): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc048aeca, &(0x7f0000000040)={0x1, 0x0, [{}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x3, 0x5) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r8, r9, 0x12}, 0x10) write$tcp_congestion(r7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r6, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r11, 0x1, 0x0, @void}, 0x10) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f00000000c0)=r15, 0x4) sendmsg$inet(r13, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) connect$inet(r4, 0x0, 0x0) 820.46707ms ago: executing program 1 (id=177): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000120001000000000000000000ac14140000000000000000000000000000000039a90000000c001500000000000000000014000d00ac1414aa00"/72], 0x48}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00006dbffc)=0x80000000, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f7}], 0x2}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 616.861801ms ago: executing program 1 (id=178): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 616.737276ms ago: executing program 1 (id=179): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) madvise(&(0x7f0000bdc000/0x2000)=nil, 0x2000, 0x10) syz_clone(0x80082000, 0x0, 0x0, 0x0, 0x0, 0x0) 540.470062ms ago: executing program 1 (id=180): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) r1 = openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) r2 = mmap$binder(&(0x7f0000fe9000/0x14000)=nil, 0x14000, 0x1, 0x11, 0xffffffffffffffff, 0x6) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001400)={0xb0, 0x0, &(0x7f0000001340)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x3, 0x0, 0x15}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/4096, 0x1000, 0x2, 0xc}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}}, @free_buffer={0x40086303, r2}, @increfs_done, @enter_looper, @register_looper], 0x28, 0x0, &(0x7f00000002c0)="5d7ee922dc9a6b03c70223d94c0f0c320d6e858246715746c9aafa2ced4349f562324b67cad3788b"}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000300)={0x9}) 400.379581ms ago: executing program 2 (id=181): creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x4e0c01) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) mq_open(&(0x7f0000000180)='/dev/dsp\x00', 0x1, 0x40, &(0x7f0000000240)={0x8, 0x8, 0x1, 0x5}) ioctl$SNDCTL_DSP_STEREO(r4, 0x40045010, &(0x7f0000000080)) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r6 = openat$mixer(0xffffff9c, &(0x7f0000000040), 0x200, 0x0) r7 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$PTRACE_GETSIGMASK(0x420a, r7, 0x8, &(0x7f00000001c0)) ioctl$SOUND_MIXER_READ_VOLUME(r6, 0x80044d03, 0x0) 0s ago: executing program 0 (id=182): r0 = syz_io_uring_setup(0x1111, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000002080108000000000000f1ff010000010900010073797a30000000000cd704874e7182764b1c166081ec7dd2e852ca34da5d207806bcb5ff86c7baf9af1ab08db512de9e5bff1c6ec734504f73050fcada60e11ac9b8774c1d817ba1937e14738dcf9cb29404f495b3645980c4125b06958803fbaf621d"], 0x20}}, 0x0) r4 = openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x10002, 0x4, 0x1}, 0x18) r5 = signalfd(0xffffffffffffffff, &(0x7f00000002c0), 0x8) read$FUSE(r5, &(0x7f0000002900)={0x2020}, 0x2020) renameat2(r4, &(0x7f0000000280)='./file0\x00', r5, &(0x7f0000000380)='./file0\x00', 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x8, 0x0, 0x7, 0x0, 0x0}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000001110010000000000000040000813"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x18, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:3123' (ED25519) to the list of known hosts. [ 33.423167][ T5874] cgroup: Unknown subsys name 'net' [ 33.558803][ T5874] cgroup: Unknown subsys name 'cpuset' [ 33.562069][ T5874] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.364587][ T5874] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.448943][ T5958] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.456600][ T5964] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.459460][ T5964] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.459692][ T5963] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.461572][ T5964] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.464287][ T5963] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.465444][ T5964] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.467702][ T5963] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.469364][ T5964] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.471343][ T5963] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.473324][ T5965] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.474938][ T5963] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.477477][ T5965] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.479693][ T5963] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 36.482152][ T5965] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.483155][ T5963] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 36.483567][ T5969] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.483788][ T5969] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.484256][ T5969] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.484555][ T5969] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 36.484659][ T5969] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.490608][ T65] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 36.492107][ T5963] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.493519][ T65] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.623977][ T5954] chnl_net:caif_netlink_parms(): no params data found [ 36.654219][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 36.732749][ T5961] chnl_net:caif_netlink_parms(): no params data found [ 36.751922][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.753789][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.755719][ T5954] bridge_slave_0: entered allmulticast mode [ 36.758344][ T5954] bridge_slave_0: entered promiscuous mode [ 36.761496][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.763252][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.765124][ T5954] bridge_slave_1: entered allmulticast mode [ 36.767183][ T5954] bridge_slave_1: entered promiscuous mode [ 36.780764][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.782638][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.784521][ T5955] bridge_slave_0: entered allmulticast mode [ 36.787411][ T5955] bridge_slave_0: entered promiscuous mode [ 36.789871][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.791732][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.793606][ T5955] bridge_slave_1: entered allmulticast mode [ 36.795531][ T5955] bridge_slave_1: entered promiscuous mode [ 36.868465][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.871033][ T5967] chnl_net:caif_netlink_parms(): no params data found [ 36.881770][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.883638][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.885518][ T5961] bridge_slave_0: entered allmulticast mode [ 36.888454][ T5961] bridge_slave_0: entered promiscuous mode [ 36.891909][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.895004][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.908401][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.910283][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.912202][ T5961] bridge_slave_1: entered allmulticast mode [ 36.914150][ T5961] bridge_slave_1: entered promiscuous mode [ 36.924842][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.950413][ T5954] team0: Port device team_slave_0 added [ 36.962147][ T5961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.982594][ T5954] team0: Port device team_slave_1 added [ 36.992476][ T5961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.008227][ T5955] team0: Port device team_slave_0 added [ 37.051210][ T5961] team0: Port device team_slave_0 added [ 37.053710][ T5955] team0: Port device team_slave_1 added [ 37.056626][ T5961] team0: Port device team_slave_1 added [ 37.065565][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.069288][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.076098][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.102410][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.104351][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.106451][ T5967] bridge_slave_0: entered allmulticast mode [ 37.109511][ T5967] bridge_slave_0: entered promiscuous mode [ 37.113461][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.115302][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.122751][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.133378][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.135245][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.143521][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.154834][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.156797][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.158653][ T5967] bridge_slave_1: entered allmulticast mode [ 37.160609][ T5967] bridge_slave_1: entered promiscuous mode [ 37.172450][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.174306][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.181094][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.184315][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.186200][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.192972][ T5961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.205096][ T5967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.210198][ T5967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.212864][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.214700][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.221631][ T5961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.259918][ T5954] hsr_slave_0: entered promiscuous mode [ 37.261883][ T5954] hsr_slave_1: entered promiscuous mode [ 37.274264][ T5967] team0: Port device team_slave_0 added [ 37.279364][ T5967] team0: Port device team_slave_1 added [ 37.293334][ T5955] hsr_slave_0: entered promiscuous mode [ 37.295303][ T5955] hsr_slave_1: entered promiscuous mode [ 37.297221][ T5955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.299295][ T5955] Cannot create hsr debugfs directory [ 37.362760][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.364638][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.372508][ T5967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.378918][ T5961] hsr_slave_0: entered promiscuous mode [ 37.380763][ T5961] hsr_slave_1: entered promiscuous mode [ 37.382422][ T5961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.384411][ T5961] Cannot create hsr debugfs directory [ 37.396368][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.398227][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.404728][ T5967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.455958][ T5967] hsr_slave_0: entered promiscuous mode [ 37.458035][ T5967] hsr_slave_1: entered promiscuous mode [ 37.459810][ T5967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.461763][ T5967] Cannot create hsr debugfs directory [ 37.595148][ T5954] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.601151][ T5954] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.605314][ T5954] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.610625][ T5954] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.642103][ T5955] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.645192][ T5955] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.649489][ T5955] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.656017][ T5955] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.677945][ T5967] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.681038][ T5967] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.685606][ T5967] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.689421][ T5967] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.711539][ T5961] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.717048][ T5961] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.720499][ T5961] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.724173][ T5961] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.757272][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.775192][ T5954] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.785095][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.787188][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.792829][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.798295][ T1230] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.800154][ T1230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.818667][ T5967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.821886][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.829227][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.831126][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.839081][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.840971][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.844513][ T5961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.861235][ T5967] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.864219][ T5961] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.872704][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.874571][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.880071][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.882368][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.892404][ T1230] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.894274][ T1230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.897246][ T1230] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.899794][ T1230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.978948][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.998248][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.006928][ T5954] veth0_vlan: entered promiscuous mode [ 38.019042][ T5954] veth1_vlan: entered promiscuous mode [ 38.037719][ T5961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.047100][ T5954] veth0_macvtap: entered promiscuous mode [ 38.054373][ T5955] veth0_vlan: entered promiscuous mode [ 38.059399][ T5967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.061800][ T5954] veth1_macvtap: entered promiscuous mode [ 38.068638][ T5955] veth1_vlan: entered promiscuous mode [ 38.077921][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.081733][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.090534][ T5961] veth0_vlan: entered promiscuous mode [ 38.093961][ T5961] veth1_vlan: entered promiscuous mode [ 38.104889][ T5954] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.107909][ T5954] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.110197][ T5954] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.112478][ T5954] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.139538][ T5955] veth0_macvtap: entered promiscuous mode [ 38.145833][ T5955] veth1_macvtap: entered promiscuous mode [ 38.163399][ T5967] veth0_vlan: entered promiscuous mode [ 38.167452][ T214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.169679][ T214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.172274][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.175148][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.178893][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.182231][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.184961][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.188434][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.191239][ T5961] veth0_macvtap: entered promiscuous mode [ 38.195437][ T5955] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.199274][ T5955] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.201552][ T5955] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.203821][ T5955] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.211801][ T5961] veth1_macvtap: entered promiscuous mode [ 38.214765][ T5967] veth1_vlan: entered promiscuous mode [ 38.231358][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.233517][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.244702][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.248374][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.251591][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.254323][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.258189][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.268734][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.270773][ T5954] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.271623][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.278413][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.281189][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.284327][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.296000][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.297149][ T5961] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.298006][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.300335][ T5961] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.304552][ T5961] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.307687][ T5961] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.315114][ T5967] veth0_macvtap: entered promiscuous mode [ 38.327739][ T5967] veth1_macvtap: entered promiscuous mode [ 38.336313][ T1230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.339282][ T1230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.341329][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.345449][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.350107][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.353620][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.357039][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.360583][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.367364][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.370911][ T6021] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1'. [ 38.387402][ T6021] netlink: 5312 bytes leftover after parsing attributes in process `syz.0.1'. [ 38.387978][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.391316][ T6021] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 38.393456][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.399361][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.403294][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.407328][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.410315][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.414916][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.418854][ T5967] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.421741][ T5967] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.423999][ T5967] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.426852][ T5967] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.436241][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.439033][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.473208][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.476705][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.498212][ T1230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.500276][ T1230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.507398][ T65] Bluetooth: hci0: command tx timeout [ 38.509172][ T65] Bluetooth: hci1: command tx timeout [ 38.509627][ T5958] Bluetooth: hci2: command tx timeout [ 38.511268][ T6026] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.522735][ T6028] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 38.523778][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.527378][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.581772][ T6030] kvm: user requested TSC rate below hardware speed [ 38.596351][ T5958] Bluetooth: hci3: command tx timeout [ 38.726582][ T6013] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 38.738983][ T6036] tipc: Started in network mode [ 38.741015][ T6036] tipc: Node identity ac1414aa, cluster identity 4711 [ 38.745255][ T6036] tipc: Enabled bearer , priority 10 [ 38.877025][ T6013] usb 5-1: Using ep0 maxpacket: 8 [ 38.890994][ T6013] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 38.895377][ T6013] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 38.898643][ T6013] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 38.902157][ T6013] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 38.919468][ T6013] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 38.923800][ T6013] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 38.929705][ T6013] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 38.937132][ T6013] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 38.941433][ T6013] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 38.943483][ T6013] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 38.946304][ T6013] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 38.949540][ T6013] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 38.952828][ T6013] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 38.955850][ T6013] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 38.961215][ T6013] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 38.963605][ T6013] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 38.966376][ T6013] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 38.970433][ T6013] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 38.975494][ T6013] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 38.981771][ T6013] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 38.983278][ T6034] mmap: syz.3.6 (6034) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 38.984963][ T6013] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 38.993744][ T6013] usb 5-1: string descriptor 0 read error: -22 [ 38.995545][ T6013] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 38.996684][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 38.996710][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 38.998182][ T6013] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.011487][ T6013] adutux 5-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 39.201510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 39.203685][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 39.205837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 39.376185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 39.668937][ T40] audit: type=1804 audit(1730055624.715:2): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.9" name="/newroot/1/bus/bus" dev="overlay" ino=31 res=1 errno=0 [ 39.679968][ T6053] evm: overlay not supported [ 39.704213][ T6053] Invalid ELF header len 18 [ 39.786198][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 39.816009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c0!!! [ 39.866748][ T73] tipc: Node number set to 2886997162 [ 40.586751][ T5958] Bluetooth: hci2: command tx timeout [ 40.586824][ T65] Bluetooth: hci0: command tx timeout [ 40.586877][ T5305] Bluetooth: hci1: command tx timeout [ 40.666042][ T65] Bluetooth: hci3: command tx timeout [ 40.720381][ T6089] usb 2-1: USB disconnect, device number 2 [ 40.809311][ T6096] hub 2-0:1.0: USB hub found [ 40.811421][ T6096] hub 2-0:1.0: 6 ports detected [ 40.931516][ T6106] tipc: Enabling of bearer rejected, failed to enable media [ 40.995954][ T6001] usb 2-1: new high-speed USB device number 3 using ehci-pci [ 41.194044][ T6001] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 41.197031][ T6001] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 41.202353][ T6001] usb 2-1: Product: QEMU USB Tablet [ 41.204472][ T6001] usb 2-1: Manufacturer: QEMU [ 41.206212][ T6001] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 41.238083][ T6001] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0002/input/input5 [ 41.314199][ T6001] hid-generic 0003:0627:0001.0002: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 41.799476][ T35] usb 5-1: USB disconnect, device number 2 [ 41.955432][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20'. [ 41.967563][ T6132] tipc: Started in network mode [ 41.970412][ T6132] tipc: Node identity c2785c9b2dc, cluster identity 4711 [ 41.981461][ T6132] tipc: Enabled bearer , priority 10 [ 42.252490][ T6139] ALSA: seq fatal error: cannot create timer (-22) [ 42.666827][ T65] Bluetooth: hci0: command tx timeout [ 42.667389][ T5958] Bluetooth: hci1: command tx timeout [ 42.667460][ T5305] Bluetooth: hci2: command tx timeout [ 42.682134][ T6147] Zero length message leads to an empty skb [ 42.746589][ T5958] Bluetooth: hci3: command tx timeout [ 42.891854][ T6155] tc_dump_action: action bad kind [ 42.998890][ T6156] warning: `syz.2.29' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 43.106580][ T35] tipc: Node number set to 4021836955 [ 43.514023][ T6166] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.518071][ T6166] capability: warning: `syz.0.31' uses deprecated v2 capabilities in a way that may be insecure [ 43.526053][ T6164] input: syz0 as /devices/virtual/input/input6 [ 43.885613][ T6183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.33'. [ 44.026698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 44.099716][ T6190] overlayfs: failed to resolve '/0#': -2 [ 44.381268][ T6196] input: syz0 as /devices/virtual/input/input7 [ 44.560278][ T6205] usb 2-1: USB disconnect, device number 3 [ 44.641963][ T6210] hub 2-0:1.0: USB hub found [ 44.643819][ T6210] hub 2-0:1.0: 6 ports detected [ 44.696030][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 44.746131][ T5958] Bluetooth: hci2: command tx timeout [ 44.746180][ T5305] Bluetooth: hci1: command tx timeout [ 44.757229][ T5305] Bluetooth: hci0: command tx timeout [ 44.846015][ T5999] usb 2-1: new high-speed USB device number 4 using ehci-pci [ 45.026043][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 45.034013][ T5999] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 45.037140][ T5999] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 45.040451][ T5999] usb 2-1: Product: QEMU USB Tablet [ 45.042007][ T5999] usb 2-1: Manufacturer: QEMU [ 45.043354][ T5999] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 45.085110][ T5999] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0003/input/input8 [ 45.088718][ T6223] REISERFS warning (device nullb0): super-6502 reiserfs_getopt: unknown mount option ""㣨PmX"kaCSuAM߭+e\HQ\Ž-۬}PU/HִZb/R{AeRAܬv" [ 45.158513][ T5999] hid-generic 0003:0627:0001.0003: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 45.195980][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 45.199998][ T9] usb 7-1: config 0 has no interfaces? [ 45.205356][ T9] usb 7-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.40 [ 45.212462][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.214922][ T9] usb 7-1: Product: syz [ 45.216577][ T9] usb 7-1: Manufacturer: syz [ 45.217908][ T9] usb 7-1: SerialNumber: syz [ 45.223576][ T9] usb 7-1: config 0 descriptor?? [ 45.238327][ T35] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 45.433577][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 45.434518][ T9] usb 7-1: USB disconnect, device number 2 [ 45.437274][ T35] usb 6-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 45.441217][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.450509][ T35] usb 6-1: config 0 descriptor?? [ 45.459907][ T35] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 45.483449][ T35] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 45.866079][ T6231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.49'. [ 46.785118][ T5999] usb 6-1: USB disconnect, device number 2 [ 46.982577][ T6248] Process accounting resumed [ 47.785182][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.57'. [ 47.911371][ T6271] syz.2.57: attempt to access beyond end of device [ 47.911371][ T6271] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 47.914248][ T6273] Bluetooth: MGMT ver 1.23 [ 47.927722][ T6271] syz.2.57: attempt to access beyond end of device [ 47.927722][ T6271] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 47.935563][ T6271] Mount JFS Failure: -5 [ 47.939260][ T6271] jfs_mount failed w/return code = -5 [ 47.944270][ T6273] netlink: 'syz.3.58': attribute type 12 has an invalid length. [ 47.947341][ T6273] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.58'. [ 48.148741][ T6282] netlink: 20 bytes leftover after parsing attributes in process `syz.1.60'. [ 48.199194][ T6284] kvm: kvm [6283]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x6000000f809 [ 48.221851][ T6284] kvm: kvm [6283]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x6000000f809 [ 48.260516][ T6289] netlink: 204 bytes leftover after parsing attributes in process `syz.1.62'. [ 48.268244][ T6289] Cannot find map_set index 0 as target [ 48.325031][ T6294] Invalid ELF header type: 3 != 1 [ 48.331429][ T6294] hugetlbfs: syz.3.63 (6294): Using mlock ulimits for SHM_HUGETLB is obsolete [ 48.459400][ T6304] 9pnet_fd: Insufficient options for proto=fd [ 48.726930][ T6311] kvm: vcpu 1: requested 104 ns lapic timer period limited to 200000 ns [ 48.864422][ T6320] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.70'. [ 48.942170][ T6322] overlayfs: failed to resolve '/0#': -2 [ 49.300344][ T76] Bluetooth: hci4: Frame reassembly failed (-84) [ 49.317382][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.74'. [ 49.322492][ T6333] netlink: 312 bytes leftover after parsing attributes in process `syz.2.74'. [ 49.324819][ T6333] netlink: 312 bytes leftover after parsing attributes in process `syz.2.74'. [ 49.795850][ T6341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.76'. [ 49.869664][ T6351] ======================================================= [ 49.869664][ T6351] WARNING: The mand mount option has been deprecated and [ 49.869664][ T6351] and is ignored by this kernel. Remove the mand [ 49.869664][ T6351] option from the mount to silence this warning. [ 49.869664][ T6351] ======================================================= [ 49.946988][ T5305] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 49.948125][ T65] Bluetooth: hci0: command 0x0401 tx timeout [ 50.215477][ T6358] wg2: entered promiscuous mode [ 50.217187][ T6358] wg2: entered allmulticast mode [ 50.224973][ T6360] fuse: Bad value for 'user_id' [ 50.226717][ T6360] fuse: Bad value for 'user_id' [ 50.485966][ T35] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 50.646005][ T35] usb 6-1: Using ep0 maxpacket: 8 [ 50.649120][ T35] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 50.652533][ T35] usb 6-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 50.654935][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.659471][ T35] usb 6-1: config 0 descriptor?? [ 50.664569][ T35] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 50.867519][ T6019] usb 6-1: USB disconnect, device number 3 [ 51.054139][ T6375] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 51.057030][ T6375] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 51.059767][ T6375] overlayfs: missing 'lowerdir' [ 51.306216][ T5305] Bluetooth: hci4: command 0x1003 tx timeout [ 51.306463][ T5958] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 51.443132][ T6398] delete_channel: no stack [ 51.446137][ T6394] overlayfs: failed to resolve './file0': -2 [ 51.450228][ T6394] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 51.453356][ T6394] overlayfs: missing 'lowerdir' [ 51.522794][ T6394] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 51.547496][ T6406] binder: 6404:6406 ioctl c0306201 20000580 returned -14 [ 52.134402][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.95'. [ 52.137067][ T6410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.95'. [ 52.216660][ T6387] delete_channel: no stack [ 52.680864][ T1329] libceph: connect (1)[c::]:6789 error -101 [ 52.682972][ T1329] libceph: mon0 (1)[c::]:6789 connect error [ 52.838596][ T6458] ceph: No mds server is up or the cluster is laggy [ 52.855616][ T6464] usb 2-1: USB disconnect, device number 4 [ 52.987220][ T6458] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 52.989169][ T6458] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 52.991689][ T6458] vhci_hcd vhci_hcd.0: Device attached [ 53.500341][ T6466] vhci_hcd: connection closed [ 53.501831][ T64] vhci_hcd: stop threads [ 53.504464][ T64] vhci_hcd: release socket [ 53.505986][ T64] vhci_hcd: disconnect device [ 53.864535][ T6474] kvm: kvm [6473]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x2 [ 54.020669][ T6481] netlink: 'syz.2.111': attribute type 1 has an invalid length. [ 54.022798][ T6481] netlink: 9352 bytes leftover after parsing attributes in process `syz.2.111'. [ 54.025309][ T6481] netlink: 'syz.2.111': attribute type 1 has an invalid length. [ 54.031783][ T6481] netlink: 'syz.2.111': attribute type 2 has an invalid length. [ 54.034539][ T6481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.111'. [ 54.042691][ T6481] xt_TCPMSS: Only works on TCP SYN packets [ 54.376613][ T6505] netlink: 'syz.1.118': attribute type 10 has an invalid length. [ 54.379662][ T6505] syz_tun: entered promiscuous mode [ 54.385150][ T6505] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 54.505988][ T1329] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 54.588988][ T5958] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 54.656234][ T1329] usb 7-1: Using ep0 maxpacket: 32 [ 54.660595][ T1329] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 54.670683][ T1329] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 54.673030][ T1329] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 54.675180][ T1329] usb 7-1: Product: syz [ 54.684533][ T1329] usb 7-1: Manufacturer: syz [ 54.685805][ T1329] usb 7-1: SerialNumber: syz [ 54.689983][ T1329] usb 7-1: config 0 descriptor?? [ 54.692193][ T6503] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 54.834552][ T6534] kAFS: unable to lookup cell 'sycP@!1' [ 55.179873][ T6000] usb 7-1: USB disconnect, device number 3 [ 55.725692][ T6560] netlink: 191384 bytes leftover after parsing attributes in process `syz.3.132'. [ 55.859531][ T6562] dccp_invalid_packet: pskb_may_pull failed [ 55.892875][ T6575] dccp_invalid_packet: pskb_may_pull failed [ 55.895643][ T6562] process 'syz.2.133' launched '/dev/fd/3' with NULL argv: empty string added [ 56.022694][ T6578] netlink: 20 bytes leftover after parsing attributes in process `syz.3.134'. [ 56.026069][ T6578] overlay: Unknown parameter 'dont_appraise' [ 56.212656][ T6583] virtio-fs: tag <(null)> not found [ 56.269841][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.138'. [ 56.566122][ T25] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 56.718348][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.721230][ T25] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 56.724543][ T25] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 56.728417][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.732457][ T25] usb 7-1: config 0 descriptor?? [ 56.760859][ T6618] netlink: 20 bytes leftover after parsing attributes in process `syz.3.148'. [ 57.142535][ T25] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 57.148910][ T25] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 57.161679][ T25] usb 7-1: USB disconnect, device number 4 [ 57.482291][ T6638] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 57.510306][ T6640] dccp_invalid_packet: invalid packet type [ 58.070604][ T6666] netlink: 'syz.1.163': attribute type 10 has an invalid length. [ 58.072641][ T6666] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.163'. [ 58.667206][ T5958] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 58.670106][ T5958] Bluetooth: hci0: Injecting HCI hardware error event [ 58.672262][ T5958] Bluetooth: hci0: hardware error 0x00 [ 58.726747][ T6704] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 59.224690][ T40] audit: type=1326 audit(1730055644.305:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.2.175" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x0 [ 60.756084][ T5958] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 60.757954][ T5958] ================================================================== [ 60.760083][ T5958] BUG: KASAN: slab-use-after-free in set_powered_sync+0xc1/0xd0 [ 60.762125][ T5958] Read of size 8 at addr ffff88801f6b8418 by task kworker/u33:2/5958 [ 60.766229][ T5958] [ 60.766865][ T5958] CPU: 3 UID: 0 PID: 5958 Comm: kworker/u33:2 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 60.769813][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.772653][ T5958] Workqueue: hci0 hci_cmd_sync_work [ 60.774015][ T5958] Call Trace: [ 60.774884][ T5958] [ 60.775656][ T5958] dump_stack_lvl+0x116/0x1f0 [ 60.776909][ T5958] print_report+0xc3/0x620 [ 60.778092][ T5958] ? __virt_addr_valid+0x5e/0x590 [ 60.779460][ T5958] ? __phys_addr+0xc6/0x150 [ 60.781119][ T5958] kasan_report+0xd9/0x110 [ 60.782746][ T5958] ? set_powered_sync+0xc1/0xd0 [ 60.784391][ T5958] ? set_powered_sync+0xc1/0xd0 [ 60.785644][ T5958] set_powered_sync+0xc1/0xd0 [ 60.786951][ T5958] hci_cmd_sync_work+0x1a4/0x410 [ 60.788387][ T5958] process_one_work+0x958/0x1b30 [ 60.789725][ T5958] ? __pfx_hci_error_reset+0x10/0x10 [ 60.791187][ T5958] ? __pfx_process_one_work+0x10/0x10 [ 60.792634][ T5958] ? assign_work+0x1a0/0x250 [ 60.793865][ T5958] worker_thread+0x6c8/0xf00 [ 60.795087][ T5958] ? __pfx_worker_thread+0x10/0x10 [ 60.796441][ T5958] kthread+0x2c1/0x3a0 [ 60.797521][ T5958] ? _raw_spin_unlock_irq+0x23/0x50 [ 60.798895][ T5958] ? __pfx_kthread+0x10/0x10 [ 60.800118][ T5958] ret_from_fork+0x45/0x80 [ 60.801451][ T5958] ? __pfx_kthread+0x10/0x10 [ 60.803028][ T5958] ret_from_fork_asm+0x1a/0x30 [ 60.804294][ T5958] [ 60.805113][ T5958] [ 60.805743][ T5958] Allocated by task 6705: [ 60.806874][ T5958] kasan_save_stack+0x33/0x60 [ 60.808126][ T5958] kasan_save_track+0x14/0x30 [ 60.809295][ T5958] __kasan_kmalloc+0xaa/0xb0 [ 60.810512][ T5958] mgmt_pending_new+0x5b/0x290 [ 60.811839][ T5958] mgmt_pending_add+0x36/0x160 [ 60.813103][ T5958] set_powered+0x28c/0x5c0 [ 60.814280][ T5958] hci_sock_sendmsg+0x1528/0x25e0 [ 60.815604][ T5958] sock_write_iter+0x4fe/0x5b0 [ 60.816877][ T5958] vfs_write+0x5ae/0x1150 [ 60.818017][ T5958] ksys_write+0x1fa/0x260 [ 60.819153][ T5958] __do_fast_syscall_32+0x73/0x120 [ 60.820499][ T5958] do_fast_syscall_32+0x32/0x80 [ 60.822105][ T5958] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 60.823796][ T5958] [ 60.824442][ T5958] Freed by task 5958: [ 60.825492][ T5958] kasan_save_stack+0x33/0x60 [ 60.826734][ T5958] kasan_save_track+0x14/0x30 [ 60.827977][ T5958] kasan_save_free_info+0x3b/0x60 [ 60.829297][ T5958] __kasan_slab_free+0x51/0x70 [ 60.830558][ T5958] kfree+0x14f/0x4b0 [ 60.831652][ T5958] settings_rsp+0x257/0x400 [ 60.832891][ T5958] mgmt_pending_foreach+0xdf/0x140 [ 60.834227][ T5958] __mgmt_power_off+0xc8/0x2c0 [ 60.835474][ T5958] hci_dev_close_sync+0xd37/0x1260 [ 60.836815][ T5958] hci_dev_do_close+0x2e/0x90 [ 60.838032][ T5958] hci_error_reset+0xbf/0x320 [ 60.839263][ T5958] process_one_work+0x958/0x1b30 [ 60.840557][ T5958] worker_thread+0x6c8/0xf00 [ 60.842053][ T5958] kthread+0x2c1/0x3a0 [ 60.843546][ T5958] ret_from_fork+0x45/0x80 [ 60.844416][ T6737] syz.2.181 (6737): drop_caches: 2 [ 60.845180][ T5958] ret_from_fork_asm+0x1a/0x30 [ 60.848463][ T5958] [ 60.849333][ T5958] The buggy address belongs to the object at ffff88801f6b8400 [ 60.849333][ T5958] which belongs to the cache kmalloc-96 of size 96 [ 60.854207][ T5958] The buggy address is located 24 bytes inside of [ 60.854207][ T5958] freed 96-byte region [ffff88801f6b8400, ffff88801f6b8460) [ 60.858957][ T5958] [ 60.859838][ T5958] The buggy address belongs to the physical page: [ 60.861827][ T5958] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88801f6b8400 pfn:0x1f6b8 [ 60.864396][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 60.866214][ T5958] page_type: f5(slab) [ 60.867255][ T5958] raw: 00fff00000000000 ffff88801ac42280 dead000000000100 dead000000000122 [ 60.869458][ T5958] raw: ffff88801f6b8400 0000000080200017 00000001f5000000 0000000000000000 [ 60.871708][ T5958] page dumped because: kasan: bad access detected [ 60.873365][ T5958] page_owner tracks the page as allocated [ 60.874848][ T5958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 5954, tgid 5954 (syz-executor), ts 38167821704, free_ts 38121805328 [ 60.879840][ T5958] post_alloc_hook+0x2d1/0x350 [ 60.881082][ T5958] get_page_from_freelist+0x101e/0x3070 [ 60.882481][ T5958] __alloc_pages_noprof+0x6af/0x25a0 [ 60.883815][ T5958] new_slab+0xca/0x3f0 [ 60.884850][ T5958] ___slab_alloc+0xd1d/0x16f0 [ 60.886044][ T5958] __slab_alloc.constprop.0+0x56/0xb0 [ 60.887752][ T5958] __kmalloc_cache_node_noprof+0xf1/0x360 [ 60.889333][ T5958] __alloc_workqueue+0x506/0x1810 [ 60.890648][ T5958] alloc_workqueue+0xd3/0x200 [ 60.891949][ T5958] ieee80211_register_hw+0x1e21/0x3fb0 [ 60.893373][ T5958] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 60.894860][ T5958] hwsim_new_radio_nl+0xb42/0x12b0 [ 60.896205][ T5958] genl_family_rcv_msg_doit+0x202/0x2f0 [ 60.897648][ T5958] genl_rcv_msg+0x565/0x800 [ 60.898856][ T5958] netlink_rcv_skb+0x165/0x410 [ 60.900125][ T5958] genl_rcv+0x28/0x40 [ 60.901291][ T5958] page last free pid 5967 tgid 5967 stack trace: [ 60.903234][ T5958] free_unref_page+0x5f4/0xdc0 [ 60.904859][ T5958] __put_partials+0x14c/0x170 [ 60.906133][ T5958] qlist_free_all+0x4e/0x120 [ 60.907362][ T5958] kasan_quarantine_reduce+0x192/0x1e0 [ 60.908793][ T5958] __kasan_slab_alloc+0x69/0x90 [ 60.910059][ T5958] kmem_cache_alloc_node_noprof+0x153/0x310 [ 60.911615][ T5958] __alloc_skb+0x2b3/0x380 [ 60.912806][ T5958] rtmsg_ifinfo_build_skb+0x81/0x280 [ 60.914175][ T5958] rtnetlink_event+0xf3/0x1f0 [ 60.915402][ T5958] notifier_call_chain+0xb9/0x410 [ 60.916734][ T5958] call_netdevice_notifiers_info+0xbe/0x140 [ 60.918269][ T5958] call_netdevice_notifiers+0x7d/0xb0 [ 60.919657][ T5958] vlan_dev_open+0x781/0x940 [ 60.920872][ T5958] __dev_open+0x2d4/0x4e0 [ 60.922047][ T5958] __dev_change_flags+0x561/0x720 [ 60.923353][ T5958] dev_change_flags+0x8f/0x160 [ 60.924608][ T5958] [ 60.925234][ T5958] Memory state around the buggy address: [ 60.926714][ T5958] ffff88801f6b8300: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 60.928788][ T5958] ffff88801f6b8380: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 60.930855][ T5958] >ffff88801f6b8400: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 60.933696][ T5958] ^ [ 60.935323][ T5958] ffff88801f6b8480: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 60.937410][ T5958] ffff88801f6b8500: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 60.939464][ T5958] ================================================================== [ 60.941804][ T5958] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 60.943652][ T5958] CPU: 3 UID: 0 PID: 5958 Comm: kworker/u33:2 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 60.946462][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.949769][ T5958] Workqueue: hci0 hci_cmd_sync_work [ 60.951203][ T5958] Call Trace: [ 60.952126][ T5958] [ 60.952900][ T5958] dump_stack_lvl+0x3d/0x1f0 [ 60.954105][ T5958] panic+0x71d/0x800 [ 60.955131][ T5958] ? __pfx_panic+0x10/0x10 [ 60.956277][ T5958] ? preempt_schedule_thunk+0x1a/0x30 [ 60.957675][ T5958] ? preempt_schedule_common+0x44/0xc0 [ 60.959079][ T5958] ? check_panic_on_warn+0x1f/0xb0 [ 60.960409][ T5958] check_panic_on_warn+0xab/0xb0 [ 60.961747][ T5958] end_report+0x117/0x180 [ 60.962878][ T5958] kasan_report+0xe9/0x110 [ 60.964216][ T5958] ? set_powered_sync+0xc1/0xd0 [ 60.965849][ T5958] ? set_powered_sync+0xc1/0xd0 [ 60.967118][ T5958] set_powered_sync+0xc1/0xd0 [ 60.968372][ T5958] hci_cmd_sync_work+0x1a4/0x410 [ 60.969666][ T5958] process_one_work+0x958/0x1b30 [ 60.970991][ T5958] ? __pfx_hci_error_reset+0x10/0x10 [ 60.972467][ T5958] ? __pfx_process_one_work+0x10/0x10 [ 60.973949][ T5958] ? assign_work+0x1a0/0x250 [ 60.975185][ T5958] worker_thread+0x6c8/0xf00 [ 60.976426][ T5958] ? __pfx_worker_thread+0x10/0x10 [ 60.977770][ T5958] kthread+0x2c1/0x3a0 [ 60.979105][ T5958] ? _raw_spin_unlock_irq+0x23/0x50 [ 60.981015][ T5958] ? __pfx_kthread+0x10/0x10 [ 60.982683][ T5958] ret_from_fork+0x45/0x80 [ 60.984032][ T5958] ? __pfx_kthread+0x10/0x10 [ 60.985243][ T5958] ret_from_fork_asm+0x1a/0x30 [ 60.986498][ T5958] [ 60.987960][ T5958] Kernel Offset: disabled [ 60.989064][ T5958] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:00:45 Registers: info registers vcpu 0 CPU#0 RAX=0000000000197abd RBX=0000000000000000 RCX=ffffffff8b143f59 RDX=0000000000000000 RSI=ffffffff8b4cc960 RDI=ffffffff8bb12fa0 RBP=fffffbfff1b52af8 RSP=ffffffff8da07e20 R8 =0000000000000001 R9 =ffffed1005687025 R10=ffff88802b43812b R11=ffffffff8b4f7d60 R12=0000000000000000 R13=ffffffff8da957c0 R14=ffffffff901ce9c8 R15=0000000000000000 RIP=ffffffff8b14533f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5675b04 CR3=000000006e746000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000000f RBX=ffff888022a753d8 RCX=ffffc90004a2f4a8 RDX=0000000000000004 RSI=ffff88804d1fb2e8 RDI=ffff888022a753d8 RBP=0000000000000004 RSP=ffffc90004a2f410 R8 =0000000000000000 R9 =fffffbfff2039d39 R10=ffffffff901ce9cf R11=0000000000000000 R12=ffff88804d1fb2e8 R13=ffff88804d1fb2e8 R14=ffffc90004a2f4a8 R15=0000000000000003 RIP=ffffffff8b14301f RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3bf5fb CR3=000000006e746000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffc90003260000 RDX=1ffff920000a814e RSI=ffffc9000325fb08 RDI=ffffc90000540a78 RBP=1ffff9200064bf69 RSP=ffffc900005409c8 R8 =ffffc90000540a6c R9 =ffffffff9143145a R10=ffffc90000540a38 R11=0000000000087dde R12=ffffc90000540a88 R13=ffffc90000540a38 R14=ffffc9000325fb38 R15=ffffc9000325fb30 RIP=ffffffff813d0ab0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5d52091d00 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005778c4c0 CR3=000000004ed1e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=749557bff56b3ee7 445130f20af521cf 749557bff56b3ee7 445130f20af521cf 749557bff56b3ee7 445130f20af521cf 749557bff56b3ee7 445130f20af521cf ZMM18=f2f6b44e963dd5be a193a0c2925a60e7 f2f6b44e963dd5be a193a0c2925a60e7 f2f6b44e963dd5be a193a0c2925a60e7 f2f6b44e963dd5be a193a0c2925a60e7 ZMM19=ee02000000000000 0000000000000026 ee02000000000000 0000000000000025 ee02000000000000 0000000000000024 ee02000000000000 0000000000000023 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=445130f2445130f2 445130f2445130f2 445130f2445130f2 445130f2445130f2 445130f2445130f2 445130f2445130f2 445130f2445130f2 445130f2445130f2 ZMM22=f56b3ee7f56b3ee7 f56b3ee7f56b3ee7 f56b3ee7f56b3ee7 f56b3ee7f56b3ee7 f56b3ee7f56b3ee7 f56b3ee7f56b3ee7 f56b3ee7f56b3ee7 f56b3ee7f56b3ee7 ZMM23=749557bf749557bf 749557bf749557bf 749557bf749557bf 749557bf749557bf 749557bf749557bf 749557bf749557bf 749557bf749557bf 749557bf749557bf ZMM24=925a60e7925a60e7 925a60e7925a60e7 925a60e7925a60e7 925a60e7925a60e7 925a60e7925a60e7 925a60e7925a60e7 925a60e7925a60e7 925a60e7925a60e7 ZMM25=a193a0c2a193a0c2 a193a0c2a193a0c2 a193a0c2a193a0c2 a193a0c2a193a0c2 a193a0c2a193a0c2 a193a0c2a193a0c2 a193a0c2a193a0c2 a193a0c2a193a0c2 ZMM26=963dd5be963dd5be 963dd5be963dd5be 963dd5be963dd5be 963dd5be963dd5be 963dd5be963dd5be 963dd5be963dd5be 963dd5be963dd5be 963dd5be963dd5be ZMM27=f2f6b44ef2f6b44e f2f6b44ef2f6b44e f2f6b44ef2f6b44e f2f6b44ef2f6b44e f2f6b44ef2f6b44e f2f6b44ef2f6b44e f2f6b44ef2f6b44e f2f6b44ef2f6b44e ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=ee020000ee020000 ee020000ee020000 ee020000ee020000 ee020000ee020000 ee020000ee020000 ee020000ee020000 ee020000ee020000 ee020000ee020000 info registers vcpu 3 CPU#3 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85043fb5 RDI=ffffffff9a6412a0 RBP=ffffffff9a641260 RSP=ffffc90003edf698 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3666313038386552 R12=0000000000000000 R13=0000000000000033 R14=ffffffff85043f50 R15=0000000000000000 RIP=ffffffff85043fdf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3bedc1 CR3=000000006c9d4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000