last executing test programs: 14.11948739s ago: executing program 0 (id=1): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$KVM_GET_XSAVE2(r1, 0x9000aecf, &(0x7f00002ff000/0x1000)=nil) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8}, 0x94) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r3, 0x10c, 0x1, &(0x7f0000000040)=0x2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x300f000, 0xe, 0x88d9, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = syz_open_dev$sndctrl(&(0x7f0000000580), 0xff1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f0000000140)}, 0x8) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000000100)=0x9) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, 0x0) iopl(0x3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000140)) syz_clone3(&(0x7f0000000380)={0x22140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x15) 11.40482369s ago: executing program 0 (id=9): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0x1, 0xff, 0x7, 0xc, 0x0, 0x0, 0x1000, [@sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x4e25, 0xb10e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, @sadb_address={0x5, 0x6, 0xff, 0x20, 0x0, @in6={0xa, 0x4e23, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x16fc6}}]}, 0x60}}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x15, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000fd3f0000000000000900000818110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b0100ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006c00000018110000", @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x2, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2101, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1109, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x2, r11, 0x0, 0x0, 0x1}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/kvm\x00', 0x0, 0x0) r13 = inotify_init1(0x0) inotify_add_watch(r13, &(0x7f0000000080)='./debug/kvm\x00', 0x100) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) read(r13, &(0x7f0000001000)=""/4096, 0x1000) openat(r12, &(0x7f0000001010), 0x0, 0x0) 8.176574068s ago: executing program 2 (id=13): openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x22100) listen(0xffffffffffffffff, 0x5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000080)={0xc0, 0x0, 0x8000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x1800087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/177, 0xb1}, {&(0x7f00000004c0)}, {&(0x7f0000000500)=""/66, 0x42}, {&(0x7f0000000580)=""/19, 0x13}], 0x4, &(0x7f0000000600)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}, 0x23) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 8.039103057s ago: executing program 1 (id=14): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x6cad, &(0x7f00000000c0)={0x0, 0x7b42, 0x1, 0x3, 0x3ce}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_CLOCK(r1, 0x1d, &(0x7f0000000280)={0x3}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000018000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d0bfa91", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x18, r4}, 0x50) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$xdp(0x2c, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000680012800b00010069703667726500005800028014000700ff02000000000000000000000000000106000f000a00000006000f004a00000014000600fe8000000000000000000000000000230800140006000000050016000200000004001200060002000000000008000a00", @ANYRES32], 0x90}, 0x1, 0x0, 0x0, 0x80000}, 0x0) 7.858982392s ago: executing program 0 (id=15): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888) syz_usb_connect(0x4, 0x2d, &(0x7f0000000140)=ANY=[@ANYRESHEX=0x0, @ANYRES64, @ANYRES64=r0, @ANYRESOCT=r0, @ANYBLOB="7e825f16559d49d66e9ecd936ee697b97a11d7619bb5dbd8662e9fe86beaab2342f5eb98e704120259f31c7a53f21024f8e0f11fe13bd4a04042b6c89cca30299e33ff3c79ec306f09b44d62c4edc052ac27b3f1ccd8b93e40c33341992b3c9846ef148c3768cf", @ANYBLOB="4acd4c9fc8707ff964cd67f61fc98b641634fae3ac1f0249f03e2c17c03efffb099313234b8dea37fe65437e", @ANYRESHEX, @ANYRES16=r0, @ANYBLOB="67c06a17944a4c1029742569b3a87a5c7238d889b6474ced253b49eb42c8d32fe65d4b5f4dd494970fb8d823efe58810265414d7f7b75cfa560c234ee4f60aab3e1f9c0690663fb07a6d9e131904cef621400464453f02f9d8506351565873e3747f4deafd7575e5b360f2"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000100)='V', 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x14, 0x1, 0x3, 0x401, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4004840) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') fsopen(&(0x7f0000000040)='jfs\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) lsetxattr$system_posix_acl(0x0, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000140)={{}, {0x1, 0x2}, [], {0x4, 0x2}, [{0x8, 0x1}], {0x10, 0x4}}, 0x2c, 0x2) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x7) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000)={0x0, r5}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0xeeeb5000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)) r6 = openat2$dir(0xffffff9c, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)={0x2b00, 0x100, 0x32}, 0x18) faccessat2(r6, &(0x7f00000002c0)='./file0/../file0/../file0\x00', 0x1, 0x100) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000140)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@typedef={0x4, 0x0, 0x0, 0x7}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @union]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28) 7.205525097s ago: executing program 3 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat$vmci(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="66ee837b6ac1477b0d5a566416626eb08b2d8371625d0f695145c8e69baec57349c1a5ac4a7df2ace236b072fdd124cdb5622b559ec773b14b9388345c22235d6e3f212e3485f61bc94b2d3f01065e662f31dc04ba26792da41dddb443613f52b3c8e160f5e724bf64168cb8b36536aa15ee6c52c0c52623b975770e"], 0x7) r1 = syz_usb_connect(0x6, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x24, &(0x7f0000000800)=ANY=[@ANYBLOB="00110200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x0, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9aaa}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$I2C(&(0x7f00000000c0), 0x3, 0x8200) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a) syz_open_dev$loop(&(0x7f0000000500), 0x4, 0x129000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40008) sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x14, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r4, &(0x7f0000000040), 0x2) close(r4) write$cgroup_int(r3, &(0x7f0000000000)=0x1, 0x12) syz_fuse_handle_req(r3, &(0x7f0000000c40)="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", 0x2000, &(0x7f0000005f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timerfd_create(0x8, 0x0) 6.877781216s ago: executing program 1 (id=17): syz_io_uring_setup(0x6db7, &(0x7f0000000300)={0x0, 0xb789, 0x1, 0x3, 0x1080004f}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r0, r1, r2, &(0x7f0000000280)=@IORING_OP_SEND_ZC={0x2f, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats\x00') socket(0x2, 0x80805, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x589b83, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49d, &(0x7f0000000100)={0x0, 0x79af, 0x2, 0x8000, 0x400246}, 0x0, &(0x7f00000006c0), &(0x7f0000000000)) io_setup(0x3, &(0x7f0000002140)=0x0) io_getevents(r4, 0xffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, r6, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) 6.842923838s ago: executing program 2 (id=18): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7b4da7384ae8095c0106", 0xe, 0x8040, &(0x7f0000000200)={0x11, 0x17, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x76fc, 0x0) io_uring_setup(0x7627, &(0x7f00000002c0)={0x0, 0x653f, 0x10000, 0x1, 0x1c9, 0x0, r3}) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1f0, 0x15, 0x400, 0x70bd2d, 0x25dfdbff, {0x8, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x6a, 0x1, "1820b44d5284dd3111a9e590179acef9d473f6b6fb8f8d36b2b82ce65beb1ee14d4464a6b4f4e500b0bec2e08bda6dec0eefb0a8eded7ad3b4c6095e3a2230e57f0178e37f9464eccc9d90dcc2ec3009795382400d022a415361baa8fd9ea5736e007d5fda52"}, @INET_DIAG_REQ_BYTECODE={0x86, 0x1, "a7948c904177b38b12adbdc4a7382467d1be1f91cca9949ff3fc592189d2f2377e07e1f6ee9222ed80e3f390ac491555d911665b2b1a14bd2d919caf348460be9642335c8a87d7fd706b9397245820cb6c87ac8d202306e4d6a4e0aac075707c75c19880a1b21731596ed70d7fc21fc97be4d287b6b4711ccc61c1f23bb4867cc37f"}, @INET_DIAG_REQ_BYTECODE={0x7, 0x1, 'J\f '}, @INET_DIAG_REQ_BYTECODE={0x3b, 0x1, "a2af6ac4ebf0feffbaa214fa4e1a4aca8a97b91231071dcf7c40f1d43a9c46bc2c16672d2770f33b1ba0a63a14d9a5b7d0bd932f09a683"}, @INET_DIAG_REQ_BYTECODE={0xa4, 0x1, "595042bf528c88531a9cb160add5a14d3543b8c929a8af46ca3c1d29959aa43abbf025722eb569e678886f36b6568875f0147a6b0dd28ccea4b9f03e2800953eea7550bf9f9183d783bee53208e61375f35d2e868e5a8ad0b714ba193bfa1b924ea81a92fe9d8c99f92fec8c557e958b90c1902420c0b23b3771fa349ed50c61c9d03ae783799660cdcfe342e446c1fb779cb5b561df9832a14fdcb024eb425d"}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x40810}, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e23, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) pipe(&(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) setns(0xc9, 0x0) r5 = socket(0x2a, 0x2, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x1, 0x3}) connect$inet6(r5, &(0x7f0000000000)={0x2a, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0xffff, r7}, 0x38) 6.506361686s ago: executing program 3 (id=19): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$KVM_GET_XSAVE2(r1, 0x9000aecf, &(0x7f00002ff000/0x1000)=nil) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8}, 0x94) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r3, 0x10c, 0x1, &(0x7f0000000040)=0x2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x300f000, 0xe, 0x88d9, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = syz_open_dev$sndctrl(&(0x7f0000000580), 0xff1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f0000000140)}, 0x8) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000000100)=0x9) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, 0x0) iopl(0x3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x22140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x15) 5.881003804s ago: executing program 2 (id=20): r0 = openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffffda}, 0x1, 0x0, 0x0, 0x40}, 0x4000001) r1 = getpid() pipe2$watch_queue(&(0x7f0000000280), 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000068000903000000000154944733b70333d16f0000001a0a000000000000000400040d1400060064010102000009000000000000000000ad44a0f5f36777207c4c7fd93ddcb45b0e6148999baf064757ae8c2a3378bdf302565acbd1c1745a2df1f2dafe2cae98"], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000300), 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000400)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/oops_count', 0x20000, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) ioctl$sock_bt_bnep_BNEPCONNDEL(r5, 0x400442c9, &(0x7f0000000340)={0xfffff801, @remote}) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000100)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000003c0)='erofs\x00', 0x1000d, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newnexthop={0x24, 0x5e, 0x103, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x1, 0x0, 0x36}, [@NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x200444c1}, 0x200000c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.632852783s ago: executing program 3 (id=21): syz_io_uring_setup(0x6db7, &(0x7f0000000300)={0x0, 0xb789, 0x1, 0x3, 0x1080004f}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r0, r1, r2, &(0x7f0000000280)=@IORING_OP_SEND_ZC={0x2f, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats\x00') socket(0x2, 0x80805, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x589b83, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49d, &(0x7f0000000100)={0x0, 0x79af, 0x2, 0x8000, 0x400246}, 0x0, &(0x7f00000006c0), &(0x7f0000000000)) io_setup(0x3, &(0x7f0000002140)=0x0) io_getevents(r4, 0xffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, r6, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) 5.612487013s ago: executing program 1 (id=22): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x6cad, &(0x7f00000000c0)={0x0, 0x7b42, 0x1, 0x3, 0x3ce}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_CLOCK(r1, 0x1d, &(0x7f0000000280)={0x3}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000018000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d0bfa91", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x18, r4}, 0x50) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$xdp(0x2c, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000680012800b00010069703667726500005800028014000700ff02000000000000000000000000000106000f000a00000006000f004a00000014000600fe8000000000000000000000000000230800140006000000050016000200000004001200060002000000000008000a00", @ANYRES32], 0x90}, 0x1, 0x0, 0x0, 0x80000}, 0x0) 5.175104199s ago: executing program 0 (id=23): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0x1, 0xff, 0x7, 0xc, 0x0, 0x0, 0x1000, [@sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x4e25, 0xb10e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, @sadb_address={0x5, 0x6, 0xff, 0x20, 0x0, @in6={0xa, 0x4e23, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x16fc6}}]}, 0x60}}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000016c0)={0x0, 0xae0c, 0x2, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2101, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x4000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)={0xe4, 0x41, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0xb}, @nested={0x4, 0x74}]}]}, @generic="5cdfc36be90df936aed2baeaffe0db268b58541a8113df0b2b7c713800d356c50ef47b85694fe92cd60ad7b368e7b8259dd0627f2c06cd5ccba7681aa288811fa17690a37ed8371eed98b1898e95e0923ad7ade60ddd5b22fd58be8aed317013d15756478501911f083e476d8931023b75f09649800a8e33e74d10cd1e9a98ca05f721d2b44a99ea4d584ca22cc5550de68aec806881035f32174acb105393562fd8d753632ee21e2d6deac71ae21988ce8fbf440485247fece3af9f"]}, 0xe4}, 0x1, 0x0, 0x0, 0x400c801}, 0x24048084) socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f0000000100)={@local}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r10, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x5725, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000"], 0x0) clock_gettime(0x0, &(0x7f0000001780)) clock_gettime(0x0, &(0x7f00000017c0)) 4.639763268s ago: executing program 3 (id=24): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd\x00') exit(0x9) getdents64(r3, 0x0, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x4c, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x271}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80a0}, 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}}}, 0xe) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r4, &(0x7f0000000100)={0x1f, @any, 0x1}, 0x10) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000200)=0x2, 0x4) connect$bt_rfcomm(r4, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0x10) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x1, 0x8}, {0x40, 0x40}}]}}, 0x15) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000700)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x5, 0xc8}}}, 0x6) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) close(r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x4, &(0x7f0000000000)=[{0x45, 0x2, 0x2, 0x4}, {0x60, 0xe}, {0x4}, {0x6, 0x0, 0x4, 0x10}]}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000008000309000000000000004a93930c5f1ba26a646e29363279c1c0c02c36d5052922912bc1a57b1f150000000000000000000000000000000000000000923afe6c3d7e3695efe6e186918a36097b64d1e9fc16d4e4740400000000000000818278dda6855b65cb8781d33cb71aab502582026ff5be62bfbc662866ed9e932e99ff84b8f3e8fcc4f871464000", @ANYRES32=r2, @ANYBLOB="0500530001000000"], 0x24}}, 0x0) 4.512598115s ago: executing program 1 (id=25): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x15, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000fd3f0000000000000900000818110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b0100ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006c00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x2, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2101, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1109, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x2, r11, 0x0, 0x0, 0x1}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/kvm\x00', 0x0, 0x0) r13 = inotify_init1(0x0) inotify_add_watch(r13, &(0x7f0000000080)='./debug/kvm\x00', 0x100) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) read(r13, &(0x7f0000001000)=""/4096, 0x1000) openat(r12, &(0x7f0000001010), 0x0, 0x0) 3.633868556s ago: executing program 2 (id=26): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$ITER_CREATE(0xb, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x10000) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000140)={0x73e, 0x5, 0x8, 0x1, 0x7, 0x8}) io_uring_enter(0xffffffffffffffff, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}]}]}, 0x28}}, 0x0) r5 = inotify_init1(0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x82, 0x3}, 0x10) open(&(0x7f0000000180)='./file1\x00', 0x101400, 0x80) bind$tipc(r6, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0xa4000021) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x4000000, 0x2, 0x3, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xa, {0x2031}}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0xb075c0, 0xf4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) 3.539307946s ago: executing program 3 (id=27): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0x1, 0xff, 0x7, 0xc, 0x0, 0x0, 0x1000, [@sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x4e25, 0xb10e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, @sadb_address={0x5, 0x6, 0xff, 0x20, 0x0, @in6={0xa, 0x4e23, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x16fc6}}]}, 0x60}}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x15, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000fd3f0000000000000900000818110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b0100ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006c00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x2, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2101, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1109, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x2, r11, 0x0, 0x0, 0x1}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/kvm\x00', 0x0, 0x0) r13 = inotify_init1(0x0) inotify_add_watch(r13, &(0x7f0000000080)='./debug/kvm\x00', 0x100) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) read(r13, &(0x7f0000001000)=""/4096, 0x1000) openat(r12, &(0x7f0000001010), 0x0, 0x0) 2.07111293s ago: executing program 2 (id=28): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0x1, 0xff, 0x7, 0xc, 0x0, 0x0, 0x1000, [@sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x4e25, 0xb10e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, @sadb_address={0x5, 0x6, 0xff, 0x20, 0x0, @in6={0xa, 0x4e23, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x16fc6}}]}, 0x60}}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x15, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000fd3f0000000000000900000818110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b0100ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006c00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x2, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2101, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1109, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x2, r11, 0x0, 0x0, 0x1}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/kvm\x00', 0x0, 0x0) r13 = inotify_init1(0x0) inotify_add_watch(r13, &(0x7f0000000080)='./debug/kvm\x00', 0x100) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) read(r13, &(0x7f0000001000)=""/4096, 0x1000) openat(r12, &(0x7f0000001010), 0x0, 0x0) 2.039571308s ago: executing program 1 (id=29): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$KVM_GET_XSAVE2(r1, 0x9000aecf, &(0x7f00002ff000/0x1000)=nil) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720a23fe000000008500000012000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd32abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334f1ddb9d679ae95a90fd41d528f58d305000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f440128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d4573aad5f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40453f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d51e3d167a2b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bac"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8}, 0x94) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r3, 0x10c, 0x1, &(0x7f0000000040)=0x2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x300f000, 0xe, 0x88d9, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = syz_open_dev$sndctrl(&(0x7f0000000580), 0xff1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f0000000140)}, 0x8) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000000100)=0x9) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, 0x0) iopl(0x3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x22140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x15) 1.487215289s ago: executing program 0 (id=30): openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x22100) listen(0xffffffffffffffff, 0x5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000080)={0xc0, 0x0, 0x8000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x1800087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/177, 0xb1}, {&(0x7f00000004c0)}, {&(0x7f0000000500)=""/66, 0x42}, {&(0x7f0000000580)=""/19, 0x13}], 0x4, &(0x7f0000000600)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}, 0x23) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 305.19557ms ago: executing program 0 (id=31): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0x1, 0xff, 0x7, 0xc, 0x0, 0x0, 0x1000, [@sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x4e25, 0xb10e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, @sadb_address={0x5, 0x6, 0xff, 0x20, 0x0, @in6={0xa, 0x4e23, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x16fc6}}]}, 0x60}}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000016c0)={0x0, 0xae0c, 0x2, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2101, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x4000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)={0xe4, 0x41, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0xb}, @nested={0x4, 0x74}]}]}, @generic="5cdfc36be90df936aed2baeaffe0db268b58541a8113df0b2b7c713800d356c50ef47b85694fe92cd60ad7b368e7b8259dd0627f2c06cd5ccba7681aa288811fa17690a37ed8371eed98b1898e95e0923ad7ade60ddd5b22fd58be8aed317013d15756478501911f083e476d8931023b75f09649800a8e33e74d10cd1e9a98ca05f721d2b44a99ea4d584ca22cc5550de68aec806881035f32174acb105393562fd8d753632ee21e2d6deac71ae21988ce8fbf440485247fece3af9f"]}, 0xe4}, 0x1, 0x0, 0x0, 0x400c801}, 0x24048084) socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f0000000100)={@local}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r10, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x5725, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000"], 0x0) clock_gettime(0x0, &(0x7f0000001780)) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) 269.884751ms ago: executing program 1 (id=32): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$KVM_GET_XSAVE2(r1, 0x9000aecf, &(0x7f00002ff000/0x1000)=nil) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8}, 0x94) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r3, 0x10c, 0x1, &(0x7f0000000040)=0x2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x300f000, 0xe, 0x88d9, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = syz_open_dev$sndctrl(&(0x7f0000000580), 0xff1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f0000000140)}, 0x8) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000000100)=0x9) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, 0x0) iopl(0x3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x22140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x15) 226.648422ms ago: executing program 2 (id=33): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0x1, 0xff, 0x7, 0xc, 0x0, 0x0, 0x1000, [@sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x4e25, 0xb10e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, @sadb_address={0x5, 0x6, 0xff, 0x20, 0x0, @in6={0xa, 0x4e23, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x16fc6}}]}, 0x60}}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x15, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000fd3f0000000000000900000818110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b0100ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006c00000018110000", @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x2, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2101, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1109, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x2, r11, 0x0, 0x0, 0x1}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/kvm\x00', 0x0, 0x0) r13 = inotify_init1(0x0) inotify_add_watch(r13, &(0x7f0000000080)='./debug/kvm\x00', 0x100) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) read(r13, &(0x7f0000001000)=""/4096, 0x1000) openat(r12, &(0x7f0000001010), 0x0, 0x0) 0s ago: executing program 3 (id=34): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0xfffffffe, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x6, 0x0, @loopback, 0xfffffffd}}}, 0x104) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='vhci_hcd.0\x00', 0xb) syz_open_dev$sndctrl(&(0x7f0000000400), 0xc, 0x145001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000040)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r1}, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01000000000029feffff00"/26], 0x0, 0x1a}, 0x28) bind$inet6(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) r4 = socket$unix(0x1, 0x1, 0x0) close(r4) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:43806' (ED25519) to the list of known hosts. [ 42.604609][ T5683] cgroup: Unknown subsys name 'net' [ 42.788150][ T5683] cgroup: Unknown subsys name 'cpuset' [ 42.794103][ T5683] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.706810][ T5683] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.124234][ T5750] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.126765][ T5750] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.132940][ T5755] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.136752][ T5755] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.139959][ T5755] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.141986][ T5760] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.142999][ T5755] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.144973][ T5760] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.148588][ T5755] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.152722][ T5760] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.153923][ T5761] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.154484][ T5755] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.155551][ T5755] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.157651][ T5760] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.157922][ T5755] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.158014][ T5755] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.159790][ T5761] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.161528][ T5763] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.163139][ T5761] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.171711][ T5750] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.791999][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.795188][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.797644][ T5745] bridge_slave_0: entered allmulticast mode [ 48.800545][ T5745] bridge_slave_0: entered promiscuous mode [ 48.821813][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.824383][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.826759][ T5745] bridge_slave_1: entered allmulticast mode [ 48.829547][ T5745] bridge_slave_1: entered promiscuous mode [ 48.875048][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.902141][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.930629][ T5748] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.935060][ T5748] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.938145][ T5748] bridge_slave_0: entered allmulticast mode [ 48.942140][ T5748] bridge_slave_0: entered promiscuous mode [ 48.946776][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.950636][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.954129][ T5746] bridge_slave_0: entered allmulticast mode [ 48.958093][ T5746] bridge_slave_0: entered promiscuous mode [ 48.977478][ T5748] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.981672][ T5748] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.985156][ T5748] bridge_slave_1: entered allmulticast mode [ 48.989042][ T5748] bridge_slave_1: entered promiscuous mode [ 49.003168][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.006246][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.009237][ T5746] bridge_slave_1: entered allmulticast mode [ 49.013174][ T5746] bridge_slave_1: entered promiscuous mode [ 49.030193][ T5745] team0: Port device team_slave_0 added [ 49.062037][ T5745] team0: Port device team_slave_1 added [ 49.088095][ T5748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.092580][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.109932][ T5748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.115192][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.118924][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.121851][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.132398][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.138498][ T5756] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.141078][ T5756] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.143713][ T5756] bridge_slave_0: entered allmulticast mode [ 49.147002][ T5756] bridge_slave_0: entered promiscuous mode [ 49.165910][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.168699][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.178166][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.187690][ T5756] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.190034][ T5756] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.192358][ T5756] bridge_slave_1: entered allmulticast mode [ 49.195273][ T5756] bridge_slave_1: entered promiscuous mode [ 49.216310][ T5746] team0: Port device team_slave_0 added [ 49.226556][ T5748] team0: Port device team_slave_0 added [ 49.231059][ T5746] team0: Port device team_slave_1 added [ 49.251958][ T5748] team0: Port device team_slave_1 added [ 49.266243][ T5756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.270708][ T5756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.288858][ T5745] hsr_slave_0: entered promiscuous mode [ 49.291268][ T5745] hsr_slave_1: entered promiscuous mode [ 49.294204][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.296457][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.304691][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.313983][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.316275][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.324293][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.335531][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.337978][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.346666][ T5748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.364674][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.366889][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.374928][ T5748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.380032][ T5756] team0: Port device team_slave_0 added [ 49.383531][ T5756] team0: Port device team_slave_1 added [ 49.434984][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.437267][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.445298][ T5756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.463044][ T5746] hsr_slave_0: entered promiscuous mode [ 49.465580][ T5746] hsr_slave_1: entered promiscuous mode [ 49.467734][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 49.469615][ T5746] Cannot create hsr debugfs directory [ 49.480650][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.482887][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.490955][ T5756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.516629][ T5748] hsr_slave_0: entered promiscuous mode [ 49.518938][ T5748] hsr_slave_1: entered promiscuous mode [ 49.521048][ T5748] debugfs: 'hsr0' already exists in 'hsr' [ 49.522850][ T5748] Cannot create hsr debugfs directory [ 49.591118][ T5756] hsr_slave_0: entered promiscuous mode [ 49.593599][ T5756] hsr_slave_1: entered promiscuous mode [ 49.595804][ T5756] debugfs: 'hsr0' already exists in 'hsr' [ 49.597607][ T5756] Cannot create hsr debugfs directory [ 49.788749][ T5745] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.796787][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.809174][ T5745] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.816035][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.819747][ T5745] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.827008][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.847364][ T5745] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.855051][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.894813][ T5748] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.903278][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.906311][ T5748] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.911170][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.914234][ T5748] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.919985][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.922686][ T5748] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.929075][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.992772][ T5746] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.000833][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.004893][ T5746] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.011252][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.015006][ T5746] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.022058][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.027445][ T5746] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.033775][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.099921][ T5756] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.104877][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.107925][ T5756] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.111854][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.118136][ T5756] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.122991][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.126306][ T5756] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.131462][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.169854][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.174868][ T5754] Bluetooth: hci3: command tx timeout [ 50.174872][ T64] Bluetooth: hci0: command tx timeout [ 50.187810][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.206088][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.208736][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.221482][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.223803][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.237683][ T5748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.253820][ T5754] Bluetooth: hci2: command tx timeout [ 50.253825][ T64] Bluetooth: hci1: command tx timeout [ 50.278461][ T5748] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.294048][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.304428][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.306718][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.325890][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.328906][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.339803][ T5756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.347321][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.355762][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.358054][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.368567][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.370896][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.389270][ T5756] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.396818][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.399144][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.409501][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.411788][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.606729][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.641429][ T5748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.672410][ T5745] veth0_vlan: entered promiscuous mode [ 50.682736][ T5745] veth1_vlan: entered promiscuous mode [ 50.692918][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.706928][ T5756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.720848][ T5748] veth0_vlan: entered promiscuous mode [ 50.742206][ T5748] veth1_vlan: entered promiscuous mode [ 50.746773][ T5745] veth0_macvtap: entered promiscuous mode [ 50.760848][ T5745] veth1_macvtap: entered promiscuous mode [ 50.774602][ T5746] veth0_vlan: entered promiscuous mode [ 50.790146][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.805398][ T5746] veth1_vlan: entered promiscuous mode [ 50.809508][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.829497][ T5756] veth0_vlan: entered promiscuous mode [ 50.836047][ T5748] veth0_macvtap: entered promiscuous mode [ 50.846110][ T5748] veth1_macvtap: entered promiscuous mode [ 50.857343][ T5756] veth1_vlan: entered promiscuous mode [ 50.879108][ T5746] veth0_macvtap: entered promiscuous mode [ 50.888496][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.909071][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.911677][ T5746] veth1_macvtap: entered promiscuous mode [ 50.918190][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.921436][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.921846][ T5756] veth0_macvtap: entered promiscuous mode [ 50.950221][ T5756] veth1_macvtap: entered promiscuous mode [ 50.954407][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.957447][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.961237][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.974260][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.022173][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.026795][ T5745] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.030330][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.035294][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.035725][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.050128][ T5745] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.057108][ T5745] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.066807][ T5745] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.083325][ T5745] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.085541][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.092423][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.110542][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.114437][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.114762][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.115016][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.127687][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.133947][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.163510][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.172156][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.226431][ T5898] Zero length message leads to an empty skb [ 51.231873][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.236621][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.241897][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.244923][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.252834][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.256783][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.260118][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.273974][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.281193][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.286212][ T5825] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.290300][ T5825] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.314265][ T5825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.320944][ T5825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.381723][ T5825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.429456][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.455829][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.262328][ T64] Bluetooth: hci0: command tx timeout [ 52.263504][ T5754] Bluetooth: hci3: command tx timeout [ 52.334215][ T5754] Bluetooth: hci1: command tx timeout [ 52.343633][ T5754] Bluetooth: hci2: command tx timeout [ 54.152641][ T5943] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8'. [ 54.345507][ T64] Bluetooth: hci3: command tx timeout [ 54.351920][ T5754] Bluetooth: hci0: command tx timeout [ 54.417349][ T5754] Bluetooth: hci2: command tx timeout [ 54.420156][ T64] Bluetooth: hci1: command tx timeout [ 54.730031][ T5956] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10'. [ 54.799060][ T5947] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 54.801577][ T5947] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 54.865287][ T5947] vhci_hcd vhci_hcd.0: Device attached [ 55.162386][ T5947] erofs (device sr0): cannot find valid erofs superblock [ 55.436429][ T5749] usb 40-1: SetAddress Request (2) to port 0 [ 55.443220][ T5749] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 55.932317][ T5959] vhci_hcd: connection reset by peer [ 55.948362][ T5825] vhci_hcd vhci_hcd.1: stop threads [ 55.950346][ T5825] vhci_hcd vhci_hcd.1: release socket [ 55.952653][ T5825] vhci_hcd vhci_hcd.1: disconnect device [ 56.312182][ T5974] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 56.314961][ T5974] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 56.319140][ T5974] vhci_hcd vhci_hcd.0: Device attached [ 56.416636][ T5974] erofs (device sr0): cannot find valid erofs superblock [ 56.424688][ T64] Bluetooth: hci0: command tx timeout [ 56.427506][ T64] Bluetooth: hci3: command tx timeout [ 56.494944][ T64] Bluetooth: hci1: command tx timeout [ 56.498743][ T5754] Bluetooth: hci2: command tx timeout [ 56.613914][ T1041] usb 44-1: SetAddress Request (2) to port 0 [ 56.617175][ T1041] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 57.053500][ T5975] vhci_hcd: connection reset by peer [ 57.056797][ T5825] vhci_hcd vhci_hcd.3: stop threads [ 57.067412][ T5825] vhci_hcd vhci_hcd.3: release socket [ 57.072279][ T5825] vhci_hcd vhci_hcd.3: disconnect device [ 58.988522][ T6010] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 58.991924][ T6010] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 59.981594][ T6019] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20'. [ 60.494195][ T5749] usb 40-1: device descriptor read/8, error -110 [ 60.612927][ T6030] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 60.614885][ T6030] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 60.630403][ T6030] vhci_hcd vhci_hcd.0: Device attached [ 60.779255][ T6032] erofs (device sr0): cannot find valid erofs superblock [ 60.825587][ T6040] netlink: 188 bytes leftover after parsing attributes in process `syz.0.23'. [ 60.829693][ T6040] openvswitch: netlink: Flow actions attr not present in new flow. [ 60.923520][ T5854] usb 42-1: SetAddress Request (2) to port 0 [ 60.925880][ T5854] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 60.946870][ T5749] usb usb40-port1: attempt power cycle [ 61.287209][ T64] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 61.344192][ T6033] vhci_hcd: connection reset by peer [ 61.348041][ T12] vhci_hcd vhci_hcd.2: stop threads [ 61.349637][ T12] vhci_hcd vhci_hcd.2: release socket [ 61.359365][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 61.513413][ T42] audit: type=1326 audit(1785613396.668:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.3.24" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x0 [ 61.538667][ T5749] usb usb40-port1: unable to enumerate USB device [ 61.702108][ T1041] usb 44-1: device descriptor read/8, error -110 [ 61.944496][ T5749] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 62.095773][ T1041] usb usb44-port1: attempt power cycle [ 62.607640][ T5749] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.614413][ T5749] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 62.667767][ T5749] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 62.671568][ T5749] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 62.676686][ T5749] usb 5-1: Product: syz [ 62.678547][ T5749] usb 5-1: Manufacturer: syz [ 62.680678][ T5749] usb 5-1: SerialNumber: syz [ 62.735127][ T5749] usb 5-1: config 0 descriptor?? [ 62.760663][ T1041] usb usb44-port1: unable to enumerate USB device [ 63.390483][ T5749] usb 5-1: USB disconnect, device number 2 [ 64.234217][ T6073] cgroup: fork rejected by pids controller in /syz3 [ 65.780304][ T6166] netlink: 188 bytes leftover after parsing attributes in process `syz.0.31'. [ 65.784072][ T6166] openvswitch: netlink: Flow actions attr not present in new flow. [ 65.910372][ T6169] vhci_hcd vhci_hcd.0: remove, state 4 [ 65.915148][ T6169] usb usb38: USB disconnect, device number 1 [ 66.013452][ T5854] usb 42-1: device descriptor read/8, error -110 [ 66.379831][ T5835] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 66.416215][ T5854] usb usb42-port1: attempt power cycle [ 66.539408][ T5835] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.549601][ T5835] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 66.600713][ T5835] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 66.609762][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 66.620294][ T5835] usb 5-1: Product: syz [ 66.625326][ T5835] usb 5-1: Manufacturer: syz [ 66.635251][ T5835] usb 5-1: SerialNumber: syz [ 66.710507][ T5835] usb 5-1: config 0 descriptor?? [ 67.113403][ T12] vhci_hcd vhci_hcd.0: stop threads [ 67.134566][ T12] vhci_hcd vhci_hcd.0: release socket [ 67.150466][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 67.182537][ T12] vhci_hcd vhci_hcd.0: stop threads [ 67.191377][ T12] vhci_hcd vhci_hcd.0: release socket [ 67.206425][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 67.235045][ T12] vhci_hcd vhci_hcd.0: stop threads [ 67.242019][ T12] vhci_hcd vhci_hcd.0: release socket [ 67.251412][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 67.265104][ T12] vhci_hcd vhci_hcd.0: stop threads [ 67.272464][ T12] vhci_hcd vhci_hcd.0: release socket [ 67.285209][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 67.312647][ T12] vhci_hcd vhci_hcd.0: stop threads [ 67.322462][ T12] vhci_hcd vhci_hcd.0: release socket [ 67.326852][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 67.330414][ T12] vhci_hcd vhci_hcd.0: stop threads [ 67.333111][ T12] vhci_hcd vhci_hcd.0: release socket [ 67.364852][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 67.378875][ T12] vhci_hcd vhci_hcd.0: stop threads [ 67.387911][ T12] vhci_hcd vhci_hcd.0: release socket [ 67.412475][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 67.432322][ T12] vhci_hcd vhci_hcd.0: stop threads [ 67.445818][ T12] vhci_hcd vhci_hcd.0: release socket [ 67.454283][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 67.461765][ T6169] vhci_hcd vhci_hcd.0: USB bus 38 deregistered [ 67.486017][ T64] Bluetooth: hci1: command 0x0406 tx timeout [ 67.713919][ T6169] vhci_hcd vhci_hcd.0: remove, state 4 [ 67.715631][ T6169] usb usb37: USB disconnect, device number 1 [ 67.735798][ T12] vhci_hcd vhci_hcd.0: stop threads [ 67.735804][ T6169] vhci_hcd vhci_hcd.0: USB bus 37 deregistered [ 67.737487][ T12] vhci_hcd vhci_hcd.0: release socket [ 67.737506][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 67.737522][ T12] vhci_hcd vhci_hcd.0: stop threads [ 67.737529][ T12] vhci_hcd vhci_hcd.0: release socket [ 67.746974][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 67.748876][ T12] ================================================================== [ 67.751370][ T12] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 67.753899][ T12] Read of size 1 at addr ffff888024ad06c8 by task kworker/u32:0/12 [ 67.757490][ T12] [ 67.759041][ T12] CPU: 3 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted syzkaller #0 PREEMPT(full) [ 67.759058][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.759080][ T12] Workqueue: usbip_event event_handler [ 67.759102][ T12] Call Trace: [ 67.759107][ T12] [ 67.759112][ T12] dump_stack_lvl+0x100/0x190 [ 67.759125][ T12] print_report+0x13d/0x4b0 [ 67.759144][ T12] ? __virt_addr_valid+0x239/0x430 [ 67.759164][ T12] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 67.759176][ T12] kasan_report+0xdf/0x1c0 [ 67.759192][ T12] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 67.759205][ T12] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 67.759216][ T12] __kasan_check_byte+0x36/0x50 [ 67.759231][ T12] lock_acquire+0x132/0x370 [ 67.759248][ T12] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 67.759260][ T12] ? _raw_spin_lock_irqsave+0x52/0x60 [ 67.759273][ T12] _raw_spin_lock_irqsave+0x3a/0x60 [ 67.759284][ T12] ? event_handler+0x21e/0x570 [ 67.759296][ T12] event_handler+0x21e/0x570 [ 67.759327][ T12] process_one_work+0xa23/0x1940 [ 67.759347][ T12] ? __pfx_process_one_work+0x10/0x10 [ 67.759364][ T12] ? __pfx_event_handler+0x10/0x10 [ 67.759376][ T12] worker_thread+0x5ef/0xe50 [ 67.759394][ T12] ? kthread+0x13a/0x450 [ 67.759407][ T12] ? __pfx_worker_thread+0x10/0x10 [ 67.759422][ T12] kthread+0x370/0x450 [ 67.759436][ T12] ? __pfx_kthread+0x10/0x10 [ 67.759450][ T12] ret_from_fork+0x72b/0xd50 [ 67.759464][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 67.759477][ T12] ? __switch_to+0x800/0x10f0 [ 67.759495][ T12] ? __pfx_kthread+0x10/0x10 [ 67.759509][ T12] ret_from_fork_asm+0x1a/0x30 [ 67.759526][ T12] [ 67.759530][ T12] [ 67.815446][ T12] Allocated by task 1: [ 67.816815][ T12] kasan_save_stack+0x30/0x50 [ 67.818417][ T12] kasan_save_track+0x14/0x30 [ 67.820011][ T12] __kasan_kmalloc+0xaa/0xb0 [ 67.821523][ T12] __kmalloc_noprof+0x322/0x820 [ 67.823137][ T12] __usb_create_hcd+0x5e/0xac0 [ 67.824709][ T12] vhci_hcd_probe+0xf3/0x4e0 [ 67.826230][ T12] platform_probe+0x106/0x1d0 [ 67.827817][ T12] really_probe+0x241/0xa60 [ 67.829338][ T12] __driver_probe_device+0x20e/0x450 [ 67.831090][ T12] driver_probe_device+0x4a/0x140 [ 67.832749][ T12] __device_attach_driver+0x1df/0x320 [ 67.834637][ T12] bus_for_each_drv+0x159/0x1e0 [ 67.836555][ T12] __device_attach+0x1e4/0x4d0 [ 67.838292][ T12] device_initial_probe+0xaf/0xd0 [ 67.839980][ T12] bus_probe_device+0x64/0x160 [ 67.841561][ T12] device_add+0x121d/0x1970 [ 67.843054][ T12] platform_device_add+0x35a/0x800 [ 67.844806][ T12] platform_device_register_full+0x5cf/0x830 [ 67.846781][ T12] vhci_hcd_init+0x1a1/0x2f0 [ 67.848317][ T12] do_one_initcall+0x11d/0x700 [ 67.849854][ T12] kernel_init_freeable+0x6ea/0x7b0 [ 67.851556][ T12] kernel_init+0x1f/0x1e0 [ 67.852962][ T12] ret_from_fork+0x72b/0xd50 [ 67.854542][ T12] ret_from_fork_asm+0x1a/0x30 [ 67.856121][ T12] [ 67.856944][ T12] Freed by task 6169: [ 67.858293][ T12] kasan_save_stack+0x30/0x50 [ 67.859872][ T12] kasan_save_track+0x14/0x30 [ 67.861411][ T12] kasan_save_free_info+0x3b/0x70 [ 67.863060][ T12] __kasan_slab_free+0x5f/0x80 [ 67.864662][ T12] kfree+0x22b/0x6c0 [ 67.865940][ T12] usb_put_hcd+0x149/0x1f0 [ 67.867428][ T12] vhci_hcd_remove+0x107/0x1b0 [ 67.869022][ T12] platform_remove+0x5f/0x80 [ 67.870551][ T12] device_remove+0xcb/0x180 [ 67.872029][ T12] device_release_driver_internal+0x44e/0x620 [ 67.874074][ T12] unbind_store+0xf8/0x110 [ 67.875539][ T12] drv_attr_store+0x74/0xb0 [ 67.877027][ T12] sysfs_kf_write+0xf2/0x150 [ 67.878608][ T12] kernfs_fop_write_iter+0x3e0/0x5f0 [ 67.880350][ T12] vfs_write+0x6ac/0x1050 [ 67.881799][ T12] ksys_write+0x12a/0x250 [ 67.883220][ T12] __do_fast_syscall_32+0xe7/0x970 [ 67.884946][ T12] do_fast_syscall_32+0x32/0x70 [ 67.886537][ T12] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 67.888653][ T12] [ 67.889465][ T12] Last potentially related work creation: [ 67.891274][ T12] kasan_save_stack+0x30/0x50 [ 67.892860][ T12] kasan_record_aux_stack+0xa7/0xc0 [ 67.894563][ T12] insert_work+0x36/0x230 [ 67.896013][ T12] __queue_work+0x9bc/0x12b0 [ 67.897515][ T12] queue_work_on+0x1a9/0x1e0 [ 67.899081][ T12] usb_hcd_giveback_urb+0x330/0x4a0 [ 67.900805][ T12] unlink1+0x418/0x510 [ 67.902138][ T12] usb_hcd_unlink_urb+0x131/0x210 [ 67.903822][ T12] usb_kill_urb+0x121/0x320 [ 67.905320][ T12] hub_quiesce+0x1e9/0x320 [ 67.906802][ T12] hub_suspend+0x4ab/0x9e0 [ 67.908308][ T12] usb_suspend_both+0x288/0x950 [ 67.909914][ T12] usb_runtime_suspend+0x49/0x120 [ 67.911560][ T12] __rpm_callback+0xc8/0x620 [ 67.913052][ T12] rpm_callback+0x16a/0x1b0 [ 67.914703][ T12] rpm_suspend+0x2f4/0x11a0 [ 67.916242][ T12] __pm_runtime_suspend+0xba/0x1a0 [ 67.917907][ T12] usb_runtime_idle+0x7e/0x90 [ 67.919529][ T12] rpm_idle+0x322/0x790 [ 67.920902][ T12] pm_runtime_work+0x120/0x150 [ 67.922476][ T12] process_one_work+0xa23/0x1940 [ 67.924133][ T12] worker_thread+0x5ef/0xe50 [ 67.925648][ T12] kthread+0x370/0x450 [ 67.927033][ T12] ret_from_fork+0x72b/0xd50 [ 67.928612][ T12] ret_from_fork_asm+0x1a/0x30 [ 67.930193][ T12] [ 67.930990][ T12] Second to last potentially related work creation: [ 67.933137][ T12] kasan_save_stack+0x30/0x50 [ 67.934728][ T12] kasan_record_aux_stack+0xa7/0xc0 [ 67.936427][ T12] insert_work+0x36/0x230 [ 67.937869][ T12] __queue_work+0x9bc/0x12b0 [ 67.939405][ T12] queue_work_on+0x1a9/0x1e0 [ 67.940931][ T12] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 67.942607][ T12] usb_hcd_submit_urb+0xab7/0x2150 [ 67.944334][ T12] usb_submit_urb+0x827/0x19b0 [ 67.945877][ T12] usb_start_wait_urb+0x10e/0x580 [ 67.947556][ T12] usb_control_msg+0x328/0x4b0 [ 67.949128][ T12] hub_ext_port_status+0x152/0x600 [ 67.950802][ T12] hub_activate+0x6e5/0x1c40 [ 67.952327][ T12] process_one_work+0xa23/0x1940 [ 67.953993][ T12] worker_thread+0x5ef/0xe50 [ 67.955506][ T12] kthread+0x370/0x450 [ 67.956841][ T12] ret_from_fork+0x72b/0xd50 [ 67.958397][ T12] ret_from_fork_asm+0x1a/0x30 [ 67.959971][ T12] [ 67.960788][ T12] The buggy address belongs to the object at ffff888024ad0000 [ 67.960788][ T12] which belongs to the cache kmalloc-8k of size 8192 [ 67.965253][ T12] The buggy address is located 1736 bytes inside of [ 67.965253][ T12] freed 8192-byte region [ffff888024ad0000, ffff888024ad2000) [ 67.969696][ T12] [ 67.970515][ T12] The buggy address belongs to the physical page: [ 67.972601][ T12] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24ad0 [ 67.975448][ T12] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 67.978099][ T12] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 67.980566][ T12] page_type: f5(slab) [ 67.981878][ T12] raw: 00fff00000000040 ffff88801bc43180 dead000000000122 0000000000000000 [ 67.984851][ T12] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 67.987661][ T12] head: 00fff00000000040 ffff88801bc43180 dead000000000122 0000000000000000 [ 67.990439][ T12] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 67.993240][ T12] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 67.995902][ T12] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 67.998744][ T12] page dumped because: kasan: bad access detected [ 68.000864][ T12] page_owner tracks the page as allocated [ 68.002693][ T12] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 8960469467, free_ts 8925295631 [ 68.009259][ T12] post_alloc_hook+0xfd/0x120 [ 68.010896][ T12] get_page_from_freelist+0xf48/0x3530 [ 68.012674][ T12] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 68.014609][ T12] new_slab+0xa2/0x640 [ 68.015972][ T12] refill_objects+0xe3/0x410 [ 68.017513][ T12] __pcs_replace_empty_main+0x376/0x680 [ 68.019339][ T12] __kmalloc_cache_noprof+0x479/0x6c0 [ 68.021082][ T12] dummy_hcd_init+0x3ce/0xc00 [ 68.022626][ T12] do_one_initcall+0x11d/0x700 [ 68.024194][ T12] kernel_init_freeable+0x6ea/0x7b0 [ 68.025891][ T12] kernel_init+0x1f/0x1e0 [ 68.027323][ T12] ret_from_fork+0x72b/0xd50 [ 68.028900][ T12] ret_from_fork_asm+0x1a/0x30 [ 68.030463][ T12] page last free pid 1 tgid 1 stack trace: [ 68.032410][ T12] __free_frozen_pages+0x79f/0x1090 [ 68.034142][ T12] qlist_free_all+0x47/0xf0 [ 68.035662][ T12] kasan_quarantine_reduce+0x1a0/0x1f0 [ 68.037395][ T12] __kasan_slab_alloc+0x69/0x90 [ 68.039011][ T12] __kmalloc_cache_noprof+0x265/0x6c0 [ 68.040769][ T12] bus_add_driver+0x92/0x5b0 [ 68.042277][ T12] driver_register+0x1e2/0x360 [ 68.043863][ T12] usb_register_driver+0x21c/0x3e0 [ 68.045556][ T12] do_one_initcall+0x11d/0x700 [ 68.047134][ T12] kernel_init_freeable+0x6ea/0x7b0 [ 68.048894][ T12] kernel_init+0x1f/0x1e0 [ 68.050305][ T12] ret_from_fork+0x72b/0xd50 [ 68.051848][ T12] ret_from_fork_asm+0x1a/0x30 [ 68.053429][ T12] [ 68.054248][ T12] Memory state around the buggy address: [ 68.056070][ T12] ffff888024ad0580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 68.058745][ T12] ffff888024ad0600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 68.061387][ T12] >ffff888024ad0680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 68.063985][ T12] ^ [ 68.066198][ T12] ffff888024ad0700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 68.068839][ T12] ffff888024ad0780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 68.071469][ T12] ================================================================== [ 68.074086][ T12] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 68.076441][ T12] CPU: 3 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted syzkaller #0 PREEMPT(full) [ 68.079517][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.082785][ T12] Workqueue: usbip_event event_handler [ 68.084599][ T12] Call Trace: [ 68.085707][ T12] [ 68.086685][ T12] dump_stack_lvl+0x100/0x190 [ 68.088232][ T12] vpanic+0x552/0x970 [ 68.089558][ T12] ? __pfx_vpanic+0x10/0x10 [ 68.091067][ T12] ? __pfx_vprintk_emit+0x10/0x10 [ 68.092584][ T12] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 68.094384][ T12] panic+0xd1/0xe0 [ 68.095604][ T12] ? __pfx_panic+0x10/0x10 [ 68.097095][ T12] ? end_report.part.0+0x23/0x90 [ 68.098743][ T12] ? rcu_is_watching+0x12/0xc0 [ 68.100349][ T12] ? end_report.part.0+0x23/0x90 [ 68.101965][ T12] ? check_panic_on_warn+0x1f/0x90 [ 68.103716][ T12] check_panic_on_warn.cold+0x19/0x34 [ 68.105471][ T12] end_report.part.0+0x3a/0x90 [ 68.107054][ T12] kasan_report.cold+0xe/0x18 [ 68.108624][ T12] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 68.110397][ T12] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 68.112120][ T12] __kasan_check_byte+0x36/0x50 [ 68.113728][ T12] lock_acquire+0x132/0x370 [ 68.115233][ T12] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 68.117163][ T12] ? _raw_spin_lock_irqsave+0x52/0x60 [ 68.118914][ T12] _raw_spin_lock_irqsave+0x3a/0x60 [ 68.120632][ T12] ? event_handler+0x21e/0x570 [ 68.122200][ T12] event_handler+0x21e/0x570 [ 68.123748][ T12] process_one_work+0xa23/0x1940 [ 68.125392][ T12] ? __pfx_process_one_work+0x10/0x10 [ 68.127218][ T12] ? __pfx_event_handler+0x10/0x10 [ 68.128916][ T12] worker_thread+0x5ef/0xe50 [ 68.130498][ T12] ? kthread+0x13a/0x450 [ 68.131968][ T12] ? __pfx_worker_thread+0x10/0x10 [ 68.133614][ T12] kthread+0x370/0x450 [ 68.135023][ T12] ? __pfx_kthread+0x10/0x10 [ 68.136540][ T12] ret_from_fork+0x72b/0xd50 [ 68.138092][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 68.140211][ T12] ? __switch_to+0x800/0x10f0 [ 68.142195][ T12] ? __pfx_kthread+0x10/0x10 [ 68.144151][ T12] ret_from_fork_asm+0x1a/0x30 [ 68.146140][ T12] [ 68.148070][ T12] Kernel Offset: disabled [ 68.149871][ T12] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:43:23 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffc900299a9000 RDX=0000000000080000 RSI=ffffffff81fd1d2c RDI=ffff888027900000 RBP=ffff88802b541380 RSP=ffffc90007dbf4b8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed10056a8271 R14=0000000000000001 R15=ffff88802b23c9c0 RIP=ffffffff81fd1d33 RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096bdf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000034019ff8 CR3=000000004b807000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000092097 RBX=ffff88801cb4a540 RCX=ffffffff8bb922d5 RDX=0000000000000000 RSI=ffffffff8e1a9955 RDI=ffffffff8c400a80 RBP=ffffed10039694a8 RSP=ffffc9000046fe00 R8 =0000000000000001 R9 =ffffed100566678d R10=ffff88802b333c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=dffffc0000000000 RIP=ffffffff8bb9089f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=000000004bcab000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3dcb26bab48ae364 dc9139853679752c ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 465c197819aa11b1 5c4840285a321790 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73bc115ce08219a3 a343dccb49fdf5f2 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 798d78216a975c5f 7221fbf787d75b98 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000600 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00002a4800000034 2ed83e0003cb1300 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000e00002a48 0000000000002a48 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00002a48ab1c5d00 14c0b200a25a0f00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2ff024000089bd00 0000000014b2f000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e41fda8273985fdc 42648821853498b7 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ae47ab4a7af7a3ae 1f70df24061af2c6 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000c5ba3 RBX=ffff88801cbeca80 RCX=ffffffff8bb922d5 RDX=0000000000000000 RSI=ffffffff8e1a9955 RDI=ffffffff8c400a80 RBP=ffffed100397d950 RSP=ffffc9000047fe00 R8 =0000000000000001 R9 =ffffed100568678d R10=ffff88802b433c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=dffffc0000000000 RIP=ffffffff8bb9089f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ddf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000341f9ff8 CR3=000000004c5ad000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff84d954f5 ffffffff89a9390c 0000000400000004 0000000600040008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff89cde221 ffffffff8a6d6826 ffffffff8260edd5 ffffffff8501afb4 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8a7107b8 ffffffff8a6d8169 ffffffff8980d2fb ffffffff8af03ade ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80080004800201c7 080008004cde006d 766b2f7665642f01 ffffffffffffffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ed08048003000400 0008000e800201c7 080008014bec0030 7265646e69622f73 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 667265646e69622f 2e01ffffffffffff ffffd9080e80030a 0800010800040142 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ba11848008000180 021ffffffeb80800 ffffffff8a73cd64 ffffffff8a6d7ebc ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0688032808000680 0306800202800302 8002049003000800 0488030fffffffff ZMM25=1128610911286109 1128610911286109 1128610911286109 1128610911286109 1128610911286109 1128610911286109 1128610911286109 1128610911286109 ZMM26=1ee451ab1ee451ab 1ee451ab1ee451ab 1ee451ab1ee451ab 1ee451ab1ee451ab 1ee451ab1ee451ab 1ee451ab1ee451ab 1ee451ab1ee451ab 1ee451ab1ee451ab ZMM27=3a557a1a3a557a1a 3a557a1a3a557a1a 3a557a1a3a557a1a 3a557a1a3a557a1a 3a557a1a3a557a1a 3a557a1a3a557a1a 3a557a1a3a557a1a 3a557a1a3a557a1a ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=6d0200006d020000 6d0200006d020000 6d0200006d020000 6d0200006d020000 6d0200006d020000 6d0200006d020000 6d0200006d020000 6d0200006d020000 info registers vcpu 3 CPU#3 RAX=000000000000000d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a131f5 RDI=ffffffff9b9f71a0 RBP=ffffffff9b9f7160 RSP=ffffc900001e7570 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=000000000000000d R14=ffffffff9b6f71f7 R15=ffffffff85a13190 RIP=ffffffff85a1321f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096edf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000004 CR3=000000005f959000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000012000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000