last executing test programs: 1.310976001s ago: executing program 2 (id=3): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r0 = syz_open_dev$audion(&(0x7f0000000040), 0xc9f4, 0x80000) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@gettaction={0xd8, 0x32, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) write$sequencer(r0, &(0x7f0000000240)=[@l={0x92, 0x5, 0xb0, 0x7, 0x0, 0x7, 0x3}, @e={0xff, 0x9, 0x6, 0x7, @SEQ_NOTEON=@note=0x61, 0x8, 0x7, 0x8}, @e={0xff, 0x9, 0x2, 0x5, @SEQ_NOTEON=@special, 0x1a, 0x0, 0x9}, @v={0x93, 0x0, 0x90, 0x15, @MIDI_NOTEON=@special, 0x40, 0x9}, @generic={0x80}, @v={0x93, 0x2, 0x0, 0x12, @generic=0x27, 0x6, 0x4}, @e={0xff, 0xb, 0xa, 0xf2, @SEQ_CONTROLLER=0xfe, 0x74, 0xf1, 0x9}], 0x31) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000540)=0x14) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000002c0)="b14fd78bcef5ed5b51cb33df55ae422a8c0d71811a402566c71ba0fe60aa2c3608b0a86eaf04b0d1cf0b874f11a57bfedc2d675fef36", 0x36}, {&(0x7f0000000300)="d24e8a13ac45b2e19dc9a86577385c0e8e07687f71a72fa6de0a57ebaa4f8a35f3f3343b68d205e3b34dddd5e9b265f928fbf727db23cac66d3765ee54d0a696c2a8ce0667469f61e054a2ca98343c727cbf13196c198558ea7978b17d64594aebccaeb66e304c395eff42af05ba30133653ab737c7c12f7a1845c0370abb7a2b90d65357ff2bd9afc06aeb1ac55d5018d93d62570e41914da73f1437d0a9a5bdba8802120f13b685c", 0xa9}, {&(0x7f00000003c0)="18cbddd734e3e216f3a286acf938d4b502c5f9da51fccec30f0cc52226d5fbc4a6a553d3a60978274f1824c06af89ffd870d6a9a9c740d6bc041b38bbfbace59ecc1b5682840b32260198515435abab0b66d78e70f3fd59dfbaa7dbc7ccfc2872518fe7cea95e36aaec579f9a5ffc4d44adb28c6af09b1461454373e867c2da41545dac03126661e887f221b2dd0c9fad166262dc2ad2198edef3f9d29816d2cb025f3384063ccba8fcddcdc14f679065ab050018316e64fb32c06d49c7ae81698fb44d139b0c247783cdd52f36dfe4cb3dca722971a7cdfda58d82fcb1b710bc3b27f25a0dd30ef25b7f7a586", 0xed}], 0x3, &(0x7f0000000580)=[@ip_retopts={{0x68, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0xc8, [@local, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @dev={0xac, 0x14, 0x14, 0x20}]}, @rr={0x7, 0x1f, 0x8a, [@rand_addr=0x64010101, @private=0xa010101, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @private=0xa010102, @empty]}, @ssrr={0x89, 0x1f, 0x59, [@multicast2, @local, @rand_addr=0x64010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x2b}, @dev={0xac, 0x14, 0x14, 0x38}, @empty]}, @ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @private=0xa010100, @broadcast}}}], 0xb8}, 0x800) pwritev(r0, &(0x7f0000000800)=[{&(0x7f0000000680)="bf88d2c49c80cdaba33532b411bec614ebcc6c048971a49221cec686cb7679ff42ae7aa5bd5cf13eb6bedf09eb9658f6e3d3e5def4669266233037c46dec2a1a7d2090a0d142e7fe19d6cf", 0x4b}, {&(0x7f0000000700)="5802a41e4666310ac6db6a4941cd6ee39736c418d7fa293ab2a227ddd9a8bedfb6341e937335f67ed22461b959a69b7cf92c47fec8b3c7cb0973c8af03382e91a3", 0x41}, {&(0x7f0000000780)="84c49e50b78651129f4794ddd7a0be405c8cf494674373124eab71d401019c7036091bb09b932ba005d0fd6a9c9a40b5c9193944b15d38caa5fb0eda22ed276671db920d888362bdad6bdc764d62c69d43052a5b69d4d276239d7ddb934bd7a6e1c0702d55c72d40c96807f91fa2", 0x6e}], 0x3, 0x5, 0x0) sendmmsg$sock(r0, &(0x7f0000001a40)=[{{&(0x7f0000000840)=@in={0x2, 0x4e24, @multicast2}, 0x80, &(0x7f0000000ec0)=[{&(0x7f00000008c0)="a8493bc61196bc919eb95b6a35253f783b53796a92a6cc677d6ee9ba32abac2e2159610c987cd740e4625e2a8c75aa3c994d616acb144d2546987c3f272e47414148c7d45dbaebcea28aa59a28736413a12dcd732f9562f32860ef8f0d93e23bf230ee1e0c17cd6832f20969e2f4360a9af235b1147ee51aea461db50d6bfb84df3aa036a9136a0676b27c7884028f9763c7", 0x92}, {&(0x7f0000000980)="7fd2a05cbd15f58d6c3c8a58ee035edab70a01058dcb5bf9666104f43ae51df2db4d2a1d4dc3223e7899d167a8be226da7f8699cec54c38a76f3c34ce227c118f97995ea12d22e9b5defa76ed04fdffabe9af155bc12e3b0fe6c0f935df69811bc77", 0x62}, {&(0x7f0000000a00)="f9645ff4a1a2739224b23cb51a969299", 0x10}, {&(0x7f0000000a40)="b0338ec1d6e0fef690393925a36da09de80ab6400c844724544bf95a77fc481abcea8c74d261f97a63f8e4364493e53bd734330f5eeae13877b88357faaa3b063b1a14ad46d13978f0dbba9529551c1328b5128d46eb29646e4b21d3314c86e70476b620d02454b0723bfe9ff660f694fc72569a3bc378991398bbe908d55f0d10101acb466baafc857eb44843215f0fbac6a76e5ef0075805a6af79057bf4abc18bd0fd8ee48230fe18c45bac28475425ad5fcda702b02665a4fd2d567c54c5ea2808552b460ed9f4f80a08e481329b2a35341fd8d7bb295c6d8ce49583a630", 0xe0}, {&(0x7f0000000b40)="de78ebff7a8eea3af625ba7d7f4b3f21d8ad973a4a6ef44246921ed3874d1b07144e24323bc018d743fd766efd4377d1d2c6003b68ca63b05dc2214833e8bfb198017cb19cec818bc3c27ff667bcf9b62c7351c37dabe2dc196c58e6cc65a709", 0x60}, {&(0x7f0000000bc0)="3618739a43c8c98459f477cdc25de90de2cf35817a73f1938b4152a0f16607b07dd031d5c98fbceb7f319433981082ddbdd087b21f61fe20ec6b3f390ca4fba58f8de738de546647fc8e55525162931bc865e754203eeedd4ad374cd68d43cd11f9cbbf9ce10689589888efc7d00ecacf099fe674bb765150b3c8a2f48510359162f0c7f8e444a0c89bfc16f0842f661ef2244fb6ebd845c05342ac298fbec7f393afbfcc949f98b11136c27514ee2d6c6b78590efc8c180b3e3e050335cbeca89169798128f09b45d4c201e82afd27192da3329b4c498c000e4f106c3", 0xdd}, {&(0x7f0000000cc0)="1935e2604ec22ff0bda5238f2d81e7e0767036ddd648d6a62ff4d4cb8c14220c627ff44c79ed12d1b8da6d071b9b24ef1aec320a2cddc079650928068e993de80373096fa71ee19130744c09e1fdea4ed5d21b2b30408c04063b1c20a76a717b5720c86ce963f4e35bc39f72496a8edddd06456a90d9ffa14e37a969009833cc94b941a2e94a940a", 0x88}, {&(0x7f0000000d80)="865baec066368ee8dcccff5def7d8efe441d4e24405c63d4fc0641175baa08aee1ca83157bf229c8c868961aaa1a9acfdb3a4faea05d75a0f843b2dee46cc0fbd130f7ebf4d83fe1ab75cfc5ee36d39e3c25e0326406c5cf49eb9bf109d4d991401dda5e6ff0eeba95c5680b5e7947752874adf6e14b86d23e319945ca5b2b1925269c8ab5b175a26e", 0x89}, {&(0x7f0000000e40)="d5205a9f846ea66de75a045a71d4fc0353257a33f6a439ab5d56d17336930b0ce65805f5751b6abf562adb04094e2a532e76a981f9d8559a7950ced6b9cc693f2ac51933fda2", 0x46}], 0x9, &(0x7f0000000f80)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x18}}, {{&(0x7f0000000fc0)=@sco={0x1f, @none}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001040)="34f80202a58555bcdbb0c16ba8718548c5f551a189335a5e5896c6056cc7e9a6169bca3abb16dadd1f4b42137aed625f3d366763b16c88ebdc2111c196549f2be111e416f45e046103c7e941bb85c628a408d962a61ccfde16386fec213dcd6b770545c9c136318f29b7e08e63a66dc80b919338afbcde644e76c5cf1c3d118c23fe042c1a0051b1fc455f09d9922034759ffd6d49da1074951d3bb67e6b6a0ee5038f8141fbb6f54bff85edb220121bc4f0ad726cb73e6f57e98d82", 0xbc}, {&(0x7f0000001100)="7c339edf944a39957cb63706ca675262043474ee6985c69dbf693279247725eedb52305d04b9cde7eb541367af44add2deb3af322e257cfb5afdcfe8a9617e89c2ef0c229e2af0c499ef77408ec1e670", 0x50}, {&(0x7f0000001180)="ec4f7b93972774b61ec88643957463b1275bce66f4d3c362bfcc940505d2a98aa539e1d9f76b0e93974cf477d7b1350f529294f2f88df1173d326901c61a8301da50ff5753e8bdc6665b8b2514a306ab4e44f37f1c712d4ee1d9ecb97199ff3046e7b20bcb3b809b4067e91266d3ff9a7a7005af1acee1dc7509ed6b6152e987d201335c17ac5b05f440d35da79c269f67c5d6e0f4ba8e30ed16f1cd1a0b6c5aa487c5f3da9b610bfa571eaa0c07f404d159e83c", 0xb4}], 0x3, &(0x7f0000001280)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0xb}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0xd8}}, {{&(0x7f0000001380)=@rc={0x1f, @none, 0x80}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001400)="6f6c1707eb711df467947226f318be69ab3633fb92ce7ef02723e2869f7d807aab93e4f003ec9e3eb631aaf8b9234a6ce4b8a5eaa07e2277615e064b19213127c794eed6f0739df663fa8186b27af9b44c107f84bdfb12", 0x57}], 0x1, &(0x7f00000014c0)=[@txtime={{0x18, 0x1, 0x3d, 0x8001}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x48}}, {{&(0x7f0000001540)=@ieee802154={0x24, @none={0x0, 0x2}}, 0x80, &(0x7f00000019c0)=[{&(0x7f00000015c0)="8ce9ea87c3afba544b72a40a67fe2cdc8e9bf6eff39e0b5e8c974363cd9dc66038be1b734546afc69a854ca500020de2a6bf0bf2fe1c0f54bf389110b12466bef783035241995efe8c731898873d8116c7a0cba36bfaa407ba5e29b287268929d19827e4b099a2d909762771f291785e3f6268187467250d023401d3b55a4597ec485eb1cc6de0aee8fdfd773d9cbf59b1781aba09da603f67841f0ffd89b2cd08a3aa4fc534128996ffc7426d59adea7f4508b0f99e23b8d2cc551dfc426fff91e30d36b21c296677c8542e55a686db01a616f11ad029137799e080bf948eea461fa1f13a430df6f0acdcafffd57f136d7c89e4b647b8526385d28bc1", 0xfd}, {&(0x7f00000016c0)="6d21a1d8c7c0e853a6a80912da024ddbf5f8f77e1e0fa3322cfda7b45cfa921ed51c8d0e2c25070c25a61a453e1e9c1eb3207be1daa0d1d5da3e8cf7f3", 0x3d}, {&(0x7f0000001700)="fe17ec5ad4d809c9c65838c25799d6718933039f93a98271645f72b212f84230309582a81975e70f690c47b085895ae5417ef32cd8f16cff81a69dc6d8b7675952f9f198068a59f3270da05c773d1f397187a96aac248c8abbeff101499684fbd6de1e4542d38232451b07197e260998f8a7f43a170c1d543b68f4ea71f1889bbd7a7eb9579b3648d4a1f22e20", 0x8d}, {&(0x7f00000017c0)="13432a8e643ff10a9eff587d80f6198f9ed3226e6187e731fee9b7d4e75307b4de5ede0b9d70760989be2bccd623b806b3ebfc03904a2ba9564f241041f35d13f6906c0ebc8065d2f324ca8174390999f416291f46b3fd79229f9a9d17567b19d15015415a3ca58bca20b9a149bef4f133e2b9fa14e96ee243b4d7e443cabe446a731fdfae2178df294f8e012e5996635b74bac74e4efdcee3096ad9b13ed5d1cb2684754624d374a6ac70154d4ce992a35cf2387387b70785cd4b9ec9e6990d18", 0xc1}, {&(0x7f00000018c0)="b515df182cb91e5280ddfb17bc75daeb030b2218fdd388793ecaac4b9ba2828940e7db3c906ece8e3f0750db30208ca4d3bae626ca62d9e67bea4fc7fe2593f2217da8397cd574a888662f650971f5f7fb45edd9089c7795193f50ca07b98d2b48c1c64fb51ef9b55e9921105788ada440affa0c0850009926840d384cbb9bf6a2b303fd75ac6d2053b1f3eff704c71e2ae5e6dc9a47532027fa140a3f0a0843f070c7751303205a32a641c13873424f8468339538a6cfb877c9d2616dbcc77041cd3bd167154099975e082b660b4be79f96751e87326269047b348b5b53f3d9d6f18029cc8abdc7d3435daaed5835b1", 0xf0}], 0x5}}], 0x4, 0x8008000) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000001b40)) openat$kvm(0xffffffffffffff9c, &(0x7f0000001f40), 0xa2580, 0x0) close_range(r0, r0, 0x2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001f80), 0x101000, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001fc0)=@assoc_value={0x0}, &(0x7f0000002000)=0x8) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x30, 0x1411, 0x0, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x831) syz_kvm_setup_cpu$x86(r3, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000021c0)=[@text16={0x10, &(0x7f0000002140)="0f01c8660fc7760d66b9770a000066b8f662a30666ba8d466e7e0f300f08baf80c66b8e87c1d8e66efbafc0cb8ee00efd9fa66b80500000066b9da4a00000f01c13a000fc7992530f30f1efe", 0x4c}], 0x1, 0x40, &(0x7f0000002200)=[@cr0={0x0, 0x40020008}, @vmwrite={0x8, 0x0, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000022c0)={0x9, &(0x7f0000002240)=[{0x400, 0x0, 0x9, 0xfffff8aa}, {0xe7b9, 0x1, 0x54, 0xfffffff8}, {0x8, 0x3, 0x1, 0x4}, {0x1, 0x4, 0xe, 0x2}, {0xc, 0x8d, 0x2, 0x2}, {0x7fff, 0x8, 0x9, 0x100}, {0x7, 0x7f, 0xf6, 0x3}, {0x2, 0x3c, 0x7, 0xfffff001}, {0xfff0, 0x9, 0x6, 0x40}]}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000002300)) ioctl$BLKFINISHZONE(r0, 0x40101288, &(0x7f0000002340)={0xfc6}) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000002380)) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000023c0)={0x3, 0x0, [{0xb1, 0x0, 0x4}, {0x27b, 0x0, 0x9}, {0x40000105, 0x0, 0x800000000000000}]}) ioctl$KVM_SET_DEVICE_ATTR_vm(r0, 0x4018aee1, &(0x7f0000002440)=@attr_other={0x0, 0x80, 0x5, &(0x7f0000002400)=0x3}) bpf$MAP_CREATE(0x0, &(0x7f0000002480)=@bloom_filter={0x1e, 0xd158a6b, 0xf86, 0xe781, 0x40000, r3, 0x8, '\x00', r1, r0, 0x2, 0x1, 0x4, 0xf}, 0x50) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000002500)={r4, 0x9, 0x1}, 0x8) getsockname$inet(r0, &(0x7f0000002540)={0x2, 0x0, @private}, &(0x7f0000002580)=0x10) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f00000025c0)=0xdb27, 0x4) write$sequencer(r0, &(0x7f0000002600)=[@t={0x0, 0x4, 0x80, 0x0, @generic=0x7}, @raw={0xfe, 0xf, "c97dce7f2ee9"}, @v={0x93, 0x6, 0x90, 0x1e, @generic=0x32, 0x8, 0x2}, @n={0x1, 0xf9, @generic=0xd2, 0x2}], 0x1c) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000002780)={0xfffffffffffffffd, 0x0, &(0x7f0000002740)={&(0x7f0000002680)={0xa8, r5, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x57, 0x48}}}}, [@NL80211_ATTR_IE={0x88, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x2}, 0x3, 0xf, @device_b, 0x6, 0xff, 0x101}}, @link_id={0x65, 0x12, {@random="8928ff68e0aa"}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x1, 0x1, 0x1, 0x6, 0x60}}, @prep={0x83, 0x1f, {{}, 0x5, 0x2, @device_a, 0x0, @void, 0x0, 0xfffffff8, @broadcast, 0x4}}, @mesh_chsw={0x76, 0x6, {0x8, 0x8, 0x2a, 0xa2}}, @ssid={0x0, 0x3, @random="dc74a4"}, @mic={0x8c, 0x18, {0x70c, "847a4bbcabf4", @long="041daad6011b4edeb4abc730c12765a6"}}, @mesh_id={0x72, 0x6}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000004}, 0x4044000) 1.231990547s ago: executing program 2 (id=5): r0 = getpgid(0xffffffffffffffff) ioprio_get$pid(0x2, r0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) ioprio_set$pid(0x3, r1, 0x2000) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 1.170892577s ago: executing program 2 (id=6): r0 = syz_open_dev$dmmidi(&(0x7f0000000080), 0x7, 0x442000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000000c0)={0x1, 0xba5f, 0x4, 0x0, 0x34a91375}) (async, rerun: 64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) (rerun: 64) ioctl$TIOCGPTPEER(r1, 0xc0184d16, 0x200000000005) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000000)) 1.17049742s ago: executing program 2 (id=7): r0 = io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x100016b}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000300)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x10000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, 0x46}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000100)={r2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000780)=""/242, 0xf2}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x2}, 0x60}], 0x1, 0x42, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x641, 0x101001) write$evdev(r4, &(0x7f0000000300)=[{{0x77359400}, 0x2, 0x10, 0xb}, {{}, 0x0, 0x97, 0x10}, {{0x0, 0xea60}, 0x14, 0xa, 0x2eca}], 0xfed1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 1.091747424s ago: executing program 2 (id=8): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$dsp(r0, &(0x7f0000000100)="e19f1f75b60e942834c66d73ae1b38fc18c09de4a45e106d64b7cdef483025290173f3be879eb7d4ae6b627213bb312d2f0bf11bf2fe4be0a00a3a5baff28a4ed2e218e099a40a549ccb17999a652005a113df4ae537701ff016a8b8d05918f811aeb7de2698b79132abb26e571d04668f6b9ea2c6d771a64ecd9b22938e363517f7306389bcb9fa3d8a8b066b662f3a243c69b414208a29d556ee0959ea8051d3db607e4135c72b747c9f62795403c346331300001000", 0xffffffab) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r1, &(0x7f0000000ac0)="f7", &(0x7f0000000080)=""/71}, 0x20) (async) mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r0, 0x0) (async) ppoll(&(0x7f0000000c40)=[{r0, 0x1942}], 0x1, 0x0, 0x0, 0x0) (async) close(0xffffffffffffffff) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x22}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000bc0)={0x0, 0x18, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000240)={0x7fff, 0x8001, {}, {0xffffffffffffffff}, 0x1, 0x100}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f00000002c0)=0xe8) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x20020, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@aname={'aname', 0x3d, '/\\/'}}, {@msize={'msize', 0x3d, 0x1974}}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/ppp\x00'}}, {@obj_user={'obj_user', 0x3d, ':*:*Z'}}, {@uid_gt={'uid>', r5}}, {@euid_lt={'euid<', r6}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/dsp\x00'}}]}}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x8, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x9}]}}]}]}, 0x34}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCGUNIT(r10, 0x80047456, &(0x7f0000000040)) (async) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r9, @ANYBLOB="003000000000000014001a80100004"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 1.091455139s ago: executing program 0 (id=1): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c587c7ab18285f7a55d53e6e9bfdac5500000000030006"], 0x78}, 0x1, 0x7}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028076650200080000003e120000080002"], 0x44}}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x10000000000) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet6_int(r8, 0x29, 0x18, 0x0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f0000000180)) 1.040321044s ago: executing program 0 (id=9): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) io_uring_setup(0x5632, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x7, 0x20002f7}) (async) r0 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x2}}}]}, 0x78}}, 0x0) close_range(r1, r0, 0x2) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) 1.023926676s ago: executing program 1 (id=2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)=@x86={0x6, 0x0, 0x8, 0x0, 0xc, 0x8, 0x4, 0xb, 0x3, 0x13, 0x5, 0x70, 0x0, 0xd, 0xb, 0x0, 0x0, 0x0, 0xce, '\x00', 0x4, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 967.583746ms ago: executing program 0 (id=10): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_test', 0x8a881, 0xbb) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_test', 0x8a881, 0xbb) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f00000002c0)=0x35e6, 0x4) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4000000000000ffd, 0x0, 0x0, 0x3, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7061a74df2cfc06489f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4000000000000ffd, 0x0, 0x0, 0x3, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7061a74df2cfc06489f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000000}, 0x800) ioctl$FIONCLEX(r0, 0x5450) 967.210982ms ago: executing program 3 (id=4): r0 = landlock_create_ruleset(&(0x7f0000000000)={0xc00}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x24, &(0x7f0000000180)={0x0, 0x6}, 0x8) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000a40)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f0000000040)=0xe8) getresgid(&(0x7f0000000780), &(0x7f0000000800)=0x0, &(0x7f0000000840)) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000009c0), 0x1, 0x0) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00)={0xffffffffffffffff}, 0x4) r9 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f0000000000)=0x1) ioctl$VIDIOC_QUERYSTD(r9, 0x8008563f, &(0x7f00000013c0)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000080)="0c8050ec628a9568a73c13ef6ec87b39106c69f13d085ee630e925de25fb4d02962bedd7c8", 0x25}, {&(0x7f0000000300)="2fa8927c1d76ba10059b8d4ef2ffaa532f053bb5290289395f15e55e056cf47477092c98e72a2290d58d0bc7fc385bc82a011fea50a1b69afd3fdc112cef27368d01f34dc2cad0404452f9cff9b82bacee2620ba2900d4", 0x57}, {&(0x7f00000001c0)="bb32c438a7133afa62fd562357fe033b4faaefceae", 0x15}, {&(0x7f0000000200)="26257c1b7e7eb425a3e5057b6187ea4121bdeb4081537f3a98ecd0e277c074d89ddf55c74335f936869c41a4fb18f9416bf3a1d70432009d50a5ca082517bffa27ac19a8b45709e0", 0x48}], 0x4, &(0x7f0000000380)=ANY=[@ANYRES16=r6, @ANYRES16=r6, @ANYRESHEX=r4, @ANYRES32=r8, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES64=r4, @ANYRES32=r9, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES64=r4, @ANYRES32=r2, @ANYRES32=r0, @ANYRESOCT=0x0, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRESOCT=r5, @ANYRES32=r6, @ANYBLOB="000000002c000047ba4030000009000000000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES64, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r7, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES8, @ANYRES32=r8, @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r9], 0x138, 0x40815}, 0x8000) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) 919.225237ms ago: executing program 0 (id=11): socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="7b87f20f"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e20, 0x8, @empty, 0xa}}, 0x83, 0x3, 0x7, 0x1, 0x4, 0xfffbfffd, 0x4}, 0x9c) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e20, 0x8, @empty, 0xa}}, 0x83, 0x3, 0x7, 0x1, 0x4, 0xfffbfffd, 0x4}, 0x9c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) (async) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) 918.986431ms ago: executing program 3 (id=12): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @null}, [@bcast, @null, @null, @rose, @remote, @null, @remote, @netrom]}, &(0x7f0000000100)=0x48) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000002600010026bdf000fcdbdf25070000"], 0x14}, 0x1, 0x0, 0x0, 0x404089d}, 0x20048000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000000)={'bond0\x00', {0x2, 0x0, @multicast2}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x30, r4, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x40000) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000900)=ANY=[@ANYBLOB="180000002e00012026bdf000fcdbdf250400000004001d"], 0x18}, 0x1, 0x4000, 0x0, 0x4000d}, 0x4008090) 861.765172ms ago: executing program 3 (id=13): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000002180)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x3ff}]}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 811.165951ms ago: executing program 1 (id=14): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getcwd(&(0x7f0000000200)=""/197, 0xc5) r2 = open(&(0x7f0000000300)='./file0\x00', 0x20000, 0xee565ac3942cc491) write$P9_RLERROR(r2, &(0x7f0000000340)={0x10, 0x7, 0x2, {0x7, '.*[\'-]:'}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000020000010000000900010073797a30000000002c000000030a05000000000000000000010000000900030073797a31000000000900010073797a300000000084000000060a010400000000000000000100000008000b40000000000900010073797a30000000005c00048040000180080001006e6174003400028008000540eb0000090800014000000001080002"], 0xf8}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYRES64=r0], 0x158}}, 0x0) 721.468229ms ago: executing program 0 (id=15): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r1) syz_fuse_handle_req(r1, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0x9, 0x0, {0x1, 0x0, 0x2, 0x0, 0xfffff9ae}, 0xfffffffb}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000180)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x9e3a, 0x10100, 0x80000, 0x1bd}, &(0x7f0000002000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0) ptrace(0x10, r4) wait4(r4, 0x0, 0x0, &(0x7f0000000280)) ptrace$getsig(0x4202, r4, 0x3, 0x0) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="4d7e00000000fedbdf252a00000008002f000000000005003600000000000c0005000202aaaaaaaaaaaa05003700010000000a0001007770616e31000000"], 0x44}, 0x4, 0x700000000000000, 0x0, 0x80c0}, 0x40) 721.270976ms ago: executing program 1 (id=16): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r2 = dup3(0xffffffffffffffff, r1, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r1, @ANYRES16=r0, @ANYRES8=r2], 0x84}}, 0x0) 651.531091ms ago: executing program 1 (id=17): syz_open_dev$tty1(0xc, 0x4, 0x4) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) accept$inet6(r0, 0x0, 0x0) (async) accept$inet6(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x48, r4, 0x400, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x48}}, 0x0) 0s ago: executing program 3 (id=18): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x9da9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x1}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x3a4, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xca8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x75c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc4c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x25fd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x74}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffff3e}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xeaa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}]}, @TIPC_NLA_NODE={0x1cc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xbbf}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x198, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x14}, 0x80c0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000/0x800000)=nil], &(0x7f0000000200)=[0x1], &(0x7f0000000240), 0x2) r4 = socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r5, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x8000}, 0xc) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r0, 0x60}], 0x1, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x5, 0xffff, 0x1}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000680)={r7, 0x6, 0xa3, "52437c439d5c6f8bdf4c9906874c7a298536437fdccbc23169a8af4c5b10ff803780368c845f21f4bc8bc5aa96dbbb52d4c05f1a3362284bb1baefe073916079412368c518c0b4cfaded34541a9a526e440cd4cc2819b07e14973469a8b8f93069a7f32bbe7e419e65e770fab26adaab85f55c4bc20550edc73ec0ca1ecf4864528d258ff807f5c6d21a58d845c19372817b36881cb5a1190882a34141b3027627aa82"}, 0xab) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffff, 0x4}, 0x6) kernel console output (not intermixed with test programs): [ 38.244983][ T40] audit: type=1400 audit(1763029932.993:59): avc: denied { write } for pid=5838 comm="sh" path="pipe:[8205]" dev="pipefs" ino=8205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 38.253203][ T40] audit: type=1400 audit(1763029932.993:60): avc: denied { rlimitinh } for pid=5838 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.260377][ T40] audit: type=1400 audit(1763029932.993:61): avc: denied { siginh } for pid=5838 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:21880' (ED25519) to the list of known hosts. [ 39.774791][ T40] audit: type=1400 audit(1763029934.543:62): avc: denied { name_bind } for pid=5845 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.793359][ T40] audit: type=1400 audit(1763029934.563:63): avc: denied { write } for pid=5846 comm="sh" path="pipe:[8224]" dev="pipefs" ino=8224 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 39.811841][ T40] audit: type=1400 audit(1763029934.583:64): avc: denied { execute } for pid=5846 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.818277][ T40] audit: type=1400 audit(1763029934.583:65): avc: denied { execute_no_trans } for pid=5846 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 41.731047][ T40] audit: type=1400 audit(1763029936.503:66): avc: denied { mounton } for pid=5846 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.740935][ T5846] cgroup: Unknown subsys name 'net' [ 41.932557][ T5846] cgroup: Unknown subsys name 'cpuset' [ 41.936440][ T5846] cgroup: Unknown subsys name 'rlimit' [ 42.158997][ T5892] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.822442][ T5846] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.982282][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 45.982296][ T40] audit: type=1400 audit(1763029940.753:80): avc: denied { execmem } for pid=5925 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.199248][ T40] audit: type=1400 audit(1763029940.963:81): avc: denied { create } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.207023][ T40] audit: type=1400 audit(1763029940.963:82): avc: denied { read write } for pid=5929 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.215023][ T40] audit: type=1400 audit(1763029940.963:83): avc: denied { open } for pid=5929 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.222795][ T40] audit: type=1400 audit(1763029940.973:84): avc: denied { ioctl } for pid=5929 comm="syz-executor" path="socket:[5597]" dev="sockfs" ino=5597 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.245843][ T5937] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.249647][ T5938] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.250288][ T5937] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.253139][ T5938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.255369][ T5941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.255414][ T5937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.256025][ T5937] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.256463][ T5937] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.257173][ T5937] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.258478][ T5938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.258823][ T5938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.260592][ T5941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.262409][ T5937] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.264660][ T40] audit: type=1400 audit(1763029941.033:85): avc: denied { read } for pid=5929 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.264922][ T5938] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.265214][ T5938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.267264][ T5942] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.268939][ T40] audit: type=1400 audit(1763029941.033:86): avc: denied { open } for pid=5929 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.271835][ T5942] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.273749][ T40] audit: type=1400 audit(1763029941.033:87): avc: denied { mounton } for pid=5929 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.275871][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.310312][ T5938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.315657][ T5938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.488319][ T40] audit: type=1400 audit(1763029941.253:88): avc: denied { module_request } for pid=5943 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.522955][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 46.572876][ T5929] chnl_net:caif_netlink_parms(): no params data found [ 46.628256][ T5930] chnl_net:caif_netlink_parms(): no params data found [ 46.698103][ T5931] chnl_net:caif_netlink_parms(): no params data found [ 46.808237][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.811056][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.813498][ T5943] bridge_slave_0: entered allmulticast mode [ 46.816655][ T5943] bridge_slave_0: entered promiscuous mode [ 46.833742][ T5929] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.835972][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.838145][ T5929] bridge_slave_0: entered allmulticast mode [ 46.840902][ T5929] bridge_slave_0: entered promiscuous mode [ 46.874177][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.876950][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.879537][ T5943] bridge_slave_1: entered allmulticast mode [ 46.882111][ T5943] bridge_slave_1: entered promiscuous mode [ 46.885113][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.887402][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.889765][ T5929] bridge_slave_1: entered allmulticast mode [ 46.892365][ T5929] bridge_slave_1: entered promiscuous mode [ 46.966506][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.968830][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.971480][ T5930] bridge_slave_0: entered allmulticast mode [ 46.974082][ T5930] bridge_slave_0: entered promiscuous mode [ 47.004112][ T5929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.008626][ T5929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.039850][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.042109][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.044314][ T5930] bridge_slave_1: entered allmulticast mode [ 47.046838][ T5930] bridge_slave_1: entered promiscuous mode [ 47.067646][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.083080][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.085325][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.087426][ T5931] bridge_slave_0: entered allmulticast mode [ 47.090259][ T5931] bridge_slave_0: entered promiscuous mode [ 47.110622][ T5930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.115041][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.132849][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.135115][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.137323][ T5931] bridge_slave_1: entered allmulticast mode [ 47.140237][ T5931] bridge_slave_1: entered promiscuous mode [ 47.143664][ T5930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.161399][ T5929] team0: Port device team_slave_0 added [ 47.164706][ T5929] team0: Port device team_slave_1 added [ 47.293792][ T5930] team0: Port device team_slave_0 added [ 47.298185][ T5943] team0: Port device team_slave_0 added [ 47.320044][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.325163][ T5930] team0: Port device team_slave_1 added [ 47.328612][ T5943] team0: Port device team_slave_1 added [ 47.333696][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.336463][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.346022][ T5929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.352833][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.404131][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.406898][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.417314][ T5929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.471519][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.473729][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.482141][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.508619][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.511845][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.522551][ T5930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.529064][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.532063][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.542630][ T5930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.547742][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.550793][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.560189][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.565650][ T5931] team0: Port device team_slave_0 added [ 47.569627][ T5931] team0: Port device team_slave_1 added [ 47.670080][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.672977][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.682606][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.686985][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.689281][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.697143][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.797441][ T5929] hsr_slave_0: entered promiscuous mode [ 47.800808][ T5929] hsr_slave_1: entered promiscuous mode [ 47.826811][ T5943] hsr_slave_0: entered promiscuous mode [ 47.829141][ T5943] hsr_slave_1: entered promiscuous mode [ 47.831196][ T5943] debugfs: 'hsr0' already exists in 'hsr' [ 47.833749][ T5943] Cannot create hsr debugfs directory [ 47.840885][ T5930] hsr_slave_0: entered promiscuous mode [ 47.843160][ T5930] hsr_slave_1: entered promiscuous mode [ 47.845230][ T5930] debugfs: 'hsr0' already exists in 'hsr' [ 47.847069][ T5930] Cannot create hsr debugfs directory [ 47.884317][ T5931] hsr_slave_0: entered promiscuous mode [ 47.887480][ T5931] hsr_slave_1: entered promiscuous mode [ 47.891155][ T5931] debugfs: 'hsr0' already exists in 'hsr' [ 47.893574][ T5931] Cannot create hsr debugfs directory [ 48.269541][ T5938] Bluetooth: hci0: command tx timeout [ 48.269544][ T64] Bluetooth: hci3: command tx timeout [ 48.280583][ T5943] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.287572][ T5943] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.291693][ T5943] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.301150][ T5943] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.347915][ T5931] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.349289][ T64] Bluetooth: hci2: command tx timeout [ 48.351288][ T5938] Bluetooth: hci1: command tx timeout [ 48.358735][ T5931] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.370522][ T5931] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.378661][ T5931] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.433448][ T5930] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.440120][ T5930] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.446995][ T5930] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.451911][ T5930] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.515309][ T5929] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.521591][ T5929] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.527249][ T5929] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.541606][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.546238][ T5929] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.578154][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.593612][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.596678][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.605925][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.608829][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.640813][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.679980][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.686676][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.704472][ T217] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.706757][ T217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.713875][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.716856][ T322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.733680][ T5930] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.748751][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.751072][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.765892][ T217] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.767817][ T40] audit: type=1400 audit(1763029943.533:89): avc: denied { sys_module } for pid=5943 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.768142][ T217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.785010][ T5929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.810073][ T5929] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.820952][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.823316][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.833891][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.836084][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.855993][ T5930] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.888679][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.921069][ T5943] veth0_vlan: entered promiscuous mode [ 48.926873][ T5943] veth1_vlan: entered promiscuous mode [ 48.959332][ T5943] veth0_macvtap: entered promiscuous mode [ 48.965491][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.973605][ T5943] veth1_macvtap: entered promiscuous mode [ 48.985499][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.997620][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.012489][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.033047][ T1150] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.035962][ T1150] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.049951][ T1150] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.053529][ T1150] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.065695][ T5929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.068669][ T5931] veth0_vlan: entered promiscuous mode [ 49.080868][ T5930] veth0_vlan: entered promiscuous mode [ 49.092396][ T5931] veth1_vlan: entered promiscuous mode [ 49.104580][ T5930] veth1_vlan: entered promiscuous mode [ 49.139281][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.143498][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.144320][ T5931] veth0_macvtap: entered promiscuous mode [ 49.180068][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.180788][ T5929] veth0_vlan: entered promiscuous mode [ 49.183108][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.187130][ T5931] veth1_macvtap: entered promiscuous mode [ 49.190954][ T5930] veth0_macvtap: entered promiscuous mode [ 49.203200][ T5930] veth1_macvtap: entered promiscuous mode [ 49.206135][ T5929] veth1_vlan: entered promiscuous mode [ 49.212915][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.223238][ T5943] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.224530][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.238197][ T79] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.241449][ T79] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.252922][ T79] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.258617][ T79] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.264844][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.275845][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.296301][ T5929] veth0_macvtap: entered promiscuous mode [ 49.299419][ T46] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.302912][ T46] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.324164][ T46] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.327016][ T46] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.332039][ T5929] veth1_macvtap: entered promiscuous mode [ 49.336369][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.338855][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.352427][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.371622][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.376727][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.376776][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.403481][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.406600][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.411382][ T322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.413818][ T322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.417721][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.421468][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.448954][ T6031] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.462518][ T217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.465722][ T217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.484510][ T322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.488949][ T322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.519808][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.522301][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.548509][ T6041] loop4: detected capacity change from 0 to 7 [ 49.558660][ T6041] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 49.561384][ T6041] loop4: partition table partially beyond EOD, truncated [ 49.564222][ T6041] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 49.602859][ T5940] udevd[5940]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 49.716537][ T6060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14'. [ 50.349390][ T5938] Bluetooth: hci0: command tx timeout [ 50.359307][ T5938] Bluetooth: hci3: command tx timeout [ 50.429311][ T5938] Bluetooth: hci1: command tx timeout [ 50.429333][ T64] Bluetooth: hci2: command tx timeout [ 50.535885][ T64] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 50.540081][ T64] CPU: 0 UID: 0 PID: 64 Comm: kworker/u33:0 Not tainted syzkaller #0 PREEMPT(full) [ 50.540104][ T64] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.540116][ T64] Workqueue: hci0 hci_rx_work [ 50.540135][ T64] Call Trace: [ 50.540147][ T64] [ 50.540155][ T64] dump_stack_lvl+0x16c/0x1f0 [ 50.540187][ T64] sysfs_warn_dup+0x7f/0xa0 [ 50.540212][ T64] sysfs_create_dir_ns+0x24b/0x2b0 [ 50.540235][ T64] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 50.540256][ T64] ? find_held_lock+0x2b/0x80 [ 50.540283][ T64] ? do_raw_spin_unlock+0x172/0x230 [ 50.540305][ T64] kobject_add_internal+0x2c4/0x9b0 [ 50.540329][ T64] kobject_add+0x16e/0x240 [ 50.540348][ T64] ? __pfx_kobject_add+0x10/0x10 [ 50.540368][ T64] ? do_raw_spin_unlock+0x172/0x230 [ 50.540388][ T64] ? kobject_put+0xab/0x5a0 [ 50.540413][ T64] device_add+0x288/0x1aa0 [ 50.540437][ T64] ? __pfx_dev_set_name+0x10/0x10 [ 50.540461][ T64] ? __pfx_device_add+0x10/0x10 [ 50.540483][ T64] ? mgmt_send_event_skb+0x2fb/0x460 [ 50.540515][ T64] hci_conn_add_sysfs+0x17e/0x230 [ 50.540535][ T64] le_conn_complete_evt+0x1260/0x2150 [ 50.540567][ T64] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 50.540591][ T64] ? hci_event_packet+0x459/0x11c0 [ 50.540624][ T64] hci_le_conn_complete_evt+0x23c/0x370 [ 50.540656][ T64] hci_le_meta_evt+0x357/0x5e0 [ 50.540683][ T64] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 50.540711][ T64] hci_event_packet+0x685/0x11c0 [ 50.540737][ T64] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 50.540766][ T64] ? __pfx_hci_event_packet+0x10/0x10 [ 50.540794][ T64] ? kcov_remote_start+0x3c9/0x6d0 [ 50.540815][ T64] ? lockdep_hardirqs_on+0x7c/0x110 [ 50.540838][ T64] hci_rx_work+0x2c5/0x16b0 [ 50.540855][ T64] ? rcu_is_watching+0x12/0xc0 [ 50.540881][ T64] process_one_work+0x9cf/0x1b70 [ 50.540909][ T64] ? __pfx_process_one_work+0x10/0x10 [ 50.540937][ T64] ? assign_work+0x1a0/0x250 [ 50.540957][ T64] worker_thread+0x6c8/0xf10 [ 50.541014][ T64] ? __pfx_worker_thread+0x10/0x10 [ 50.541036][ T64] kthread+0x3c5/0x780 [ 50.541055][ T64] ? __pfx_kthread+0x10/0x10 [ 50.541075][ T64] ? rcu_is_watching+0x12/0xc0 [ 50.541097][ T64] ? __pfx_kthread+0x10/0x10 [ 50.541116][ T64] ret_from_fork+0x675/0x7d0 [ 50.541131][ T64] ? __pfx_kthread+0x10/0x10 [ 50.541155][ T64] ret_from_fork_asm+0x1a/0x30 [ 50.541195][ T64] [ 50.541220][ T64] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 50.644246][ T64] Bluetooth: hci0: failed to register connection device [ 50.651702][ T64] ================================================================== [ 50.655070][ T64] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0xdb9/0xf80 [ 50.658383][ T64] Read of size 8 at addr ffff888054818480 by task kworker/u33:0/64 [ 50.663330][ T64] [ 50.664355][ T64] CPU: 3 UID: 0 PID: 64 Comm: kworker/u33:0 Not tainted syzkaller #0 PREEMPT(full) [ 50.664378][ T64] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.664391][ T64] Workqueue: hci0 hci_rx_work [ 50.664412][ T64] Call Trace: [ 50.664421][ T64] [ 50.664428][ T64] dump_stack_lvl+0x116/0x1f0 [ 50.664459][ T64] print_report+0xcd/0x630 [ 50.664479][ T64] ? __virt_addr_valid+0x81/0x610 [ 50.664501][ T64] ? __phys_addr+0xe8/0x180 [ 50.664525][ T64] ? l2cap_connect_cfm+0xdb9/0xf80 [ 50.664551][ T64] kasan_report+0xe0/0x110 [ 50.664572][ T64] ? l2cap_connect_cfm+0xdb9/0xf80 [ 50.664599][ T64] l2cap_connect_cfm+0xdb9/0xf80 [ 50.664625][ T64] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 50.664651][ T64] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 50.664673][ T64] le_conn_complete_evt+0x1ba6/0x2150 [ 50.664701][ T64] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 50.664723][ T64] ? hci_event_packet+0x459/0x11c0 [ 50.664750][ T64] hci_le_conn_complete_evt+0x23c/0x370 [ 50.664776][ T64] hci_le_meta_evt+0x357/0x5e0 [ 50.664804][ T64] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 50.664830][ T64] hci_event_packet+0x685/0x11c0 [ 50.664855][ T64] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 50.664882][ T64] ? __pfx_hci_event_packet+0x10/0x10 [ 50.664908][ T64] ? kcov_remote_start+0x3c9/0x6d0 [ 50.664935][ T64] ? lockdep_hardirqs_on+0x7c/0x110 [ 50.664955][ T64] hci_rx_work+0x2c5/0x16b0 [ 50.664993][ T64] ? rcu_is_watching+0x12/0xc0 [ 50.665021][ T64] process_one_work+0x9cf/0x1b70 [ 50.665045][ T64] ? __pfx_process_one_work+0x10/0x10 [ 50.665070][ T64] ? assign_work+0x1a0/0x250 [ 50.665088][ T64] worker_thread+0x6c8/0xf10 [ 50.665112][ T64] ? __pfx_worker_thread+0x10/0x10 [ 50.665131][ T64] kthread+0x3c5/0x780 [ 50.665149][ T64] ? __pfx_kthread+0x10/0x10 [ 50.665165][ T64] ? rcu_is_watching+0x12/0xc0 [ 50.665188][ T64] ? __pfx_kthread+0x10/0x10 [ 50.665204][ T64] ret_from_fork+0x675/0x7d0 [ 50.665221][ T64] ? __pfx_kthread+0x10/0x10 [ 50.665236][ T64] ret_from_fork_asm+0x1a/0x30 [ 50.665267][ T64] [ 50.665273][ T64] [ 50.752867][ T64] Allocated by task 64: [ 50.752880][ T64] kasan_save_stack+0x33/0x60 [ 50.752902][ T64] kasan_save_track+0x14/0x30 [ 50.752924][ T64] __kasan_kmalloc+0xaa/0xb0 [ 50.752941][ T64] l2cap_chan_create+0x44/0x920 [ 50.752959][ T64] l2cap_sock_alloc.constprop.0+0xf5/0x1d0 [ 50.752992][ T64] l2cap_sock_new_connection_cb+0x101/0x240 [ 50.753010][ T64] l2cap_connect_cfm+0x4c7/0xf80 [ 50.753032][ T64] le_conn_complete_evt+0x1ba6/0x2150 [ 50.753056][ T64] hci_le_conn_complete_evt+0x23c/0x370 [ 50.753082][ T64] hci_le_meta_evt+0x357/0x5e0 [ 50.753106][ T64] hci_event_packet+0x685/0x11c0 [ 50.753127][ T64] hci_rx_work+0x2c5/0x16b0 [ 50.753141][ T64] process_one_work+0x9cf/0x1b70 [ 50.753159][ T64] worker_thread+0x6c8/0xf10 [ 50.753175][ T64] kthread+0x3c5/0x780 [ 50.753191][ T64] ret_from_fork+0x675/0x7d0 [ 50.753205][ T64] ret_from_fork_asm+0x1a/0x30 [ 50.753229][ T64] [ 50.753232][ T64] Freed by task 6077: [ 50.753240][ T64] kasan_save_stack+0x33/0x60 [ 50.753256][ T64] kasan_save_track+0x14/0x30 [ 50.753273][ T64] __kasan_save_free_info+0x3b/0x60 [ 50.753296][ T64] __kasan_slab_free+0x5f/0x80 [ 50.753312][ T64] kfree+0x2b8/0x6d0 [ 50.753333][ T64] l2cap_chan_put+0x216/0x2c0 [ 50.753350][ T64] l2cap_sock_cleanup_listen+0x4d/0x2a0 [ 50.753368][ T64] l2cap_sock_release+0x69/0x250 [ 50.753385][ T64] __sock_release+0xb3/0x270 [ 50.753409][ T64] sock_close+0x1c/0x30 [ 50.753428][ T64] __fput+0x402/0xb70 [ 50.753448][ T64] task_work_run+0x150/0x240 [ 50.753464][ T64] exit_to_user_mode_loop+0xec/0x130 [ 50.753482][ T64] do_syscall_64+0x426/0xfa0 [ 50.753499][ T64] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.753516][ T64] [ 50.753520][ T64] The buggy address belongs to the object at ffff888054818000 [ 50.753520][ T64] which belongs to the cache kmalloc-2k of size 2048 [ 50.753533][ T64] The buggy address is located 1152 bytes inside of [ 50.753533][ T64] freed 2048-byte region [ffff888054818000, ffff888054818800) [ 50.753548][ T64] [ 50.753553][ T64] The buggy address belongs to the physical page: [ 50.753561][ T64] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x54818 [ 50.753576][ T64] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 50.753592][ T64] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 50.753606][ T64] page_type: f5(slab) [ 50.753622][ T64] raw: 00fff00000000040 ffff88801b442f00 ffffea0000a69800 0000000000000002 [ 50.753637][ T64] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 50.753654][ T64] head: 00fff00000000040 ffff88801b442f00 ffffea0000a69800 0000000000000002 [ 50.753671][ T64] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 50.753685][ T64] head: 00fff00000000003 ffffea0001520601 00000000ffffffff 00000000ffffffff [ 50.753701][ T64] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 50.753709][ T64] page dumped because: kasan: bad access detected [ 50.753717][ T64] page_owner tracks the page as allocated [ 50.753724][ T64] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 322, tgid 322 (kworker/u32:6), ts 48731670493, free_ts 0 [ 50.753752][ T64] post_alloc_hook+0x1c0/0x230 [ 50.753775][ T64] get_page_from_freelist+0x10a3/0x3a30 [ 50.753798][ T64] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 50.753822][ T64] alloc_pages_mpol+0x1fb/0x550 [ 50.753840][ T64] new_slab+0x24a/0x360 [ 50.753861][ T64] ___slab_alloc+0xd79/0x1a50 [ 50.753882][ T64] __slab_alloc.constprop.0+0x63/0x110 [ 50.753904][ T64] __kmalloc_node_track_caller_noprof+0x4db/0x8a0 [ 50.753927][ T64] kmalloc_reserve+0xef/0x2c0 [ 50.753953][ T64] pskb_expand_head+0x238/0x1030 [ 50.753972][ T64] netlink_trim+0x22d/0x310 [ 50.753987][ T64] netlink_broadcast_filtered+0xf1/0xf90 [ 50.754008][ T64] nlmsg_notify+0x9e/0x220 [ 50.754030][ T64] rtmsg_ifinfo+0x174/0x1a0 [ 50.754056][ T64] netif_state_change+0x17f/0x3b0 [ 50.754072][ T64] linkwatch_do_dev+0x12b/0x160 [ 50.754087][ T64] page_owner free stack trace missing [ 50.754092][ T64] [ 50.754096][ T64] Memory state around the buggy address: [ 50.754106][ T64] ffff888054818380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 50.754116][ T64] ffff888054818400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 50.754129][ T64] >ffff888054818480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 50.754138][ T64] ^ [ 50.754146][ T64] ffff888054818500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 50.754159][ T64] ffff888054818580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 50.754168][ T64] ================================================================== [ 50.755322][ T64] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 50.755333][ T64] CPU: 2 UID: 0 PID: 64 Comm: kworker/u33:0 Not tainted syzkaller #0 PREEMPT(full) [ 50.755349][ T64] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.755357][ T64] Workqueue: hci0 hci_rx_work [ 50.755370][ T64] Call Trace: [ 50.755375][ T64] [ 50.755379][ T64] dump_stack_lvl+0x3d/0x1f0 [ 50.755409][ T64] vpanic+0x640/0x6f0 [ 50.755426][ T64] panic+0xca/0xd0 [ 50.755440][ T64] ? __pfx_panic+0x10/0x10 [ 50.755455][ T64] ? l2cap_connect_cfm+0xdb9/0xf80 [ 50.755470][ T64] ? preempt_schedule_common+0x44/0xc0 [ 50.755485][ T64] ? preempt_schedule_thunk+0x16/0x30 [ 50.755505][ T64] check_panic_on_warn+0xab/0xb0 [ 50.755515][ T64] end_report+0x107/0x170 [ 50.755527][ T64] kasan_report+0xee/0x110 [ 50.755538][ T64] ? l2cap_connect_cfm+0xdb9/0xf80 [ 50.755553][ T64] l2cap_connect_cfm+0xdb9/0xf80 [ 50.755568][ T64] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 50.755582][ T64] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 50.755595][ T64] le_conn_complete_evt+0x1ba6/0x2150 [ 50.755612][ T64] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 50.755625][ T64] ? hci_event_packet+0x459/0x11c0 [ 50.755641][ T64] hci_le_conn_complete_evt+0x23c/0x370 [ 50.755656][ T64] hci_le_meta_evt+0x357/0x5e0 [ 50.755671][ T64] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 50.755686][ T64] hci_event_packet+0x685/0x11c0 [ 50.755699][ T64] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 50.755714][ T64] ? __pfx_hci_event_packet+0x10/0x10 [ 50.755728][ T64] ? kcov_remote_start+0x3c9/0x6d0 [ 50.755741][ T64] ? lockdep_hardirqs_on+0x7c/0x110 [ 50.755751][ T64] hci_rx_work+0x2c5/0x16b0 [ 50.755759][ T64] ? rcu_is_watching+0x12/0xc0 [ 50.755774][ T64] process_one_work+0x9cf/0x1b70 [ 50.755787][ T64] ? __pfx_process_one_work+0x10/0x10 [ 50.755799][ T64] ? assign_work+0x1a0/0x250 [ 50.755809][ T64] worker_thread+0x6c8/0xf10 [ 50.755821][ T64] ? __pfx_worker_thread+0x10/0x10 [ 50.755832][ T64] kthread+0x3c5/0x780 [ 50.755841][ T64] ? __pfx_kthread+0x10/0x10 [ 50.755851][ T64] ? rcu_is_watching+0x12/0xc0 [ 50.755863][ T64] ? __pfx_kthread+0x10/0x10 [ 50.755872][ T64] ret_from_fork+0x675/0x7d0 [ 50.755881][ T64] ? __pfx_kthread+0x10/0x10 [ 50.755891][ T64] ret_from_fork_asm+0x1a/0x30 [ 50.755906][ T64] [ 50.756600][ T64] Kernel Offset: disabled VM DIAGNOSIS: 10:32:25 Registers: info registers vcpu 0 CPU#0 RAX=0000000080000001 RBX=1ffff92000864eaf RCX=ffffffff82312cfe RDX=ffff888024902480 RSI=ffffffff82312d3c RDI=0000000000000007 RBP=80000000450b4007 RSP=ffffc90004327570 R8 =0000000000000007 R9 =0000000000000005 R10=0000000000000005 R11=0000000000000001 R12=0000000000000005 R13=ffff888056e7c940 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff81bce90b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb9635fd000 CR3=0000000056bd2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cd2613050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cd261305d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cd2613057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cd261306b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cd26130f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cd26131cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cd27b74a8 00007f4cd27b74a0 00007f4cd27b7498 00007f4cd27b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cd331d100 00007f4cd27b7460 00007f4cd27b7478 0004000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cd27b74b8 00007f4cd27b74b0 00007f4cd27b74a8 00007f4cd27b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000094 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffc90003347b24 RDX=0000000000000001 RSI=ffffffff8da05e9c RDI=0000000000000001 RBP=ffffc90003347c40 RSP=ffffc90003347b58 R8 =523d85aa6eb5ebb5 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff88806a542fe0 R13=ffff88801ee90c80 R14=ffff88806a543000 R15=0000000000000200 RIP=ffffffff81c4eabd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ff032f9b300 ffffffff 00c00000 GS =0000 ffff8880d6b08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000200000000100 CR3=000000002ec9f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000001a 0000001400000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000c0072d6021000 01c0801000000406 0142e00800000071 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000001ffffffff ffffffffdf080ae0 030008000ad80300 08000ad0030fffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000101800408 8410000000000008 0602888810000801 50f4001000019003 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0fffffffffffff04 0180030000000008 0620100004014fda 0fffffffffffff04 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0fffffffffffff04 0fffffffffffff04 0010000fffffffff ffff040280808010 ZMM24=8d6afd748d6afd74 8d6afd748d6afd74 8d6afd748d6afd74 8d6afd748d6afd74 8d6afd748d6afd74 8d6afd748d6afd74 8d6afd748d6afd74 8d6afd748d6afd74 ZMM25=ea8910f4ea8910f4 ea8910f4ea8910f4 ea8910f4ea8910f4 ea8910f4ea8910f4 ea8910f4ea8910f4 ea8910f4ea8910f4 ea8910f4ea8910f4 ea8910f4ea8910f4 ZMM26=f0830a58f0830a58 f0830a58f0830a58 f0830a58f0830a58 f0830a58f0830a58 f0830a58f0830a58 f0830a58f0830a58 f0830a58f0830a58 f0830a58f0830a58 ZMM27=7d6e8f637d6e8f63 7d6e8f637d6e8f63 7d6e8f637d6e8f63 7d6e8f637d6e8f63 7d6e8f637d6e8f63 7d6e8f637d6e8f63 7d6e8f637d6e8f63 7d6e8f637d6e8f63 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=1703000017030000 1703000017030000 1703000017030000 1703000017030000 1703000017030000 1703000017030000 1703000017030000 1703000017030000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=0000000000000000 RCX=ffffffff816dd2ee RDX=ffff8880290a8000 RSI=0000000000000000 RDI=0000000000000007 RBP=0000000026419570 RSP=ffffc90004357c58 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffffc90004357cb8 R15=ffff88803a658bc0 RIP=ffffffff81bce8d4 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fb964d446c0 ffffffff 00c00000 GS =0000 ffff8880d6c08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2c15d6 CR3=0000000053756000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb964013050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb96401305d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb964013057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb96401306b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9640130f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9640131cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9641b74a8 00007fb9641b74a0 00007fb9641b7498 00007fb9641b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb964d1d100 00007fb9641b7460 00007fb9641b7478 00007fb9641b74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9641b74b8 00007fb9641b74b0 00007fb9641b74a8 00007fb9641b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85296335 RDI=ffffffff9add8780 RBP=ffffffff9add8740 RSP=ffffc90000d27280 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3530383838666666 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9add8740 R15=ffffffff852962d0 RIP=ffffffff8529635f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6d08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2dfb994f98 CR3=0000000056e6f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2dfac13050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2dfac1305d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2dfac13057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2dfac1306b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2dfac130f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2dfac131cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 79609173e0efbab1 4b2862331a5fc0d4 52bbdb96aac58bbc f4215f848c368037 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30f9b8a869349714 7eb01928ccd40c44 6e529a1a54340004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6448cf1ecac03ec7 ed5005c24b5cf585 abda6ab2fa70e765 9e417ebe2bf3a769 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 82aa277602b34141 a3820819a1b51c88 367b817293c145d8 581ad2c6f507f88f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 258d526448cf1eca c03ec7ed5005c24b 5cf585abda6ab2fa 70e7659e417ebe2b ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f3a76930f9b8a869 3497147eb01928cc d40c446e529a1a54 34edadcfb4c018c5 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 68234179609173e0 efbab14b2862331a 5fc0d452bbdb96aa c58bbcf4215f848c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 10cb3f569a9b9ac5 51e308f3bb3adace f208a6a60d385a7f e700000001bb970f ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000