last executing test programs:

3.182136771s ago: executing program 2 (id=91):
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb1, 0xbd, 0x2f, 0x8, 0x47d, 0x5003, 0x2f8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x58, 0xb7}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[], 0x0}, 0x0)

2.62824542s ago: executing program 1 (id=93):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r3 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|')

1.66143404s ago: executing program 1 (id=102):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
listen(r0, 0x0)
listen(r0, 0x0)

1.582295429s ago: executing program 1 (id=104):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000400)={0x0, 0x0, 0x1, "a7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.057616022s ago: executing program 2 (id=113):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r1, 0x2000009)
sendfile(r0, r1, 0x0, 0x20000000000006)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
sendmsg$rds(r2, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000340)=[{&(0x7f00000016c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)

493.147658ms ago: executing program 0 (id=114):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4)
r1 = socket$inet(0x2, 0x80001, 0x84)
r2 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10)
listen(r2, 0x3)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4)
bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10)
listen(r1, 0x3)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r0, 0x50)

360.164498ms ago: executing program 0 (id=115):
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r0 = socket(0x1, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x7ffffffe, 0x3, {0x0, 0x0, 0x600, r4, 0x60, 0x880}, [@IFLA_MASTER={0x8, 0x3, r1}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x80d4)

301.10183ms ago: executing program 0 (id=116):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r0, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r1, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180, 0x61}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

198.476392ms ago: executing program 0 (id=117):
syz_read_part_table(0x107a, &(0x7f0000000000)="$eJzs0LFNxEAQBdBvzus7CxqgAmqgLmIEJ1EBKQE1UAEpJSEIBu2ehWgASN5LbM3+nS9t+Ffra7tKUnfJmt0YHZI5yT7J44/kLnmv5LNeqqoyZdrCazImSZakWtX1VDf9+u1ztUMujzXXyWj6qDn747Zzue/fi/NR/ZbkaUkekrTT/q35bPz07NyPvrU/eSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+GVfAQAA//8jACZ5")

195.930652ms ago: executing program 2 (id=118):
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/time\x00')
ioctl$BTRFS_IOC_BALANCE(r0, 0x8004b709, 0x0)

195.637077ms ago: executing program 2 (id=119):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x26e1, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {0x1, 0x3}, [], {0x4, 0x1}, [], {0x20, 0x6}, {0x20, 0x2}}, 0x1c, 0x2)
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x479, 0x6)

147.566756ms ago: executing program 0 (id=120):
bind$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @default, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null, @default]}, 0x1f)
setrlimit(0x2, &(0x7f00000001c0)={0x1})
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = syz_io_uring_setup(0x21f1, &(0x7f0000000300)={0x0, 0xf36e, 0x10100, 0x0, 0x200}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000580)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x50, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1})
io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0)

144.467354ms ago: executing program 1 (id=121):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}, 0x1}}, 0x0, 0x0, 0x3, 0x0, 0xce024d}, 0x9c)

130.676122ms ago: executing program 2 (id=122):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x4, 0x61, 0x11, 0xdc}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)

57.566575ms ago: executing program 2 (id=123):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x48}, {0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @dev, 0x9}, 0x1c)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1)

57.40333ms ago: executing program 1 (id=124):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x60000002}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x9c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)

55.865698ms ago: executing program 0 (id=125):
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xac, 0xa2, 0x58, 0x40, 0xdba, 0x3000, 0x26ea, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x2, 0xaa}}]}}]}}, 0x0)

0s ago: executing program 1 (id=126):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_T4(r0, 0x103, 0x4, 0x0, &(0x7f00000000c0))

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:32519' (ED25519) to the list of known hosts.
syzkaller login: [   48.897355][ T5775] cgroup: Unknown subsys name 'net'
[   49.026395][ T5775] cgroup: Unknown subsys name 'cpuset'
[   49.031764][ T5775] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.809914][ T5775] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.431844][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.436265][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.438979][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.441345][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.444803][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.447224][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.450256][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.452670][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.455452][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.458278][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.494271][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.497602][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.506358][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.512832][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.515860][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.678599][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   55.748545][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   55.767921][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   55.811782][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.814625][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.817006][ T5843] bridge_slave_0: entered allmulticast mode
[   55.819767][ T5843] bridge_slave_0: entered promiscuous mode
[   55.837003][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.839381][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.842543][ T5843] bridge_slave_1: entered allmulticast mode
[   55.845173][ T5843] bridge_slave_1: entered promiscuous mode
[   55.893604][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.895974][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.898452][ T5851] bridge_slave_0: entered allmulticast mode
[   55.901206][ T5851] bridge_slave_0: entered promiscuous mode
[   55.906134][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.908627][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.911058][ T5851] bridge_slave_1: entered allmulticast mode
[   55.914950][ T5851] bridge_slave_1: entered promiscuous mode
[   55.937734][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.966577][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.969606][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.974423][ T5847] bridge_slave_0: entered allmulticast mode
[   55.978312][ T5847] bridge_slave_0: entered promiscuous mode
[   55.985015][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.996894][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.999840][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.003019][ T5847] bridge_slave_1: entered allmulticast mode
[   56.007419][ T5847] bridge_slave_1: entered promiscuous mode
[   56.034580][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.057336][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.061237][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.074464][ T5843] team0: Port device team_slave_0 added
[   56.078313][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.090507][ T5843] team0: Port device team_slave_1 added
[   56.110518][ T5851] team0: Port device team_slave_0 added
[   56.138546][ T5847] team0: Port device team_slave_0 added
[   56.142714][ T5851] team0: Port device team_slave_1 added
[   56.146074][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.148897][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.159104][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.178141][ T5847] team0: Port device team_slave_1 added
[   56.180484][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.183117][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.191367][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.231214][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.234825][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.243979][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.250175][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.253599][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.261854][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.266472][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.269369][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.280249][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.286505][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.289417][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.301692][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.363757][ T5843] hsr_slave_0: entered promiscuous mode
[   56.366112][ T5843] hsr_slave_1: entered promiscuous mode
[   56.387961][ T5851] hsr_slave_0: entered promiscuous mode
[   56.390569][ T5851] hsr_slave_1: entered promiscuous mode
[   56.394228][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   56.396130][ T5851] Cannot create hsr debugfs directory
[   56.401473][ T5847] hsr_slave_0: entered promiscuous mode
[   56.403920][ T5847] hsr_slave_1: entered promiscuous mode
[   56.405966][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   56.407821][ T5847] Cannot create hsr debugfs directory
[   56.693719][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.704760][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.716471][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.724713][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.761060][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.771381][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.781417][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.788839][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.875143][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.884202][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.892576][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.906561][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.976571][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.994277][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.015886][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   57.031784][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   57.039308][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.041982][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.056227][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.059312][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.083252][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.086304][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.106786][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.109894][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.166462][ T5847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.179634][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.207324][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   57.226712][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.229757][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.257163][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.259617][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.271278][ T5843] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.276251][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.309976][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.329831][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.355935][ T5847] veth0_vlan: entered promiscuous mode
[   57.368876][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.375733][ T5847] veth1_vlan: entered promiscuous mode
[   57.403132][ T5851] veth0_vlan: entered promiscuous mode
[   57.407684][ T5843] veth0_vlan: entered promiscuous mode
[   57.414146][ T5851] veth1_vlan: entered promiscuous mode
[   57.417621][ T5843] veth1_vlan: entered promiscuous mode
[   57.427839][ T5847] veth0_macvtap: entered promiscuous mode
[   57.435841][ T5847] veth1_macvtap: entered promiscuous mode
[   57.453492][ T5843] veth0_macvtap: entered promiscuous mode
[   57.462563][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.469615][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.475055][ T5851] veth0_macvtap: entered promiscuous mode
[   57.479041][ T5843] veth1_macvtap: entered promiscuous mode
[   57.489487][ T5851] veth1_macvtap: entered promiscuous mode
[   57.503192][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.506872][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.512780][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.520748][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.523349][ T5850] Bluetooth: hci1: command tx timeout
[   57.525503][ T5237] Bluetooth: hci0: command tx timeout
[   57.547737][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.554411][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.570715][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.579891][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.589803][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.593780][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.596771][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.599736][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.613778][ T5237] Bluetooth: hci2: command tx timeout
[   57.619388][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.635429][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.649210][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.656843][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.671059][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.677360][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.702618][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.705387][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.707954][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.711142][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.757318][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.761234][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.766312][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.841391][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.848364][ T5913] binder: 5912:5913 ioctl c0306201 200000000680 returned -14
[   57.852973][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.899841][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.903747][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.004586][   T33] audit: type=1326 audit(1758638669.303:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.0.1" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514778ec29 code=0x7ffc0000
[   58.019922][   T33] audit: type=1326 audit(1758638669.303:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.0.1" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514778ec29 code=0x7ffc0000
[   58.029536][   T33] audit: type=1326 audit(1758638669.303:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.0.1" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f514778ec29 code=0x7ffc0000
[   58.037695][   T33] audit: type=1326 audit(1758638669.303:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.0.1" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514778ec29 code=0x7ffc0000
[   58.045327][   T33] audit: type=1326 audit(1758638669.303:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.0.1" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514778ec29 code=0x7ffc0000
[   58.059572][   T33] audit: type=1326 audit(1758638669.303:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.0.1" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f514778ec29 code=0x7ffc0000
[   58.072568][   T33] audit: type=1326 audit(1758638669.303:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.0.1" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514778ec29 code=0x7ffc0000
[   58.079488][   T33] audit: type=1326 audit(1758638669.303:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.0.1" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5147785be7 code=0x7ffc0000
[   58.086605][ T5924] 9pnet: p9_errstr2errno: server reported unknown error @΂00000000000000000005
[   58.101685][   T33] audit: type=1326 audit(1758638669.303:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.0.1" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f514772ae09 code=0x7ffc0000
[   58.110056][   T33] audit: type=1326 audit(1758638669.303:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.0.1" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5147785be7 code=0x7ffc0000
[   58.630625][ T5938] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   59.270091][ T5956] netlink: 'syz.1.19': attribute type 2 has an invalid length.
[   59.652460][ T5237] Bluetooth: hci1: command tx timeout
[   59.655213][ T5850] Bluetooth: hci0: command tx timeout
[   59.713555][ T5237] Bluetooth: hci2: command tx timeout
[   60.325194][ T5897] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   60.485939][ T5897] usb 1-1: too many configurations: 227, using maximum allowed: 8
[   60.526038][ T5897] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[   60.535656][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.551185][ T5897] usb 1-1: config 0 descriptor??
[   60.604394][ T5897] pwc: Samsung MPC-C10 USB webcam detected.
[   60.607619][ T5897] pwc: Warning: more than 1 configuration available.
[   60.786658][ T5897] pwc: send_video_command error -71
[   60.790245][ T5897] pwc: Failed to set video mode VGA@30 fps; return code = -71
[   60.795014][ T5897] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71
[   60.806208][ T5897] usb 1-1: USB disconnect, device number 2
[   60.982342][ T5982] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   61.357919][ T5994] loop2: detected capacity change from 0 to 1764
[   61.504226][ T6004] loop0: detected capacity change from 0 to 512
[   61.515697][ T6004] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.37: corrupted in-inode xattr: invalid ea_ino
[   61.520336][ T6004] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.37: couldn't read orphan inode 15 (err -117)
[   61.525653][ T6004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.537273][ T6004] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[   61.553719][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.693115][ T5850] Bluetooth: hci0: command tx timeout
[   61.695423][ T5237] Bluetooth: hci1: command tx timeout
[   61.762412][ T5237] Bluetooth: hci2: command tx timeout
[   61.782115][  T792] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   61.934528][  T792] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   61.939320][  T792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   61.952076][  T792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   61.959009][  T792] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   61.968993][  T792] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   61.975140][  T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.985637][  T792] usb 3-1: config 0 descriptor??
[   62.404833][  T792] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   62.408034][  T792] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   62.421727][  T792] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   62.427491][  T792] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   62.430722][  T792] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   62.623452][  T792] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   62.666887][  T792] usb 3-1: USB disconnect, device number 2
[   63.158476][ T5897] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   63.367380][ T6040] netlink: 'syz.2.49': attribute type 3 has an invalid length.
[   63.504388][ T5897] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[   63.507540][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   63.514206][ T5897] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[   63.517183][ T5897] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[   63.519771][ T5897] usb 2-1: Manufacturer: syz
[   63.524232][ T5897] usb 2-1: config 0 descriptor??
[   63.562615][ T5897] rc_core: IR keymap rc-hauppauge not found
[   63.564697][ T5897] Registered IR keymap rc-empty
[   63.567479][ T5897] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[   63.580451][ T5897] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5
[   63.742777][ T6064] loop2: detected capacity change from 0 to 128
[   63.762624][ T5237] Bluetooth: hci1: command tx timeout
[   63.765418][ T5850] Bluetooth: hci0: command tx timeout
[   63.842722][ T5850] Bluetooth: hci2: command tx timeout
[   63.943389][    C1] igorplugusb 2-1:0.0: receive overflow, at least 13 lost
[   64.151378][ T5897] usb 2-1: USB disconnect, device number 2
[   64.582018][ T6086] trusted_key: encrypted_key: insufficient parameters specified
[   65.507029][ T6098] loop0: detected capacity change from 0 to 256
[   65.527768][ T6098] =======================================================
[   65.527768][ T6098] WARNING: The mand mount option has been deprecated and
[   65.527768][ T6098]          and is ignored by this kernel. Remove the mand
[   65.527768][ T6098]          option from the mount to silence this warning.
[   65.527768][ T6098] =======================================================
[   65.580752][ T6098] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[   65.644257][ T6098] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.814618][   T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   65.972612][   T10] usb 2-1: Using ep0 maxpacket: 8
[   65.981276][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[   65.985943][   T10] usb 2-1: config 7 has an invalid interface number: 84 but max is 0
[   65.989487][   T10] usb 2-1: config 7 has no interface number 0
[   65.994517][   T10] usb 2-1: New USB device found, idVendor=04b4, idProduct=5500, bcdDevice=9e.50
[   65.998668][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.003032][   T10] usb 2-1: Product: syz
[   66.004771][   T10] usb 2-1: Manufacturer: syz
[   66.006741][   T10] usb 2-1: SerialNumber: syz
[   66.067675][ T6108] loop0: detected capacity change from 0 to 32768
[   66.076052][ T6108] bcachefs: bch2_fs_parse_param() Error parsing option direct_io: option_value
[   66.230943][   T10] cypress_m8 2-1:7.84: HID->COM RS232 Adapter converter detected
[   66.234785][   T10] cyphidcom ttyUSB0: required endpoint is missing
[   66.243156][   T10] usb 2-1: USB disconnect, device number 3
[   66.255071][   T10] cypress_m8 2-1:7.84: device disconnected
[   66.290043][ T6129] netlink: 148 bytes leftover after parsing attributes in process `syz.0.84'.
[   67.001219][   T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   67.205925][ T6151] cifs: Unknown parameter 'mode'
[   67.463147][   T10] usb 3-1: Using ep0 maxpacket: 8
[   67.516370][   T10] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[   67.520752][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.523646][   T10] usb 3-1: Product: syz
[   67.525369][   T10] usb 3-1: Manufacturer: syz
[   67.527394][   T10] usb 3-1: SerialNumber: syz
[   67.532071][   T10] usb 3-1: config 0 descriptor??
[   67.537688][   T10] gspca_main: se401-2.14.0 probing 047d:5003
[   67.637548][ T6159] netlink: 'syz.0.97': attribute type 1 has an invalid length.
[   67.641042][ T6159] netlink: 224 bytes leftover after parsing attributes in process `syz.0.97'.
[   67.787623][ T6163] netlink: 20 bytes leftover after parsing attributes in process `syz.0.99'.
[   67.790792][ T6163] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614)
[   67.795196][ T6163] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[   67.945443][   T10] gspca_se401: write req failed req 0x57 val 0x00 error -71
[   67.948613][   T10] se401 3-1:0.0: probe with driver se401 failed with error -71
[   67.965453][   T10] usb 3-1: USB disconnect, device number 3
[   68.272097][ T5979] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   68.307667][ T6194] loop0: detected capacity change from 0 to 16
[   68.317191][ T6194] erofs (device loop0): mounted with root inode @ nid 36.
[   68.329166][ T6194] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36
[   68.335830][ T6194] erofs (device loop0): failed to decompress -29 in[58, 4038] out[1851]
[   68.339769][ T6194] erofs (device loop0): read error -117 @ 43 of nid 36
[   68.402372][ T6195] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36
[   68.406660][ T6195] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36
[   68.410254][ T6195] erofs (device loop0): readahead error at folio 42 @ nid 36
[   68.416613][ T6195] erofs (device loop0): bogus lookback distance 774 @ lcn 40 of nid 36
[   68.420215][ T6195] erofs (device loop0): readahead error at folio 41 @ nid 36
[   68.423821][ T6195] erofs (device loop0): bogus lookback distance 774 @ lcn 40 of nid 36
[   68.427441][ T6195] erofs (device loop0): readahead error at folio 40 @ nid 36
[   68.430755][ T6195] erofs (device loop0): readahead error at folio 39 @ nid 36
[   68.434512][ T5979] usb 2-1: Using ep0 maxpacket: 16
[   68.438772][ T6195] erofs (device loop0): readahead error at folio 38 @ nid 36
[   68.446467][ T6195] erofs (device loop0): readahead error at folio 36 @ nid 36
[   68.451302][ T5979] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   68.463130][ T6195] erofs (device loop0): bogus lookback distance 1468 @ lcn 31 of nid 36
[   68.466750][ T5979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.470122][ T5979] usb 2-1: Product: syz
[   68.482115][ T6195] erofs (device loop0): readahead error at folio 31 @ nid 36
[   68.485669][ T6195] erofs (device loop0): readahead error at folio 25 @ nid 36
[   68.488975][ T5979] usb 2-1: Manufacturer: syz
[   68.490980][ T5979] usb 2-1: SerialNumber: syz
[   68.496687][ T6195] erofs (device loop0): readahead error at folio 24 @ nid 36
[   68.506579][ T6195] erofs (device loop0): readahead error at folio 19 @ nid 36
[   68.514755][ T5979] r8152-cfgselector 2-1: Unknown version 0x0000
[   68.517453][ T5979] r8152-cfgselector 2-1: config 0 descriptor??
[   68.535712][ T6195] syz.0.112: attempt to access beyond end of device
[   68.535712][ T6195] loop0: rw=524288, sector=784, nr_sectors = 64 limit=16
[   68.548533][ T6195] syz.0.112: attempt to access beyond end of device
[   68.548533][ T6195] loop0: rw=524288, sector=13478624080, nr_sectors = 24 limit=16
[   68.569263][ T6195] syz.0.112: attempt to access beyond end of device
[   68.569263][ T6195] loop0: rw=524288, sector=13478624032, nr_sectors = 48 limit=16
[   68.583575][ T6195] erofs (device loop0): failed to decompress -29 in[58, 4038] out[2639]
[   68.587631][ T6195] erofs (device loop0): bogus lookback distance 1586 @ lcn 46 of nid 36
[   68.591391][ T6195] erofs (device loop0): readahead error at folio 47 @ nid 36
[   68.600031][ T6195] erofs (device loop0): bogus lookback distance 1586 @ lcn 46 of nid 36
[   68.606436][ T6195] erofs (device loop0): readahead error at folio 46 @ nid 36
[   68.609971][ T6195] erofs (device loop0): readahead error at folio 45 @ nid 36
[   68.616484][ T6195] syz.0.112: attempt to access beyond end of device
[   68.616484][ T6195] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16
[   68.628117][ T6195] erofs (device loop0): failed to decompress -29 in[58, 4038] out[3537]
[   68.750036][ T5979] r8152-cfgselector 2-1: Unknown version 0x0000
[   68.753754][ T5979] r8152-cfgselector 2-1: bad CDC descriptors
[   68.967344][ T5979] r8152-cfgselector 2-1: USB disconnect, device number 4
[   69.260888][ T6207] all: renamed from lo (while UP)
[   69.431618][ T6212] loop0: detected capacity change from 0 to 8192
[   69.632586][ T6232] Oops: stack segment: 0000 [#1] SMP KASAN PTI
[   69.635294][ T6232] CPU: 0 UID: 0 PID: 6232 Comm: syz.2.127 Not tainted syzkaller #0 PREEMPT(full) 
[   69.640259][ T6232] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   69.644536][ T6232] RIP: 0010:pgtable_trans_huge_withdraw+0x115/0x310
[   69.647327][ T6232] Code: c3 10 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 5d 38 13 00 48 8b 03 48 89 04 24 4c 8d 78 08 4c 89 fd 48 c1 ed 03 <42> 80 7c 2d 00 00 74 08 4c 89 ff e8 3b 38 13 00 49 8b 07 48 8d 48
[   69.655397][ T6232] RSP: 0018:ffffc900041ff300 EFLAGS: 00010202
[   69.657964][ T6232] RAX: 0000000000000000 RBX: ffffea0000be4950 RCX: 0000000000080000
[   69.661311][ T6232] RDX: ffffc9000f3a1000 RSI: 00000000000042d5 RDI: 00000000000042d6
[   69.664655][ T6232] RBP: 0000000000000001 R08: ffff88810e518de3 R09: 1ffff11021ca31bc
[   69.668017][ T6232] R10: dffffc0000000000 R11: ffffed1021ca31bd R12: ffff88802f925000
[   69.671356][ T6232] R13: dffffc0000000000 R14: ffff88802f925000 R15: 0000000000000008
[   69.674689][ T6232] FS:  00007f8bcb04d6c0(0000) GS:ffff8880b8612000(0000) knlGS:0000000000000000
[   69.678409][ T6232] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   69.681228][ T6232] CR2: 0000000000000000 CR3: 000000010e132000 CR4: 00000000000006f0
[   69.684590][ T6232] Call Trace:
[   69.686053][ T6232]  <TASK>
[   69.687311][ T6232]  zap_huge_pmd+0xa25/0xf50
[   69.689250][ T6232]  ? __pfx_rcu_read_lock_sched_held+0x10/0x10
[   69.691842][ T6232]  unmap_page_range+0x9fe/0x4370
[   69.693994][ T6232]  ? __lock_acquire+0xab9/0xd20
[   69.696098][ T6232]  ? __pfx_unmap_page_range+0x10/0x10
[   69.698394][ T6232]  ? mas_find+0xb0e/0xd30
[   69.700270][ T6232]  ? unmap_vmas+0x144/0x580
[   69.702213][ T6232]  unmap_vmas+0x399/0x580
[   69.704057][ T6232]  ? __pfx_unmap_vmas+0x10/0x10
[   69.706124][ T6232]  exit_mmap+0x248/0xb50
[   69.707890][ T6232]  ? uprobe_clear_state+0x20f/0x290
[   69.710122][ T6232]  ? __pfx_exit_mmap+0x10/0x10
[   69.712168][ T6232]  ? __mutex_unlock_slowpath+0x1a1/0x740
[   69.714549][ T6232]  ? __pfx_exit_aio+0x10/0x10
[   69.716503][ T6232]  ? kasan_quarantine_put+0xdd/0x220
[   69.718752][ T6232]  ? uprobe_clear_state+0x274/0x290
[   69.720960][ T6232]  __mmput+0x118/0x430
[   69.722588][ T6232]  copy_process+0x2910/0x3c00
[   69.724585][ T6232]  ? copy_process+0x97f/0x3c00
[   69.726591][ T6232]  ? __pfx_copy_process+0x10/0x10
[   69.728733][ T6232]  ? futex_private_hash_put+0x245/0x280
[   69.731089][ T6232]  kernel_clone+0x21e/0x840
[   69.733041][ T6232]  ? __pfx_futex_wake+0x10/0x10
[   69.735097][ T6232]  ? __pfx_kernel_clone+0x10/0x10
[   69.737261][ T6232]  ? do_futex+0x395/0x420
[   69.739135][ T6232]  __x64_sys_clone+0x18b/0x1e0
[   69.741213][ T6232]  ? __pfx___x64_sys_clone+0x10/0x10
[   69.743489][ T6232]  ? rcu_is_watching+0x15/0xb0
[   69.745536][ T6232]  ? do_syscall_64+0xbe/0x3b0
[   69.747593][ T6232]  do_syscall_64+0xfa/0x3b0
[   69.749583][ T6232]  ? lockdep_hardirqs_on+0x9c/0x150
[   69.751774][ T6232]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.754392][ T6232]  ? exc_page_fault+0x9f/0xf0
[   69.756432][ T6232]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.758947][ T6232] RIP: 0033:0x7f8bca18ec29
[   69.760871][ T6232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   69.768753][ T6232] RSP: 002b:00007f8bcb04cfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[   69.772153][ T6232] RAX: ffffffffffffffda RBX: 00007f8bca3d5fa0 RCX: 00007f8bca18ec29
[   69.774913][ T6232] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002001000
[   69.777843][ T6232] RBP: 00007f8bca211e41 R08: 0000000000000000 R09: 0000000000000000
[   69.780721][ T6232] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[   69.783229][ T6232] R13: 00007f8bca3d6038 R14: 00007f8bca3d5fa0 R15: 00007ffe15c98388
[   69.785979][ T6232]  </TASK>
[   69.787130][ T6232] Modules linked in:
[   69.789021][ T6232] ---[ end trace 0000000000000000 ]---
[   69.790834][ T6232] RIP: 0010:pgtable_trans_huge_withdraw+0x115/0x310
[   69.793288][ T6232] Code: c3 10 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 5d 38 13 00 48 8b 03 48 89 04 24 4c 8d 78 08 4c 89 fd 48 c1 ed 03 <42> 80 7c 2d 00 00 74 08 4c 89 ff e8 3b 38 13 00 49 8b 07 48 8d 48
[   69.799908][ T6232] RSP: 0018:ffffc900041ff300 EFLAGS: 00010202
[   69.802069][ T6232] RAX: 0000000000000000 RBX: ffffea0000be4950 RCX: 0000000000080000
[   69.804655][ T6232] RDX: ffffc9000f3a1000 RSI: 00000000000042d5 RDI: 00000000000042d6
[   69.807228][ T6232] RBP: 0000000000000001 R08: ffff88810e518de3 R09: 1ffff11021ca31bc
[   69.809953][ T6232] R10: dffffc0000000000 R11: ffffed1021ca31bd R12: ffff88802f925000
[   69.812752][ T6232] R13: dffffc0000000000 R14: ffff88802f925000 R15: 0000000000000008
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   69.815473][ T6232] FS:  00007f8bcb04d6c0(0000) GS:ffff8880b8612000(0000) knlGS:0000000000000000
[   69.818888][ T6232] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   69.821548][ T6232] CR2: 0000000000000000 CR3: 000000010e132000 CR4: 00000000000006f0
[   69.824331][ T6232] Kernel panic - not syncing: Fatal exception
[   69.827267][ T6232] Kernel Offset: disabled
[   69.829092][ T6232] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:44:41  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000033 RBX=0000000000000033 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000004ce0 RDI=0000000000004ce1 RBP=00000000000003f8 RSP=ffffc900041fea10
R8 =ffff8880213c0237 R9 =1ffff11004278046 R10=dffffc0000000000 R11=ffffffff854fbd20
R12=dffffc0000000000 R13=ffffffff99b038ed R14=ffffffff99df8460 R15=0000000000000000
RIP=ffffffff854fbd9c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8bcb04d6c0 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000010e132000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffffffffffffff XMM01=2323232323232323 2323232323232323
XMM02=0000000000000000 000000002330302f XMM03=ffffffffffffffff ffffffffffffffff
XMM04=ffffffffffffffff ffffffffffffffff XMM05=00007f8bca3a7478 00007f8bca3a74c0
XMM06=00007f8bca3a74b8 00007f8bca3a74b0 XMM07=00007f8bca3a74a8 00007f8bca3a74a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f8bca212fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ec541a108ad78300 RBX=ffff8881077ce022 RCX=0000000000000000 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffc9000060f8a0 RBP=0000000000000022 RSP=ffffc9000060f988
R8 =ffffc9000060f89f R9 =0000000000000000 R10=ffffc9000060f860 R11=fffff520000c1f14
R12=dffffc0000000000 R13=ffff888021335080 R14=ffff888021335150 R15=0000000000000060
RIP=ffffffff8b7d4c20 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd0f850e38 CR3=0000000107730000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
