last executing test programs: 5.223749683s ago: executing program 3 (id=83): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SG_BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x200, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a310000000008004100"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r6, 0x8923, &(0x7f0000000040)={'lo\x00', @ifru_hwaddr=@multicast}) chdir(&(0x7f00000000c0)='./bus\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r7, &(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000200)='./bus/file0\x00', 0x0) 4.437869798s ago: executing program 2 (id=85): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="05000000010000000400000005000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB="000000000003000000366ab162edf5116a00f34b0ffb74561b144d4428cc69b7e64f67a759d408cdffa715629627b5794d262895a0a08ba60764d05fda98d9cf5c24bb9c85b8744d68922efafdca0136a75a78854a42a5"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014}, 0x8085) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x4, 0x8, 0xfe, 0x9, 0xef2127cba3a209f7, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x10, 0x4, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1489c, &(0x7f0000000280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}]}}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mounts\x00') preadv(r5, &(0x7f0000000c80)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4b6, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r6, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, '\x00', @bt={0x1, 0x5, 0x3, 0x7, 0x4, 0x7, 0xd, 0x5}}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r7, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(r7, 0x541c, &(0x7f00000000c0)) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r8, &(0x7f0000000080)=[{&(0x7f00000005c0)=""/237, 0xed}], 0x1, 0x9, 0x2) 4.34842205s ago: executing program 0 (id=86): syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) msgsnd(0x0, 0x0, 0xb, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r3, 0x0, 0x0, 0x840, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) socket$key(0xf, 0x3, 0x2) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000100)={'geneve1\x00', {0x2, 0x4e24, @rand_addr=0x64010102}}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x12}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) syz_emit_ethernet(0x3a, &(0x7f00000007c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@lsrr={0x83, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000080)={0xf0f041}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 4.169880924s ago: executing program 3 (id=87): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0500000001000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB="000000000003000000366ab162edf5116a00f34b0ffb74561b144d4428cc69b7e64f67a759d408cdffa715629627b5794d262895a0a08ba60764d05fda98d9cf5c24bb9c85b8744d68922efafdca0136a75a78854a42a5"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014}, 0x8085) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x4, 0x8, 0xfe, 0x9, 0xef2127cba3a209f7, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x10, 0x4, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1489c, &(0x7f0000000280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}]}}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mounts\x00') preadv(r4, &(0x7f0000000c80)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4b6, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, '\x00', @bt={0x1, 0x5, 0x3, 0x7, 0x4, 0x7, 0xd, 0x5}}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(r6, 0x541c, &(0x7f00000000c0)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r7, &(0x7f0000000080)=[{&(0x7f00000005c0)=""/237, 0xed}], 0x1, 0x9, 0x2) 3.907934617s ago: executing program 0 (id=88): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0500000001000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB="000000000003000000366ab162edf5116a00f34b0ffb74561b144d4428cc69b7e64f67a759d408cdffa715629627b5794d262895a0a08ba60764d05fda98d9cf5c24bb9c85b8744d68922efafdca0136a75a78854a42a5"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014}, 0x8085) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x4, 0x8, 0xfe, 0x9, 0xef2127cba3a209f7, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x10, 0x4, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1489c, &(0x7f0000000280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}]}}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mounts\x00') preadv(r5, &(0x7f0000000c80)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4b6, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r6, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, '\x00', @bt={0x1, 0x5, 0x3, 0x7, 0x4, 0x7, 0xd, 0x5}}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r7, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(r7, 0x541c, &(0x7f00000000c0)) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r8, &(0x7f0000000080)=[{&(0x7f00000005c0)=""/237, 0xed}], 0x1, 0x9, 0x2) 3.258820011s ago: executing program 2 (id=90): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0xfffffff8, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000300)=@gcm_256={{0x303}, "97e46e2921705cb9", "7eb560b5f7b2d2ab1b423d28b6417d7decab8a498df2072dce8cadadf5008f08", "270d3203", "035f8b690ff31ffd"}, 0x38) recvmsg(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000880)}, 0x100) 3.036139769s ago: executing program 3 (id=91): syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) msgsnd(0x0, 0x0, 0xb, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r3, 0x0, 0x0, 0x840, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x7, 0x0, 0x9, 0x2, 0x0, 0x70bd25}, 0x10}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000100)={'geneve1\x00', {0x2, 0x4e24, @rand_addr=0x64010102}}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x12}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) syz_emit_ethernet(0x3a, &(0x7f00000007c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@lsrr={0x83, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000080)={0xf0f041}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 2.955043091s ago: executing program 1 (id=92): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SG_BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x200, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a310000000008004100"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r6, 0x8923, &(0x7f0000000040)={'lo\x00', @ifru_hwaddr=@multicast}) chdir(&(0x7f00000000c0)='./bus\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r7, &(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000200)='./bus/file0\x00', 0x0) 2.693369595s ago: executing program 0 (id=93): syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) msgsnd(0x0, 0x0, 0xb, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r3, 0x0, 0x0, 0x840, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x7, 0x0, 0x9, 0x2, 0x0, 0x70bd25}, 0x10}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000100)={'geneve1\x00', {0x2, 0x4e24, @rand_addr=0x64010102}}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x12}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) syz_emit_ethernet(0x3a, &(0x7f00000007c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@lsrr={0x83, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000080)={0xf0f041}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 2.654407961s ago: executing program 2 (id=94): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000300)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @ib={0x1b, 0x4, 0x4, {"550da0078be76a2f12ca0e04049934be"}, 0x6d23, 0x2, 0x3}, @in6={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000000}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, r2, 0x1}}, 0x18) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r4 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000240)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000200000000000000000000000000000300000a05000100070000000900020073797a310000000009ebd231629ce91b0dab3aa0a8e9aaff77e0dc4297620a3d99872d2065d06eb33c1355e3b33304d0a173af75a5831800b675fd257280549d939cc8a24b64fffbe53898b6506e66298f4696513c3a7983948a7e7825c31334f7f19619ab1393c35963d7f97d6ff93efa8e86fe81f5bbf050f201da687bd3d2faa788baeea3abde66e48d22c6588a"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) shmget$private(0x0, 0x0, 0x0, &(0x7f0000b39000/0x3000)=nil) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1.967693823s ago: executing program 3 (id=95): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x200, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="38008c73d9f4f85a6dc47000fcdbdf250900020073797a32000000000800410073697700140033006c6f0000000000000000000000000000a6bfb239bc03f90e488e94ecc7d89e3d00cfaa2a29e01737984b560cf1292f770275cfac0668beed95b431da7181476f41329d177358e7c09a360e4a77b7c161d6970bed2f36fbb15457873e76019bbc5dd4d7ab284b49338c4d698d2036bd5d5af73c4b4f4eaf2835b1fab16da6d6fc1666c658ef92b5f3f0a4f6645f6271d41b356c6a0f5ff1058db6638447ab2d25d7449f96e4bfb5780bcc093176e148c2d52bb0"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r6, 0x8923, &(0x7f0000000040)={'lo\x00', @ifru_hwaddr=@multicast}) chdir(&(0x7f00000000c0)='./bus\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r7, &(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000200)='./bus/file0\x00', 0x0) 1.883247868s ago: executing program 0 (id=97): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x78, 0x0, 0x0, {0x6, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) write$FUSE_POLL(r1, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00'}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x6, 0x3}, 0x20) connect$qrtr(r3, &(0x7f0000000140)={0x2a, 0x2}, 0xc) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 1.588316932s ago: executing program 2 (id=98): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0500000001000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB="000000000003000000366ab162edf5116a00f34b0ffb74561b144d4428cc69b7e64f67a759d408cdffa715629627b5794d262895a0a08ba60764d05fda98d9cf5c24bb9c85b8744d68922efafdca0136a75a78854a42a5"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014}, 0x8085) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x4, 0x8, 0xfe, 0x9, 0xef2127cba3a209f7, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x10, 0x4, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1489c, &(0x7f0000000280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}]}}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mounts\x00') preadv(r4, &(0x7f0000000c80)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4b6, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, '\x00', @bt={0x1, 0x5, 0x3, 0x7, 0x4, 0x7, 0xd, 0x5}}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(r6, 0x541c, &(0x7f00000000c0)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r7, &(0x7f0000000080)=[{&(0x7f00000005c0)=""/237, 0xed}], 0x1, 0x9, 0x2) 1.515332539s ago: executing program 3 (id=99): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SG_BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x200, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="38008c73d9f4f85a6dc47000fcdbdf250900020073797a32000000000800410073697700140033006c6f0000000000000000000000000000a6bfb239bc03f90e488e94ecc7d89e3d00cfaa2a29e01737984b560cf1292f770275cfac0668beed95b431da7181476f41329d177358e7c09a360e4a77b7c161d6970bed2f36fbb15457873e76019bbc5dd4d7ab284b49338c4d698d2036bd5d5af73c4b4f4eaf2835b1fab16da6d6fc1666c658ef92b5f3f0a4f6645f6271d41b356c6a0f5ff1058db6638447ab2d25d7449f96e4bfb5780bcc093176e148c2d52bb0"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r6, 0x8923, &(0x7f0000000040)={'lo\x00', @ifru_hwaddr=@multicast}) chdir(&(0x7f00000000c0)='./bus\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r7, &(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000200)='./bus/file0\x00', 0x0) 1.359329769s ago: executing program 2 (id=100): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SG_BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x200, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a310000000008004100"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r6, 0x8923, &(0x7f0000000040)={'lo\x00', @ifru_hwaddr=@multicast}) chdir(&(0x7f00000000c0)='./bus\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r7, &(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000200)='./bus/file0\x00', 0x0) 859.922962ms ago: executing program 0 (id=101): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0xf5) socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) socket$netlink(0x10, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) iopl(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r3, 0x4068aea3, &(0x7f0000000200)={0x80, 0x0, 0x800}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = dup(r1) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="58a3745730d2fed6cde1e2e202684ca6970300999578263f3b7b459505a617d9ca9a19689525a472bff2b3190b", &(0x7f0000000080), 0x1003, r5}, 0x38) ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={0x0}) 848.037138ms ago: executing program 1 (id=102): syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) msgsnd(0x0, 0x0, 0xb, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r2, 0x0, 0x0, 0x840, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x7, 0x0, 0x9, 0x2, 0x0, 0x70bd25}, 0x10}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000100)={'geneve1\x00', {0x2, 0x4e24, @rand_addr=0x64010102}}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x12}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) syz_emit_ethernet(0x3a, &(0x7f00000007c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@lsrr={0x83, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000080)={0xf0f041}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 572.608832ms ago: executing program 3 (id=103): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x200, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="38008c73d9f4f85a6dc47000fcdbdf250900020073797a32000000000800410073697700140033006c6f0000000000000000000000000000a6bfb239bc03f90e488e94ecc7d89e3d00cfaa2a29e01737984b560cf1292f770275cfac0668beed95b431da7181476f41329d177358e7c09a360e4a77b7c161d6970bed2f36fbb15457873e76019bbc5dd4d7ab284b49338c4d698d2036bd5d5af73c4b4f4eaf2835b1fab16da6d6fc1666c658ef92b5f3f0a4f6645f6271d41b356c6a0f5ff1058db6638447ab2d25d7449f96e4bfb5780bcc093176e148c2d52bb0"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r6, 0x8923, &(0x7f0000000040)={'lo\x00', @ifru_hwaddr=@multicast}) chdir(&(0x7f00000000c0)='./bus\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r7, &(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000200)='./bus/file0\x00', 0x0) 441.091591ms ago: executing program 2 (id=104): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0500000001000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB="000000000003000000366ab162edf5116a00f34b0ffb74561b144d4428cc69b7e64f67a759d408cdffa715629627b5794d262895a0a08ba60764d05fda98d9cf5c24bb9c85b8744d68922efafdca0136a75a78854a42a5"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014}, 0x8085) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x4, 0x8, 0xfe, 0x9, 0xef2127cba3a209f7, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x10, 0x4, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1489c, &(0x7f0000000280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}]}}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mounts\x00') preadv(r5, &(0x7f0000000c80)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4b6, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r6, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, '\x00', @bt={0x1, 0x5, 0x3, 0x7, 0x4, 0x7, 0xd, 0x5}}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r7, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(r7, 0x541c, &(0x7f00000000c0)) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r8, &(0x7f0000000080)=[{&(0x7f00000005c0)=""/237, 0xed}], 0x1, 0x9, 0x2) 120.928149ms ago: executing program 1 (id=105): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f0000000580)="b3"}) 97.236066ms ago: executing program 0 (id=106): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0500000001000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB="000000000003000000366ab162edf5116a00f34b0ffb74561b144d4428cc69b7e64f67a759d408cdffa715629627b5794d262895a0a08ba60764d05fda98d9cf5c24bb9c85b8744d68922efafdca0136a75a78854a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014}, 0x8085) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x4, 0x8, 0xfe, 0x9, 0xef2127cba3a209f7, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x10, 0x4, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1489c, &(0x7f0000000280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}]}}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mounts\x00') preadv(r5, &(0x7f0000000c80)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4b6, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r6, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, '\x00', @bt={0x1, 0x5, 0x3, 0x7, 0x4, 0x7, 0xd, 0x5}}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r7, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(r7, 0x541c, &(0x7f00000000c0)) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r8, &(0x7f0000000080)=[{&(0x7f00000005c0)=""/237, 0xed}], 0x1, 0x9, 0x2) 66.175099ms ago: executing program 1 (id=107): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r3, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 0s ago: executing program 1 (id=108): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0500000001000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB="000000000003000000366ab162edf5116a00f34b0ffb74561b144d4428cc69b7e64f67a759d408cdffa715629627b5794d262895a0a08ba60764d05fda98d9cf5c24bb9c85b8744d68922efafdca0136a75a78854a42a5"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014}, 0x8085) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x4, 0x8, 0xfe, 0x9, 0xef2127cba3a209f7, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x10, 0x4, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1489c, &(0x7f0000000280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}]}}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mounts\x00') preadv(r5, &(0x7f0000000c80)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4b6, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r6, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, '\x00', @bt={0x1, 0x5, 0x3, 0x7, 0x4, 0x7, 0xd, 0x5}}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r7, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(r7, 0x541c, &(0x7f00000000c0)) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r8, &(0x7f0000000080)=[{&(0x7f00000005c0)=""/237, 0xed}], 0x1, 0x9, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:15807' (ED25519) to the list of known hosts. [ 41.727333][ T5926] cgroup: Unknown subsys name 'net' [ 41.948746][ T5926] cgroup: Unknown subsys name 'cpuset' [ 41.951970][ T5926] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.785315][ T5926] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.655159][ T5292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.657222][ T5941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.663200][ T5292] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.664580][ T5949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.665338][ T5292] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.667812][ T5949] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.670237][ T5292] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.671259][ T5949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.673314][ T5292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.674602][ T5949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.676635][ T5292] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.678903][ T5949] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.681676][ T5292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.682513][ T5949] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.684151][ T5292] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.686450][ T5949] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 44.687995][ T5292] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 44.689567][ T5949] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.691747][ T5292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.693241][ T5951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.699373][ T64] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 44.705741][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.707024][ T5948] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 44.710228][ T5938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.896054][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 44.901159][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 45.020022][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 45.023024][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 45.042463][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.044902][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.047016][ T5937] bridge_slave_0: entered allmulticast mode [ 45.049017][ T5937] bridge_slave_0: entered promiscuous mode [ 45.090649][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.092557][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.094612][ T5937] bridge_slave_1: entered allmulticast mode [ 45.096862][ T5937] bridge_slave_1: entered promiscuous mode [ 45.153785][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.157366][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.159934][ T5946] bridge_slave_0: entered allmulticast mode [ 45.162771][ T5946] bridge_slave_0: entered promiscuous mode [ 45.194043][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.201204][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.220424][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.223015][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.225584][ T5946] bridge_slave_1: entered allmulticast mode [ 45.229062][ T5946] bridge_slave_1: entered promiscuous mode [ 45.295061][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.299233][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.301018][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.302757][ T5943] bridge_slave_0: entered allmulticast mode [ 45.304681][ T5943] bridge_slave_0: entered promiscuous mode [ 45.308031][ T5937] team0: Port device team_slave_0 added [ 45.309913][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.311654][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.313502][ T5943] bridge_slave_1: entered allmulticast mode [ 45.315694][ T5943] bridge_slave_1: entered promiscuous mode [ 45.317784][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.319610][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.321357][ T5940] bridge_slave_0: entered allmulticast mode [ 45.323236][ T5940] bridge_slave_0: entered promiscuous mode [ 45.326782][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.330765][ T5937] team0: Port device team_slave_1 added [ 45.349789][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.351581][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.353402][ T5940] bridge_slave_1: entered allmulticast mode [ 45.355361][ T5940] bridge_slave_1: entered promiscuous mode [ 45.390393][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.410269][ T5946] team0: Port device team_slave_0 added [ 45.412247][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.413998][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.420432][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.425169][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.429208][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.432690][ T5946] team0: Port device team_slave_1 added [ 45.434995][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.438494][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.444729][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.459284][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.503768][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.505607][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.512181][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.520146][ T5943] team0: Port device team_slave_0 added [ 45.529160][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.531084][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.538306][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.551257][ T5943] team0: Port device team_slave_1 added [ 45.556195][ T5940] team0: Port device team_slave_0 added [ 45.585851][ T5940] team0: Port device team_slave_1 added [ 45.602521][ T5937] hsr_slave_0: entered promiscuous mode [ 45.605112][ T5937] hsr_slave_1: entered promiscuous mode [ 45.639829][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.641654][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.648310][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.653831][ T5946] hsr_slave_0: entered promiscuous mode [ 45.656717][ T5946] hsr_slave_1: entered promiscuous mode [ 45.658704][ T5946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.660846][ T5946] Cannot create hsr debugfs directory [ 45.663065][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.665525][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.674721][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.679508][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.681358][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.687984][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.700895][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.703191][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.712212][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.790404][ T5943] hsr_slave_0: entered promiscuous mode [ 45.792175][ T5943] hsr_slave_1: entered promiscuous mode [ 45.793888][ T5943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.796478][ T5943] Cannot create hsr debugfs directory [ 45.836974][ T5940] hsr_slave_0: entered promiscuous mode [ 45.839008][ T5940] hsr_slave_1: entered promiscuous mode [ 45.841454][ T5940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.843824][ T5940] Cannot create hsr debugfs directory [ 46.033321][ T5946] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.038474][ T5946] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.048734][ T5946] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.056890][ T5946] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.072224][ T5940] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.076772][ T5940] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.081367][ T5940] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.084757][ T5940] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.122278][ T5937] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.130433][ T5937] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.137364][ T5937] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.141271][ T5937] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.156319][ T5943] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.162476][ T5943] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.165910][ T5943] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.173887][ T5943] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.202966][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.218046][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.223263][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.238135][ T1226] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.240151][ T1226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.250354][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.253506][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.255276][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.264188][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.275117][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.279214][ T1226] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.281697][ T1226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.284979][ T1226] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.286839][ T1226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.305435][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.308044][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.320239][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.322549][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.328862][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.360344][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.368624][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.371142][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.383313][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.385849][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.405055][ T5943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.412125][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.428506][ T5940] veth0_vlan: entered promiscuous mode [ 46.435619][ T5940] veth1_vlan: entered promiscuous mode [ 46.444035][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.450063][ T5940] veth0_macvtap: entered promiscuous mode [ 46.457846][ T5940] veth1_macvtap: entered promiscuous mode [ 46.470906][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.475773][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.482851][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.488144][ T5946] veth0_vlan: entered promiscuous mode [ 46.492996][ T5940] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.496585][ T5940] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.498820][ T5940] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.501092][ T5940] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.514377][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.521476][ T5946] veth1_vlan: entered promiscuous mode [ 46.537536][ T5937] veth0_vlan: entered promiscuous mode [ 46.551640][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.552345][ T5937] veth1_vlan: entered promiscuous mode [ 46.554503][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.563054][ T5946] veth0_macvtap: entered promiscuous mode [ 46.568661][ T5946] veth1_macvtap: entered promiscuous mode [ 46.579717][ T5937] veth0_macvtap: entered promiscuous mode [ 46.586799][ T5943] veth0_vlan: entered promiscuous mode [ 46.589493][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.589895][ T5937] veth1_macvtap: entered promiscuous mode [ 46.591417][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.598044][ T5943] veth1_vlan: entered promiscuous mode [ 46.600645][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.603411][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.606774][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.610065][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.612657][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.614972][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.618404][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.622658][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.627850][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.630152][ T5940] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 46.630378][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.637284][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.639968][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.642696][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.645170][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.649511][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.652351][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.658118][ T5946] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.661178][ T5946] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.664160][ T5946] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.667872][ T5946] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.672005][ T5937] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.674273][ T5937] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.677163][ T5937] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.679346][ T5937] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.692518][ T5943] veth0_macvtap: entered promiscuous mode [ 46.704255][ T5943] veth1_macvtap: entered promiscuous mode [ 46.717837][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.719894][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.727397][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.729528][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.731549][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.735792][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.739022][ T5948] Bluetooth: hci2: command tx timeout [ 46.739795][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.743384][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.746341][ T5944] Bluetooth: hci0: command tx timeout [ 46.746551][ T5944] Bluetooth: hci3: command tx timeout [ 46.748895][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.749406][ T5948] Bluetooth: hci1: command tx timeout [ 46.751859][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.751868][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.751875][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.752390][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.769396][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.772116][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.774594][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.777850][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.780841][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.783528][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.787199][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.792309][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.794434][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.798617][ T5943] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.800939][ T5943] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.803381][ T5943] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.805667][ T5943] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.833535][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.837322][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.914322][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.916417][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.926268][ T6004] »»»»»»: renamed from lo (while UP) [ 46.985650][ T6009] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1'. [ 46.989012][ T6009] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 46.991852][ T6009] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1'. [ 47.043376][ T6010] fuse: Bad value for 'fd' [ 47.123082][ T6011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 47.127511][ T6011] »»»»»»: renamed from lo (while UP) [ 47.147495][ T6013] fuse: Bad value for 'fd' [ 47.628421][ T6020] binder: 6019:6020 ioctl 4018620d 0 returned -22 [ 48.642325][ T6037] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10'. [ 48.646663][ T6037] »»»»»»: renamed from lo (while UP) [ 48.816045][ T64] Bluetooth: hci1: command tx timeout [ 48.818038][ T5948] Bluetooth: hci3: command tx timeout [ 48.819887][ T5944] Bluetooth: hci0: command tx timeout [ 48.821510][ T64] Bluetooth: hci2: command tx timeout [ 48.941085][ T6042] netlink: 'syz.2.12': attribute type 1 has an invalid length. [ 48.943064][ T6042] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12'. [ 49.044373][ T6043] vivid-000: disconnect [ 49.079987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 49.083196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 49.394480][ T6048] »»»»»»: renamed from lo (while UP) [ 49.533022][ T6035] vivid-000: reconnect [ 49.610080][ T6051] Zero length message leads to an empty skb [ 50.148436][ T6072] fuse: Bad value for 'fd' [ 50.533498][ T6078] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19'. [ 50.736175][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.744872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 50.747334][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.906041][ T5938] Bluetooth: hci2: command tx timeout [ 50.906124][ T64] Bluetooth: hci0: command tx timeout [ 50.907364][ T5938] Bluetooth: hci3: command tx timeout [ 50.907382][ T5938] Bluetooth: hci1: command tx timeout [ 50.949733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 50.969062][ T6091] overlayfs: missing 'lowerdir' [ 51.141739][ T6095] overlayfs: failed to resolve './file1': -2 [ 51.483714][ T6102] netlink: 'syz.1.23': attribute type 1 has an invalid length. [ 51.486264][ T6102] netlink: 224 bytes leftover after parsing attributes in process `syz.1.23'. [ 51.546165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 51.592908][ T6107] vivid-003: disconnect [ 51.716150][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.728874][ T6111] netlink: 256 bytes leftover after parsing attributes in process `syz.0.24'. [ 51.736270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.834913][ T6127] fuse: Bad value for 'fd' [ 51.872647][ T6111] binder: 6105:6111 ioctl c0306201 20000400 returned -14 [ 51.939167][ T6123] fuse: Bad value for 'fd' [ 51.973647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 52.409917][ T6102] vivid-003: reconnect [ 52.976012][ T5938] Bluetooth: hci1: command tx timeout [ 52.976147][ T64] Bluetooth: hci3: command tx timeout [ 52.977457][ T5938] Bluetooth: hci2: command tx timeout [ 52.979428][ T5944] Bluetooth: hci0: command tx timeout [ 53.450402][ T6198] fuse: Bad value for 'fd' [ 53.916375][ T5981] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 54.068401][ T5981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.072154][ T5981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.074724][ T5981] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 54.078218][ T5981] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 54.080671][ T5981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.084617][ T5981] usb 6-1: config 0 descriptor?? [ 54.386530][ T6217] fuse: Bad value for 'fd' [ 54.394925][ T6218] fuse: Bad value for 'fd' [ 54.723081][ T5981] usbhid 6-1:0.0: can't add hid device: -71 [ 54.724873][ T5981] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 54.728945][ T5981] usb 6-1: USB disconnect, device number 2 [ 54.809772][ T6209] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.811776][ T6209] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.814522][ T6209] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.817707][ T6209] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.819678][ T6209] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.821960][ T6209] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.824425][ T6209] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.827417][ T6209] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.830095][ T6209] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.832746][ T6209] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.835371][ T6209] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.838058][ T6209] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.840669][ T6209] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.843032][ T6209] hid-generic 0000:0000:0000.0002: unknown main item tag 0x7 [ 54.845458][ T6209] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.848224][ T6209] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.850744][ T6209] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.853345][ T6209] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.856337][ T6209] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.858895][ T6209] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.864385][ T6209] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 55.065925][ T8] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 55.206013][ T8] usb 8-1: device descriptor read/64, error -71 [ 55.242900][ T6232] fuse: Bad value for 'fd' [ 55.288350][ T6235] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 55.288495][ T6235] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 55.314060][ T6238] fuse: Bad value for 'fd' [ 56.225935][ T8] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 56.341048][ T6255] vivid-001: disconnect [ 56.429361][ T6260] netlink: 20 bytes leftover after parsing attributes in process `syz.1.42'. [ 56.748766][ T8] usb 8-1: device descriptor read/64, error -71 [ 56.866644][ T8] usb usb8-port1: attempt power cycle [ 56.982789][ T6255] vivid-001: reconnect [ 57.070025][ T6276] fuse: Bad value for 'fd' [ 57.206428][ T8] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 57.226922][ T8] usb 8-1: device descriptor read/8, error -71 [ 57.386093][ T1321] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 57.476079][ T8] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 57.497412][ T8] usb 8-1: device descriptor read/8, error -71 [ 57.535995][ T1321] usb 6-1: Using ep0 maxpacket: 8 [ 57.540277][ T1321] usb 6-1: config 0 has an invalid interface number: 151 but max is 1 [ 57.542424][ T1321] usb 6-1: config 0 has an invalid descriptor of length 91, skipping remainder of the config [ 57.545132][ T1321] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 57.547649][ T1321] usb 6-1: config 0 has no interface number 0 [ 57.549250][ T1321] usb 6-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 57.554843][ T1321] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 57.557459][ T1321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.559588][ T1321] usb 6-1: Product: syz [ 57.560701][ T1321] usb 6-1: Manufacturer: syz [ 57.561931][ T1321] usb 6-1: SerialNumber: syz [ 57.564002][ T1321] usb 6-1: config 0 descriptor?? [ 57.570314][ T1321] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 57.582376][ T1321] snd-usb-audio 6-1:0.151: probe with driver snd-usb-audio failed with error -2 [ 57.603031][ T5930] udevd[5930]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 57.617044][ T8] usb usb8-port1: unable to enumerate USB device [ 57.951462][ T6284] netlink: 'syz.0.48': attribute type 1 has an invalid length. [ 57.953752][ T6284] netlink: 224 bytes leftover after parsing attributes in process `syz.0.48'. [ 58.052939][ T6288] vivid-001: disconnect [ 58.493525][ T6299] netlink: 20 bytes leftover after parsing attributes in process `syz.2.49'. [ 58.534781][ T6282] vivid-001: reconnect [ 58.706443][ T1321] usb 6-1: USB disconnect, device number 3 [ 59.323267][ T6320] fuse: Bad value for 'fd' [ 59.896015][ T6334] fuse: Bad value for 'fd' [ 60.051417][ T6338] netlink: 20 bytes leftover after parsing attributes in process `syz.1.55'. [ 60.631151][ T6349] netlink: 'syz.0.58': attribute type 1 has an invalid length. [ 60.633248][ T6349] netlink: 224 bytes leftover after parsing attributes in process `syz.0.58'. [ 60.714485][ T6355] vivid-001: disconnect [ 60.909165][ T6349] vivid-001: reconnect [ 61.318071][ T6371] fuse: Bad value for 'fd' [ 61.876603][ T6382] netlink: 'syz.3.64': attribute type 1 has an invalid length. [ 61.878616][ T6382] netlink: 224 bytes leftover after parsing attributes in process `syz.3.64'. [ 61.948328][ T6385] vivid-002: disconnect [ 62.030578][ T6392] fuse: Bad value for 'fd' [ 62.298678][ T6380] vivid-002: reconnect [ 62.311300][ T6395] fuse: Bad value for 'fd' [ 63.279341][ T6415] fuse: Bad value for 'fd' [ 63.388528][ T6419] fuse: Bad value for 'fd' [ 63.529199][ T6422] fuse: Bad value for 'fd' [ 63.625326][ T6425] netlink: 'syz.2.73': attribute type 1 has an invalid length. [ 63.627502][ T6425] netlink: 224 bytes leftover after parsing attributes in process `syz.2.73'. [ 63.693206][ T6428] vivid-000: disconnect [ 63.840710][ T6435] fuse: Bad value for 'fd' [ 64.327834][ T6420] vivid-000: reconnect [ 64.719813][ T6449] netlink: 'syz.0.77': attribute type 1 has an invalid length. [ 64.721701][ T6449] netlink: 224 bytes leftover after parsing attributes in process `syz.0.77'. [ 64.799516][ T6454] vivid-001: disconnect [ 65.346129][ T6473] netlink: 'syz.2.79': attribute type 1 has an invalid length. [ 65.348228][ T6473] netlink: 224 bytes leftover after parsing attributes in process `syz.2.79'. [ 65.370991][ T6475] netlink: 'syz.1.80': attribute type 1 has an invalid length. [ 65.373057][ T6475] netlink: 224 bytes leftover after parsing attributes in process `syz.1.80'. [ 65.440535][ T6480] vivid-003: disconnect [ 65.461657][ T6479] vivid-000: disconnect [ 65.465544][ T6449] vivid-001: reconnect [ 65.585443][ T6485] fuse: Bad value for 'fd' [ 65.624129][ T6479] vivid-000: reconnect [ 66.139651][ T6480] vivid-003: reconnect [ 66.219362][ T6494] netlink: 20 bytes leftover after parsing attributes in process `syz.3.83'. [ 66.701226][ T6498] IPv6: addrconf: prefix option has invalid lifetime [ 66.713317][ T6501] fuse: Bad value for 'fd' [ 66.796692][ T6504] netlink: 'syz.0.86': attribute type 1 has an invalid length. [ 66.798769][ T6504] netlink: 224 bytes leftover after parsing attributes in process `syz.0.86'. [ 66.819933][ T6504] vivid-001: disconnect [ 66.981246][ T6508] fuse: Bad value for 'fd' [ 67.107248][ T6504] vivid-001: reconnect [ 67.236185][ T6513] fuse: Bad value for 'fd' [ 67.438171][ T6515] netlink: 28 bytes leftover after parsing attributes in process `syz.1.89'. [ 68.371298][ T6529] vivid-002: disconnect [ 68.449856][ T6538] netlink: 20 bytes leftover after parsing attributes in process `syz.1.92'. [ 68.476794][ T6540] netlink: 'syz.0.93': attribute type 1 has an invalid length. [ 68.478864][ T6540] netlink: 224 bytes leftover after parsing attributes in process `syz.0.93'. [ 68.556641][ T6542] vivid-001: disconnect [ 69.005701][ T6523] vivid-002: reconnect [ 69.075119][ T6546] loop7: detected capacity change from 0 to 16384 [ 69.143209][ T6542] vivid-001: reconnect [ 69.286817][ T6549] loop7: detected capacity change from 16384 to 16383 [ 69.293352][ T6546] I/O error, dev loop7, sector 15616 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 69.306733][ T6546] I/O error, dev loop7, sector 15872 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 69.311100][ T6546] I/O error, dev loop7, sector 15616 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.313653][ T6546] Buffer I/O error on dev loop7, logical block 1952, async page read [ 69.392021][ T6545] I/O error, dev loop7, sector 6416 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 69.394742][ T6545] Buffer I/O error on dev loop7, logical block 802, lost async page write [ 69.397293][ T6545] Buffer I/O error on dev loop7, logical block 803, lost async page write [ 69.399528][ T6545] Buffer I/O error on dev loop7, logical block 804, lost async page write [ 69.401899][ T6545] Buffer I/O error on dev loop7, logical block 805, lost async page write [ 69.404125][ T6545] Buffer I/O error on dev loop7, logical block 806, lost async page write [ 69.404231][ T6537] Set syz1 is full, maxelem 65536 reached [ 69.406536][ T6545] Buffer I/O error on dev loop7, logical block 807, lost async page write [ 69.410136][ T6545] Buffer I/O error on dev loop7, logical block 808, lost async page write [ 69.412340][ T6545] Buffer I/O error on dev loop7, logical block 809, lost async page write [ 69.414605][ T6545] Buffer I/O error on dev loop7, logical block 810, lost async page write [ 69.420786][ T6545] I/O error, dev loop7, sector 7440 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 69.426970][ T6545] I/O error, dev loop7, sector 8464 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 69.432861][ T6545] I/O error, dev loop7, sector 9488 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 69.438921][ T6545] I/O error, dev loop7, sector 10512 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 69.451164][ T6545] I/O error, dev loop7, sector 11536 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 69.460325][ T6545] I/O error, dev loop7, sector 12560 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 69.568208][ T6557] fuse: Bad value for 'fd' [ 69.981532][ T6569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.100'. [ 70.281492][ T6580] netlink: 'syz.1.102': attribute type 1 has an invalid length. [ 70.283582][ T6580] netlink: 224 bytes leftover after parsing attributes in process `syz.1.102'. [ 70.353251][ T6583] vivid-003: disconnect [ 70.658928][ T1412] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.699776][ T6594] fuse: Bad value for 'fd' [ 70.882316][ T6583] vivid-003: reconnect [ 70.945447][ T6600] binder: 6599:6600 ioctl c0306201 20000180 returned -14 [ 70.994070][ T6604] netlink: 36 bytes leftover after parsing attributes in process `syz.1.107'. [ 70.996595][ T6604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.107'. [ 70.999006][ T6604] netlink: 36 bytes leftover after parsing attributes in process `syz.1.107'. [ 71.001479][ T6604] netlink: 36 bytes leftover after parsing attributes in process `syz.1.107'. [ 71.021231][ T6605] fuse: Bad value for 'fd' [ 71.227825][ C3] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 71.231375][ C3] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 71.234912][ C3] CPU: 3 UID: 0 PID: 34 Comm: ksoftirqd/3 Not tainted 6.13.0-rc2-syzkaller-00333-ga0e3919a2df2 #0 [ 71.238747][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.241919][ C3] RIP: 0010:put_page+0x21/0x280 [ 71.243245][ C3] Code: 90 90 90 90 90 90 90 90 90 41 54 55 53 48 89 fb e8 d4 eb a2 f8 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 20 02 00 00 4c 8b 63 08 31 ff 4c 89 e5 83 e5 01 [ 71.249698][ C3] RSP: 0018:ffffc900005cf2d8 EFLAGS: 00010202 [ 71.251893][ C3] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff88f7d9c8 [ 71.254692][ C3] RDX: 0000000000000001 RSI: ffffffff88f6521c RDI: 0000000000000008 [ 71.257505][ C3] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 71.260334][ C3] R10: 0000000000000000 R11: 0000000000000003 R12: ffff8880698db700 [ 71.263172][ C3] R13: ffff88801edb9940 R14: ffff88801edb9970 R15: 0000000000000007 [ 71.266025][ C3] FS: 0000000000000000(0000) GS:ffff88802b700000(0000) knlGS:0000000000000000 [ 71.269241][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.271621][ C3] CR2: 000000002eff9ffc CR3: 000000006c3ea000 CR4: 0000000000352ef0 [ 71.274503][ C3] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.277327][ C3] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.280168][ C3] Call Trace: [ 71.281372][ C3] [ 71.282475][ C3] ? die_addr+0x3b/0xa0 [ 71.284030][ C3] ? exc_general_protection+0x155/0x230 [ 71.286013][ C3] ? asm_exc_general_protection+0x26/0x30 [ 71.287807][ C3] ? skb_release_data+0x4b8/0x730 [ 71.289415][ C3] ? put_page+0xc/0x280 [ 71.290929][ C3] ? put_page+0x21/0x280 [ 71.292488][ C3] ? put_page+0xc/0x280 [ 71.293949][ C3] skb_release_data+0x4d7/0x730 [ 71.295656][ C3] __kfree_skb+0x4f/0x70 [ 71.296953][ C3] tcp_ack+0x1eb7/0x5ba0 [ 71.298080][ C3] ? __pfx_tcp_ack+0x10/0x10 [ 71.299303][ C3] ? tcp_validate_incoming+0x662/0x1d00 [ 71.300842][ C3] ? read_tsc+0x9/0x20 [ 71.301918][ C3] tcp_rcv_state_process+0xdd4/0x4c40 [ 71.303336][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 71.304953][ C3] ? sk_filter_trim_cap+0x50b/0xb90 [ 71.306370][ C3] ? __pfx_lock_release+0x10/0x10 [ 71.307683][ C3] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 71.309281][ C3] ? lock_acquire.part.0+0x11b/0x380 [ 71.310688][ C3] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 71.312161][ C3] ? rcu_is_watching+0x12/0xc0 [ 71.313413][ C3] ? do_raw_spin_lock+0x12d/0x2c0 [ 71.314999][ C3] ? tcp_v4_do_rcv+0x1ad/0xa90 [ 71.316477][ C3] tcp_v4_do_rcv+0x1ad/0xa90 [ 71.317694][ C3] tcp_v4_rcv+0x33b4/0x43a0 [ 71.318919][ C3] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 71.320201][ C3] ? __pfx_raw_local_deliver+0x10/0x10 [ 71.321630][ C3] ? rcu_is_watching+0x12/0xc0 [ 71.322913][ C3] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 71.324234][ C3] ip_protocol_deliver_rcu+0xba/0x4c0 [ 71.325656][ C3] ip_local_deliver_finish+0x316/0x570 [ 71.327201][ C3] ip_local_deliver+0x18e/0x1f0 [ 71.328591][ C3] ? __pfx_ip_local_deliver+0x10/0x10 [ 71.330020][ C3] ip_rcv+0x2c3/0x5d0 [ 71.331076][ C3] ? __pfx_ip_rcv+0x10/0x10 [ 71.332289][ C3] __netif_receive_skb_one_core+0x199/0x1e0 [ 71.333843][ C3] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 71.336166][ C3] ? rcu_is_watching+0x12/0xc0 [ 71.337674][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 71.339077][ C3] ? process_backlog+0x3f1/0x15f0 [ 71.340442][ C3] ? process_backlog+0x3f1/0x15f0 [ 71.341765][ C3] __netif_receive_skb+0x1d/0x160 [ 71.343109][ C3] process_backlog+0x443/0x15f0 [ 71.344559][ C3] __napi_poll.constprop.0+0xb7/0x550 [ 71.346233][ C3] net_rx_action+0xa94/0x1010 [ 71.347828][ C3] ? __pfx_net_rx_action+0x10/0x10 [ 71.349418][ C3] ? __switch_to+0x749/0x1190 [ 71.350657][ C3] ? kvm_sched_clock_read+0x11/0x20 [ 71.352017][ C3] ? sched_clock+0x38/0x60 [ 71.353280][ C3] ? sched_clock_cpu+0x6d/0x4d0 [ 71.354860][ C3] handle_softirqs+0x213/0x8f0 [ 71.356698][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 71.358190][ C3] ? rcu_is_watching+0x12/0xc0 [ 71.359471][ C3] ? __pfx_run_ksoftirqd+0x10/0x10 [ 71.360826][ C3] ? smpboot_thread_fn+0x59d/0xa30 [ 71.362173][ C3] run_ksoftirqd+0x3a/0x60 [ 71.363383][ C3] smpboot_thread_fn+0x661/0xa30 [ 71.364900][ C3] ? __kthread_parkme+0x148/0x220 [ 71.366310][ C3] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 71.367815][ C3] kthread+0x2c1/0x3a0 [ 71.368932][ C3] ? _raw_spin_unlock_irq+0x23/0x50 [ 71.370315][ C3] ? __pfx_kthread+0x10/0x10 [ 71.371552][ C3] ret_from_fork+0x45/0x80 [ 71.372766][ C3] ? __pfx_kthread+0x10/0x10 [ 71.374024][ C3] ret_from_fork_asm+0x1a/0x30 [ 71.375765][ C3] [ 71.376899][ C3] Modules linked in: [ 71.378448][ C3] ---[ end trace 0000000000000000 ]--- [ 71.379942][ C3] RIP: 0010:put_page+0x21/0x280 [ 71.381244][ C3] Code: 90 90 90 90 90 90 90 90 90 41 54 55 53 48 89 fb e8 d4 eb a2 f8 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 20 02 00 00 4c 8b 63 08 31 ff 4c 89 e5 83 e5 01 [ 71.386388][ C3] RSP: 0018:ffffc900005cf2d8 EFLAGS: 00010202 [ 71.388013][ C3] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff88f7d9c8 [ 71.390119][ C3] RDX: 0000000000000001 RSI: ffffffff88f6521c RDI: 0000000000000008 [ 71.392166][ C3] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 71.394325][ C3] R10: 0000000000000000 R11: 0000000000000003 R12: ffff8880698db700 [ 71.397154][ C3] R13: ffff88801edb9940 R14: ffff88801edb9970 R15: 0000000000000007 [ 71.399369][ C3] FS: 0000000000000000(0000) GS:ffff88802b700000(0000) knlGS:0000000000000000 [ 71.401759][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.403564][ C3] CR2: 000000002eff9ffc CR3: 000000006c3ea000 CR4: 0000000000352ef0 [ 71.405764][ C3] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.407964][ C3] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.410114][ C3] Kernel panic - not syncing: Fatal exception in interrupt [ 71.412589][ C3] Kernel Offset: disabled [ 71.413744][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:27:41 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffc9000f487b60 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff84c8dc44 RDI=ffffc9000f487b60 RBP=ffffffff84c8dc30 RSP=ffffc90000007f60 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=00000000000ca01d R12=0000000000000000 R13=dffffc0000000000 R14=0000000000000000 R15=ffffc9000f487b28 RIP=ffffffff84c8dc6d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020aa3000 CR3=000000006b3c4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000007 RBX=ffff888023854880 RCX=1ffffffff2039f3a RDX=0000000000000000 RSI=ffffffff8bb15700 RDI=ffffffff81686487 RBP=ffffc9000f487738 RSP=ffffc9000f4876f0 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff901cc6d7 R11=0000000000000001 R12=ffff88802b53fb20 R13=ffff8880219c8000 R14=0000000000000000 R15=ffff88802b43ed00 RIP=ffffffff81686490 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002001c000 CR3=000000006c3ea000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000020004000 RCX=ffffffff813ee99a RDX=ffff888022b72440 RSI=0000000000000001 RDI=ffff888022b72440 RBP=ffffc9000f02ff58 RSP=ffffc9000f02fef0 R8 =0000000000000001 R9 =ffffed100456e488 R10=ffff888022b72447 R11=0000000000000001 R12=ffff888022b72440 R13=000000000000010b R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81767f94 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002effdffc CR3=00000000759a4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85142435 RDI=ffffffff9a665300 RBP=ffffffff9a6652c0 RSP=ffffc900005cec30 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=000000000000005b R14=ffffffff851423d0 R15=0000000000000000 RIP=ffffffff8514245f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002eff9ffc CR3=000000006c3ea000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000