last executing test programs: 3.352047377s ago: executing program 0 (id=1): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dc4a) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), &(0x7f00000006c0)=@v2={0x2000000, [{0x9, 0x4}, {0x0, 0x10000}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 3.351035429s ago: executing program 2 (id=3): r0 = io_uring_setup(0x4116, &(0x7f0000000140)={0x0, 0x3a16, 0x40, 0x1, 0x49}) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 3.253512349s ago: executing program 0 (id=5): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592e66e6229bc5c7ac135fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) r1 = dup(r0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x38, 0x1, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x7}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_CT={0x4}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) 3.251710985s ago: executing program 2 (id=6): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0080, 0x377) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)}}], 0x1, 0x4040845) socket$packet(0x11, 0x2, 0x300) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000280)=0x30) getpid() sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 3.243285339s ago: executing program 0 (id=7): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='?'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0xcbff9000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x44, 0x0, &(0x7f0000000b80)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x54, 0x0, &(0x7f0000000780)="192b931a8d70f473c8f5de9191c1ccabce7431e8fcb8f8d06c8ac90e78b6b3615355ba88971689a4bbb046cbfbbcbac5fba37c3d3dae2bf6fb6c590c08dc9ea281d86d98ebb4b2f64bc3e31aaf7f439afee170c6"}) 2.85887807s ago: executing program 2 (id=8): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x420, 0x3f4, 0x100, 0x70bd26, 0x25dfdbff, {0x1, 0x0, 0xd, [0xf, 0x1, 0x9, 0x8, 0x79f4, 0x8000, 0xff, 0x10001, 0xffff0001, 0x3, 0x7, 0x3, 0xc9ce, 0x3, 0xaa, 0xb48, 0x833, 0x64, 0x0, 0x6, 0x7, 0xfffffff8, 0xfffffffa, 0x80000000, 0x0, 0xb3, 0x4, 0xf6b, 0xd09d, 0x3, 0xa303, 0x9, 0x29, 0x401, 0x92, 0x5, 0x5, 0x3e, 0x3, 0x8, 0x8, 0x3, 0x1, 0x7, 0x4b, 0x3, 0x1, 0x9, 0x4, 0xaac, 0x4, 0x80, 0x400, 0x2, 0x2, 0x9, 0x2, 0xe73, 0x6, 0x1, 0x3, 0x7ff, 0x80, 0x3], [0x15d3ff09, 0x6, 0x2, 0x80000001, 0x8, 0x9, 0xfffffffd, 0x8fd6, 0x7, 0x0, 0x7, 0x6, 0x8, 0x6, 0xf, 0x1, 0x7066, 0x0, 0x5, 0x7, 0x0, 0x1, 0x4, 0x2, 0xd, 0x41, 0x1, 0x9, 0x4, 0x9, 0x8, 0x9, 0x5, 0x9, 0x1, 0x8, 0x2, 0x3, 0x80, 0x2, 0x7, 0x99d8, 0x8, 0x101, 0xff, 0x3, 0x4, 0x9, 0x5, 0x40, 0x200, 0x0, 0x3, 0x3, 0x0, 0x6, 0x81, 0x3, 0xfffffffe, 0x9, 0x4a5c, 0x0, 0x28000000, 0x1ff], [0x224, 0x1, 0xc, 0x5, 0x1, 0x7, 0x9, 0x7, 0x9f, 0x1, 0xb, 0xffffffce, 0x1, 0xde, 0x3, 0x2, 0x8000, 0x0, 0xe28, 0x690, 0x8, 0x5, 0x1, 0x3, 0xfb, 0x6, 0xfffffff8, 0xc, 0x6, 0x2, 0x7f, 0x2, 0x7fff, 0x800, 0x6, 0x3fe7, 0xff, 0x8, 0xb, 0x5a729da2, 0x8, 0xfffffe01, 0x0, 0x5a, 0x50000, 0x0, 0xa, 0x7f, 0x1, 0x2, 0x7ff, 0x10, 0x1, 0xaaab, 0x4, 0xfffffffb, 0x2, 0xfffffffd, 0x4, 0x6267, 0xfffffffd, 0x100000, 0xfffffffc, 0x200], [0xffff, 0x4, 0x6, 0x8, 0x9, 0x0, 0x20, 0x6, 0x7ff, 0x3, 0x2e4633c6, 0x4, 0xb, 0x10, 0x1, 0x8, 0x3, 0x8000, 0x0, 0xd018, 0x4, 0x5, 0x9, 0x2, 0x1, 0x3, 0x400, 0x9, 0x6, 0x2, 0x96, 0x9, 0xd655, 0x6, 0x3ff, 0xffff, 0x9, 0x0, 0x3, 0x7ff, 0x2, 0xffffff3e, 0x4, 0x1, 0x1, 0x4, 0x3, 0x2, 0x3, 0x3, 0x6ca53da2, 0x4, 0x56d, 0x0, 0x7fffffff, 0x0, 0xd8, 0x1, 0xfffffc01, 0x1ff, 0xffffffff, 0x401, 0xd416, 0x6]}}, 0x420}, 0x1, 0x0, 0x0, 0x4000}, 0x814) 2.375583883s ago: executing program 0 (id=10): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') read$FUSE(r2, &(0x7f0000012400)={0x2020}, 0x2020) 2.177961352s ago: executing program 1 (id=12): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x803}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0xb, 0x81, 0x46d, 0xfff9, 0x3, 0x0, 0x10000008, 'syz0\x00'}) shutdown(r0, 0x1) 2.177190774s ago: executing program 1 (id=13): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000080)=0xffffffff) 2.091094664s ago: executing program 1 (id=14): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "5a080039084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0a}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040895}, 0x0) 2.018895285s ago: executing program 1 (id=15): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) fcntl$setown(r0, 0x8, 0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000080)="44f9b1", 0x3, 0x1, 0x0, 0x0) 1.957439066s ago: executing program 1 (id=16): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1.956851317s ago: executing program 2 (id=17): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x7b02, &(0x7f0000000980)={0x0, 0x5885, 0xa, 0x0, 0x2eb}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r8, 0x84, 0x19, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000000010101000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800154000000000080008"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x4000, 0x0, 0x4, 0x0, 0x8, 0x200]}}) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000) 1.700225223s ago: executing program 1 (id=18): msgctl$MSG_STAT_ANY(0x0, 0xd, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x60042) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}}, 0x0) 1.060409888s ago: executing program 2 (id=23): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x5, 0x5, 0x20000660, 0x1], 0x0, 0x0, 0x0}, 0x78) 1.0596313s ago: executing program 3 (id=24): sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x66) 959.152698ms ago: executing program 2 (id=25): socket$inet(0x2b, 0x801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141301) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 881.865697ms ago: executing program 3 (id=26): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x1a8c, 0x800, 0xffffffff, 0xf0}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x201, 0x0) getegid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) 119.04631ms ago: executing program 3 (id=27): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/142, 0x8e}], 0x1, 0x1000000, 0x70f0) 118.882517ms ago: executing program 3 (id=28): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="2800000002070103000000000000000007000000140007800800014000020000080002"], 0x28}}, 0x0) 88.371364ms ago: executing program 3 (id=29): r0 = io_uring_setup(0x9ac, &(0x7f0000000480)={0x0, 0xd19b, 0x0, 0x0, 0x1fa}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000b40)={0x1, 0x1, 0x0, &(0x7f0000000a80)=[{0x0}], 0x0}, 0x20) 28.947088ms ago: executing program 3 (id=30): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r1, 0x2, 0x1, 0x20004005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 0s ago: executing program 0 (id=31): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) readv(r3, &(0x7f0000002140)=[{&(0x7f00000014c0)=""/30, 0x1e}], 0x1) shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x9) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002e00)=[{{&(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20004044) syz_usb_connect$printer(0x1, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=32): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000240)={0x0, 0xda0, &(0x7f0000000080)="142f91b1f9", 0x0, 0x5}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:50738' (ED25519) to the list of known hosts. [ 40.984427][ T5934] cgroup: Unknown subsys name 'net' [ 41.154961][ T5934] cgroup: Unknown subsys name 'cpuset' [ 41.158396][ T5934] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 41.886911][ T5934] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 43.635461][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 43.662715][ T5956] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 43.665615][ T5957] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 43.668144][ T5957] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 43.671348][ T5957] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 43.673791][ T5957] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 43.676474][ T5957] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 43.678801][ T5957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 43.678913][ T5956] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 43.679398][ T5958] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 43.679993][ T5958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 43.680360][ T5958] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 43.680704][ T5958] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 43.680917][ T5958] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 43.681631][ T5957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 43.681780][ T5957] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 43.682100][ T5957] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 43.682355][ T5957] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 43.682547][ T5957] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 43.682771][ T5957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 43.683814][ T5957] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 43.685612][ T5958] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 43.687648][ T5957] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 43.713457][ T5957] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 43.825643][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 43.919525][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.922009][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.925002][ T5949] bridge_slave_0: entered allmulticast mode [ 43.927249][ T5949] bridge_slave_0: entered promiscuous mode [ 43.930566][ T5953] chnl_net:caif_netlink_parms(): no params data found [ 43.949922][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.952738][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.954834][ T5949] bridge_slave_1: entered allmulticast mode [ 43.957030][ T5949] bridge_slave_1: entered promiscuous mode [ 43.967547][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 43.976089][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 43.990347][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.016996][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.069262][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.071343][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.074192][ T5953] bridge_slave_0: entered allmulticast mode [ 44.076347][ T5953] bridge_slave_0: entered promiscuous mode [ 44.100986][ T5949] team0: Port device team_slave_0 added [ 44.117708][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.119831][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.121929][ T5953] bridge_slave_1: entered allmulticast mode [ 44.125050][ T5953] bridge_slave_1: entered promiscuous mode [ 44.135058][ T5949] team0: Port device team_slave_1 added [ 44.136952][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.139111][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.141243][ T5945] bridge_slave_0: entered allmulticast mode [ 44.143704][ T5945] bridge_slave_0: entered promiscuous mode [ 44.153998][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.156030][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.158070][ T5952] bridge_slave_0: entered allmulticast mode [ 44.160203][ T5952] bridge_slave_0: entered promiscuous mode [ 44.162883][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.164880][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.166944][ T5952] bridge_slave_1: entered allmulticast mode [ 44.169101][ T5952] bridge_slave_1: entered promiscuous mode [ 44.187181][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.189275][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.191340][ T5945] bridge_slave_1: entered allmulticast mode [ 44.193929][ T5945] bridge_slave_1: entered promiscuous mode [ 44.212736][ T5953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.233808][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.235807][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.243088][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.254584][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.257931][ T5953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.261981][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.265850][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.267887][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.276151][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.280625][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.293215][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.320001][ T5953] team0: Port device team_slave_0 added [ 44.322787][ T5953] team0: Port device team_slave_1 added [ 44.342386][ T5945] team0: Port device team_slave_0 added [ 44.355979][ T5952] team0: Port device team_slave_0 added [ 44.366041][ T5945] team0: Port device team_slave_1 added [ 44.375680][ T5952] team0: Port device team_slave_1 added [ 44.391413][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.393634][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.400981][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.413178][ T5949] hsr_slave_0: entered promiscuous mode [ 44.415232][ T5949] hsr_slave_1: entered promiscuous mode [ 44.425032][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.427222][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.434611][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.446804][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.448797][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.456079][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.460156][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.462166][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.469539][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.472998][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.475035][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.482527][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.487628][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.489631][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.496973][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.577376][ T5952] hsr_slave_0: entered promiscuous mode [ 44.580468][ T5952] hsr_slave_1: entered promiscuous mode [ 44.584650][ T5952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.587819][ T5952] Cannot create hsr debugfs directory [ 44.593488][ T5953] hsr_slave_0: entered promiscuous mode [ 44.596417][ T5953] hsr_slave_1: entered promiscuous mode [ 44.599131][ T5953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.602122][ T5953] Cannot create hsr debugfs directory [ 44.607895][ T5945] hsr_slave_0: entered promiscuous mode [ 44.609970][ T5945] hsr_slave_1: entered promiscuous mode [ 44.611899][ T5945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.614161][ T5945] Cannot create hsr debugfs directory [ 44.772181][ T5949] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 44.777109][ T5949] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 44.780701][ T5949] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 44.784228][ T5949] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 44.800938][ T5953] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 44.805070][ T5953] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 44.808490][ T5953] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 44.812102][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.814255][ T5949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.816562][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.818585][ T5949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.821905][ T5953] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 44.836885][ T5945] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 44.844328][ T5945] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 44.849020][ T5945] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 44.852229][ T5945] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 44.857045][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.859115][ T5953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.861259][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.863346][ T5953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.867680][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.870450][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.874330][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.876832][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.908785][ T5952] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 44.913107][ T5952] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 44.916252][ T5952] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 44.920527][ T5952] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 44.945992][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.962201][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.978418][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.986594][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.989348][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.991585][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.996255][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.998334][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.003706][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.008091][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.010143][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.021501][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.023595][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.028323][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.037612][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.042822][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.044896][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.049678][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.051918][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.070906][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.078373][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.080437][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.088783][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.090947][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.149993][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.158114][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.172030][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.188962][ T5949] veth0_vlan: entered promiscuous mode [ 45.197610][ T5953] veth0_vlan: entered promiscuous mode [ 45.200553][ T5949] veth1_vlan: entered promiscuous mode [ 45.207306][ T5953] veth1_vlan: entered promiscuous mode [ 45.210894][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.221776][ T5945] veth0_vlan: entered promiscuous mode [ 45.229876][ T5945] veth1_vlan: entered promiscuous mode [ 45.240343][ T5953] veth0_macvtap: entered promiscuous mode [ 45.244190][ T5953] veth1_macvtap: entered promiscuous mode [ 45.248676][ T5949] veth0_macvtap: entered promiscuous mode [ 45.256382][ T5949] veth1_macvtap: entered promiscuous mode [ 45.261793][ T5952] veth0_vlan: entered promiscuous mode [ 45.267902][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.274254][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.277178][ T5952] veth1_vlan: entered promiscuous mode [ 45.281805][ T5945] veth0_macvtap: entered promiscuous mode [ 45.284406][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.287470][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.290754][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.293690][ T5953] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.296241][ T5953] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.298721][ T5953] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.301183][ T5953] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.306739][ T5945] veth1_macvtap: entered promiscuous mode [ 45.310280][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.313404][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.316635][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.325264][ T5949] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.327804][ T5949] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.330300][ T5949] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.333467][ T5949] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.360297][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.363374][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.366136][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.369080][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.372407][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.378323][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.381310][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.384182][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.387132][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.390351][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.394602][ T5952] veth0_macvtap: entered promiscuous mode [ 45.400972][ T5952] veth1_macvtap: entered promiscuous mode [ 45.404357][ T5945] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.406909][ T5945] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.409386][ T5945] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.411882][ T5945] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.422024][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.425182][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.432463][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.434835][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.440118][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.443829][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.446632][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.449583][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.452625][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.455612][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.459270][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.469630][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.473068][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.475871][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.478877][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.481651][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.484739][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.488071][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.490328][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.492740][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.500025][ T5952] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.503021][ T5952] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.505530][ T5952] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.508016][ T5952] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.511210][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.515226][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.518558][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.522860][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.535014][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.536944][ T5949] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 45.537698][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.566027][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.568309][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.581497][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.584556][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.610344][ T6013] [U]  [ 45.743053][ T5957] Bluetooth: hci1: command tx timeout [ 45.743079][ T5312] Bluetooth: hci0: command tx timeout [ 45.745092][ T5957] Bluetooth: hci3: command tx timeout [ 45.747039][ T5312] Bluetooth: hci2: command tx timeout [ 46.730791][ T6042] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 47.183419][ T6053] syz.1.16 (6053): drop_caches: 2 [ 47.260534][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17'. [ 47.329785][ T6061] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.770056][ T6068] process 'syz.3.21' launched './file1' with NULL argv: empty string added [ 47.822448][ T5951] Bluetooth: hci2: command tx timeout [ 47.822496][ T5957] Bluetooth: hci0: command tx timeout [ 47.824049][ T5951] Bluetooth: hci1: command tx timeout [ 47.827292][ T5312] Bluetooth: hci3: command tx timeout [ 47.992417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.695237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 48.802580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.819352][ T6086] Zero length message leads to an empty skb [ 48.822414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.865020][ T6061] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.941498][ T6061] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.002345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 49.004827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 49.024129][ T6095] [ 49.024901][ T6095] ============================= [ 49.026339][ T6095] WARNING: suspicious RCU usage [ 49.027819][ T6095] 6.13.0-syzkaller-00918-g95ec54a420b8 #0 Not tainted [ 49.031673][ T6095] ----------------------------- [ 49.033270][ T6095] ./include/linux/kvm_host.h:1036 suspicious rcu_dereference_check() usage! [ 49.035814][ T6095] [ 49.035814][ T6095] other info that might help us debug this: [ 49.035814][ T6095] [ 49.038798][ T6095] [ 49.038798][ T6095] rcu_scheduler_active = 2, debug_locks = 1 [ 49.041135][ T6095] no locks held by syz.3.32/6095. [ 49.042936][ T6095] [ 49.042936][ T6095] stack backtrace: [ 49.044666][ T6095] CPU: 3 UID: 0 PID: 6095 Comm: syz.3.32 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 49.047624][ T6095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.050730][ T6095] Call Trace: [ 49.051730][ T6095] [ 49.052624][ T6095] dump_stack_lvl+0x16c/0x1f0 [ 49.054026][ T6095] lockdep_rcu_suspicious+0x210/0x3c0 [ 49.055600][ T6095] kvm_vcpu_gfn_to_memslot+0x48c/0x590 [ 49.057209][ T6095] kvm_vcpu_write_guest+0x68/0x130 [ 49.058721][ T6095] kvm_xen_write_hypercall_page+0x2fa/0x530 [ 49.060458][ T6095] ? __pfx_kvm_xen_write_hypercall_page+0x10/0x10 [ 49.062340][ T6095] kvm_set_msr_common+0x142a/0x35b0 [ 49.063884][ T6095] ? __pfx_kvm_set_msr_common+0x10/0x10 [ 49.065511][ T6095] ? __pfx_lock_release+0x10/0x10 [ 49.067013][ T6095] ? do_raw_spin_lock+0x12d/0x2c0 [ 49.068494][ T6095] vmx_set_msr+0xbdd/0x3d30 [ 49.069833][ T6095] ? __pfx_vmx_set_msr+0x10/0x10 [ 49.071296][ T6095] ? _raw_spin_unlock+0x28/0x50 [ 49.072764][ T6095] ? kvm_clear_async_pf_completion_queue+0x2e1/0x480 [ 49.074719][ T6095] kvm_vcpu_reset+0x933/0x1960 [ 49.076129][ T6095] ? __pfx_kvm_vcpu_reset+0x10/0x10 [ 49.077669][ T6095] ? kvm_set_tsc_khz+0x28b/0x520 [ 49.079134][ T6095] kvm_arch_vcpu_create+0x724/0xae0 [ 49.080681][ T6095] kvm_vm_ioctl+0xf93/0x3df0 [ 49.082054][ T6095] ? stack_trace_save+0x95/0xd0 [ 49.083499][ T6095] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 49.084976][ T6095] ? __pfx_mark_lock+0x10/0x10 [ 49.086382][ T6095] ? stack_depot_save_flags+0x28/0x9e0 [ 49.087999][ T6095] ? kasan_save_stack+0x42/0x60 [ 49.089430][ T6095] ? kasan_save_stack+0x33/0x60 [ 49.090880][ T6095] ? kasan_save_track+0x14/0x30 [ 49.092316][ T6095] ? kasan_save_free_info+0x3b/0x60 [ 49.093855][ T6095] ? __kasan_slab_free+0x51/0x70 [ 49.095309][ T6095] ? kfree+0x14f/0x4b0 [ 49.096555][ T6095] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 49.098220][ T6095] ? security_file_ioctl_compat+0x9b/0x240 [ 49.099930][ T6095] ? __do_compat_sys_ioctl+0x4e/0x2c0 [ 49.101514][ T6095] ? __do_fast_syscall_32+0x73/0x120 [ 49.103081][ T6095] ? do_fast_syscall_32+0x32/0x80 [ 49.104562][ T6095] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 49.106468][ T6095] ? kvm_arch_vm_compat_ioctl+0x2d1/0x480 [ 49.108147][ T6095] ? hlock_class+0x4e/0x130 [ 49.109495][ T6095] ? mark_lock+0xb5/0xc60 [ 49.110776][ T6095] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 49.112551][ T6095] ? __pfx_mark_lock+0x10/0x10 [ 49.113989][ T6095] ? find_held_lock+0x2d/0x110 [ 49.115405][ T6095] ? tomoyo_path_number_perm+0x298/0x5b0 [ 49.117065][ T6095] ? __pfx_lock_release+0x10/0x10 [ 49.118549][ T6095] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 49.120180][ T6095] ? tomoyo_path_number_perm+0x190/0x5b0 [ 49.121839][ T6095] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 49.123589][ T6095] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 49.125314][ T6095] ? do_vfs_ioctl+0x513/0x1950 [ 49.126755][ T6095] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 49.128234][ T6095] kvm_vm_compat_ioctl+0x399/0x440 [ 49.129739][ T6095] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 49.131383][ T6095] ? __pfx_lock_release+0x10/0x10 [ 49.132857][ T6095] ? trace_lock_acquire+0x14e/0x1f0 [ 49.134392][ T6095] ? __fget_files+0x206/0x3a0 [ 49.135778][ T6095] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 49.137429][ T6095] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 49.138983][ T6095] __do_fast_syscall_32+0x73/0x120 [ 49.140499][ T6095] do_fast_syscall_32+0x32/0x80 [ 49.141939][ T6095] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 49.143781][ T6095] RIP: 0023:0xf7fd0579 [ 49.144987][ T6095] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 49.150574][ T6095] RSP: 002b:00000000f512655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 49.152984][ T6095] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000ae41 [ 49.155285][ T6095] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 49.157608][ T6095] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 49.159918][ T6095] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 49.162271][ T6095] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 49.164573][ T6095] [ 49.191551][ T6061] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.255281][ T6061] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.261106][ T6061] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.270906][ T6061] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.276810][ T6061] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.902894][ T5951] Bluetooth: hci1: command tx timeout [ 49.903123][ T5957] Bluetooth: hci2: command tx timeout [ 49.903344][ T5312] Bluetooth: hci3: command tx timeout [ 49.904756][ T5947] Bluetooth: hci0: command tx timeout [ 51.983068][ T5957] Bluetooth: hci3: command tx timeout [ 51.983831][ T5947] Bluetooth: hci2: command tx timeout [ 51.992389][ T5947] Bluetooth: hci0: command tx timeout [ 51.992427][ T5957] Bluetooth: hci1: command tx timeout VM DIAGNOSIS: 00:33:29 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffff88807ffd6540 RCX=1ffffffff20bd082 RDX=0000000000000001 RSI=ffffffff8bd24c60 RDI=ffffffff8bd24ca0 RBP=ffff88802ac94f80 RSP=ffffc90003d7f908 R8 =0000000000000000 R9 =fffffbfff2dbc998 R10=ffffffff96de4cc7 R11=0000000000000001 R12=0000000000000006 R13=0000000000000690 R14=ffff88802b439a68 R15=ffff88802b439a78 RIP=ffffffff8b1e4ce2 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000580c099c CR3=000000004c04c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004c00000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000096763 RBX=0000000000000001 RCX=ffffffff8b1e4559 RDX=0000000000000000 RSI=ffffffff8b6cd3a0 RDI=ffffffff8bd24ce0 RBP=ffffed1003a5d910 RSP=ffffc9000047fe08 R8 =0000000000000001 R9 =ffffed10056a6fed R10=ffff88802b537f6b R11=0000000000000000 R12=0000000000000001 R13=ffff88801d2ec880 R14=ffffffff905e5110 R15=0000000000000000 RIP=ffffffff8b1e593f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f504ecc0 CR3=000000002944c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=196bf702542011f7 RCX=ffffffff81762e82 RDX=1ffff11004a5d165 RSI=0000000000000008 RDI=ffff8880252e8b29 RBP=ffff8880252e8b08 RSP=ffffc90006d17960 R8 =0000000000000000 R9 =fffffbfff2dbc998 R10=ffffffff96de4cc7 R11=0000000000000002 R12=ffffed1004a5d15b R13=ffff8880252e8000 R14=0000000000000005 R15=ffff8880252e8b30 RIP=ffffffff81762a55 RFL=00000806 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002f81fffc CR3=000000004ad66000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000006e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8517b7c5 RDI=ffffffff9aa95500 RBP=ffffffff9aa954c0 RSP=ffffc900049c6fa0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000004 R12=0000000000000000 R13=000000000000006e R14=ffffffff8517b760 R15=0000000000000000 RIP=ffffffff8517b7ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020001000 CR3=0000000021c84000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006800000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000