last executing test programs: 2.40528449s ago: executing program 0 (id=1): mkdir(&(0x7f00000002c0)='./file0\x00', 0xa0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) io_setup(0x2e, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)='^', 0x1}]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="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", 0x241}], 0x1}}], 0x1, 0x4000001) 2.350677898s ago: executing program 1 (id=2): openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x82084, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x5) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)={0x0, 0x2, [0x4a1, 0xc34, 0xf62, 0x4b]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x994, &(0x7f0000000300)={0x0, 0x10f211, 0x1000, 0x2002, 0x50, 0x0, r0}, &(0x7f00000007c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x44b, 0x70bd2c, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x1000, 0x9020}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x8000000000000001}]}}}]}, 0x40}}, 0x0) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000680)="92ca3a839be8e27fc536b372000000a296de0d0ffc1741a765bf3f5ca07596cc2ff87ba8aa859a112c04aa9d4840d1624f0a5ae2c074a946be21e2009392db2023965d125247f55fa1bce029e1f40492d9ba71aa7890683c202b50c75f3f955b63ac5826dcdd7d524ff2f656bbfb50275d4b85a96e994dc2746067c63fd67838d6a82cf356296db4e3165011257bc44151dc994f1efde4b8fe73e132d8e94795bc9adc5875f4867021a6d8453cf1ee42700e19f5bb6f58b649e0f75abb081224b04953ecf70e88f0d81c9921efe756ab560100000000000000391e5051d7f5adbadc308cdcd00a51f0f0111213572bcf82fe894f9c12d43b8b860cf06bb97e505d74", 0x102}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x3, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x7ffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) shutdown(r2, 0x1) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d9", 0x6c}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES8=0x0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xb, 0x1, 'TCPMSS\x00'}, @NFTA_TARGET_INFO={0xd, 0x3, "ac1a91d256ebf87b31"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2004095) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r7, &(0x7f0000000040), 0x10) setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 2.145804653s ago: executing program 2 (id=3): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000000)=0xb2, 0x4) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xd) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x202, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000480)={0xfffffff6, 0x0, &(0x7f0000000440)=[r2]}, 0x1) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x68, 0x0, 0x0, 0x1078, 0xf88, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x80000, 0x0, 0xf0, 0x800001, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$TCFLSH(r5, 0x540b, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f0000000080)={0x3, 0x0, 0xfffffffffffffff1, 0x81, 0x0, 0x8000, 0x1, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x0, 0x80000000, 0x2, 0x0, 0x8, 0x9}, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000003c0)={0x43, 0x3, 0x2}, 0x10) 1.84741147s ago: executing program 0 (id=5): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x40000, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', r5, 0x7800, 0x22b384db60457e3a, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x36, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100}}}}) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x68, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x54, 0x1, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x2, 0x7, 0x0, 0x3b604f5b}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x2000002, 0x2, 0x2, 0x0, 0x3}) ioctl$vim2m_VIDIOC_QUERYBUF(r7, 0xc04c5609, &(0x7f0000000580)=@multiplanar_userptr={0x9, 0x2, 0x4, 0x400, 0x6, {}, {0x3, 0xc, 0x0, 0x2, 0x80, 0xeb, "106f7df7"}, 0xffe00, 0x2, {0x0}}) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) 1.779938706s ago: executing program 3 (id=4): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000003c0)={0x0, 0x0, 0x2c, 0x7, 0x102}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CAP_HYPERV_VP_INDEX(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/platform/drivers/vhci_hcd/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='vhci_hcd.0\x00', 0xa) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r5 = openat$dlm_control(0xffffff9c, &(0x7f0000000000), 0x88000, 0x0) connect$unix(r5, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000040)=0xffdffffc, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, &(0x7f0000000080)) bind$alg(0xffffffffffffffff, 0x0, 0x0) 1.010446477s ago: executing program 1 (id=6): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40081, 0x0) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4038587a, &(0x7f00000002c0)={{0xffffffffffffffff, &(0x7f0000000040)=',}#})$\x00', 0x440400, &(0x7f00000000c0)={@align=0x80000000, {0xd7, 0x8, 0x8, 0x8000000000000001}}, 0x2, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x9}, {[0xffffffff, 0x5, 0x6, 0x5]}, 0x800000, 0xd0, &(0x7f0000000180)=""/208}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fffbffff0000000000000000850800005200000085000000500000009500000000000000"], &(0x7f0000000680)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="1d1b00ba8d13cdea2aac8a25ec05", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000440)={r2, 0x7, 0x1, r2}) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x48, 0x30, 0x12f, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x48}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a", 0x23}], 0x1}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000600170008000300", @ANYRES32=r8, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000fbdbdf252e00000008000300", @ANYRES32=r8, @ANYBLOB="0ab7137a640778e55681799640258900340002020202020200000a004f005050505050500000"], 0x34}, 0x1, 0x0, 0x0, 0x4044044}, 0x4000000) pselect6(0x40, &(0x7f0000000080)={0x9, 0x7, 0xffff, 0x0, 0x6200000000000000, 0x4, 0x8, 0x7ff}, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 988.752189ms ago: executing program 2 (id=7): timer_create(0x7, &(0x7f00000002c0)={0x0, 0x2f, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000380)=0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) syz_open_procfs$userns(r2, &(0x7f0000000200)) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r5 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) fsetxattr(r1, &(0x7f0000000280)=@known='user.incfs.size\x00', &(0x7f0000000340)='/dev/cuse\x00', 0xa, 0x2) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r6}, 0x38) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r8, &(0x7f0000000100)={0x14}, 0x14) sendmsg$IPSET_CMD_LIST(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002400)=ANY=[@ANYBLOB="1c07ba000000669196a6dbff0000000000000000690000000040030000dc1ab72f0230c61de69a1b41c8bc035a24fb635fb966ff8d32ac3580d9e2ed78e5e3ac2c92d15078322f4f504b83ea563828e068f377a0e82d965bd41bbb6072"], 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x2}) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000023c0)=ANY=[@ANYBLOB="20000000410001032bbd7000fddbdf25030000000c00968008000800", @ANYRES32=0x0, @ANYBLOB="b7bd864f7dd4467b"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x840) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006b", 0xc, 0xffffffffffffffff) timer_settime(r0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x3938700}}, &(0x7f0000000440)) r10 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r10, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 0s ago: executing program 0 (id=8): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/snmp\x00') r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000280)={0x3, 0x100, 0x0, 0x4, 0x80000}) lseek(r0, 0x38, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x1000000, {0x1, 0xff, 0x3}, 0x1}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000104000000000101000000000004", @ANYRES32=0x0, @ANYBLOB="0131010000000000180012800e00010069703665727370616e000000040002800a000100ffffffffffff0000"], 0x44}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x200000000000}, 0x18) writev(r3, &(0x7f0000002840)=[{&(0x7f0000000200)="b4", 0x1}], 0x1) r6 = openat$hpet(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) r7 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r7, &(0x7f0000000100)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4048040) ioctl$BLKCLOSEZONE(r6, 0x40101287, &(0x7f0000000040)={0x101, 0x20000000000000}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:19729' (ED25519) to the list of known hosts. [ 42.146580][ T5722] cgroup: Unknown subsys name 'net' [ 42.311720][ T5722] cgroup: Unknown subsys name 'cpuset' [ 42.316085][ T5722] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.249689][ T5722] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.997400][ T5757] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.000067][ T5757] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.001027][ T5758] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.004171][ T5757] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.005496][ T5758] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.008833][ T5757] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.011237][ T5760] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.011565][ T5758] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.013147][ T5760] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.013266][ T5758] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.014055][ T5758] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.014911][ T5761] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.015137][ T5757] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.015468][ T5757] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.015770][ T5757] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.017516][ T5757] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.019132][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.021786][ T5756] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.025936][ T5756] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.027456][ T5757] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.602204][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.605275][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.607584][ T5744] bridge_slave_0: entered allmulticast mode [ 47.612717][ T5744] bridge_slave_0: entered promiscuous mode [ 47.640370][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.643680][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.646181][ T5744] bridge_slave_1: entered allmulticast mode [ 47.648962][ T5744] bridge_slave_1: entered promiscuous mode [ 47.708072][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.710506][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.712998][ T5743] bridge_slave_0: entered allmulticast mode [ 47.715638][ T5743] bridge_slave_0: entered promiscuous mode [ 47.719922][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.722332][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.724630][ T5743] bridge_slave_1: entered allmulticast mode [ 47.727260][ T5743] bridge_slave_1: entered promiscuous mode [ 47.730060][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.732690][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.734935][ T5745] bridge_slave_0: entered allmulticast mode [ 47.737557][ T5745] bridge_slave_0: entered promiscuous mode [ 47.743177][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.755521][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.776731][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.780295][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.782696][ T5745] bridge_slave_1: entered allmulticast mode [ 47.785308][ T5745] bridge_slave_1: entered promiscuous mode [ 47.788381][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.790732][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.793141][ T5742] bridge_slave_0: entered allmulticast mode [ 47.795959][ T5742] bridge_slave_0: entered promiscuous mode [ 47.812095][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.818939][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.828997][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.832057][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.835185][ T5742] bridge_slave_1: entered allmulticast mode [ 47.839279][ T5742] bridge_slave_1: entered promiscuous mode [ 47.843779][ T5744] team0: Port device team_slave_0 added [ 47.864380][ T5744] team0: Port device team_slave_1 added [ 47.872836][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.895594][ T5743] team0: Port device team_slave_0 added [ 47.898963][ T5743] team0: Port device team_slave_1 added [ 47.904273][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.910638][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.915155][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.918085][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.928625][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.935396][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.938443][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.947005][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.963515][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.982595][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.984796][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.993449][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.005869][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.008068][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.015930][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.027638][ T5745] team0: Port device team_slave_0 added [ 48.032359][ T5745] team0: Port device team_slave_1 added [ 48.070230][ T5742] team0: Port device team_slave_0 added [ 48.076030][ T5744] hsr_slave_0: entered promiscuous mode [ 48.079613][ T5744] hsr_slave_1: entered promiscuous mode [ 48.093814][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.095913][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.103752][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.108520][ T5742] team0: Port device team_slave_1 added [ 48.118831][ T5743] hsr_slave_0: entered promiscuous mode [ 48.121203][ T5743] hsr_slave_1: entered promiscuous mode [ 48.123358][ T5743] debugfs: 'hsr0' already exists in 'hsr' [ 48.125857][ T5743] Cannot create hsr debugfs directory [ 48.128726][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.130981][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.143368][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.155734][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.158548][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.170474][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.189475][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.191990][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.201846][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.229352][ T5745] hsr_slave_0: entered promiscuous mode [ 48.231673][ T5745] hsr_slave_1: entered promiscuous mode [ 48.233748][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 48.235531][ T5745] Cannot create hsr debugfs directory [ 48.300055][ T5742] hsr_slave_0: entered promiscuous mode [ 48.303203][ T5742] hsr_slave_1: entered promiscuous mode [ 48.306175][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 48.308396][ T5742] Cannot create hsr debugfs directory [ 48.542610][ T5744] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.551429][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.554296][ T5744] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.559034][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.562716][ T5744] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.566991][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.569811][ T5744] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.574157][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.621039][ T5743] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.626211][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.629963][ T5743] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.636784][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.641369][ T5743] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.645472][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.653812][ T5743] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.657835][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.720016][ T5745] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.725580][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.728586][ T5745] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.733060][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.740379][ T5745] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.744501][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.747923][ T5745] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.751699][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.757236][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.803566][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.816234][ T5742] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.821646][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.826616][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.831344][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.834004][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.844938][ T5742] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.849817][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.852649][ T5742] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.859402][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.862322][ T5742] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.866779][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.883718][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.886205][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.917085][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.931437][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.933712][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.939944][ T223] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.942492][ T223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.980912][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.010422][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.032235][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.034651][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.047291][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.050567][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.068301][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.079203][ T5757] Bluetooth: hci2: command tx timeout [ 49.081415][ T5101] Bluetooth: hci1: command tx timeout [ 49.081431][ T5750] Bluetooth: hci0: command tx timeout [ 49.088609][ T5101] Bluetooth: hci3: command tx timeout [ 49.092489][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.110008][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.112592][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.122830][ T223] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.125246][ T223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.133251][ T5745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.292113][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.306402][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.346011][ T5743] veth0_vlan: entered promiscuous mode [ 49.349259][ T5744] veth0_vlan: entered promiscuous mode [ 49.356601][ T5743] veth1_vlan: entered promiscuous mode [ 49.365793][ T5744] veth1_vlan: entered promiscuous mode [ 49.381451][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.399293][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.405457][ T5743] veth0_macvtap: entered promiscuous mode [ 49.414605][ T5743] veth1_macvtap: entered promiscuous mode [ 49.422215][ T5744] veth0_macvtap: entered promiscuous mode [ 49.431569][ T5744] veth1_macvtap: entered promiscuous mode [ 49.442437][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.451742][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.465153][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.471278][ T5745] veth0_vlan: entered promiscuous mode [ 49.479063][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.491208][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.500639][ T5745] veth1_vlan: entered promiscuous mode [ 49.513999][ T5742] veth0_vlan: entered promiscuous mode [ 49.543473][ T5742] veth1_vlan: entered promiscuous mode [ 49.569143][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.572177][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.586283][ T5745] veth0_macvtap: entered promiscuous mode [ 49.592012][ T5745] veth1_macvtap: entered promiscuous mode [ 49.609646][ T100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.612198][ T100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.631511][ T5742] veth0_macvtap: entered promiscuous mode [ 49.639261][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.643892][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.647236][ T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.648535][ T5742] veth1_macvtap: entered promiscuous mode [ 49.650631][ T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.658832][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.674338][ T5743] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.678233][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.687870][ T5743] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.690327][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.694734][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.696207][ T5743] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.697929][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.705419][ T5743] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.720888][ T5743] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.738947][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.801906][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.807706][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.858933][ T5822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.870716][ T5822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.880654][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.884556][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.909669][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.926972][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.934327][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.996400][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.004754][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.038944][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.044145][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.131361][ T5898] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 50.159512][ T5822] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.163268][ T5822] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.166926][ T5822] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.171196][ T5822] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.174947][ T5822] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.181359][ T5822] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.189377][ T5822] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.193221][ T5822] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.253953][ T5900] binder: 5899:5900 ioctl 540b 0 returned -22 [ 50.347407][ T5898] ksmbd: Unknown IPC event: 3, ignore. [ 50.523133][ T5904] vhci_hcd vhci_hcd.0: remove, state 4 [ 50.523266][ T5904] usb usb38: USB disconnect, device number 1 [ 50.543991][ T5906] binder: 5905:5906 ioctl c00c6211 0 returned -14 [ 51.154642][ T13] vhci_hcd vhci_hcd.0: stop threads [ 51.156478][ T13] vhci_hcd vhci_hcd.0: release socket [ 51.160095][ T5750] Bluetooth: hci1: command tx timeout [ 51.162513][ T5760] Bluetooth: hci2: command tx timeout [ 51.164622][ T5757] Bluetooth: hci3: command tx timeout [ 51.166395][ T5101] Bluetooth: hci0: command tx timeout [ 51.253107][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 51.288002][ T13] vhci_hcd vhci_hcd.0: stop threads [ 51.290725][ T5921] netlink: 'syz.1.6': attribute type 10 has an invalid length. [ 51.319016][ T13] vhci_hcd vhci_hcd.0: release socket [ 51.344085][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 51.370975][ T13] vhci_hcd vhci_hcd.0: stop threads [ 51.385959][ T13] vhci_hcd vhci_hcd.0: release socket [ 51.413689][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 51.435167][ T13] vhci_hcd vhci_hcd.0: stop threads [ 51.450346][ T13] vhci_hcd vhci_hcd.0: release socket [ 51.464539][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 51.477984][ T5921] team0: Port device dummy0 added [ 51.518681][ T13] vhci_hcd vhci_hcd.0: stop threads [ 51.522677][ T13] vhci_hcd vhci_hcd.0: release socket [ 51.538681][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 51.566510][ T13] vhci_hcd vhci_hcd.0: stop threads [ 51.575749][ T13] vhci_hcd vhci_hcd.0: release socket [ 51.577681][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 51.582235][ T5921] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6'. [ 51.606019][ T13] vhci_hcd vhci_hcd.0: stop threads [ 51.627926][ T13] vhci_hcd vhci_hcd.0: release socket [ 51.635507][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 51.656631][ T13] vhci_hcd vhci_hcd.0: stop threads [ 51.664599][ T13] vhci_hcd vhci_hcd.0: release socket [ 51.674922][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 51.681951][ T5904] vhci_hcd vhci_hcd.0: USB bus 38 deregistered [ 51.869949][ T5904] vhci_hcd vhci_hcd.0: remove, state 4 [ 51.886114][ T5904] usb usb37: USB disconnect, device number 1 [ 52.159407][ T5904] vhci_hcd vhci_hcd.0: USB bus 37 deregistered [ 52.161516][ T5822] vhci_hcd vhci_hcd.0: stop threads [ 52.163177][ T5822] vhci_hcd vhci_hcd.0: release socket [ 52.167439][ T5822] vhci_hcd vhci_hcd.0: disconnect device [ 52.169761][ T5822] vhci_hcd vhci_hcd.0: stop threads [ 52.172687][ T5822] vhci_hcd vhci_hcd.0: release socket [ 52.174512][ T5822] vhci_hcd vhci_hcd.0: disconnect device [ 52.180315][ T5822] ================================================================== [ 52.182848][ T5822] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 52.185397][ T5822] Read of size 1 at addr ffff888024f486c8 by task kworker/u32:3/5822 [ 52.189389][ T5822] [ 52.190178][ T5822] CPU: 2 UID: 0 PID: 5822 Comm: kworker/u32:3 Not tainted syzkaller #0 PREEMPT(full) [ 52.190192][ T5822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.190200][ T5822] Workqueue: usbip_event event_handler [ 52.190218][ T5822] Call Trace: [ 52.190222][ T5822] [ 52.190229][ T5822] dump_stack_lvl+0x100/0x190 [ 52.190249][ T5822] print_report+0x13d/0x4b0 [ 52.190271][ T5822] ? __virt_addr_valid+0x239/0x430 [ 52.190284][ T5822] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 52.190297][ T5822] kasan_report+0xdf/0x1c0 [ 52.190314][ T5822] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 52.190327][ T5822] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 52.190339][ T5822] __kasan_check_byte+0x36/0x50 [ 52.190356][ T5822] lock_acquire+0x132/0x370 [ 52.190373][ T5822] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 52.190386][ T5822] ? _raw_spin_lock_irqsave+0x52/0x60 [ 52.190399][ T5822] _raw_spin_lock_irqsave+0x3a/0x60 [ 52.190411][ T5822] ? event_handler+0x21e/0x570 [ 52.190423][ T5822] event_handler+0x21e/0x570 [ 52.190435][ T5822] process_one_work+0xa23/0x1940 [ 52.190454][ T5822] ? __pfx_process_one_work+0x10/0x10 [ 52.190476][ T5822] ? __pfx_event_handler+0x10/0x10 [ 52.190488][ T5822] worker_thread+0x5ef/0xe50 [ 52.190505][ T5822] ? __pfx_worker_thread+0x10/0x10 [ 52.190521][ T5822] ? kthread+0x13a/0x450 [ 52.190535][ T5822] ? __pfx_worker_thread+0x10/0x10 [ 52.190550][ T5822] kthread+0x370/0x450 [ 52.190563][ T5822] ? __pfx_kthread+0x10/0x10 [ 52.190578][ T5822] ret_from_fork+0x72b/0xd50 [ 52.190592][ T5822] ? __pfx_ret_from_fork+0x10/0x10 [ 52.190605][ T5822] ? __switch_to+0x800/0x10f0 [ 52.190622][ T5822] ? __pfx_kthread+0x10/0x10 [ 52.190636][ T5822] ret_from_fork_asm+0x1a/0x30 [ 52.190654][ T5822] [ 52.190658][ T5822] [ 52.249912][ T5822] Allocated by task 1: [ 52.251536][ T5822] kasan_save_stack+0x30/0x50 [ 52.253496][ T5822] kasan_save_track+0x14/0x30 [ 52.255434][ T5822] __kasan_kmalloc+0xaa/0xb0 [ 52.257358][ T5822] __kmalloc_noprof+0x322/0x820 [ 52.259366][ T5822] __usb_create_hcd+0x5e/0xac0 [ 52.261089][ T5822] vhci_hcd_probe+0xf3/0x4e0 [ 52.262557][ T5822] platform_probe+0x106/0x1d0 [ 52.264058][ T5822] really_probe+0x241/0xa60 [ 52.265523][ T5822] __driver_probe_device+0x20e/0x450 [ 52.267205][ T5822] driver_probe_device+0x4a/0x140 [ 52.268926][ T5822] __device_attach_driver+0x1df/0x320 [ 52.270639][ T5822] bus_for_each_drv+0x159/0x1e0 [ 52.272206][ T5822] __device_attach+0x1e4/0x4d0 [ 52.273809][ T5822] device_initial_probe+0xaf/0xd0 [ 52.275411][ T5822] bus_probe_device+0x64/0x160 [ 52.277087][ T5822] device_add+0x121d/0x1970 [ 52.278798][ T5822] platform_device_add+0x35a/0x800 [ 52.280694][ T5822] platform_device_register_full+0x5cf/0x830 [ 52.282874][ T5822] vhci_hcd_init+0x1a1/0x2f0 [ 52.284584][ T5822] do_one_initcall+0x11d/0x700 [ 52.286168][ T5822] kernel_init_freeable+0x6ea/0x7b0 [ 52.287824][ T5822] kernel_init+0x1f/0x1e0 [ 52.289229][ T5822] ret_from_fork+0x72b/0xd50 [ 52.290710][ T5822] ret_from_fork_asm+0x1a/0x30 [ 52.292250][ T5822] [ 52.292979][ T5822] Freed by task 5904: [ 52.294199][ T5822] kasan_save_stack+0x30/0x50 [ 52.295697][ T5822] kasan_save_track+0x14/0x30 [ 52.297215][ T5822] kasan_save_free_info+0x3b/0x70 [ 52.298854][ T5822] __kasan_slab_free+0x5f/0x80 [ 52.300394][ T5822] kfree+0x22b/0x6c0 [ 52.301649][ T5822] usb_put_hcd+0x149/0x1f0 [ 52.303066][ T5822] vhci_hcd_remove+0x107/0x1b0 [ 52.304618][ T5822] platform_remove+0x5f/0x80 [ 52.306078][ T5822] device_remove+0xcb/0x180 [ 52.307532][ T5822] device_release_driver_internal+0x44e/0x620 [ 52.309497][ T5822] unbind_store+0xf8/0x110 [ 52.310909][ T5822] drv_attr_store+0x74/0xb0 [ 52.312432][ T5822] sysfs_kf_write+0xf2/0x150 [ 52.313935][ T5822] kernfs_fop_write_iter+0x3e0/0x5f0 [ 52.315614][ T5822] vfs_write+0x6ac/0x1050 [ 52.316994][ T5822] ksys_write+0x12a/0x250 [ 52.318398][ T5822] __do_fast_syscall_32+0xe7/0x970 [ 52.320047][ T5822] do_fast_syscall_32+0x32/0x70 [ 52.321608][ T5822] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.323760][ T5822] [ 52.324590][ T5822] Last potentially related work creation: [ 52.326517][ T5822] kasan_save_stack+0x30/0x50 [ 52.328029][ T5822] kasan_record_aux_stack+0xa7/0xc0 [ 52.329598][ T5931] Zero length message leads to an empty skb [ 52.329661][ T5822] insert_work+0x36/0x230 [ 52.332975][ T5822] __queue_work+0x9bc/0x12b0 [ 52.334574][ T5822] queue_work_on+0x1a9/0x1e0 [ 52.336135][ T5822] usb_hcd_giveback_urb+0x330/0x4a0 [ 52.337841][ T5822] unlink1+0x418/0x510 [ 52.339222][ T5822] usb_hcd_unlink_urb+0x131/0x210 [ 52.340822][ T5822] usb_kill_urb+0x121/0x320 [ 52.342253][ T5822] hub_quiesce+0x1e9/0x320 [ 52.343661][ T5822] hub_suspend+0x4ab/0x9e0 [ 52.345098][ T5822] usb_suspend_both+0x288/0x950 [ 52.346637][ T5822] usb_runtime_suspend+0x49/0x120 [ 52.348264][ T5822] __rpm_callback+0xc8/0x620 [ 52.349746][ T5822] rpm_callback+0x16a/0x1b0 [ 52.351276][ T5822] rpm_suspend+0x2f4/0x11a0 [ 52.352883][ T5822] __pm_runtime_suspend+0xba/0x1a0 [ 52.354584][ T5822] usb_new_device.cold+0xd61/0x115c [ 52.356305][ T5822] register_root_hub+0x4e6/0x639 [ 52.357979][ T5822] usb_add_hcd.cold+0xccd/0x1158 [ 52.359602][ T5822] vhci_hcd_probe+0x14b/0x4e0 [ 52.361117][ T5822] platform_probe+0x106/0x1d0 [ 52.362622][ T5822] really_probe+0x241/0xa60 [ 52.364070][ T5822] __driver_probe_device+0x20e/0x450 [ 52.365758][ T5822] driver_probe_device+0x4a/0x140 [ 52.367354][ T5822] __device_attach_driver+0x1df/0x320 [ 52.369098][ T5822] bus_for_each_drv+0x159/0x1e0 [ 52.370672][ T5822] __device_attach+0x1e4/0x4d0 [ 52.372206][ T5822] device_initial_probe+0xaf/0xd0 [ 52.373826][ T5822] bus_probe_device+0x64/0x160 [ 52.375276][ T5822] device_add+0x121d/0x1970 [ 52.376730][ T5822] platform_device_add+0x35a/0x800 [ 52.378389][ T5822] platform_device_register_full+0x5cf/0x830 [ 52.380309][ T5822] vhci_hcd_init+0x1a1/0x2f0 [ 52.381788][ T5822] do_one_initcall+0x11d/0x700 [ 52.383314][ T5822] kernel_init_freeable+0x6ea/0x7b0 [ 52.384976][ T5822] kernel_init+0x1f/0x1e0 [ 52.386346][ T5822] ret_from_fork+0x72b/0xd50 [ 52.387806][ T5822] ret_from_fork_asm+0x1a/0x30 [ 52.389353][ T5822] [ 52.390138][ T5822] Second to last potentially related work creation: [ 52.392227][ T5822] kasan_save_stack+0x30/0x50 [ 52.393730][ T5822] kasan_record_aux_stack+0xa7/0xc0 [ 52.395380][ T5822] insert_work+0x36/0x230 [ 52.396783][ T5822] __queue_work+0x9bc/0x12b0 [ 52.398316][ T5822] queue_work_on+0x1a9/0x1e0 [ 52.399797][ T5822] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 52.401453][ T5822] usb_hcd_submit_urb+0xab7/0x2150 [ 52.403070][ T5822] usb_submit_urb+0x827/0x19b0 [ 52.404608][ T5822] usb_start_wait_urb+0x10e/0x580 [ 52.406203][ T5822] usb_control_msg+0x328/0x4b0 [ 52.407735][ T5822] hub_ext_port_status+0x152/0x600 [ 52.409412][ T5822] hub_activate+0x6e5/0x1c40 [ 52.410896][ T5822] process_one_work+0xa23/0x1940 [ 52.412479][ T5822] worker_thread+0x5ef/0xe50 [ 52.413960][ T5822] kthread+0x370/0x450 [ 52.415262][ T5822] ret_from_fork+0x72b/0xd50 [ 52.416756][ T5822] ret_from_fork_asm+0x1a/0x30 [ 52.418293][ T5822] [ 52.419083][ T5822] The buggy address belongs to the object at ffff888024f48000 [ 52.419083][ T5822] which belongs to the cache kmalloc-8k of size 8192 [ 52.423390][ T5822] The buggy address is located 1736 bytes inside of [ 52.423390][ T5822] freed 8192-byte region [ffff888024f48000, ffff888024f4a000) [ 52.427677][ T5822] [ 52.428478][ T5822] The buggy address belongs to the physical page: [ 52.430427][ T5822] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24f48 [ 52.433036][ T5822] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 52.435659][ T5822] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 52.438224][ T5822] page_type: f5(slab) [ 52.439524][ T5822] raw: 00fff00000000040 ffff88801bc43180 dead000000000100 dead000000000122 [ 52.442114][ T5822] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 52.444674][ T5822] head: 00fff00000000040 ffff88801bc43180 dead000000000100 dead000000000122 [ 52.447254][ T5822] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 52.449864][ T5822] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 52.452416][ T5822] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 52.454988][ T5822] page dumped because: kasan: bad access detected [ 52.456863][ T5822] page_owner tracks the page as allocated [ 52.458563][ T5822] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 10613648726, free_ts 10593799634 [ 52.464564][ T5822] post_alloc_hook+0xfd/0x120 [ 52.465980][ T5822] get_page_from_freelist+0xf48/0x3530 [ 52.467617][ T5822] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 52.469441][ T5822] new_slab+0xa2/0x640 [ 52.470682][ T5822] refill_objects+0xe3/0x410 [ 52.472068][ T5822] __pcs_replace_empty_main+0x376/0x680 [ 52.473744][ T5822] __kmalloc_noprof+0x66d/0x820 [ 52.475228][ T5822] __usb_create_hcd+0x5e/0xac0 [ 52.476674][ T5822] vhci_hcd_probe+0xf3/0x4e0 [ 52.478077][ T5822] platform_probe+0x106/0x1d0 [ 52.479497][ T5822] really_probe+0x241/0xa60 [ 52.480869][ T5822] __driver_probe_device+0x20e/0x450 [ 52.482465][ T5822] driver_probe_device+0x4a/0x140 [ 52.484050][ T5822] __device_attach_driver+0x1df/0x320 [ 52.485675][ T5822] bus_for_each_drv+0x159/0x1e0 [ 52.487116][ T5822] __device_attach+0x1e4/0x4d0 [ 52.488620][ T5822] page last free pid 1 tgid 1 stack trace: [ 52.490406][ T5822] __free_frozen_pages+0x79f/0x1090 [ 52.491966][ T5822] qlist_free_all+0x47/0xf0 [ 52.493325][ T5822] kasan_quarantine_reduce+0x1a0/0x1f0 [ 52.494940][ T5822] __kasan_slab_alloc+0x69/0x90 [ 52.496389][ T5822] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 52.498013][ T5822] __kernfs_new_node+0xd2/0xa10 [ 52.499493][ T5822] kernfs_new_node+0x117/0x150 [ 52.500934][ T5822] kernfs_create_link+0xcc/0x240 [ 52.502417][ T5822] sysfs_do_create_link_sd+0x90/0x140 [ 52.503987][ T5822] sysfs_create_link+0x61/0xc0 [ 52.505432][ T5822] device_add+0x675/0x1970 [ 52.506762][ T5822] usb_add_gadget+0x455/0x920 [ 52.508196][ T5822] usb_add_gadget_udc+0x26/0x70 [ 52.509619][ T5822] dummy_udc_probe+0x69e/0x960 [ 52.511037][ T5822] platform_probe+0x106/0x1d0 [ 52.512462][ T5822] really_probe+0x241/0xa60 [ 52.513810][ T5822] [ 52.514538][ T5822] Memory state around the buggy address: [ 52.516170][ T5822] ffff888024f48580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 52.518473][ T5822] ffff888024f48600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 52.520765][ T5822] >ffff888024f48680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 52.523099][ T5822] ^ [ 52.525037][ T5822] ffff888024f48700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 52.527441][ T5822] ffff888024f48780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 52.529962][ T5822] ================================================================== [ 52.532410][ T5822] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 52.534747][ T5822] CPU: 2 UID: 0 PID: 5822 Comm: kworker/u32:3 Not tainted syzkaller #0 PREEMPT(full) [ 52.537681][ T5822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.540848][ T5822] Workqueue: usbip_event event_handler [ 52.542586][ T5822] Call Trace: [ 52.543643][ T5822] [ 52.544591][ T5822] dump_stack_lvl+0x100/0x190 [ 52.545989][ T5822] vpanic+0x552/0x970 [ 52.547107][ T5822] ? __pfx_vpanic+0x10/0x10 [ 52.548602][ T5822] ? __pfx_vprintk_emit+0x10/0x10 [ 52.550472][ T5822] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 52.552261][ T5822] panic+0xd1/0xe0 [ 52.553812][ T5822] ? __pfx_panic+0x10/0x10 [ 52.555686][ T5822] ? end_report.part.0+0x23/0x90 [ 52.557771][ T5822] ? rcu_is_watching+0x12/0xc0 [ 52.559829][ T5822] ? end_report.part.0+0x23/0x90 [ 52.561873][ T5822] ? check_panic_on_warn+0x1f/0x90 [ 52.563985][ T5822] check_panic_on_warn.cold+0x19/0x34 [ 52.566225][ T5822] end_report.part.0+0x3a/0x90 [ 52.568234][ T5822] kasan_report.cold+0xe/0x18 [ 52.569994][ T5822] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 52.572049][ T5822] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 52.574305][ T5822] __kasan_check_byte+0x36/0x50 [ 52.576382][ T5822] lock_acquire+0x132/0x370 [ 52.578327][ T5822] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 52.580737][ T5822] ? _raw_spin_lock_irqsave+0x52/0x60 [ 52.582523][ T5822] _raw_spin_lock_irqsave+0x3a/0x60 [ 52.584055][ T5822] ? event_handler+0x21e/0x570 [ 52.585502][ T5822] event_handler+0x21e/0x570 [ 52.586915][ T5822] process_one_work+0xa23/0x1940 [ 52.588553][ T5822] ? __pfx_process_one_work+0x10/0x10 [ 52.590429][ T5822] ? __pfx_event_handler+0x10/0x10 [ 52.592069][ T5822] worker_thread+0x5ef/0xe50 [ 52.593837][ T5822] ? __pfx_worker_thread+0x10/0x10 [ 52.595988][ T5822] ? kthread+0x13a/0x450 [ 52.597789][ T5822] ? __pfx_worker_thread+0x10/0x10 [ 52.599914][ T5822] kthread+0x370/0x450 [ 52.601649][ T5822] ? __pfx_kthread+0x10/0x10 [ 52.603557][ T5822] ret_from_fork+0x72b/0xd50 [ 52.605429][ T5822] ? __pfx_ret_from_fork+0x10/0x10 [ 52.607473][ T5822] ? __switch_to+0x800/0x10f0 [ 52.609438][ T5822] ? __pfx_kthread+0x10/0x10 [ 52.611246][ T5822] ret_from_fork_asm+0x1a/0x30 [ 52.613208][ T5822] [ 52.615123][ T5822] Kernel Offset: disabled [ 52.616876][ T5822] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:44:49 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffff8880220c4a80 RCX=ffffffff8211faef RDX=0000000000000000 RSI=ffffffff8c400a00 RDI=ffffffff8e46d920 RBP=ffffc90006527d68 RSP=ffffc90006527d00 R8 =0000000000000000 R9 =fffffbfff22455fa R10=ffffffff9122afd7 R11=0000000000000000 R12=ffff888022d3a540 R13=0000000000000001 R14=ffffffff9122e384 R15=ffff88802b23b600 RIP=ffffffff81e53fb4 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096bdf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000080007000 CR3=000000002774e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000002 RBX=0000000000000000 RCX=ffffffff897eaa80 RDX=ffff888028bb0000 RSI=ffffffff897eaa8e RDI=ffff888028bb0000 RBP=ffffc90006bf7d40 RSP=ffffc90006bf79a8 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000001 R14=ffffc90006bf7d84 R15=0000000080000002 RIP=ffffffff8209ae7f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096cdf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000080037018 CR3=000000002774e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a09df5 RDI=ffffffff9b9f74e0 RBP=ffffffff9b9f74a0 RSP=ffffc90006677570 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6634323038386552 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b6f7221 R15=ffffffff85a09d90 RIP=ffffffff85a09e1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ddf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000033ee9ff8 CR3=000000006ca8e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000800 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556df24d9c50 0000556df24d9c50 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff82dba400 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 685f69636876205d 3232383554205b5d 3933343736312e32 352020205b203a6c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 29736d3030303030 3436382820303030 30343638206f7420 676e697474657320 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c6d756d6978616d 2065766f6261206c 61767265746e6920 7972657571207075 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7472617473207473 616369746c756d20 746573206f742067 6e69797274203a31 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656764697262205d 3839383554205b5d 3136333133312e30 352020205b203a6c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff94766d80 RBX=ffff888022cc30e0 RCX=61cdf1dcb4b6bc27 RDX=61cdf1dcb4b6bc27 RSI=00000000ef211235 RDI=0000000038976ef0 RBP=ffff888022cc2540 RSP=ffffc90006c07b08 R8 =00000000ffffffff R9 =000000000000075d R10=0000000000000000 R11=0000000000000000 R12=61cdf1dcb4b6bc27 R13=ffffffff97bf6798 R14=000000000002e11f R15=0000000000000001 RIP=ffffffff81e549db RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096edf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3d85997ddc CR3=000000002aa11000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000001 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef56453bb 00007ffef56453bb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef56458c0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef56458c0 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6369766564207463 656e6e6f63736964 203a302e6463685f 6963687620646300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6363766564207463 6564646563736364 2030302464636255 6363627620646300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e7974696c616e6f 6974636e75662073 696874206e6f2064 6e6570656420756f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 792066692067726f 2e6b6361766b406d 6d2d78756e696c20 6f74206573616365 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73752072756f7920 74726f7065722065 7361656c50202e64 65766f6d65722065 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 62206c6c69772064 6e61206465746163 6572706564207369 2073657479625f6e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e656d676172 66206562206c6c69 7720656361667265 746e692073696874 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000