last executing test programs: 5.841901754s ago: executing program 0 (id=93): socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xbd5}]}, 0x68}}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/23, 0x17}], 0x2, &(0x7f0000008640)=[{&(0x7f0000000240)=""/107, 0x6b}], 0x1, 0x0) (async) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0xd8, 0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r6, 0x101, 0x6, &(0x7f0000000200), 0x4) openat$sr(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="280000002e000100000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="098480"], 0x28}], 0x1}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) (async) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) 5.532385049s ago: executing program 0 (id=96): ioprio_set$pid(0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000740)=ANY=[@ANYRES8], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x16, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0xffffffffffffff13) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f0000000600)=ANY=[@ANYBLOB="bfa86cf5c251808100000000000800450009000000000000889078ac1e0001ac1414aa0c009078000b030045000000000000000000000097f2e0000001e0000002f00546e02eec5c568f23f7659e85820b"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000340)=""/69, 0x623c41ea}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) sendfile(r3, r3, 0x0, 0x30) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) ioctl$UI_DEV_DESTROY(r3, 0x5502) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f00000000c0)=0x4, 0x4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000ccb40000000081a9c756ee607a35e7eea1ccf98bb65ba8de759226a212ccb919899b038d3d224551ced0ab31f172ef31cb13341b15d62f55ba0a4291c911d34260d68ba69b0efa7a3afd49818eb584907e213efe01eb132c3739e4ef7d4b5139d992b6c352fa", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r6, @ANYRES32=r1, @ANYRES8=r6, @ANYRESOCT=r5, @ANYRESHEX=r3], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f0000000180)) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mkdir(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fda000/0x18000)=nil, 0x0, 0xfffffffffffffe6e, 0x3, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r9, 0x4008ae93, &(0x7f0000000400)=0x2000) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x2992, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="2e00000010008188040f46ecdb4cb9cca7480ef40f000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 4.69041246s ago: executing program 0 (id=101): r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x88, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x2, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000010000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000005c"]}, 0xe0) 4.571484888s ago: executing program 0 (id=102): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0x78) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000004c0)={"5864b9cb497fe327cad14a39c24dc1fd", 0x0, 0x0, {0x7cd1, 0xfffffffb}, {0xfffffffffffffe00, 0x81}, 0x0, [0x3, 0x5, 0xb6, 0x8, 0x2, 0x7fff, 0x9, 0x0, 0x0, 0x0, 0x5, 0x3, 0x100000000, 0x6, 0x2, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000680)={"c3e7056e31a023a1ffc17be24828e70c", r3, r4, {0x12b2c06d, 0x1}, {0x9, 0x8ee}, 0x6, [0x1, 0x8, 0xec25, 0x3, 0x5, 0x9, 0x100000000, 0x2, 0x1, 0x4, 0x7ff, 0x0, 0x3ff, 0x8, 0x80000001]}) sendfile(r1, r2, &(0x7f00000001c0), 0x8) fcntl$addseals(r2, 0x409, 0x8) fallocate(r2, 0x0, 0x0, 0x3) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023011c0108ff0000000002000020d3"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f00000008c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x16}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close_range(r2, r5, 0x2) ioctl$FIBMAP(r5, 0x1, &(0x7f00000000c0)=0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec8500000005000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4.281468844s ago: executing program 0 (id=103): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f00000002c0)={0x0, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f00000000c0)=[0x6], &(0x7f0000000240), &(0x7f0000000140)=[0xec32]}) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0x6804, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x6) userfaultfd(0x801) memfd_create(0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r4, &(0x7f0000002140)=[{&(0x7f00000010c0)=""/29, 0x1d}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f000013e000/0x3000)=nil, 0x3000, 0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 3.592228693s ago: executing program 3 (id=112): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000100)={'wlan1\x00', @broadcast}) capset(&(0x7f0000000000)={0x20080522}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffc}}], 0x38) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 2.638055551s ago: executing program 1 (id=116): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) listen(r1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup3(r1, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000380)=0xe, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x0, 0x1, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) accept4(r5, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x107140) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0xc1205531, &(0x7f0000000040)=""/112) accept4$unix(r2, 0xfffffffffffffffe, &(0x7f0000000000), 0x800) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008002c0007ab5d73703a3e00020006000700036cbc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509cd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 2.637054344s ago: executing program 3 (id=117): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRESDEC=0x0, @ANYBLOB="2aeb00"/28], 0xe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0xbffffffc}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) listen(r0, 0x2) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x7c8) syz_open_dev$dri(0x0, 0x1, 0x0) r1 = gettid() r2 = openat$nvram(0xffffff9c, &(0x7f0000000180), 0x8400, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000340)=[{{0x3}, {0x3, 0x1, 0x1, 0x1}}, {{0x4, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x0, 0x1, 0x1}, {0x3}}, {{0x3, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x4}}], 0x30) signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x10000]}, 0x8) r3 = syz_io_uring_setup(0x239, &(0x7f0000000280)={0x0, 0x953, 0x2000, 0x1}, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000002340)={[0xfffffffd, 0x14]}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000000000002000000300004802c00018008000100636d7000200002800c00038005000100a9000000080001400000001108000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000aaa5f8ad860f3525f6193bf7e2faeb7f680337060e9bf551c"], 0x84}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000079b7040000000000008500000003000000850000000f00000095"], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='qnx4\x00', 0x0, 0x0) 1.872139776s ago: executing program 1 (id=119): r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x88, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x2, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000005c0000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000005c"]}, 0xe0) 1.822999824s ago: executing program 1 (id=120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000004c0)={0x1c, 0x4, 0x8, 0x205, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) 1.822793659s ago: executing program 2 (id=121): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x12b842, 0x0) sendfile(r1, r0, 0x0, 0x80000000) 1.819368747s ago: executing program 1 (id=122): socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x3b6, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xb989) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x0, 0x0}) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001140), 0xc0ed0000, &(0x7f00000011c0)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000030800000000000000000000000000000900010073797a31"], 0x3c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f000000000001000000040000000c000180cafc080005470000080002"], 0x78}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.525592813s ago: executing program 2 (id=123): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@ipv6_getroute={0x2c, 0x1a, 0x10, 0x70bd29, 0x25dfdbfd, {0xa, 0x20, 0x0, 0x1, 0xff, 0x1, 0xfd, 0xb}, [@RTA_IIF={0x8}, @RTA_UID={0x8, 0x19, 0xee00}]}, 0x2c}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="184ca5ecdb909221e19ac974218f6f100000000000000000ff00000018110019131b00b29ebea2aa563c7c7cd421fc3c59eefc6955f7e77cd925f1bf3c46ec4de45df9b8d221a097bee83b6ca2175920d956c9b22ed1", @ANYRES16=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000500)='environ\x00') (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) preadv(r5, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @dev}]}}}]}, 0x3c}}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000000)={0x22, 0x0, 0x0, 0x84}, 0x6) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r8 = socket(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x18}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty, 0x0, 0x2500}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r9}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES32=r9, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r10}, 0x10) 1.523481145s ago: executing program 0 (id=124): socket$packet(0x11, 0x3, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sendmsg$AUDIT_SET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, 0x3e9, 0x200, 0x70bd2a, 0x25dfdbfd, {0x24, 0x0, 0x0, 0x0, 0x9, 0x3, 0x879, 0xffffc0d3, 0x0, 0x7db, 0x5}, ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x240040c0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f00000011c0)=""/4072, &(0x7f0000001180)=0xfe8) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04128808fffffffbffff03"], 0xb) r5 = syz_open_dev$cec(0x0, 0x0, 0x10140) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000000000000000000000000000000000000ab0439bf788a2be79420fc707007090a6edeb03880750d2f84971dfba144d9e2e16235c63ee85e1c32cf39cb71d08b45f0be9b47baa444701df0baa206ab30353b52667ac9358c4309d5914638e290a3a2285ba1f64ae6da17db3df92403d8fde9f7da18423ad22817c016e33b2fd1470d80a5ff25d6ca0f413e3792df602fad8f742b56567aad3a2dd7aded5b45acf31e6fc49d44e2fe51dd8bd2567819bf2461f37364ce864ccbcfb39443"], 0x14}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000006c0)={0x34, r7, 0x319, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r8, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c9000a0006000500010842580e2a64adc9b138f92294bdeebc1ecb348ff152b7108cd561ee4d2c89f6f3bfa05c3f441bd20d1c6ba70e9ed467d5a2b8fd8f67e24d29b35829db02ea386f2b2bf9b81a0b4495877a1b5a2625e79bb29899f85cd07263597bb8ec3117c8e59fd935e3df6c7673feca56a9807ad8515d9bdb88cd8cbb8d6d5f8ba8055205a576717197c6c63a7eb9b71ca1ef176ba5aa73f8fa7bda01b1c8a997b9cbb31f7d6a43f2fd45becca37149c7e02c5e01010000f6edc52d9cd3a82bb77a32a3a7e54582bcff1cc806edd494037a79928ea546a9db2c7c67f6a8c456d8"], 0xf) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) 1.242039687s ago: executing program 2 (id=125): socket$inet_smc(0x2b, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000180), 0x200042) r2 = syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x3087, &(0x7f0000000340)={0x0, 0x2, 0x8, 0x0, 0x4}, &(0x7f0000000040)=0x0, &(0x7f0000000300)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000300)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000002c0)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000380)={0x70, 0x0, &(0x7f0000000440)=[@clear_death={0x400c630f, 0x4}, @acquire={0x40046305, 0x1}, @free_buffer, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x5, 0x0, 0x38}, @fd={0x66642a85, 0x0, r1}, @fd}, &(0x7f0000000400)={0x0, 0x1c, 0x34}}, 0x40}], 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) bind$xdp(r0, &(0x7f0000000900)={0x2c, 0x0, r10}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x1}, 0xc) syz_io_uring_setup(0x400005e2, &(0x7f0000000000), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.142670859s ago: executing program 2 (id=126): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000026000)=""/102395, 0x18ffb}], 0x1, 0x0, 0x0) futex_waitv(0x0, 0x56, 0x2, 0x0, 0x1) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f00000004c0)={&(0x7f0000000200)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000440)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "bc27adc50d03fb36a26d1d33610708eb844846979c3e552e4f42636ec483561f986e3e2a5455252a03b32ffd44fd8a40b0353a4025411e0620ec9757810556d2"}, 0x65}, 0x2}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xb4541c7) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = dup(r3) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB='\x00\x00']) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600), 0x4) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000400), 0x0) sendto$inet(r6, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) 821.929355ms ago: executing program 1 (id=127): close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) fchdir(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = open(0x0, 0x0, 0x146) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x844}, 0x28841) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x2705, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000001440)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000001400)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x2, 0x0, "cb00001400000000000000ffff0000e700"}) io_uring_enter(r5, 0xa3d, 0x0, 0x0, 0x0, 0x0) r8 = io_uring_setup(0x6249, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x18, 0x20000000, r9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) 592.619264ms ago: executing program 3 (id=128): r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x88, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x2, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000880000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000005c"]}, 0xe0) 516.92247ms ago: executing program 3 (id=129): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="672fc0b55aa8d60788977c81f150031f66f4eb0e21fd427bee2309895088c3ecde78262dba5c0d7d7cec3f176133b7c20b0dea58750f9bcbb11e56a3c8fa8725ba50ab674e43426dc64d863710a92345945b0f9f", @ANYRES8=0x0, @ANYBLOB="195b2cc345e97402a2d67f30b180759342fe62a3c9ee1bde1e2bdf5d1f12ae5dae3d281454a59492c36d752a55611c366da68fdbcdf09a9d95b67dc9b023f7791d32d3f7f3101cdbba744b31b49d1458691173358ee5d7f12b9b46c6a36a47c8c6470327be3a42e8f17b", @ANYRESOCT, @ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRES32], 0x48) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB='h\x00', @ANYRES16=0x0, @ANYBLOB="080027bd7000ffdbdf25170000000a001a00ffffffffffff00000a00060008021100000100000a00060008021100000000000a00060008021100000100000a001a00ffffffffffff00000a000600ffffffffffff00000a001a000802110000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="300001000000070134b9a0d421d4f1027c00010400000118000180137c4d8762c7273214e990000000000000000000000000000000000000000000ecffffffffffff0075dfc2d6ceb31e7aaa8808870db6a02a0e3fd5d722cb2754680d4380104087f3b1a8901b3c46cd9572bae9e138b45d3f46303e69f780db6a86a442c338b90c4a9fb4b2a59993ee35e72de84a6d6861ea7fb2acad5e5a75e50e69fd476fc121b60563e13f74313b5e5ebf28bbb1f5f4f6a0d0391749b784200547"], 0x30}}, 0x20000040) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/custom1\x00', 0x802, 0x0) (async) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) (async) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r8, r3, &(0x7f0000002080)=0x64, 0x23b) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$alg(r9, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0x3d, &(0x7f0000000440)={0x33, 0x8, 0x2}) (async) syz_open_dev$video4linux(&(0x7f0000000000), 0x9, 0x20040) sendmsg$TIPC_NL_MEDIA_SET(r9, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) (async) recvmsg$can_j1939(r9, 0x0, 0x40) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 322.273398ms ago: executing program 3 (id=130): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b9040a1d080214000000020009a118000c000300000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r2, 0x10, &(0x7f0000000300)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000040)='fd/4\x00') ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc080661a, 0x0) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="f98790609361e352075a0b63dffe754f0c53b2fb7d39e28dd801fc29b002bdc3c8bbfc4bedbc5595b00974ba2dc8391456c8809a55dc291a0a188c1befb77e2a49859344509d9d47fe3e9257527499caaee449112cdf0e954c468ad33eb0b3573c432fef8947285847a432fefbc33b6359675b48fe920f7fc86154ea2744ba7a211e9b0613dbcd97849381", 0x8b}], 0x1, 0x0) 191.035706ms ago: executing program 2 (id=131): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @remote}, 0x1c) (async) r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03e1ffffff0900000000c0cf38bb000000", @ANYRES32, @ANYBLOB="0500001000000000000000000000000000000080", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000030000000400"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x16, &(0x7f0000001440)=@raw=[@call={0x85, 0x0, 0x0, 0x43}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_fd={0x18, 0x8, 0x1, 0x0, r2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @generic={0x5, 0xc, 0x4, 0x6, 0x3}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffefb}}, @jmp={0x5, 0x0, 0xa, 0x4, 0x7, 0xffffffffffffffff, 0x8}], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) (async) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 130.364043ms ago: executing program 3 (id=132): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f00000002c0)={0x0, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f00000000c0)=[0x6], &(0x7f0000000240), &(0x7f0000000140)=[0xec32]}) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0x6804, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x6) userfaultfd(0x801) memfd_create(0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r4, &(0x7f0000002140)=[{&(0x7f00000010c0)=""/29, 0x1d}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f000013e000/0x3000)=nil, 0x3000, 0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 62.44824ms ago: executing program 2 (id=133): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') mkdir(0x0, 0x0) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfe3c) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x5, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfefe) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) dup3(r1, r0, 0x0) 0s ago: executing program 1 (id=134): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) r1 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) dup(r1) socket(0x2, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r5 = socket$isdn(0x22, 0x3, 0x0) bind$isdn(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448e3, 0x0) process_vm_writev(r4, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/30, 0x1e}, {&(0x7f0000000400)=""/50, 0x32}], 0x2, &(0x7f0000000840)=[{&(0x7f0000000580)=""/81, 0x51}, {&(0x7f0000000780)=""/124, 0x7c}, {&(0x7f0000000800)=""/53, 0x35}], 0x3, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xd) r8 = syz_open_dev$radio(&(0x7f0000000900), 0x2, 0x2) mount$9p_fd(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x44, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@access_user}, {@dfltuid={'dfltuid', 0x3d, 0xee01}}, {@loose}, {@version_9p2000}, {@noextend}, {@cache_loose}, {@access_any}, {@version_L}, {@noextend}, {@noextend}], [{@dont_appraise}]}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000700)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x3, @mcast2}, {0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe}, r10}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}, r10}}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:18589' (ED25519) to the list of known hosts. [ 42.162219][ T5301] cgroup: Unknown subsys name 'net' [ 42.294557][ T5301] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.389768][ T5301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.764521][ T5350] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.769800][ T5359] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.772254][ T5355] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.772847][ T5355] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.776242][ T5359] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.778038][ T5355] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.781293][ T5365] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.782557][ T5355] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.785143][ T5365] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.787537][ T5355] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.789843][ T5365] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.790901][ T5355] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 47.794064][ T5365] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 47.795134][ T5355] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.797843][ T5365] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.808101][ T5361] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.809567][ T5359] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.813991][ T5359] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 47.816035][ T5359] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.821112][ T5359] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.828447][ T5359] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.832733][ T5359] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.836083][ T5359] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 47.839125][ T5359] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.184789][ T5358] chnl_net:caif_netlink_parms(): no params data found [ 48.202713][ T5349] chnl_net:caif_netlink_parms(): no params data found [ 48.265634][ T5357] chnl_net:caif_netlink_parms(): no params data found [ 48.375303][ T5358] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.377740][ T5358] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.380457][ T5358] bridge_slave_0: entered allmulticast mode [ 48.384777][ T5358] bridge_slave_0: entered promiscuous mode [ 48.413622][ T5358] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.415892][ T5358] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.418095][ T5358] bridge_slave_1: entered allmulticast mode [ 48.422366][ T5358] bridge_slave_1: entered promiscuous mode [ 48.546339][ T5358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.553708][ T5349] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.555621][ T5349] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.557518][ T5349] bridge_slave_0: entered allmulticast mode [ 48.559930][ T5349] bridge_slave_0: entered promiscuous mode [ 48.564783][ T5349] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.567475][ T5349] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.570083][ T5349] bridge_slave_1: entered allmulticast mode [ 48.573006][ T5349] bridge_slave_1: entered promiscuous mode [ 48.575191][ T5348] chnl_net:caif_netlink_parms(): no params data found [ 48.597480][ T5358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.649887][ T5349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.742034][ T5349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.747686][ T5358] team0: Port device team_slave_0 added [ 48.751911][ T5358] team0: Port device team_slave_1 added [ 48.765593][ T5357] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.768227][ T5357] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.773122][ T5357] bridge_slave_0: entered allmulticast mode [ 48.776688][ T5357] bridge_slave_0: entered promiscuous mode [ 48.832220][ T5357] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.833924][ T5357] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.835590][ T5357] bridge_slave_1: entered allmulticast mode [ 48.837714][ T5357] bridge_slave_1: entered promiscuous mode [ 48.876962][ T5358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.879295][ T5358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.888043][ T5358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.960880][ T5349] team0: Port device team_slave_0 added [ 48.963430][ T5358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.965728][ T5358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.975183][ T5358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.996677][ T5357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.000702][ T5349] team0: Port device team_slave_1 added [ 49.022468][ T5348] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.024469][ T5348] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.026404][ T5348] bridge_slave_0: entered allmulticast mode [ 49.028956][ T5348] bridge_slave_0: entered promiscuous mode [ 49.033566][ T5357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.052687][ T5349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.055010][ T5349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.063602][ T5349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.068920][ T5349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.071343][ T5349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.079841][ T5349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.087126][ T5348] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.089054][ T5348] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.091321][ T5348] bridge_slave_1: entered allmulticast mode [ 49.094569][ T5348] bridge_slave_1: entered promiscuous mode [ 49.137711][ T5357] team0: Port device team_slave_0 added [ 49.142465][ T5357] team0: Port device team_slave_1 added [ 49.244642][ T5358] hsr_slave_0: entered promiscuous mode [ 49.248890][ T5358] hsr_slave_1: entered promiscuous mode [ 49.358764][ T5357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.360695][ T5357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.367984][ T5357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.374126][ T5348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.379681][ T5348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.387423][ T5349] hsr_slave_0: entered promiscuous mode [ 49.390698][ T5349] hsr_slave_1: entered promiscuous mode [ 49.394737][ T5349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.397315][ T5349] Cannot create hsr debugfs directory [ 49.399833][ T5357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.401942][ T5357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.409094][ T5357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.472375][ T5348] team0: Port device team_slave_0 added [ 49.507076][ T5348] team0: Port device team_slave_1 added [ 49.599836][ T5348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.606479][ T5348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.614604][ T5348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.704353][ T5348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.706934][ T5348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.715649][ T5348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.736436][ T5357] hsr_slave_0: entered promiscuous mode [ 49.739348][ T5357] hsr_slave_1: entered promiscuous mode [ 49.742293][ T5357] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.744369][ T5357] Cannot create hsr debugfs directory [ 49.871714][ T5359] Bluetooth: hci1: command tx timeout [ 49.871734][ T5356] Bluetooth: hci0: command tx timeout [ 49.872200][ T4777] Bluetooth: hci3: command tx timeout [ 49.872220][ T5361] Bluetooth: hci2: command tx timeout [ 49.901294][ T5348] hsr_slave_0: entered promiscuous mode [ 49.903850][ T5348] hsr_slave_1: entered promiscuous mode [ 49.905744][ T5348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.907644][ T5348] Cannot create hsr debugfs directory [ 50.056957][ T5358] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.091467][ T5358] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.099551][ T5358] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.105199][ T5358] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.190321][ T5349] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.196737][ T5349] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.208797][ T5349] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.214915][ T5349] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.260379][ T5348] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.265384][ T5348] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.270609][ T5348] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.275373][ T5348] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.318005][ T5357] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.336344][ T5357] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.343799][ T5357] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.357303][ T5357] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.385694][ T5358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.428563][ T5358] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.444360][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.447218][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.483834][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.485759][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.525743][ T5349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.535895][ T5348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.546796][ T5357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.563230][ T5349] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.576289][ T5358] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.588392][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.590545][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.594482][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.596458][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.609399][ T5357] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.625077][ T5348] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.630150][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.633984][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.642150][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.644289][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.667251][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.669708][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.694877][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.697652][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.789518][ T5348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.835035][ T5358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.875327][ T5349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.880039][ T5358] veth0_vlan: entered promiscuous mode [ 50.899213][ T5358] veth1_vlan: entered promiscuous mode [ 50.919182][ T5357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.933851][ T5348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.947871][ T5358] veth0_macvtap: entered promiscuous mode [ 50.955692][ T5358] veth1_macvtap: entered promiscuous mode [ 50.965472][ T5349] veth0_vlan: entered promiscuous mode [ 50.980154][ T5358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.992740][ T5358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.000251][ T5358] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.003498][ T5358] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.005898][ T5358] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.008257][ T5358] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.033368][ T5349] veth1_vlan: entered promiscuous mode [ 51.057784][ T5357] veth0_vlan: entered promiscuous mode [ 51.063359][ T5348] veth0_vlan: entered promiscuous mode [ 51.086858][ T5349] veth0_macvtap: entered promiscuous mode [ 51.090483][ T5348] veth1_vlan: entered promiscuous mode [ 51.100089][ T5357] veth1_vlan: entered promiscuous mode [ 51.111530][ T5349] veth1_macvtap: entered promiscuous mode [ 51.132528][ T5349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.135573][ T5349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.139237][ T5349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.154398][ T5349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.157119][ T5349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.160707][ T5349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.186239][ T5349] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.189405][ T5349] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.192960][ T5349] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.196104][ T5349] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.209905][ T5357] veth0_macvtap: entered promiscuous mode [ 51.210918][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.213662][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.219908][ T5357] veth1_macvtap: entered promiscuous mode [ 51.233644][ T5348] veth0_macvtap: entered promiscuous mode [ 51.252343][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.255042][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.256593][ T5348] veth1_macvtap: entered promiscuous mode [ 51.261881][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.264750][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.267545][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.270422][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.275977][ T5357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.299993][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.305060][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.308538][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.313500][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.319479][ T5357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.326452][ T5357] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.329767][ T5357] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.335077][ T5357] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.338262][ T5357] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.387865][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.391232][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.394490][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.398067][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.402288][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.405780][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.411302][ T5348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.444021][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.446078][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.468622][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.475945][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.481033][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.484717][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.488702][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.494090][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.499229][ T5348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.507680][ T5348] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.511022][ T5348] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.514063][ T5348] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.517105][ T5348] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.532940][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.535323][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.565890][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.568233][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.612393][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.617617][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.645893][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.647932][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.676161][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.678941][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.952724][ T5356] Bluetooth: hci1: command tx timeout [ 51.954086][ T5359] Bluetooth: hci2: command tx timeout [ 51.954096][ T4777] Bluetooth: hci3: command tx timeout [ 51.961545][ T5359] Bluetooth: hci0: command tx timeout [ 52.023544][ T5423] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 52.081865][ T5423] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.945928][ T5430] process 'syz.1.5' launched './file2' with NULL argv: empty string added [ 52.985125][ T5356] Bluetooth: hci0: hardware error 0x00 [ 53.537148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 53.727894][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 53.861494][ T5430] bond0: entered promiscuous mode [ 53.863822][ T5430] bond_slave_0: entered promiscuous mode [ 53.890573][ T5430] bond_slave_1: entered promiscuous mode [ 54.050874][ T5449] mmap: syz.3.9 (5449) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.055822][ T5359] Bluetooth: hci1: command tx timeout [ 54.056118][ T5361] Bluetooth: hci2: command tx timeout [ 54.059788][ T4777] Bluetooth: hci3: command tx timeout [ 54.239194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 54.459985][ T5451] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.544297][ T5453] program syz.1.11 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.981197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 55.021003][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 55.080952][ T5356] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 55.568740][ T5467] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16'. [ 55.575684][ T5467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'. [ 55.579484][ T5467] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 55.679970][ T5467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 55.877662][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 55.927086][ T5471] sg_write: data in/out 196608/1 bytes for SCSI command 0xdb-- guessing data in; [ 55.927086][ T5471] program syz.1.17 not setting count and/or reply_len properly [ 56.111277][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 56.111665][ T5356] Bluetooth: hci1: command tx timeout [ 56.121065][ T5356] Bluetooth: hci3: command tx timeout [ 56.121329][ T4777] Bluetooth: hci2: command tx timeout [ 56.269945][ T5472] tipc: Started in network mode [ 56.279125][ T5472] tipc: Node identity fffffff9, cluster identity 4711 [ 56.281885][ T5472] tipc: Node number set to 4294967289 [ 56.334891][ T5472] tmpfs: Bad value for 'nr_blocks' [ 56.434617][ T5483] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20'. [ 56.882033][ T35] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 56.901094][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 56.903639][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 56.906369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 56.933717][ T5488] netlink: 'syz.2.21': attribute type 10 has an invalid length. [ 56.935802][ T5488] netlink: 2 bytes leftover after parsing attributes in process `syz.2.21'. [ 56.938118][ T5488] bond0: entered promiscuous mode [ 56.939466][ T5488] bond_slave_0: entered promiscuous mode [ 56.951051][ T5488] bond_slave_1: entered promiscuous mode [ 56.953754][ T5488] bridge0: port 3(bond0) entered blocking state [ 56.955526][ T5488] bridge0: port 3(bond0) entered disabled state [ 56.957305][ T5488] bond0: entered allmulticast mode [ 56.958674][ T5488] bond_slave_0: entered allmulticast mode [ 56.960155][ T5488] bond_slave_1: entered allmulticast mode [ 57.055853][ T5488] bridge0: port 3(bond0) entered blocking state [ 57.057604][ T5488] bridge0: port 3(bond0) entered forwarding state [ 57.084933][ T35] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 57.086883][ T35] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 57.089336][ T35] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 57.095084][ T35] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 57.098509][ T35] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 57.107974][ T35] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 57.109878][ T35] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 57.115213][ T35] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 57.118039][ T35] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 57.123105][ T35] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 57.139204][ T35] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 57.141454][ T35] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 57.145741][ T35] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 57.170832][ T35] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 57.175082][ T35] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 57.215967][ T35] usb 8-1: string descriptor 0 read error: -22 [ 57.217753][ T35] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 57.231221][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.265617][ T35] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 58.128391][ T5500] netlink: 32 bytes leftover after parsing attributes in process `syz.2.23'. [ 58.353353][ T5503] tipc: Enabled bearer , priority 10 [ 58.552152][ T5510] tipc: Enabled bearer , priority 0 [ 59.275132][ T35] usb 8-1: USB disconnect, device number 2 [ 60.013763][ T5528] Zero length message leads to an empty skb [ 60.829439][ T5557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.420711][ T5591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.41'. [ 61.682080][ T5595] netlink: 'syz.3.43': attribute type 4 has an invalid length. [ 61.698864][ T5595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.43'. [ 61.931857][ T5604] trusted_key: syz.3.45 sent an empty control message without MSG_MORE. [ 62.404572][ T5622] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=536871168 (1073742336 ns) > initial count (48 ns). Using initial count to start timer. [ 62.419710][ T5622] netlink: 'syz.0.49': attribute type 10 has an invalid length. [ 62.423077][ T5622] netlink: 2 bytes leftover after parsing attributes in process `syz.0.49'. [ 62.426289][ T5622] bond0: entered promiscuous mode [ 62.428167][ T5622] bond_slave_0: entered promiscuous mode [ 62.430475][ T5622] bond_slave_1: entered promiscuous mode [ 62.434484][ T5622] bridge0: port 3(bond0) entered blocking state [ 62.436946][ T5622] bridge0: port 3(bond0) entered disabled state [ 62.439411][ T5622] bond0: entered allmulticast mode [ 62.442022][ T5622] bond_slave_0: entered allmulticast mode [ 62.444105][ T5622] bond_slave_1: entered allmulticast mode [ 62.448952][ T5622] bridge0: port 3(bond0) entered blocking state [ 62.451219][ T5622] bridge0: port 3(bond0) entered forwarding state [ 62.577786][ T5629] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 62.743804][ T25] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 62.747211][ T25] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 62.752619][ T25] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3 [ 62.771907][ T25] hid-generic 0000:3000000:0000.0002: hidraw1: HID v0.00 Device [sy] on syz0 [ 63.090216][ T5648] mkiss: ax0: crc mode is auto. [ 63.458061][ T5654] netlink: 'syz.0.59': attribute type 10 has an invalid length. [ 63.475007][ T5654] netlink: 2 bytes leftover after parsing attributes in process `syz.0.59'. [ 63.652556][ T5656] sit0: entered allmulticast mode [ 64.639476][ T5672] lo speed is unknown, defaulting to 1000 [ 64.642697][ T5672] lo speed is unknown, defaulting to 1000 [ 64.655249][ T5672] lo speed is unknown, defaulting to 1000 [ 64.669327][ T5672] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 64.693476][ T5672] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 64.727607][ T5672] lo speed is unknown, defaulting to 1000 [ 64.732210][ T5672] lo speed is unknown, defaulting to 1000 [ 64.735165][ T5672] lo speed is unknown, defaulting to 1000 [ 64.739872][ T5672] lo speed is unknown, defaulting to 1000 [ 65.098015][ T5677] overlayfs: overlapping lowerdir path [ 65.110956][ T5678] syz.3.65 uses obsolete (PF_INET,SOCK_PACKET) [ 65.133523][ T5677] netlink: 'syz.0.64': attribute type 3 has an invalid length. [ 65.136489][ T5677] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.64'. [ 66.132900][ T5686] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 66.177216][ T5686] autofs: Unknown parameter '‰õ kƒ¨ XŒâÇœUÂ' [ 66.372512][ T5690] overlayfs: missing 'lowerdir' [ 66.456769][ T5692] netlink: 20 bytes leftover after parsing attributes in process `syz.2.69'. [ 66.719007][ T5697] netlink: 'syz.3.70': attribute type 10 has an invalid length. [ 66.721318][ T5697] netlink: 2 bytes leftover after parsing attributes in process `syz.3.70'. [ 66.723782][ T5697] bond0: entered promiscuous mode [ 66.725291][ T5697] bond_slave_0: entered promiscuous mode [ 66.727229][ T5697] bond_slave_1: entered promiscuous mode [ 66.729152][ T5697] bridge0: port 3(bond0) entered blocking state [ 66.733518][ T5697] bridge0: port 3(bond0) entered disabled state [ 66.737341][ T5697] bond0: entered allmulticast mode [ 66.740273][ T5697] bond_slave_0: entered allmulticast mode [ 66.742385][ T5697] bond_slave_1: entered allmulticast mode [ 66.746968][ T5697] bridge0: port 3(bond0) entered blocking state [ 66.748820][ T5697] bridge0: port 3(bond0) entered forwarding state [ 67.570170][ T5706] netlink: 32 bytes leftover after parsing attributes in process `syz.3.72'. [ 67.579628][ T5706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.72'. [ 67.588865][ T5706] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 67.735651][ T5706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 69.720968][ T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 69.922511][ T25] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 69.930888][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.936404][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.939201][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 69.954872][ T25] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 69.957852][ T25] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 69.960064][ T25] usb 6-1: Manufacturer: syz [ 69.975291][ T25] usb 6-1: config 0 descriptor?? [ 70.389308][ T25] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 70.392755][ T25] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 70.401137][ T25] appleir 0003:05AC:8243.0003: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 70.593675][ T5737] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.078480][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.082722][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.377671][ T5760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.86'. [ 71.761266][ T63] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 71.932274][ T63] usb 6-1: device descriptor read/64, error -32 [ 71.974911][ T5771] netlink: 'syz.3.87': attribute type 10 has an invalid length. [ 71.977779][ T5771] netlink: 2 bytes leftover after parsing attributes in process `syz.3.87'. [ 72.065051][ T5761] syz.0.85 (5761): drop_caches: 2 [ 72.066878][ T5761] syz.0.85 (5761): drop_caches: 2 [ 72.230898][ T63] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 72.421413][ T63] usb 6-1: device descriptor read/64, error -32 [ 72.691326][ T63] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 72.721226][ T63] usb 6-1: device descriptor read/8, error -32 [ 72.990994][ T63] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 73.031368][ T63] usb 6-1: device descriptor read/8, error -32 [ 73.060732][ T5738] raw-gadget.0 gadget.1: failed to queue suspend event [ 73.063353][ T5738] raw-gadget.0 gadget.1: failed to queue disconnect event [ 73.159525][ T983] usb 6-1: USB disconnect, device number 2 [ 73.205485][ T5789] 9pnet_fd: Insufficient options for proto=fd [ 73.779093][ T5811] netlink: 'syz.0.96': attribute type 10 has an invalid length. [ 73.782281][ T5811] netlink: 2 bytes leftover after parsing attributes in process `syz.0.96'. [ 75.175218][ T5848] netlink: 80 bytes leftover after parsing attributes in process `syz.3.107'. [ 75.281365][ T5856] tmpfs: Unknown parameter 'mp+ËÞéóêJo$j\Áol' [ 75.672189][ T5871] mac80211_hwsim hwsim9 ÿÿÿÿÿÿ: renamed from wlan1 (while UP) [ 75.935782][ T64] kernel write not supported for file [eventfd] (pid: 64 comm: kworker/2:1) [ 76.376677][ T5882] input: syz1 as /devices/virtual/input/input6 [ 76.696647][ T5890] qnx4: no qnx4 filesystem (no root dir). [ 77.380509][ T5906] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 77.533815][ T5907] netlink: 76 bytes leftover after parsing attributes in process `syz.1.122'. [ 77.545119][ T5907] Êü: entered promiscuous mode [ 78.869945][ T5937] netlink: 'syz.3.130': attribute type 12 has an invalid length. [ 78.882784][ T5937] netlink: 132 bytes leftover after parsing attributes in process `syz.3.130'. [ 79.192575][ T39] audit: type=1804 audit(1726645385.381:2): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.133" name="/newroot/28/file0/bus" dev="9p" ino=43647148 res=1 errno=0 [ 79.218660][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x208a1 pfn:0x64904 [ 79.227663][ T5947] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 79.229607][ T5947] page_type: 0xbfffffff(buddy) [ 79.233106][ T5947] raw: 04fff00000000000 ffffea0001962708 ffffea0001913708 0000000000000000 [ 79.235609][ T5947] raw: 00000000000208a1 0000000000000002 00000000bfffffff 0000000000000000 [ 79.238057][ T5947] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 79.246346][ T5947] page_owner tracks the page as allocated [ 79.248118][ T5947] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 5950, tgid 5949 (syz.1.134), ts 79239135716, free_ts 77031708296 [ 79.254546][ T5947] post_alloc_hook+0x2d1/0x350 [ 79.255906][ T5947] get_page_from_freelist+0x1351/0x2e50 [ 79.257653][ T5947] __alloc_pages_noprof+0x22b/0x2460 [ 79.259123][ T5947] alloc_pages_mpol_noprof+0x275/0x610 [ 79.260566][ T5947] folio_alloc_mpol_noprof+0x36/0xd0 [ 79.264512][ T5947] vma_alloc_folio_noprof+0xee/0x1b0 [ 79.266132][ T5947] do_wp_page+0xf59/0x3360 [ 79.267386][ T5947] __handle_mm_fault+0x23c4/0x5470 [ 79.268831][ T5947] handle_mm_fault+0x498/0xa60 [ 79.270122][ T5947] do_user_addr_fault+0x7a3/0x13f0 [ 79.272065][ T5947] exc_page_fault+0x5c/0xc0 [ 79.273396][ T5947] asm_exc_page_fault+0x26/0x30 [ 79.274817][ T5947] page last free pid 5882 tgid 5880 stack trace: [ 79.276616][ T5947] free_unref_folios+0x9e9/0x1390 [ 79.278199][ T5947] folios_put_refs+0x560/0x760 [ 79.279624][ T5947] free_pages_and_swap_cache+0x36d/0x510 [ 79.283334][ T5947] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 79.285102][ T5947] tlb_flush_mmu+0xe9/0x590 [ 79.286456][ T5947] unmap_page_range+0x1c74/0x3bf0 [ 79.287985][ T5947] unmap_single_vma+0x194/0x2b0 [ 79.289435][ T5947] unmap_vmas+0x22f/0x490 [ 79.291295][ T5947] exit_mmap+0x1b8/0xb20 [ 79.292625][ T5947] __mmput+0x12a/0x480 [ 79.293807][ T5947] mmput+0x62/0x70 [ 79.294942][ T5947] do_exit+0x9bf/0x2bb0 [ 79.296138][ T5947] do_group_exit+0xd3/0x2a0 [ 79.297526][ T5947] get_signal+0x2658/0x26d0 [ 79.298908][ T5947] arch_do_signal_or_restart+0x90/0x7e0 [ 79.302342][ T5947] syscall_exit_to_user_mode+0x150/0x2a0 [ 79.306885][ T5947] ------------[ cut here ]------------ [ 79.308425][ T5947] kernel BUG at include/linux/mm.h:1460! [ 79.310223][ T5947] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 79.313209][ T5947] CPU: 2 UID: 0 PID: 5947 Comm: syz.2.133 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 79.317375][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.320204][ T5947] RIP: 0010:__iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 79.321971][ T5947] Code: b0 8b 48 89 df e8 32 4b 4e fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 f2 db 09 fd 48 c7 c6 20 44 b0 8b 4c 89 e7 e8 13 4b 4e fd 90 <0f> 0b e8 db db 09 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 79.327090][ T5947] RSP: 0018:ffffc9000da0efd8 EFLAGS: 00010246 [ 79.328703][ T5947] RAX: 0000000000040000 RBX: 0000000000000001 RCX: ffffc90006f71000 [ 79.330818][ T5947] RDX: 0000000000040000 RSI: ffffffff848148dd RDI: ffff88802175ccc4 [ 79.332915][ T5947] RBP: ffffea0001924134 R08: 0000000000000001 R09: fffffbfff2d2790e [ 79.335143][ T5947] R10: ffffffff9693c877 R11: ffff88802b928a40 R12: ffffea0001924100 [ 79.337595][ T5947] R13: ffff8880227c1c00 R14: 0000000000001000 R15: 0000000000001000 [ 79.339823][ T5947] FS: 0000000000000000(0000) GS:ffff88802b800000(0063) knlGS:00000000f5686b40 [ 79.342166][ T5947] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 79.343899][ T5947] CR2: 0000000020007000 CR3: 0000000061848000 CR4: 0000000000350ef0 [ 79.346003][ T5947] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.348096][ T5947] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.350164][ T5947] Call Trace: [ 79.351056][ T5947] [ 79.351843][ T5947] ? show_regs+0x8c/0xa0 [ 79.352975][ T5947] ? die+0x36/0xa0 [ 79.353980][ T5947] ? do_trap+0x232/0x430 [ 79.355129][ T5947] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 79.356735][ T5947] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 79.358349][ T5947] ? do_error_trap+0xf4/0x230 [ 79.359601][ T5947] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 79.361315][ T5947] ? handle_invalid_op+0x34/0x40 [ 79.362732][ T5947] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 79.364440][ T5947] ? exc_invalid_op+0x2e/0x50 [ 79.365797][ T5947] ? asm_exc_invalid_op+0x1a/0x20 [ 79.367207][ T5947] ? __iov_iter_get_pages_alloc+0x1d1d/0x2240 [ 79.368820][ T5947] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 79.370440][ T5947] ? __iov_iter_get_pages_alloc+0x1d1d/0x2240 [ 79.372083][ T5947] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 79.373836][ T5947] ? delete_node+0x207/0x8e0 [ 79.375174][ T5947] iov_iter_get_pages_alloc2+0x53/0xf0 [ 79.376667][ T5947] p9_get_mapped_pages.part.0.constprop.0+0x4ca/0x7d0 [ 79.378452][ T5947] ? p9pdu_vwritef+0x368/0x21d0 [ 79.379773][ T5947] ? __pfx_p9_get_mapped_pages.part.0.constprop.0+0x10/0x10 [ 79.381672][ T5947] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 79.383029][ T5947] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 79.384378][ T5947] ? p9_tag_alloc+0x4cc/0x870 [ 79.385619][ T5947] ? __pfx_lock_release+0x6/0x10 [ 79.386955][ T5947] p9_virtio_zc_request+0x1ac/0x1460 [ 79.388345][ T5947] ? p9pdu_writef+0xc4/0x100 [ 79.389570][ T5947] ? __pfx_p9pdu_writef+0x10/0x10 [ 79.390918][ T5947] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 79.392273][ T5947] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 79.393708][ T5947] ? rcu_is_watching+0x12/0xc0 [ 79.394891][ T5947] ? trace_9p_protocol_dump+0x192/0x220 [ 79.396359][ T5947] ? rcu_is_watching+0x12/0xc0 [ 79.397626][ T5947] ? p9_client_prepare_req+0x111/0x4d0 [ 79.399073][ T5947] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 79.400600][ T5947] ? hlock_class+0x4e/0x130 [ 79.401761][ T5947] p9_client_zc_rpc.constprop.0+0x29a/0x880 [ 79.403207][ T5947] ? __pfx_p9_client_zc_rpc.constprop.0+0x10/0x10 [ 79.404872][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 79.406256][ T5947] ? hlock_class+0x4e/0x130 [ 79.407467][ T5947] ? mark_lock+0xb5/0xc60 [ 79.408618][ T5947] ? __pfx_mark_lock+0x10/0x10 [ 79.409886][ T5947] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 79.411393][ T5947] p9_client_write+0x447/0x680 [ 79.412668][ T5947] ? __pfx_p9_client_write+0x10/0x10 [ 79.414059][ T5947] ? mark_held_locks+0x9f/0xe0 [ 79.415347][ T5947] v9fs_issue_write+0xe2/0x180 [ 79.416621][ T5947] ? __pfx_v9fs_issue_write+0x10/0x10 [ 79.418085][ T5947] ? rcu_is_watching+0x12/0xc0 [ 79.419405][ T5947] ? trace_netfs_sreq+0x193/0x220 [ 79.420787][ T5947] netfs_do_issue_write+0x92/0x110 [ 79.422174][ T5947] netfs_advance_write+0x384/0xbd0 [ 79.423543][ T5947] ? netfs_buffer_append_folio+0x569/0x750 [ 79.425093][ T5947] netfs_write_folio+0xc44/0x18f0 [ 79.426455][ T5947] netfs_writepages+0x2ba/0xb90 [ 79.427745][ T5947] ? __pfx_netfs_writepages+0x10/0x10 [ 79.429163][ T5947] ? __pfx___lock_acquire+0x10/0x10 [ 79.430553][ T5947] ? stack_access_ok+0xf9/0x270 [ 79.431786][ T5947] ? __pfx_netfs_writepages+0x10/0x10 [ 79.433162][ T5947] do_writepages+0x1a3/0x7f0 [ 79.434405][ T5947] ? __pfx_do_writepages+0x10/0x10 [ 79.435836][ T5947] ? __pfx_lock_acquire+0x10/0x10 [ 79.437267][ T5947] ? do_raw_spin_lock+0x12d/0x2c0 [ 79.438741][ T5947] ? do_raw_spin_unlock+0x172/0x230 [ 79.440244][ T5947] ? _raw_spin_unlock+0x28/0x50 [ 79.441614][ T5947] ? wbc_attach_and_unlock_inode+0x597/0x940 [ 79.443279][ T5947] filemap_fdatawrite_wbc+0x148/0x1c0 [ 79.444685][ T5947] __filemap_fdatawrite_range+0xba/0x100 [ 79.446172][ T5947] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 79.447827][ T5947] v9fs_dir_release+0x429/0x590 [ 79.449125][ T5947] ? __pfx_v9fs_dir_release+0x10/0x10 [ 79.450543][ T5947] ? __pfx_v9fs_dir_release+0x10/0x10 [ 79.451959][ T5947] __fput+0x3f6/0xb60 [ 79.453019][ T5947] ? _raw_spin_unlock_irq+0x23/0x50 [ 79.454406][ T5947] task_work_run+0x14e/0x250 [ 79.455629][ T5947] ? __pfx_task_work_run+0x10/0x10 [ 79.456989][ T5947] syscall_exit_to_user_mode+0x27b/0x2a0 [ 79.458502][ T5947] __do_fast_syscall_32+0x80/0x120 [ 79.459885][ T5947] do_fast_syscall_32+0x32/0x80 [ 79.461221][ T5947] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 79.462911][ T5947] RIP: 0023:0xf7f02579 [ 79.463988][ T5947] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 79.469146][ T5947] RSP: 002b:00000000f568656c EFLAGS: 00000296 ORIG_RAX: 000000000000014a [ 79.471461][ T5947] RAX: 0000000000000003 RBX: 0000000000000004 RCX: 0000000000000003 [ 79.473626][ T5947] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.475751][ T5947] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 79.477810][ T5947] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 79.479887][ T5947] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 79.481954][ T5947] [ 79.482789][ T5947] Modules linked in: [ 79.484443][ T5949] base_sock_release(ffff888026773c00) sk=ffff88802487c000 [ 79.502118][ T5947] ---[ end trace 0000000000000000 ]--- [ 79.503720][ T5947] RIP: 0010:__iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 79.505607][ T5947] Code: b0 8b 48 89 df e8 32 4b 4e fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 f2 db 09 fd 48 c7 c6 20 44 b0 8b 4c 89 e7 e8 13 4b 4e fd 90 <0f> 0b e8 db db 09 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 79.511395][ T5947] RSP: 0018:ffffc9000da0efd8 EFLAGS: 00010246 [ 79.513168][ T5947] RAX: 0000000000040000 RBX: 0000000000000001 RCX: ffffc90006f71000 [ 79.515353][ T5947] RDX: 0000000000040000 RSI: ffffffff848148dd RDI: ffff88802175ccc4 [ 79.517518][ T5947] RBP: ffffea0001924134 R08: 0000000000000001 R09: fffffbfff2d2790e [ 79.519710][ T5947] R10: ffffffff9693c877 R11: ffff88802b928a40 R12: ffffea0001924100 [ 79.522279][ T5947] R13: ffff8880227c1c00 R14: 0000000000001000 R15: 0000000000001000 [ 79.524550][ T5947] FS: 0000000000000000(0000) GS:ffff88802b800000(0063) knlGS:00000000f5686b40 [ 79.527096][ T5947] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 79.528890][ T5947] CR2: 00007f0ba9f24ba0 CR3: 0000000061848000 CR4: 0000000000350ef0 [ 79.532524][ T5947] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.534826][ T5947] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.536973][ T5947] Kernel panic - not syncing: Fatal exception [ 79.539189][ T5947] Kernel Offset: disabled [ 79.540337][ T5947] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:43:05 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffc900030f7b60 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff84b2dd24 RDI=ffffc900030f7b60 RBP=ffffffff84b2dd10 RSP=ffffc90000007f60 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=ffffc90000007ff8 R12=0000000000000000 R13=dffffc0000000000 R14=0000000000000000 R15=ffffc900030f7b28 RIP=ffffffff84b2dd4d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000063508000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004c00000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000002 RBX=0000000000066788 RCX=ffffffff81f51bda RDX=ffff888025c80000 RSI=0000000000000000 RDI=0000000000000007 RBP=ffff88803fff9180 RSP=ffffc9000333f3e8 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000008 R11=dffffc0000000000 R12=0000000000000001 R13=0000000000000008 R14=0000000000000001 R15=1ffff92000667e8a RIP=ffffffff818b24c0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000203be000 CR3=0000000061986000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004c00000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fcd3b5 RDI=ffffffff9a5e9460 RBP=ffffffff9a5e9420 RSP=ffffc9000da0e968 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552032203a555043 R12=0000000000000000 R13=0000000000000039 R14=ffffffff84fcd350 R15=0000000000000000 RIP=ffffffff84fcd3df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b800000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020007000 CR3=0000000061848000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=1ffff920001e5ee0 RCX=ffffffff81694e29 RDX=fffffbfff2036674 RSI=0000000000000008 RDI=ffffffff901b3398 RBP=0000000000000003 RSP=ffffc90000f2f6e8 R8 =0000000000000000 R9 =fffffbfff2036673 R10=ffffffff901b339f R11=ffff88802b928a40 R12=ffffffff8ddb9b60 R13=dffffc0000000000 R14=000000000003d8cc R15=ffffc90000f2f860 RIP=ffffffff81e9aee8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5724da4 CR3=0000000055dce000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000