last executing test programs: 912.801698ms ago: executing program 2 (id=3): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000680)={{r0, &(0x7f0000000340)='lowerdir', 0x80, &(0x7f0000000380)={@align=0x1, {0x7ff, 0x200, 0x8, 0x3}}, 0x85c2, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x2}, 0x2, &(0x7f0000000640)=[{0x2, 0x0, &(0x7f0000000440)='^&&%^]-\x00', &(0x7f0000000480)="b4e0cca67c62b7c8e8a7ce8e3aefb6f3ff945c8658ffa42ade18fb7d42d1b06e5848d1cfee28d8ac4d8f4607cf0e6d21e9f6560d4ac35b03a9e7a9cc1de6f4ebcc1f5035fcb971c52597265003652f1512a60e564437035699d5a42bf2430018995757b514a4b9", 0x67, 0x10}, {0x2, 0x5, &(0x7f0000000500)='\x00', &(0x7f0000000540)="894ed05c56339263fe475902a9eb8ec134227e1ab8541250e4798a539a09fe2de836e517f1a28ee0156cf6af94b7079d1afbf52388226c90f1d11b3effb6fe9980d01eac4c6e3c3503c2d1b12403d339f281b2c2093f4d696563aa1c3c39b7e01ade099c8867ee50360da36bea294a1b59c60ac1fb187da164da862a9d8bd8fc49615d4eecec33af2258137be1eb188abf14589d3d2bae832fa4a77f3f51ebcf4110e5dbd35180fb1c66372bc7fa62d7c32a6d4af0514a207e13bcd2fcdc287a4f9556f5fd9621e643d71e10fc57765096f0440c39a3bcba63c3db8329e5e9757809ac84a3351c5227d6ed24ebec6e", 0xef}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4, &(0x7f0000000040)=[{0x45, 0x2, 0x2}, {0x60}, {}, {0x6}]}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) close_range(r1, r2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x1018}, './file0\x00'}) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000240)=@ethtool_coalesce={0xf, 0x0, 0x1000, 0x7, 0x40, 0x10, 0xffff, 0x5, 0x2, 0xfffff800, 0x8001, 0x9, 0x81, 0x12804b33, 0xc, 0x4d22, 0x80000000, 0x5b7, 0xffffffc0, 0x2000d527, 0x6, 0xb, 0x4}}) getpeername$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x20) 785.449731ms ago: executing program 0 (id=1): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x3, 0x2}) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000440)='A', 0x1}, {&(0x7f0000000480)='^', 0x1}], 0x2) r2 = landlock_create_ruleset(&(0x7f00000004c0)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0xa) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000140)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0xc201}) write$tun(r5, &(0x7f0000000580)={@val={0x8, 0x800}, @val={0x0, 0x4, 0x6, 0xfdd1, 0x2f, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x1, 0x2, 0x28, 0x66, 0x0, 0x3, 0x6, 0x0, @broadcast, @broadcast}, {{0x4e22, 0x4e1d, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x3ff, 0x0, 0x8d62}}}}, 0x36) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000200)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280), 0x3, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000002c0)={0x600, 0x1, &(0x7f0000000300)=[r4], &(0x7f0000000340)=[0x3], &(0x7f0000000380)=[r6, r6, r7], &(0x7f00000003c0), 0x0, 0x2}) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_NMI(r8, 0xae9a) r9 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x114) write(r9, &(0x7f0000000600)='0', 0x1) ioctl$UFFDIO_WRITEPROTECT(r9, 0xc018aa06, &(0x7f0000000640)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa6cf6566994c608004534002c000000cef2c600a4069078ac1414bbac1414aa4e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600100009078000004020000"], 0x0) 669.15383ms ago: executing program 1 (id=2): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x440100, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000080)) r1 = epoll_create(0x7) (async) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x60000000}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000740)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1}], {0x95, 0x0, 0x700}}, &(0x7f0000000780)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x6, &(0x7f0000000300)=0x1, 0x4) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) (async) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt(r9, 0x0, 0x488, &(0x7f00000007c0)="060000007f00000100500000000000006d6800000000000000000000000000000000000000000000000000007f0000010051000000000000010000060000000000000000", 0x44) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r10) socket$unix(0x1, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) r13 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xc}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x4, 0x6}, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2000e890}, 0x8080) r14 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r14, &(0x7f0000000540)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r8, 0x1109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000640)='7', 0x1}], 0x1}, 0x20000885) (async) bind$inet6(r3, &(0x7f0000000340)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x4a) (async) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) 489.523864ms ago: executing program 3 (id=5): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x18, &(0x7f0000000c40)=ANY=[@ANYBLOB="bf16000000000000b7000000000000007b0af8ff000000007b0af0ff000000007b0ae8ff000000007b0ae0ff000000007b0ad8ff000000007b0ad0ff000000007b0ac8ff000000007b0ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac8ff00000000b70200007f000001632ae0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000000000095"], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="4f4741494e20274361707475726520566f6c756d65272030303030303030303030303030303030303030300a494741494e0a50486ce2369e9e7101d386d8c8cc4f4e454f55540a535045414b455220274344204361707475726527203030303030303030313337343338"], 0x4000) close(r1) read$proc_mixer(r1, &(0x7f00000005c0)=""/34, 0x22) mkdir(&(0x7f00000000c0)='my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='my_debugfs\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='my_debugfs/asoc/components\x00', 0x0, 0x1cd) read(r2, &(0x7f00000001c0)=""/1000, 0x3e8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r0, 0x0, 0xe, 0x0, &(0x7f0000000dc0)="e0278f7c5768793f40cc764532db", 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 428.706706ms ago: executing program 1 (id=6): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x1b, 0x0, &(0x7f0000000700)) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000780)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) sendmmsg$inet(r5, &(0x7f0000000a40)=[{{0x0, 0x4b, &(0x7f0000000a80), 0x1}}], 0x1, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000440), &(0x7f0000000480)=r1}, 0x20) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r8, 0x7aa, &(0x7f0000000680)={{@my=0x1, 0x4}, 0x8a01, 0x3}) sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)='U', 0xfdef}], 0x1}, 0x4000007) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x101001, 0x4b, 0x38}, 0x18) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r14, 0x11b, 0x4, &(0x7f0000000740)={&(0x7f0000000780), 0x1000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r14, 0x11b, 0x3, &(0x7f00000007c0)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r14, 0x11b, 0x5, &(0x7f0000000800)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r14, 0x11b, 0x6, &(0x7f0000000840)=0x10, 0x4) bind$xdp(r14, &(0x7f0000000880)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) sendmsg$nl_generic(r13, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="cf042bbd7000fedbdf251200000008000300", @ANYRES32=r12, @ANYBLOB="0a00060008021100000100000c004300f8fffffff5dfffff0600b500240300"], 0x48}}, 0x0) 428.224362ms ago: executing program 3 (id=7): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="1a00000002000000", 0x8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x64, 0x41, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x42, 0x1, 0x0, 0x0, @binary="00112233445566748899aabb86dd2c00001c0000110001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e840d05bc5c867495"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x64}}, 0x0) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f00000001c0)={0x2, 0x4e25, @empty}, 0x10, 0x0}}], 0x1, 0x20040800) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x1, @empty, 0xfffffffd}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080), 0x1) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000a80)={0x0, 0x4, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000640)=[{}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {0x0, 0x80000000}, {}], 0x9, 0x0, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000001180)={0x0, 0x3, 0x0, &(0x7f0000000bc0)=[{}, {}, {}], 0x4, 0x0, &(0x7f0000000d00)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {0x0, 0x80000000, 0x0, {0x0}}, {}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000001640)={0x0, 0x4, 0x0, &(0x7f0000001200)=[{}, {}, {0x80000000}, {}], 0x2, 0x0, &(0x7f0000001380)=[{}, {}], 0x5, 0x0, &(0x7f0000001480)=[{}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000001540)=[{}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000001780)={0x80000000, &(0x7f00000016c0)=[{0x80000000, 0x0}], &(0x7f0000001700)}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f00000017c0)={{r5, r6, 0x2, [0x5, 0x1]}, {r7, r8, 0x6, [0x2, 0x1]}, 0x1, [0x6, 0x5]}) sendto$inet6(r1, &(0x7f00000000c0)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtaction={0x84, 0x30, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1100}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0x24}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x0, 0x7ff, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x9, 0x0, 0x2}, 0x0, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x84}}, 0x8000) sendto$inet6(r1, &(0x7f0000000140)="ee", 0x1, 0x4091, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000b00)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000b40)={{&(0x7f0000712000/0x1000)=nil, 0x1000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000b80)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x0, 0xf4ffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vxcan1\x00'}) 378.998686ms ago: executing program 3 (id=8): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="9c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)='i', 0x1}], 0x1}}], 0x2, 0x48000) (async) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="9c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)='i', 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000300)={0x0, 0xb5d}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000380)={r1, @in={{0x2, 0x4e24, @empty}}, [0xa, 0x9, 0xfffffffffffffffa, 0x6, 0x6a, 0x10, 0xcb, 0xa6, 0xfffffffffffffffa, 0x80000000, 0x10001, 0x577f2d2f, 0x749, 0x4, 0xfd]}, &(0x7f0000000480)=0x100) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) add_key(&(0x7f0000000600)='rxrpc\x00', &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) r3 = add_key(&(0x7f0000000600)='rxrpc\x00', &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r3, 0x0, 0x0) mknod$loop(&(0x7f0000000540)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f0000000580)='./file0\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000740)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x20) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000005c0)=[@text32={0x20, 0x0}], 0x1, 0x1c, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000005c0)=[@text32={0x20, 0x0}], 0x1, 0x1c, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x6, &(0x7f0000000680)=0x1, 0x4) (async) setsockopt$inet6_int(r6, 0x29, 0x6, &(0x7f0000000680)=0x1, 0x4) bind$inet6(r6, &(0x7f00000006c0)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x4a) (async) bind$inet6(r6, &(0x7f00000006c0)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x4a) connect$inet6(r6, &(0x7f0000000700)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) socket(0xa, 0x5, 0x0) (async) r7 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000004c0)={r2, 0x5c09}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c) listen(r7, 0x100) sendmsg$inet_sctp(r7, &(0x7f0000000180)={&(0x7f00000001c0)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="b2", 0x1}], 0x1, &(0x7f0000000000), 0x11}, 0x8050) close(0x3) 378.258015ms ago: executing program 1 (id=9): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x1a, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0xffffff15}}, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f00000002c0)="360f7883b81e2626660fc7350ff4650666b95c0300000f32f4656df30f09650f01cfc4f8400f0d35", 0x28}], 0x1, 0x2, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fce000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000340)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xdddd1000, {}, 0x1}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x2800) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000023c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002400)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002440)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000002600)={'\x00', 0x4, 0x9b5b, 0x7f, 0x0, 0x0, 0xe000, 0xeeef0000, '\x00', 0xa3}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000024c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000002500)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000002540)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r7, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f00000025c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @loopback, 0x3}, r5}}, 0x30) ioctl$VIDIOC_ENUMSTD(r3, 0xc0485619, &(0x7f0000000100)={0x3, 0x50007, "54b39a0915417d21f5886cb50a0ebf1127420b7c17fdaabd", {0xffffffff, 0x10}, 0xb}) 319.349895ms ago: executing program 3 (id=10): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffb, 0x1) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x6, &(0x7f0000000340)=@framed={{0x18, 0x8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x200000}, @alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x8}]}, &(0x7f0000000380)='GPL\x00', 0x8}, 0x94) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000140)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, 0x0}}, {{&(0x7f0000000200)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@local]}]}}}], 0x18}}], 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000040), 0x4) 269.208079ms ago: executing program 3 (id=11): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r1, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 199.012296ms ago: executing program 1 (id=12): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)=ANY=[@ANYBLOB="400100001000330600000000fddbdf250a010101200000000000000000000000000040004e248000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe80000000000000000000000000000b230300000000000001000080000000000000000000000000c0000000000000000040000000000000000000000000030000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000033500000a000500000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500210002"], 0x140}}, 0x200080d4) 109.759825ms ago: executing program 1 (id=13): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x1, @local, 0x6}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000380)='O', 0x1}], 0x1}}, {{&(0x7f00000003c0)={0xa, 0x4e22, 0x2, @private1, 0xfffffff8}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000440)='Q', 0x1}], 0x1}}], 0x2, 0x4040044) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa2ea}}, [0x0, 0x2, 0x100000001, 0xfffffffffffffff7, 0x3, 0x8, 0x80, 0x6, 0x7ff, 0x8, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xfffffffffffff001, 0x1000]}, &(0x7f0000000580)=0x100) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)={r1, 0xe6, "67f7e8930c903801140655df602868ddcf9791275b6fef8fa234a372fca5fc5a4e10a8451e56999e35cdea420b3984b259caa83593417c9f0173fdf38b900fb01837e8ac654a840d3744a920895ff4a646c8994efafbf6a439d3962c453f4ec8000f4573b6b0908eb5aedf8cd3e12b57b83bc9cf6d2fb230e275c53615c03c8b0041b163c32521f7d52b872966573562fba565e9d6e376831109bddfdc8c8ebe406a75ab34bb677b9cbcef524775d46a100087ac3df8230141b9772c52f36ba192c5228ea5ec5df6dfca7e67708a4208818039190f618f7f7ce8bca6cbdb7663fae4df815d1f"}, &(0x7f0000000100)=0xee) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x1, @local, 0x6}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000380)='O', 0x1}], 0x1}}, {{&(0x7f00000003c0)={0xa, 0x4e22, 0x2, @private1, 0xfffffff8}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000440)='Q', 0x1}], 0x1}}], 0x2, 0x4040044) (async) shutdown(r0, 0x1) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa2ea}}, [0x0, 0x2, 0x100000001, 0xfffffffffffffff7, 0x3, 0x8, 0x80, 0x6, 0x7ff, 0x8, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xfffffffffffff001, 0x1000]}, &(0x7f0000000580)=0x100) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)={r1, 0xe6, "67f7e8930c903801140655df602868ddcf9791275b6fef8fa234a372fca5fc5a4e10a8451e56999e35cdea420b3984b259caa83593417c9f0173fdf38b900fb01837e8ac654a840d3744a920895ff4a646c8994efafbf6a439d3962c453f4ec8000f4573b6b0908eb5aedf8cd3e12b57b83bc9cf6d2fb230e275c53615c03c8b0041b163c32521f7d52b872966573562fba565e9d6e376831109bddfdc8c8ebe406a75ab34bb677b9cbcef524775d46a100087ac3df8230141b9772c52f36ba192c5228ea5ec5df6dfca7e67708a4208818039190f618f7f7ce8bca6cbdb7663fae4df815d1f"}, &(0x7f0000000100)=0xee) (async) 109.508089ms ago: executing program 1 (id=14): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', 0x0}) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) r4 = socket$inet6(0xa, 0x3, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x4001, 0x3, 0x440, 0x158, 0x0, 0x148, 0x158, 0x148, 0x3a8, 0x240, 0x240, 0x3a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x28, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x1e8, 0x250, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6gretap0\x00', {0x8, 0xfffffffffffffff8, 0x56, 0x9, 0x2, 0x80, 0x20, 0x78, 0x80}, {0x9}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) sendto$inet(r5, &(0x7f00000009c0)="0400", 0xffec, 0x0, &(0x7f0000000a00)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000a40)={@private1, 0x800, 0x0, 0x3, 0x9, 0x0, 0x7fff}, 0x20) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000000a80)={'geneve0\x00', {0x2, 0x0, @empty}}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=@can_delroute={0x3c, 0x19, 0x1, 0x70bd28, 0x25dfdbfe, {0x1d, 0x1, 0x1}, [@CGW_DST_IF={0x8, 0xa, r2}, @CGW_SRC_IF={0x8, 0x9, r3}, @CGW_MOD_AND={0x15, 0x1, {{{0x3, 0x1, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "235bd32fd4b3a8d1"}, 0x6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4040040) 0s ago: executing program 3 (id=15): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xd5, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0x2, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0xd3, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10001, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x8009, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@can_delroute={0xa0, 0x19, 0x0, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0xd}, [@CGW_LIM_HOPS={0x5, 0xd, 0x7}, @CGW_MOD_UID={0x8, 0xe, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x4, 0x0, 0x1}, 0x3, 0x2, 0x0, 0x0, "3189585ac799b227"}, 0x2}}, @CGW_LIM_HOPS={0x5, 0xd, 0x57}, @CGW_MOD_SET={0x15, 0x4, {{{0x1}, 0x3, 0x3, 0x0, 0x0, "d03251f60847ca18"}, 0x2}}, @CGW_FILTER={0xc, 0xb, {{0x2, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}, @CGW_MOD_SET={0x15, 0x4, {{{0x0, 0x1, 0x0, 0x1}, 0x3, 0x1964dde9f6beaeba, 0x0, 0x0, "b9882ed94d3bbfeb"}, 0x7}}, @CGW_SRC_IF={0x8, 0x9, r3}, @CGW_MOD_AND={0x15, 0x1, {{{0x3, 0x1, 0x1, 0x1}, 0x5, 0x4, 0x0, 0x0, "1ac3053235e96832"}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x4000850) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:64325' (ED25519) to the list of known hosts. [ 30.950814][ T42] audit: type=1400 audit(1793048198.509:116): avc: denied { name_bind } for pid=5694 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 32.527051][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 32.527066][ T42] audit: type=1400 audit(1793048200.089:119): avc: denied { write } for pid=5696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.582187][ T42] audit: type=1400 audit(1793048200.139:120): avc: denied { write } for pid=5699 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.664264][ T42] audit: type=1400 audit(1793048200.219:121): avc: denied { write } for pid=5702 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.727089][ T42] audit: type=1400 audit(1793048200.289:122): avc: denied { write } for pid=5705 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.973163][ T42] audit: type=1400 audit(1793048200.529:123): avc: denied { write } for pid=5708 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.035059][ T42] audit: type=1400 audit(1793048200.599:124): avc: denied { write } for pid=5711 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.108553][ T42] audit: type=1400 audit(1793048200.669:125): avc: denied { mounton } for pid=5695 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.110488][ T42] audit: type=1400 audit(1793048200.669:126): avc: denied { mount } for pid=5695 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.112536][ T5695] cgroup: Unknown subsys name 'net' [ 33.113694][ T42] audit: type=1400 audit(1793048200.669:127): avc: denied { unmount } for pid=5695 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.125243][ T42] audit: type=1400 audit(1793048200.679:128): avc: denied { write } for pid=5715 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.299066][ T5695] cgroup: Unknown subsys name 'cpuset' [ 33.307221][ T5695] cgroup: Unknown subsys name 'rlimit' [ 33.561780][ T5735] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 34.299027][ T5695] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.802738][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 37.802754][ T42] audit: type=1400 audit(1793048205.359:154): avc: denied { execmem } for pid=5777 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.976879][ T42] audit: type=1400 audit(1793048205.539:155): avc: denied { create } for pid=5781 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.977430][ T42] audit: type=1400 audit(1793048205.539:156): avc: denied { read write } for pid=5781 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.977795][ T42] audit: type=1400 audit(1793048205.539:157): avc: denied { open } for pid=5781 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.987055][ T42] audit: type=1400 audit(1793048205.549:158): avc: denied { ioctl } for pid=5781 comm="syz-executor" path="socket:[3761]" dev="sockfs" ino=3761 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.026925][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.027985][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 38.029137][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.029382][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 38.029797][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 38.030359][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.030902][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 38.032758][ T5796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 38.034582][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 38.034886][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.035124][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.038096][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 38.040507][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 38.046436][ T42] audit: type=1400 audit(1793048205.609:159): avc: denied { read } for pid=5781 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.046463][ T42] audit: type=1400 audit(1793048205.609:160): avc: denied { open } for pid=5781 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.046476][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 38.047873][ T5142] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 38.047887][ T42] audit: type=1400 audit(1793048205.609:161): avc: denied { mounton } for pid=5781 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 38.048167][ T5142] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.048659][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 38.049499][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 38.052822][ T42] audit: type=1400 audit(1793048205.609:162): avc: denied { module_request } for pid=5781 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 38.076532][ T42] audit: type=1400 audit(1793048205.639:163): avc: denied { sys_module } for pid=5782 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 38.078248][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 38.078499][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 38.262825][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.263812][ T5781] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 38.264880][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.265715][ T5791] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 38.269170][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.343446][ T5785] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 38.366738][ T5782] infiniband rxe0: set active [ 38.369353][ T5782] infiniband rxe0: added rxe_eth0 [ 38.373750][ T1924] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.388806][ T5782] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 38.389002][ T5782] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 38.389031][ T5782] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 38.408528][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.413847][ T5782] RDS/IB: rxe0: added [ 38.414773][ T5782] smc: adding ib device rxe0 with port count 1 [ 38.414838][ T5782] smc: ib device rxe0 port 1 has no pnetid [ 38.428448][ T855] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.528182][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.636391][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.654428][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.654996][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.655304][ T5791] bridge_slave_0: entered allmulticast mode [ 38.656607][ T5791] bridge_slave_0: entered promiscuous mode [ 38.668709][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.668784][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.668883][ T5781] bridge_slave_0: entered allmulticast mode [ 38.670153][ T5781] bridge_slave_0: entered promiscuous mode [ 38.672574][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.672614][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.672668][ T5781] bridge_slave_1: entered allmulticast mode [ 38.673470][ T5781] bridge_slave_1: entered promiscuous mode [ 38.682903][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.682977][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.683076][ T5791] bridge_slave_1: entered allmulticast mode [ 38.684396][ T5791] bridge_slave_1: entered promiscuous mode [ 38.710903][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.712354][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.722615][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.736401][ T5781] team0: Port device team_slave_0 added [ 38.738367][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.747980][ T5781] team0: Port device team_slave_1 added [ 38.789123][ T5791] team0: Port device team_slave_0 added [ 38.792955][ T5791] team0: Port device team_slave_1 added [ 38.799475][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.799486][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.799498][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.800744][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.800756][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.800775][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.836722][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.840366][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.840379][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.840399][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.859909][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.859919][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.859932][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.891210][ T5781] hsr_slave_0: entered promiscuous mode [ 38.892108][ T5781] hsr_slave_1: entered promiscuous mode [ 38.913866][ T5791] hsr_slave_0: entered promiscuous mode [ 38.914755][ T5791] hsr_slave_1: entered promiscuous mode [ 38.915343][ T5791] debugfs: 'hsr0' already exists in 'hsr' [ 38.915408][ T5791] Cannot create hsr debugfs directory [ 39.061630][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.061680][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.061879][ T5785] bridge_slave_0: entered allmulticast mode [ 39.062597][ T5785] bridge_slave_0: entered promiscuous mode [ 39.078940][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.079002][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.079156][ T5785] bridge_slave_1: entered allmulticast mode [ 39.079927][ T5785] bridge_slave_1: entered promiscuous mode [ 39.136317][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.153284][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.185306][ T5785] team0: Port device team_slave_0 added [ 39.192063][ T5785] team0: Port device team_slave_1 added [ 39.228264][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.228275][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.228287][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.229261][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.229269][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.229281][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.258583][ T5781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.267572][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.268033][ T5781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.271957][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.280388][ T5785] hsr_slave_0: entered promiscuous mode [ 39.281087][ T5785] hsr_slave_1: entered promiscuous mode [ 39.281598][ T5785] debugfs: 'hsr0' already exists in 'hsr' [ 39.281615][ T5785] Cannot create hsr debugfs directory [ 39.284279][ T5781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.287025][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.312808][ T5781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.314743][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.382285][ T5791] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.386169][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.397311][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.397462][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.397535][ T5782] bridge_slave_0: entered allmulticast mode [ 39.398281][ T5782] bridge_slave_0: entered promiscuous mode [ 39.403142][ T5791] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.409297][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.410137][ T5791] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.416192][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.417950][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.418046][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.418145][ T5782] bridge_slave_1: entered allmulticast mode [ 39.419349][ T5782] bridge_slave_1: entered promiscuous mode [ 39.445368][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.445423][ T5781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.445729][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.445775][ T5781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.448609][ T5791] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.451940][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.468773][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.494700][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.498547][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.499312][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.550527][ T5782] team0: Port device team_slave_0 added [ 39.552702][ T5782] team0: Port device team_slave_1 added [ 39.583114][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.583125][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.583143][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.584535][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.584543][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.584554][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.641490][ T5782] hsr_slave_0: entered promiscuous mode [ 39.641945][ T5782] hsr_slave_1: entered promiscuous mode [ 39.642314][ T5782] debugfs: 'hsr0' already exists in 'hsr' [ 39.642327][ T5782] Cannot create hsr debugfs directory [ 39.674418][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.676888][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.692577][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.695378][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.695772][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.699958][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.706146][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.708740][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.717043][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.807077][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.826745][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.826833][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.853265][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.853382][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.856787][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.880559][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.885023][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.894586][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.897589][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.899064][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.901697][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.902492][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.905968][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.915734][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.934320][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.934401][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.948517][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.948565][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.959394][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.006624][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.021445][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.021495][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.040399][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.040450][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.083102][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.110541][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.115020][ T64] Bluetooth: hci3: command tx timeout [ 40.115028][ T5795] Bluetooth: hci2: command tx timeout [ 40.115337][ T64] Bluetooth: hci1: command tx timeout [ 40.115348][ T5795] Bluetooth: hci0: command tx timeout [ 40.119372][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.119467][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.137245][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.137330][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.290498][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.323935][ T5781] veth0_vlan: entered promiscuous mode [ 40.329550][ T5781] veth1_vlan: entered promiscuous mode [ 40.338926][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.359503][ T5781] veth0_macvtap: entered promiscuous mode [ 40.362862][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.367532][ T5781] veth1_macvtap: entered promiscuous mode [ 40.382152][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.393585][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.401266][ T5791] veth0_vlan: entered promiscuous mode [ 40.422037][ T5791] veth1_vlan: entered promiscuous mode [ 40.422628][ T5785] veth0_vlan: entered promiscuous mode [ 40.445322][ T5785] veth1_vlan: entered promiscuous mode [ 40.447660][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.462363][ T5791] veth0_macvtap: entered promiscuous mode [ 40.471880][ T5791] veth1_macvtap: entered promiscuous mode [ 40.499647][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.499663][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.513041][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.519705][ T5785] veth0_macvtap: entered promiscuous mode [ 40.521546][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.526790][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.526801][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.540505][ T5785] veth1_macvtap: entered promiscuous mode [ 40.541166][ T5782] veth0_vlan: entered promiscuous mode [ 40.559651][ T5782] veth1_vlan: entered promiscuous mode [ 40.570740][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.581563][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.586248][ T5619] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.629661][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.629682][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.634704][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.634745][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.634776][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.634806][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.634836][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.634865][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.634893][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.635187][ T5782] veth0_macvtap: entered promiscuous mode [ 40.640215][ T5782] veth1_macvtap: entered promiscuous mode [ 40.641187][ T5781] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.669809][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.669827][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.691320][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.704604][ T5619] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.704738][ T5619] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.705139][ T5619] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.705212][ T5619] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.719989][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.720001][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.721693][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.757639][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.757652][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.814332][ T5619] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.815354][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.815366][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.846471][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.846523][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.874960][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.874987][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.875004][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.976064][ T5951] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 40.977244][ T5951] 8021q: VLANs not supported on gre0 [ 40.980696][ T5951] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4'. [ 41.085707][ T5958] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 41.085797][ T5958] ALSA: mixer_oss: invalid index 137438 [ 41.085804][ T5958] ALSA: mixer_oss: invalid OSS volume 'øÿ' [ 41.085808][ T5958] ALSA: mixer_oss: invalid OSS volume 'ðÿ' [ 41.085813][ T5958] ALSA: mixer_oss: invalid OSS volume 'èÿ' [ 41.085818][ T5958] ALSA: mixer_oss: invalid OSS volume 'àÿ' [ 41.085822][ T5958] ALSA: mixer_oss: invalid OSS volume 'Øÿ' [ 41.085827][ T5958] ALSA: mixer_oss: invalid OSS volume 'Ðÿ' [ 41.085831][ T5958] ALSA: mixer_oss: invalid OSS volume 'Èÿ' [ 41.086222][ T5958] ALSA: mixer_oss: invalid OSS volume 'Àÿ' [ 41.095893][ T5958] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 41.144737][ T5886] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 41.149192][ T5960] Zero length message leads to an empty skb [ 41.158564][ T5962] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7'. [ 41.159645][ T5960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6'. [ 41.294348][ T5886] usb 5-1: Using ep0 maxpacket: 8 [ 41.295405][ T5886] usb 5-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 41.296523][ T5886] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 41.296540][ T5886] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 41.296557][ T5886] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 41.296578][ T5886] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 41.296589][ T5886] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 41.296602][ T5886] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 41.296618][ T5886] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 41.296638][ T5886] usb 5-1: config 168 interface 0 has no altsetting 0 [ 41.297598][ T5886] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 41.297624][ T5886] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 41.297655][ T5886] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 41.297673][ T5886] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 41.297690][ T5886] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 41.297710][ T5886] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 41.297731][ T5886] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 41.297750][ T5886] usb 5-1: config 168 interface 0 has no altsetting 0 [ 41.299205][ T5886] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 41.299222][ T5886] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 41.299238][ T5886] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 41.299251][ T5886] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 41.299263][ T5886] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 41.299275][ T5886] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 41.299287][ T5886] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 41.299299][ T5886] usb 5-1: config 168 interface 0 has no altsetting 0 [ 41.302146][ T5886] usb 5-1: string descriptor 0 read error: -22 [ 41.302207][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.393379][ T5886] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 41.575976][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.576493][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.598615][ T47] ================================================================== [ 41.598629][ T47] BUG: KASAN: slab-use-after-free in drm_atomic_helper_wait_for_vblanks.part.0+0x7d0/0x890 [ 41.598655][ T47] Read of size 1 at addr ffff88805811b409 by task kworker/u33:2/47 [ 41.598669][ T47] [ 41.598692][ T47] CPU: 0 UID: 0 PID: 47 Comm: kworker/u33:2 Not tainted syzkaller #0 PREEMPT(full) [ 41.598711][ T47] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.598733][ T47] Workqueue: events_unbound commit_work [ 41.598753][ T47] Call Trace: [ 41.598760][ T47] [ 41.598767][ T47] dump_stack_lvl+0x100/0x190 [ 41.598792][ T47] print_report+0x13d/0x4b0 [ 41.598816][ T47] ? __virt_addr_valid+0x239/0x430 [ 41.598836][ T47] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d0/0x890 [ 41.598855][ T47] kasan_report+0xdf/0x1c0 [ 41.598877][ T47] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d0/0x890 [ 41.598899][ T47] drm_atomic_helper_wait_for_vblanks.part.0+0x7d0/0x890 [ 41.598919][ T47] ? preempt_schedule+0x57/0xd0 [ 41.598939][ T47] ? preempt_schedule_thunk+0x16/0x40 [ 41.598960][ T47] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 41.598980][ T47] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 41.599000][ T47] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 41.599021][ T47] drm_atomic_helper_commit_tail+0xff/0x130 [ 41.599041][ T47] commit_tail.isra.0+0x33e/0x420 [ 41.599061][ T47] process_one_work+0xac7/0x1b10 [ 41.599082][ T47] ? __pfx_process_one_work+0x10/0x10 [ 41.599097][ T47] ? lock_acquire+0x1d1/0x380 [ 41.599119][ T47] ? __pfx_commit_work+0x10/0x10 [ 41.599138][ T47] worker_thread+0x5ef/0xe50 [ 41.599157][ T47] ? kthread+0x13a/0x450 [ 41.599178][ T47] ? __pfx_worker_thread+0x10/0x10 [ 41.599193][ T47] kthread+0x373/0x450 [ 41.599214][ T47] ? __pfx_kthread+0x10/0x10 [ 41.599237][ T47] ret_from_fork+0x730/0xd60 [ 41.599265][ T47] ? __pfx_ret_from_fork+0x10/0x10 [ 41.599285][ T47] ? __switch_to+0x800/0x10e0 [ 41.599325][ T47] ? __pfx_kthread+0x10/0x10 [ 41.599349][ T47] ret_from_fork_asm+0x1a/0x30 [ 41.599371][ T47] [ 41.599376][ T47] [ 41.599380][ T47] Allocated by task 5947: [ 41.599387][ T47] kasan_save_stack+0x30/0x50 [ 41.599405][ T47] kasan_save_track+0x14/0x30 [ 41.599421][ T47] __kasan_kmalloc+0xaa/0xb0 [ 41.599438][ T47] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 41.599452][ T47] drm_atomic_helper_crtc_duplicate_state+0x72/0xd0 [ 41.599471][ T47] drm_atomic_get_crtc_state+0x1de/0x690 [ 41.599492][ T47] drm_atomic_set_property+0x165/0x4030 [ 41.599507][ T47] drm_mode_atomic_ioctl+0x6ed/0x2940 [ 41.599521][ T47] drm_ioctl_kernel+0x1f3/0x3e0 [ 41.599535][ T47] drm_ioctl+0x5e6/0xc60 [ 41.599547][ T47] __x64_sys_ioctl+0x18e/0x210 [ 41.599564][ T47] do_syscall_64+0x123/0x790 [ 41.599584][ T47] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.599615][ T47] [ 41.599619][ T47] Freed by task 5936: [ 41.599625][ T47] kasan_save_stack+0x30/0x50 [ 41.599643][ T47] kasan_save_track+0x14/0x30 [ 41.599660][ T47] kasan_save_free_info+0x3b/0x70 [ 41.599673][ T47] __kasan_slab_free+0x5f/0x80 [ 41.599691][ T47] kfree+0x22b/0x6d0 [ 41.599702][ T47] drm_atomic_commit_default_clear+0x4aa/0x1140 [ 41.599716][ T47] __drm_atomic_commit_free+0x185/0x2f0 [ 41.599730][ T47] drm_atomic_helper_dirtyfb+0x578/0x790 [ 41.599751][ T47] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x350 [ 41.599773][ T47] drm_fb_helper_damage_work+0x4c8/0xab0 [ 41.599795][ T47] process_one_work+0xac7/0x1b10 [ 41.599808][ T47] worker_thread+0x5ef/0xe50 [ 41.599821][ T47] kthread+0x373/0x450 [ 41.599841][ T47] ret_from_fork+0x730/0xd60 [ 41.599857][ T47] ret_from_fork_asm+0x1a/0x30 [ 41.599872][ T47] [ 41.599875][ T47] The buggy address belongs to the object at ffff88805811b400 [ 41.599875][ T47] which belongs to the cache kmalloc-512 of size 512 [ 41.599886][ T47] The buggy address is located 9 bytes inside of [ 41.599886][ T47] freed 512-byte region [ffff88805811b400, ffff88805811b600) [ 41.599901][ T47] [ 41.599905][ T47] The buggy address belongs to the physical page: [ 41.599912][ T47] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58118 [ 41.599925][ T47] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 41.599937][ T47] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 41.599952][ T47] page_type: f5(slab) [ 41.599964][ T47] raw: 00fff00000000040 ffff88801d442c80 dead000000000100 dead000000000122 [ 41.599978][ T47] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 41.599992][ T47] head: 00fff00000000040 ffff88801d442c80 dead000000000100 dead000000000122 [ 41.600005][ T47] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 41.600019][ T47] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 41.600032][ T47] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 41.600039][ T47] page dumped because: kasan: bad access detected [ 41.600046][ T47] page_owner tracks the page as allocated [ 41.600051][ T47] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5785, tgid 5785 (syz-executor), ts 41566963735 [ 41.600076][ T47] post_alloc_hook+0xfd/0x120 [ 41.600098][ T47] get_page_from_freelist+0x1113/0x35e0 [ 41.600113][ T47] __alloc_frozen_pages_noprof+0x2f6/0x3190 [ 41.600127][ T47] new_slab+0xb1/0x6d0 [ 41.600140][ T47] refill_objects+0xe3/0x410 [ 41.600153][ T47] __pcs_replace_empty_main+0x35e/0x650 [ 41.600166][ T47] __kmalloc_flags_noprof+0x6a4/0x8e0 [ 41.600179][ T47] alloc_slab_obj_exts+0x6a/0x170 [ 41.600193][ T47] __memcg_slab_post_alloc_hook+0x3f3/0x10b0 [ 41.600208][ T47] kmem_cache_alloc_noprof+0x4f5/0x6a0 [ 41.600224][ T47] anon_vma_clone+0x2b3/0xca0 [ 41.600249][ T47] anon_vma_fork+0x1bb/0x6a0 [ 41.600269][ T47] dup_mmap+0x10e6/0x2370 [ 41.600287][ T47] copy_process+0x7a07/0x84c0 [ 41.600302][ T47] kernel_clone+0x176/0x9d0 [ 41.600316][ T47] __do_sys_clone+0xd9/0x120 [ 41.600330][ T47] page last free pid 5694 tgid 5694 ts 41325206968 stack trace: [ 41.600340][ T47] __free_frozen_pages+0x7b4/0x1110 [ 41.600361][ T47] qlist_free_all+0x47/0xf0 [ 41.600376][ T47] kasan_quarantine_reduce+0x1a0/0x1f0 [ 41.600392][ T47] __kasan_slab_alloc+0x69/0x90 [ 41.600410][ T47] kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 41.600426][ T47] __alloc_skb+0x140/0x710 [ 41.600447][ T47] tcp_stream_alloc_skb+0x34/0x660 [ 41.600461][ T47] tcp_sendmsg_locked+0x1373/0x42d0 [ 41.600476][ T47] tcp_sendmsg+0x2e/0x50 [ 41.600489][ T47] inet_sendmsg+0xb9/0x140 [ 41.600502][ T47] sock_write_iter+0x4fd/0x5d0 [ 41.600519][ T47] vfs_write+0x6af/0x1050 [ 41.600535][ T47] ksys_write+0x1f8/0x250 [ 41.600551][ T47] do_syscall_64+0x123/0x790 [ 41.600570][ T47] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.600585][ T47] [ 41.600589][ T47] Memory state around the buggy address: [ 41.600596][ T47] ffff88805811b300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 41.600606][ T47] ffff88805811b380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 41.600616][ T47] >ffff88805811b400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 41.600624][ T47] ^ [ 41.600631][ T47] ffff88805811b480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 41.600641][ T47] ffff88805811b500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 41.600649][ T47] ================================================================== [ 41.600753][ T47] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 41.834413][ T47] CPU: 0 UID: 0 PID: 47 Comm: kworker/u33:2 Not tainted syzkaller #0 PREEMPT(full) [ 41.837173][ T47] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.840161][ T47] Workqueue: events_unbound commit_work [ 41.841855][ T47] Call Trace: [ 41.842888][ T47] [ 41.843771][ T47] dump_stack_lvl+0x100/0x190 [ 41.845161][ T47] vpanic+0x553/0x970 [ 41.846349][ T47] ? __pfx_vpanic+0x10/0x10 [ 41.847702][ T47] ? mark_held_locks+0x40/0x70 [ 41.849135][ T47] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d0/0x890 [ 41.851276][ T47] panic+0xd1/0xe0 [ 41.852413][ T47] ? __pfx_panic+0x10/0x10 [ 41.853735][ T47] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d0/0x890 [ 41.855963][ T47] ? preempt_schedule+0x57/0xd0 [ 41.857504][ T47] check_panic_on_warn.cold+0x19/0x34 [ 41.859204][ T47] end_report.part.0+0x3a/0x90 [ 41.860715][ T47] kasan_report.cold+0xe/0x18 [ 41.862170][ T47] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d0/0x890 [ 41.864316][ T47] drm_atomic_helper_wait_for_vblanks.part.0+0x7d0/0x890 [ 41.866494][ T47] ? preempt_schedule+0x57/0xd0 [ 41.868008][ T47] ? preempt_schedule_thunk+0x16/0x40 [ 41.869684][ T47] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 41.872071][ T47] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 41.873906][ T47] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 41.875922][ T47] drm_atomic_helper_commit_tail+0xff/0x130 [ 41.877766][ T47] commit_tail.isra.0+0x33e/0x420 [ 41.879360][ T47] process_one_work+0xac7/0x1b10 [ 41.880914][ T47] ? __pfx_process_one_work+0x10/0x10 [ 41.882622][ T47] ? lock_acquire+0x1d1/0x380 [ 41.884104][ T47] ? __pfx_commit_work+0x10/0x10 [ 41.885657][ T47] worker_thread+0x5ef/0xe50 [ 41.887120][ T47] ? kthread+0x13a/0x450 [ 41.888476][ T47] ? __pfx_worker_thread+0x10/0x10 [ 41.890098][ T47] kthread+0x373/0x450 [ 41.891393][ T47] ? __pfx_kthread+0x10/0x10 [ 41.892862][ T47] ret_from_fork+0x730/0xd60 [ 41.894306][ T47] ? __pfx_ret_from_fork+0x10/0x10 [ 41.895895][ T47] ? __switch_to+0x800/0x10e0 [ 41.897372][ T47] ? __pfx_kthread+0x10/0x10 [ 41.898847][ T47] ret_from_fork_asm+0x1a/0x30 [ 41.900344][ T47] [ 41.901985][ T47] Kernel Offset: disabled [ 41.903337][ T47] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:56:49 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85bf12e5 RDI=ffffffff9cf29240 RBP=ffffffff9cf29200 RSP=ffffc90000a0f220 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3530383838666666 R12=0000000000000000 R13=0000000000000064 R14=000000000000000a R15=ffffc90000a0f538 RIP=ffffffff85bf130f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d449e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb99945aff8 CR3=0000000059986000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0030656764697262 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd19e1836 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd19e1836 00007ffcd19e183c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa79803714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa798037184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa7980372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa798037176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa7981f9600 00007fa7981f95e0 00007fa7981f95e8 00007fa7981f9618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa7981f95f8 00007fa7981f95c8 00007fa7981f9600 00007fa7981f95e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6eeceb24edd62752 1c35a384ac097875 e9e52983dbc363ba bca3390c44f09650 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7657fc101ed743e6 2196fdf556954f7a 28dcfcd2bc137e20 4a51f04a6d2ac3d7 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 62fac72b37661cfb 8051d3dbe51041cf eb513f7fa7a42f83 ae2b3d9d5814bf8a ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 18ebe17b135822af 33ecec4e5d6149fc d88b9d2a86da64a1 7d18fbc10ac6591b ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=000000000003dfca RCX=ffffffff82938c43 RDX=0000000000000001 RSI=ffffffffffffffff RDI=ffff888033e74b00 RBP=000000000003de00 RSP=ffffc900040df6b0 R8 =0000000000000006 R9 =ffffffffffffffff R10=000000000003de00 R11=0000000000000001 R12=ffffffffffffffff R13=0000000000000001 R14=dffffc0000000000 R15=ffffea0000f7f298 RIP=ffffffff820e15f7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d459e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5bb450dd58 CR3=0000000053327000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 307a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd7a140ec6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd7a140ec6 00007ffd7a140ecc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5bb363714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5bb3637184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5bb36372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5bb3637176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000001a7ddb5199 RBX=ffff88806a224040 RCX=00000000000006e0 RDX=000000000000001a RSI=ffffffff81fdacb5 RDI=ffff8880206c8000 RBP=00000009aa305580 RSP=ffffc90000157988 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=1ffff9200002af3b R13=0000000000000001 R14=0000000000000001 R15=ffff88806a224080 RIP=ffffffff81fdacc8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d469e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000110c458471 CR3=000000005ab60000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0003000000100008 0000000000000004 000c001a00100000 0014010000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000c000000080004 0020000e00000000 0000000000000000 000f000000200000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00060000000002dc 6c00000000180000 00200000000e0014 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000030000000000 0008ffffff9e0000 0000030000000000 0008ffffff8e0000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000030000000000 00020000000cffff ffaa000000000300 000000000008ffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff6a000003e60000 0008000400000008 0008000000140000 0028000000400000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0054000000680000 007c0000009c0000 00b4000000d40000 0009000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300000000000008 ffffffae00000000 0300000000000008 ffffff9e00000000 ZMM25=ff36947aff36947a ff36947aff36947a ff36947aff36947a ff36947aff36947a ff36947aff36947a ff36947aff36947a ff36947aff36947a ff36947aff36947a ZMM26=12305d3312305d33 12305d3312305d33 12305d3312305d33 12305d3312305d33 12305d3312305d33 12305d3312305d33 12305d3312305d33 12305d3312305d33 ZMM27=21e4787c21e4787c 21e4787c21e4787c 21e4787c21e4787c 21e4787c21e4787c 21e4787c21e4787c 21e4787c21e4787c 21e4787c21e4787c 21e4787c21e4787c ZMM28=000000a00000009f 0000009e0000009d 0000009c0000009b 0000009a00000099 0000009800000097 0000009600000095 0000009400000093 0000009200000091 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=6e0100006e010000 6e0100006e010000 6e0100006e010000 6e0100006e010000 6e0100006e010000 6e0100006e010000 6e0100006e010000 6e0100006e010000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=ffff88806a342960 RCX=ffffc90003a6f6e4 RDX=0000000000000001 RSI=ffffffff8e5f5055 RDI=ffffffff8c831080 RBP=0000000000000003 RSP=ffffc90003a6f6b0 R8 =00000000da1117e1 R9 =000000000000002c R10=ffffffff827b6080 R11=0000000000000001 R12=ffff88802f932580 R13=ffff88802f932580 R14=0000000000000206 R15=0000000000000004 RIP=ffffffff8be9caba RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558bcdb500 ffffffff 00c00000 GS =0000 ffff8880d479e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fce1e7556c8 CR3=0000000053088000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7379735f65676173 752e746363617570 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffb97d1b06 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffb97d1b06 00007fffb97d1b0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce1da3714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce1da37184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce1da372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce1da37176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000140 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000140 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000