last executing test programs: 2.47900379s ago: executing program 1 (id=13): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x39, 0x10, 0x70bd2c, 0x25dfdbff, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000151) 2.478106466s ago: executing program 1 (id=15): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000104000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x44040}, 0x0) 2.390831595s ago: executing program 1 (id=16): mknod(&(0x7f0000000180)='./bus\x00', 0xc000, 0x100) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040)='jfs\x00', 0x8080, &(0x7f00000001c0)='discard') creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x44040, 0x11b) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1f, 0x12, r0, 0x0) 2.388753699s ago: executing program 3 (id=17): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000380)={'#! ', './file0', [{0x20, 'eX\x00\x00\x00I\xc0\x03\xf1\x98\xccn\xe1\x12M\xf1r]B\xdc\xca\x90I\x9f\xa6\x1f\x11F\xfd\xbc\xd5\xa7\xd2\xd6\xbb*\xa6\xfd\x8cc\xcb\xda\xc1\xde\xaf\x0e\xd8f=7j\v\xe2\x98\x9a;\x8b\xed\xddr\x8ca\\|J6\xde\x17\x01\t\xeb\x7fK\x8d\xb0G\\Hx\x12G'}, {0x20, ':@J\xb2,D\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xfb\xea\x16\x01^z\xb0\xb04z\xafE\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9cH\x9az\xbfE=)|\x18f6\xd8G\x99o\x02\x12\xd4\x9d\xfd\xb2\xe8\x8f\x06\x00\xc3N\xe3\xb3\xc8\r\xdb\x86\xdd\xd8J\x12&7\r\xf1\xc7a\f\x18n~\xc5\xd7\xc3\x06\x1d\xd5\xa8\x92F\x18\x9a\xb7]\x16\xa2j$\xfc\xaf\t\xdb\x16o\x1fE\xc9r\x97\x9a\xd9\xd5\xb0\x85\xeb\x81\xe7\xcc\xe1\x01\xc0\x18\xb7\xff\x1f\xba\xb3\x86E39\x9e\x12G\x93\xda\xf2\xa9\xfd\xc7\xc9!A3&\xbf\xe6)\x06\x9e\xe8\x15\x19\x94CF\x16\xdb\xbc\xfe)\x85\xa6\xec\xea\xd7\xa8\xca,\x8a\xe7\x04\xf4\xa3\xfc@j7\xc1f\x1c\v?\x116viRwi\x06\x11\xc0\xb9\xa6\xe8\a\x04X\xfd\x9d\x9d\xf9\xc8\"\xac\xf2|\x9f\xe8|\xd3\xb5D\xa3\x97M|):\xfc>\x93#\xb3/\x98(\xea\x1c\xd3\x1f\x8a5\xe5D\xafGX\x92\t^\xf7I\x9b\x9d\x90\x87'}, {0x20, 'trusted./verlay.y\xc6per~\v\x17\xd7\x01d.O\xecTU\xa5\x011\xae\xcc\xf7{i8\xbe\x8b\x04\xb8mG\xea\xc0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfeEO\xf2\x82f\xf1<\xe8*\xe8\x01/\xec\xd5\x91\xf3\xfb(|\x9f[\x04\xd3#@\x1e\x7f\xa6(\x9c\x17X\xc4\xc6@\"9\xd7\xe6\x91\xba\x03\xcd\xbaW9#\x15x\xf2\xf2>\x1fR\xcda\x8f<\xa8\xeaL\xc7\x18\xec\x0e\x8f\xd9\xdax\xf8\x81bm-b\x87D?\xa5\tQ\xdc\t\x8fT\xf0\xca\x0e2\xdf'}], 0xa, "98ff080076b2b41b014891ae518e3479ba3ddb672050faced143a22399a575e2f50ff2388b285e3779a0be938144c48e94c179d2c68e1f208966cf2b40f3641701fb414cd8987df26f6c142ec80a0b05db2f33161bf65ee26eb42cdf390000000000"}, 0x267) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bda15a08769bcd5107053eaafa98740f8cb9694c01f0000000000", 0x20) (async) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bda15a08769bcd5107053eaafa98740f8cb9694c01f0000000000", 0x20) write$cgroup_subtree(r1, &(0x7f00000007c0)={[{0x2b, 'rdma'}]}, 0x6) write$qrtrtun(r1, &(0x7f00000016c0)="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", 0x1d0) (async) write$qrtrtun(r1, &(0x7f00000016c0)="9d8d645e53b6183d874f9e93a18dd009a09560ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315544fa0a1622d949faba79788908354e467989e8458e6f5f76e0e4e781bfca4c928c956321dd514877569805db6602f1584a8bd051f13bad882bea021ffb5ce918a1f87f1d439ec93772d6ecaaf8891f7678f2037ccced78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c7263fa2331d1241523986dccbd4e1f32b2f521380a2ea4732132264de6d26ce40177a780df98cbf94b96d900a2dfc5c877db675ebb1d7cbc398ca422ddbadc24ee6f3bf036f62cdb056502a6b657ff95930e9268649ad0003afe9a912179ce61631b3dab94642d2768f1f22299deb9eddb917fc0076b74406149024514d07417c6007e8cd4dc4e2295be71f412044b52b1ce32aac048cad9c413a8c19528dc1b432fe7f9fda7182a47243af427a76ede78aa5c6ef75ea1f403000000203d4760a1ff6a0119b39a245d94e7cd3cef7c40f436de7944774d7558a050f9519d4bbd821684ef8356985e8f5b8d86346f428788fc374e7eaa0c2a2ef8478a13b4a56d0821201c37a0066fb9f5cc583005b9f71b671ff8b0bf20420c462aa1bb93218e", 0x1d0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xcdf) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1c86dd600300000014060000000000000000000000000000002000fe80009c0000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) shutdown(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0xffff}}}}}}}, 0x0) 2.387921132s ago: executing program 1 (id=19): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002d0009c28f0500000000000000000000000000001d7d1b91ad16f749e1846f27b1715bbfd90bf931507d91e86d86ec5df07ea1355ead583b84d047fab0a5dda8b9552d0227ad379ac281da75", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x84) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="e00cee34d8dae78a3149b6b1a234e200e5cc24a7d4", @ANYRES16=r2, @ANYBLOB="100028bd7000fedbdf250a00000008000600", @ANYRES32=r5, @ANYBLOB="0a000900000000000000000008003a000800000008003400090000000800390001000000"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0xc4) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065cc}, 0xc) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000540), 0x40400, 0x0) sendmsg$nl_crypto(r7, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)=@upd={0xe8, 0x12, 0x200, 0x70bd2d, 0x25dfdbff, {{'ccm(cipher_null-generic)\x00'}}, [{0x8}]}, 0xe8}}, 0x20000040) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x50) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='source', &(0x7f0000000400)='c:::\x00', 0x0) socket$key(0xf, 0x3, 0x2) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000007c0)=ANY=[@ANYBLOB="380100001000130780ffffff00000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0xe}, 0x0) r11 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) 2.291376841s ago: executing program 3 (id=20): write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f", 0x1f) socket$nl_route(0x10, 0x3, 0x0) 2.290252265s ago: executing program 3 (id=22): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = fsopen(&(0x7f0000000100)='hpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x30}}, 0x0) 2.220858656s ago: executing program 3 (id=23): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) (async) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000080)={r3}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x38, 0x26, 0x800, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff1, 0x8}, {0xffff, 0xb}, {0x5, 0xd}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c080) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000009000000090000000000000e0300000000d3000000070000000000000e01000000000000000202000000000000000000fb2e"], 0x0, 0x4d, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000d00"/20, @ANYRES32=r6, @ANYBLOB="00300000c048000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x2) 1.469011265s ago: executing program 1 (id=33): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x1019c2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0xa, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f00000006c0)={'\x00', 0x60e, 0xee, 0x25, 0x0, 0x406, 0x2, 0xffff1000, '\x00', 0x4}) r8 = syz_kvm_add_vcpu$x86(0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r11, @ANYBLOB="00000000000000002c0012800b0001006d616373656300001c000280060008"], 0x4c}}, 0x0) r12 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r12, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad000008"], 0x125) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000100)=@arm64={0xf, 0xbb, 0x10, '\x00', 0xfff}) r13 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r13, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) writev(r13, &(0x7f0000000740)=[{&(0x7f0000000200)="f50bbcb9f9bb4971ea6c883546b9b6e4fab4ecd09c7978cb9d629d7fd83c6efc08f05f0c971ac78e47586e0486f4e909d0bad2c7e3042ebf9fbd748d628c59809e2de6a9c0d2b9ba809ea3eca4d64779a2d989b5dae14ac2b520b0f39ca92ad68e0bc03c67f979ec3a0ab0194df9a39892122819acda2167c46827312aacc662124b52b0839bb82225a58c7b110683dc7d592997ff19946386747133fdaf9f8c11926fb92c25d1806b3265e4e6dc37cb50f6b99c44f9a4a2", 0xb8}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.221185369s ago: executing program 1 (id=36): r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000040)={{}, [@rose, @bcast, @remote, @null, @bcast, @remote, @netrom]}, &(0x7f00000001c0)=0x48) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f00000002c0)={0x8, 'veth1_to_team\x00', {'gre0\x00'}, 0x6}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000088000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d"], 0xfdef) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000005b000000720a00ff00000000730a9fff00000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000300)=0xffffffffffffffff) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f00000004c0)={0xfffffff, 0x1, 0x5, r3, 0x0, &(0x7f0000000480)={0x990969, 0xfbcb, '\x00', @p_u16=&(0x7f0000000440)=0xbf5e}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000000)="b9fe030768045c8c989a14f088a8657986dda8c6e96fd9d5a77080d1016ac1eb01639fa5680155e0b2c6ed515651056c705918431d6a", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.12110843s ago: executing program 0 (id=38): socketpair$unix(0x1, 0x2, 0x0, 0x0) setreuid(0xffffffffffffffff, 0xee00) setfsuid(0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x10d002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000440)={'geneve0\x00', &(0x7f0000000600)=@ethtool_dump={0x40, 0x8cc, 0x4}}) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x200, 0x109a02) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r2, 0x0) syz_clone3(&(0x7f00000006c0)={0x200, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.050639939s ago: executing program 0 (id=39): readlink(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaa56cc4a562231a9ee0002080045e6ff6bffff0000fd06907864010300000000aa02004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6c0400029078fffc04020303ac080a000002000000000d1e0308fe0bf989a9b4d9f170219a051200000005000000050000000400000000050213124d561d7ef6737b6a2efa8f86957f69a200"], 0x0) readlink(0x0, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) (async) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2}, 0x18) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) (async) listen(r0, 0x3) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) (async) syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaa56cc4a562231a9ee0002080045e6ff6bffff0000fd06907864010300000000aa02004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6c0400029078fffc04020303ac080a000002000000000d1e0308fe0bf989a9b4d9f170219a051200000005000000050000000400000000050213124d561d7ef6737b6a2efa8f86957f69a200"], 0x0) (async) 1.048854685s ago: executing program 0 (id=40): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r4, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000002a80)=""/4096, 0x1000}], 0x1}}], 0x2, 0x60, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'wg2\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x8}]}}]}, 0x3c}}, 0x0) 960.329565ms ago: executing program 0 (id=41): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r1, &(0x7f00000002c0)=""/199, 0xc7) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='module_request\x00', r5}, 0x18) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) ptrace(0x10, r3) r7 = syz_open_dev$video4linux(&(0x7f0000000600), 0xa, 0x60081) ioctl$VIDIOC_SUBDEV_G_EDID(r7, 0xc0285628, &(0x7f0000001cc0)={0x0, 0x0, 0x2, '\x00', &(0x7f0000001c80)=0x4}) ptrace$setregs(0xd, r3, 0x2, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) syz_pidfd_open(r3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0xfa}]}, 0x30}}, 0x0) 880.742967ms ago: executing program 3 (id=42): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x30}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x0, 0x1, 0x70bd2b, 0xfffffffb}, 0x14}, 0x1, 0x0, 0x0, 0x48008}, 0x20008884) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) mount(&(0x7f0000000040)=@filename='./cgroup\x00', &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='gfs2\x00', 0x10, &(0x7f0000000100)='barrier') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/user\x00') (async) shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) (async) r7 = semget$private(0x0, 0x2, 0xae) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) semctl$GETVAL(r7, 0x3, 0xc, 0x0) (async) ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) 530.873729ms ago: executing program 2 (id=44): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x0, 0x998f, {0x0}, {0xee01}, 0x80000001, 0x3}) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/uts\x00') ioctl$BTRFS_IOC_ADD_DEV(r1, 0xb701, 0x0) 460.255353ms ago: executing program 2 (id=45): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x24, 0x64, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0x8, 0x7}, {0xe, 0xfff1}}}, 0x24}}, 0x24000040) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x311900, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000040)={{0x1, 0x4}, 0x0, 0x3, 0x1, {0x2c, 0x37}, 0x8, 0x7}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) write$cgroup_int(r0, &(0x7f0000000140)=0x6, 0x12) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 458.496377ms ago: executing program 2 (id=46): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000200)=r0) r1 = socket$caif_seqpacket(0x25, 0x5, 0x3) sendmmsg(r1, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000062a29508a9630ca5a9be99bdca96ff00e0ffff2700128009000100f2bf04000000e5da3a46", @ANYRES32=0x0, @ANYBLOB="00000000000000000800200010000000"], 0x50}}, 0x0) 340.871121ms ago: executing program 3 (id=47): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000480)="05c0124a"}) r2 = syz_io_uring_setup(0x5ee3, &(0x7f0000000140)={0x0, 0x8917, 0x0, 0x3, 0xbfdffffb}, &(0x7f0000001c40)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x180000c, 0x1010, r2, 0x8000000) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x9, 0x0, &(0x7f0000001a40)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/195, 0xc3}, {&(0x7f00000017c0)=""/83, 0x53}, {&(0x7f0000001840)=""/232, 0xe8}, {&(0x7f0000001940)=""/217, 0xd9}], &(0x7f0000000300)=[0x80], 0x5}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x3, 0x71, 0x10, 0x1e}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) mount$bpf(0x0, &(0x7f0000000ac0)='.\x00', &(0x7f0000000b00), 0x400008, &(0x7f00000000c0)={[{@uid={'uid', 0x3d, r7}}]}) quotactl_fd$Q_QUOTAOFF(r5, 0xffffffff80000302, r7, 0x0) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="0d000000010001", 0x7) 131.270147ms ago: executing program 2 (id=48): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x4141, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000080)={0xbe, 0x20, &(0x7f0000000140)}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000bfb000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f00001a1000/0x1000)=nil) 130.996462ms ago: executing program 0 (id=49): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) timer_create(0x0, 0x0, &(0x7f0000000100)=0x0) timer_settime(r1, 0x1, &(0x7f00000000c0)={{0x77359400}}, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000001480)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f00000014c0)={{}, {r2, r3+10000000}}, &(0x7f0000001500)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x22, &(0x7f00000056c0), 0x4) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) sendmsg$sock(r0, &(0x7f0000001440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xf27c, @empty, 0x3793, 0x1}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="83bf7a34597d60f579d35a747c56c530cafafe16d6c4e76d99e8192c29a6edb64943ef8a4bd601126d6e3a8d067aef", 0x2f}, {&(0x7f00000002c0)="bcd6bc7458ee5357090c3537d468de4334fb832cb47396843a8ee961ab0a6cd0e1acfd2f7c18d350050f9eb61756f2ad29b285ae7ac14d40991d5740b867f99b645ef2c419cc4f39eecb03f86f44703779a995907d4d866d45044e66758f275f9d2d65417808a8826a9b6d55979471beafdbcc32879c61480f46250bb7d0d28d8b04a541903f9f66763a2f85931250e23fa086a3dfa0a213d8934658ff636e8b7d4ed9e4d4e84af585f92be294a90a8ffe8d79f5830b762073f48bd735f968cad6ee8e097edb8347cbc4c5faaf4c3d793a9e3559879c25cd6a", 0xd9}, {&(0x7f00000001c0)="b50223241dd5284096902f42a9a40a97e1e0392665c9357838cf01a9764d3d25c0030e45d8467437b0d7e14054b490a1b60e7bf83845cce20a61be2d5e372dc244", 0x41}, {&(0x7f00000003c0)="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", 0x1000}], 0x4, &(0x7f00000013c0)=[@txtime={{0x18, 0x1, 0x3d, 0x40ac}}, @timestamping={{0x14, 0x1, 0x25, 0xab7}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x60}, 0x4040810) 70.750459ms ago: executing program 0 (id=50): ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000000)) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) (async) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) (async) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000080)=0x3) socket$tipc(0x1e, 0x2, 0x0) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) lseek(r1, 0x67612883, 0x3) r2 = socket$kcm(0x29, 0x2, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x800, 0x1) (async) sendfile(r1, r0, &(0x7f00000000c0)=0x800, 0x1) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) r6 = getuid() write$P9_RSTATu(r3, &(0x7f00000001c0)={0x6a, 0x7d, 0x2, {{0x0, 0x41, 0xc, 0xf, {0x4, 0x3, 0x4}, 0x800000, 0x7, 0x4, 0x6, 0x4, ',:-(', 0x8, ']}/@-/)*', 0x0, '', 0x2, ')@'}, 0x14, '/dev/dri/renderD128\x00', 0xffffffffffffffff, r5, r6}}, 0x6a) connect$bt_rfcomm(r0, &(0x7f0000000240)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0xa) shutdown(r1, 0x1) ioctl$int_in(r1, 0x5421, &(0x7f0000000280)=0xb) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000002c0), &(0x7f0000000300)=0x4) dup3(r2, r2, 0x80000) (async) r7 = dup3(r2, r2, 0x80000) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) r8 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(r8, 0x8, 0x5, &(0x7f00000003c0)="c66fa8583b") (async) syz_usb_ep_write(r8, 0x8, 0x5, &(0x7f00000003c0)="c66fa8583b") ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000400)={0xffffffcb, 0xfffffff7, {r4}, {r6}, 0x4, 0x2}) (async) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000400)={0xffffffcb, 0xfffffff7, {r4}, {r6}, 0x4, 0x2}) setreuid(r9, r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in6=@ipv4={""/10, ""/2, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000540)=0xe8) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000000580)=0x0) setresuid(r9, r10, r11) syz_usb_ep_write$ath9k_ep2(r8, 0x83, 0x12, &(0x7f00000005c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "b8a8b618", {0x3, 0x2, 0x0, 0x0, 0x7, 0x6a, 0x2}}) r12 = syz_io_uring_setup(0x382, &(0x7f0000000600)={0x0, 0x4693, 0x4, 0x2, 0x187}, &(0x7f0000000680), &(0x7f00000006c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0) read$msr(r7, &(0x7f0000000700)=""/13, 0xd) (async) read$msr(r7, &(0x7f0000000700)=""/13, 0xd) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r13) 1.134017ms ago: executing program 2 (id=51): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@cswp={0x58, 0x114, 0x7, {{0x7, 0x4}, &(0x7f0000000080)=0x86c9, &(0x7f00000000c0)=0x9, 0x0, 0x9, 0x1000, 0xcf9f, 0x50, 0x200}}], 0x58, 0xc5}, 0x0) socket$kcm(0xa, 0x2, 0x73) 0s ago: executing program 2 (id=52): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000540)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000ba0000005f0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x600, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xd}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0x34}}, 0x80) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000180)={0x9, 0x2, 0x80, 0x9e, 0x3, 0x5, 0x3}, 0xc) kernel console output (not intermixed with test programs): [ 38.065492][ T40] audit: type=1400 audit(1746398992.521:80): avc: denied { write } for pid=5845 comm="sh" path="pipe:[5721]" dev="pipefs" ino=5721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 38.075423][ T40] audit: type=1400 audit(1746398992.521:81): avc: denied { rlimitinh } for pid=5845 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.083596][ T40] audit: type=1400 audit(1746398992.521:82): avc: denied { siginh } for pid=5845 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.662783][ T40] audit: type=1400 audit(1746398993.121:83): avc: denied { read } for pid=5328 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 38.671511][ T40] audit: type=1400 audit(1746398993.121:84): avc: denied { append } for pid=5328 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.680854][ T40] audit: type=1400 audit(1746398993.121:85): avc: denied { open } for pid=5328 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.689694][ T40] audit: type=1400 audit(1746398993.121:86): avc: denied { getattr } for pid=5328 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:38036' (ED25519) to the list of known hosts. [ 40.131640][ T40] audit: type=1400 audit(1746398994.591:87): avc: denied { name_bind } for pid=5849 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 42.074849][ T5851] cgroup: Unknown subsys name 'net' [ 42.277259][ T5851] cgroup: Unknown subsys name 'cpuset' [ 42.281617][ T5851] cgroup: Unknown subsys name 'rlimit' [ 42.518588][ T5911] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.140976][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.101458][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 46.101470][ T40] audit: type=1400 audit(1746399000.561:105): avc: denied { execmem } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.300716][ T40] audit: type=1400 audit(1746399000.761:106): avc: denied { create } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.309659][ T40] audit: type=1400 audit(1746399000.761:107): avc: denied { create } for pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.316176][ T40] audit: type=1400 audit(1746399000.761:109): avc: denied { read write } for pid=5935 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.323971][ T40] audit: type=1400 audit(1746399000.761:108): avc: denied { read write } for pid=5936 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.331539][ T40] audit: type=1400 audit(1746399000.761:110): avc: denied { open } for pid=5936 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.333446][ T5937] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.339190][ T40] audit: type=1400 audit(1746399000.761:111): avc: denied { open } for pid=5935 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.343521][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.348691][ T40] audit: type=1400 audit(1746399000.771:112): avc: denied { ioctl } for pid=5935 comm="syz-executor" path="socket:[5781]" dev="sockfs" ino=5781 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.357323][ T5946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.359735][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.362281][ T5946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.364034][ T5944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.369146][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.369243][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.371944][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.373981][ T5949] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.375204][ T5944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.375669][ T5944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.377757][ T5942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.384954][ T5946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.385089][ T40] audit: type=1400 audit(1746399000.841:113): avc: denied { read } for pid=5943 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.388064][ T5951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.391792][ T5944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.392630][ T5944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.393102][ T5944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.404323][ T40] audit: type=1400 audit(1746399000.841:114): avc: denied { open } for pid=5943 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.405676][ T5944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.414656][ T5944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.619477][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 46.669357][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 46.802177][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 46.854803][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.857765][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.860115][ T5947] bridge_slave_0: entered allmulticast mode [ 46.862779][ T5947] bridge_slave_0: entered promiscuous mode [ 46.868833][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.871369][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.873957][ T5947] bridge_slave_1: entered allmulticast mode [ 46.876837][ T5947] bridge_slave_1: entered promiscuous mode [ 46.893742][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.896235][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.898580][ T5943] bridge_slave_0: entered allmulticast mode [ 46.901138][ T5943] bridge_slave_0: entered promiscuous mode [ 46.955904][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.958290][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.961186][ T5943] bridge_slave_1: entered allmulticast mode [ 46.963829][ T5943] bridge_slave_1: entered promiscuous mode [ 46.987511][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.990558][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 46.996452][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.079573][ T5947] team0: Port device team_slave_0 added [ 47.082899][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.087970][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.128792][ T5947] team0: Port device team_slave_1 added [ 47.182303][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.186432][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.189396][ T5936] bridge_slave_0: entered allmulticast mode [ 47.193183][ T5936] bridge_slave_0: entered promiscuous mode [ 47.251463][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.255239][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.258250][ T5936] bridge_slave_1: entered allmulticast mode [ 47.262038][ T5936] bridge_slave_1: entered promiscuous mode [ 47.280620][ T5943] team0: Port device team_slave_0 added [ 47.324476][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.327190][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.336614][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.341860][ T5943] team0: Port device team_slave_1 added [ 47.371459][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.376511][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.378674][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.386998][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.418218][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.421511][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.423742][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.426548][ T5935] bridge_slave_0: entered allmulticast mode [ 47.429568][ T5935] bridge_slave_0: entered promiscuous mode [ 47.436725][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.439129][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.447857][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.478394][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.480773][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.483079][ T5935] bridge_slave_1: entered allmulticast mode [ 47.486255][ T5935] bridge_slave_1: entered promiscuous mode [ 47.504078][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.507891][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.516756][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.522116][ T5936] team0: Port device team_slave_0 added [ 47.526157][ T5936] team0: Port device team_slave_1 added [ 47.547710][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.596298][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.598607][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.607470][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.613625][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.642998][ T5947] hsr_slave_0: entered promiscuous mode [ 47.646211][ T5947] hsr_slave_1: entered promiscuous mode [ 47.651154][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.653434][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.661841][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.729802][ T5943] hsr_slave_0: entered promiscuous mode [ 47.732024][ T5943] hsr_slave_1: entered promiscuous mode [ 47.734107][ T5943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.736736][ T5943] Cannot create hsr debugfs directory [ 47.792443][ T5935] team0: Port device team_slave_0 added [ 47.796014][ T5935] team0: Port device team_slave_1 added [ 47.873316][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.875733][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.883483][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.961234][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.964249][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.975374][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.982459][ T5936] hsr_slave_0: entered promiscuous mode [ 47.985062][ T5936] hsr_slave_1: entered promiscuous mode [ 47.987506][ T5936] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.990179][ T5936] Cannot create hsr debugfs directory [ 48.108856][ T5935] hsr_slave_0: entered promiscuous mode [ 48.111184][ T5935] hsr_slave_1: entered promiscuous mode [ 48.113849][ T5935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.117217][ T5935] Cannot create hsr debugfs directory [ 48.332392][ T5947] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.346256][ T5947] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.357108][ T5947] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.373361][ T5947] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.420281][ T5943] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.426032][ T5286] Bluetooth: hci0: command tx timeout [ 48.427818][ T5943] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.434583][ T5286] Bluetooth: hci3: command tx timeout [ 48.435103][ T5944] Bluetooth: hci2: command tx timeout [ 48.435911][ T5943] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.444573][ T5943] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.504542][ T5936] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.504706][ T5944] Bluetooth: hci1: command tx timeout [ 48.515720][ T5936] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.521384][ T5936] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.543111][ T5936] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.596353][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.599927][ T5935] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.607138][ T5935] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.626815][ T5935] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.631076][ T5935] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.647605][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.660608][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.676037][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.678440][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.682751][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.685224][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.692621][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.699907][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.702318][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.726865][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.729144][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.788372][ T5947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.829756][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.838782][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.849445][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.857670][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.871293][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.874048][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.879881][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.882695][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.887582][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.890041][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.896931][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.899197][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.929066][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.942312][ T5935] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.961854][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.026516][ T5943] veth0_vlan: entered promiscuous mode [ 49.029666][ T5947] veth0_vlan: entered promiscuous mode [ 49.034328][ T5947] veth1_vlan: entered promiscuous mode [ 49.044044][ T5943] veth1_vlan: entered promiscuous mode [ 49.072854][ T5947] veth0_macvtap: entered promiscuous mode [ 49.080460][ T5943] veth0_macvtap: entered promiscuous mode [ 49.085363][ T5943] veth1_macvtap: entered promiscuous mode [ 49.092204][ T5947] veth1_macvtap: entered promiscuous mode [ 49.113358][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.120173][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.123002][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.127638][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.131643][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.138359][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.142898][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.149865][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.155108][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.162680][ T5943] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.167953][ T5943] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.171841][ T5943] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.175602][ T5943] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.183406][ T5947] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.188866][ T5947] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.192674][ T5947] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.196703][ T5947] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.209200][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.281338][ T5935] veth0_vlan: entered promiscuous mode [ 49.292333][ T5936] veth0_vlan: entered promiscuous mode [ 49.296984][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.299859][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.318390][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.320003][ T5935] veth1_vlan: entered promiscuous mode [ 49.321201][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.330288][ T5936] veth1_vlan: entered promiscuous mode [ 49.342642][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.347188][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.371752][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.377677][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.381054][ T5935] veth0_macvtap: entered promiscuous mode [ 49.396057][ T5935] veth1_macvtap: entered promiscuous mode [ 49.400154][ T5943] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.401318][ T5936] veth0_macvtap: entered promiscuous mode [ 49.412981][ T5936] veth1_macvtap: entered promiscuous mode [ 49.427698][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.431128][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.436801][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.440603][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.440635][ T6000] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 49.444906][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.457687][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.461230][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.463301][ T6000] Zero length message leads to an empty skb [ 49.464835][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.470569][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.476273][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.486116][ T5935] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.488879][ T5935] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.492142][ T5935] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.496134][ T5935] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.500231][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.503919][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.507993][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.511744][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.515867][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.519441][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.523941][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.531643][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.536915][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.540071][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.543333][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.546956][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.550625][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.557197][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.567086][ T5936] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.567821][ T6012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5'. [ 49.570644][ T5936] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.577309][ T5936] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.581079][ T5936] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.631108][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.634249][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.645198][ T166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.648774][ T166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.667769][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.671230][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.682766][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.684247][ T6014] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7'. [ 49.689573][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.741057][ T6018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 49.745756][ T6018] netlink: 'syz.2.3': attribute type 2 has an invalid length. [ 50.008640][ T6051] JFS: discard option not supported on device [ 50.011736][ T6051] syz.1.16: attempt to access beyond end of device [ 50.011736][ T6051] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 50.016349][ T6051] syz.1.16: attempt to access beyond end of device [ 50.016349][ T6051] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 50.021044][ T6051] Mount JFS Failure: -5 [ 50.080898][ T64] libceph: connect (1)[c::]:6789 error -101 [ 50.081287][ T64] libceph: mon0 (1)[c::]:6789 connect error [ 50.174261][ T6070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19'. [ 50.189473][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23'. [ 50.247646][ T6066] kvm: pic: non byte write [ 50.251844][ T6066] kvm: vcpu 0: requested 16512 ns lapic timer period limited to 200000 ns [ 50.262761][ T6066] kvm: pic: non byte write [ 50.268610][ T6066] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.294608][ T29] libceph: connect (1)[c::]:6789 error -101 [ 50.296868][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 50.345398][ T64] libceph: connect (1)[c::]:6789 error -101 [ 50.347432][ T64] libceph: mon0 (1)[c::]:6789 connect error [ 50.492703][ T6094] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 50.504981][ T5944] Bluetooth: hci3: command tx timeout [ 50.505196][ T5286] Bluetooth: hci0: command tx timeout [ 50.514674][ T5286] Bluetooth: hci2: command tx timeout [ 50.519415][ T6092] tun0: tun_chr_ioctl cmd 1074025678 [ 50.521796][ T6092] tun0: group set to 0 [ 50.555347][ T29] libceph: connect (1)[c::]:6789 error -101 [ 50.558349][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 50.594862][ T5286] Bluetooth: hci1: command tx timeout [ 50.674256][ T6099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28'. [ 50.767124][ T6101] 9pnet_virtio: no channels available for device syz [ 50.856116][ T64] libceph: connect (1)[c::]:6789 error -101 [ 50.859329][ T64] libceph: mon0 (1)[c::]:6789 connect error [ 50.892950][ T6059] ceph: No mds server is up or the cluster is laggy [ 50.893807][ T6076] ceph: No mds server is up or the cluster is laggy [ 51.028827][ T6117] netlink: 16 bytes leftover after parsing attributes in process `syz.1.33'. [ 51.117311][ T40] kauditd_printk_skb: 136 callbacks suppressed [ 51.117321][ T40] audit: type=1400 audit(1746399005.581:251): avc: denied { setopt } for pid=6125 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.126277][ T40] audit: type=1400 audit(1746399005.581:252): avc: denied { getopt } for pid=6125 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.132258][ T40] audit: type=1400 audit(1746399005.581:253): avc: denied { bind } for pid=6125 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.139592][ T40] audit: type=1400 audit(1746399005.581:254): avc: denied { name_bind } for pid=6125 comm="syz.0.35" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 51.148980][ T40] audit: type=1400 audit(1746399005.581:255): avc: denied { node_bind } for pid=6125 comm="syz.0.35" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 51.158669][ T40] audit: type=1400 audit(1746399005.581:256): avc: denied { write } for pid=6125 comm="syz.0.35" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.167694][ T40] audit: type=1400 audit(1746399005.581:257): avc: denied { connect } for pid=6125 comm="syz.0.35" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.179140][ T40] audit: type=1400 audit(1746399005.581:258): avc: denied { name_connect } for pid=6125 comm="syz.0.35" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 51.188666][ T40] audit: type=1400 audit(1746399005.601:259): avc: denied { setopt } for pid=6125 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.189167][ T6129] syz.1.36 uses obsolete (PF_INET,SOCK_PACKET) [ 51.195522][ T40] audit: type=1400 audit(1746399005.621:260): avc: denied { bind } for pid=6125 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.404987][ T6144] trusted_key: syz.0.40 sent an empty control message without MSG_MORE. [ 51.409827][ T6144] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 51.528808][ T6151] lo: entered allmulticast mode [ 51.532490][ T6151] tunl0: entered allmulticast mode [ 51.536116][ T6151] gre0: entered allmulticast mode [ 51.541137][ T6151] gretap0: entered allmulticast mode [ 51.548827][ T6151] erspan0: entered allmulticast mode [ 51.553051][ T6151] ip_vti0: entered allmulticast mode [ 51.557280][ T6151] ip6_vti0: entered allmulticast mode [ 51.561437][ T6151] sit0: entered allmulticast mode [ 51.568522][ T6151] ip6tnl0: entered allmulticast mode [ 51.573839][ T6151] ip6gre0: entered allmulticast mode [ 51.583638][ T6151] ip6gretap0: entered allmulticast mode [ 51.590476][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.594523][ T6151] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.600107][ T6151] bridge0: entered allmulticast mode [ 51.605932][ T6151] vcan0: entered allmulticast mode [ 51.610343][ T6151] bond0: entered allmulticast mode [ 51.612635][ T6151] bond_slave_0: entered allmulticast mode [ 51.615650][ T6151] bond_slave_1: entered allmulticast mode [ 51.622409][ T6151] team0: entered allmulticast mode [ 51.625835][ T6151] team_slave_0: entered allmulticast mode [ 51.628285][ T6151] team_slave_1: entered allmulticast mode [ 51.633787][ T6151] dummy0: entered allmulticast mode [ 51.641831][ T6151] nlmon0: entered allmulticast mode [ 51.646026][ T6151] caif0: entered allmulticast mode [ 51.648873][ T6151] batadv0: entered allmulticast mode [ 51.654196][ T6151] vxcan0: entered allmulticast mode [ 51.658029][ T6151] vxcan1: entered allmulticast mode [ 51.662011][ T6151] veth0: entered allmulticast mode [ 51.669121][ T6151] veth1: entered allmulticast mode [ 51.676199][ T6151] wg0: entered allmulticast mode [ 51.680526][ T6151] wg1: entered allmulticast mode [ 51.685556][ T6151] wg2: entered allmulticast mode [ 51.689023][ T6151] veth0_to_bridge: entered allmulticast mode [ 51.697456][ T6151] veth1_to_bridge: entered allmulticast mode [ 51.706102][ T6151] veth0_to_bond: entered allmulticast mode [ 51.710809][ T6151] veth1_to_bond: entered allmulticast mode [ 51.715303][ T6151] veth0_to_team: entered allmulticast mode [ 51.720962][ T6151] veth1_to_team: entered allmulticast mode [ 51.727426][ T6151] veth0_to_batadv: entered allmulticast mode [ 51.732421][ T6151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.735705][ T6151] batadv_slave_0: entered allmulticast mode [ 51.741275][ T6151] veth1_to_batadv: entered allmulticast mode [ 51.745703][ T6151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.748656][ T6151] batadv_slave_1: entered allmulticast mode [ 51.751881][ T6151] xfrm0: entered allmulticast mode [ 51.755071][ T6151] veth0_to_hsr: entered allmulticast mode [ 51.758436][ T6151] hsr_slave_0: entered allmulticast mode [ 51.761655][ T6151] veth1_to_hsr: entered allmulticast mode [ 51.766214][ T6151] hsr_slave_1: entered allmulticast mode [ 51.770606][ T6151] hsr0: entered allmulticast mode [ 51.774773][ T6151] veth1_virt_wifi: entered allmulticast mode [ 51.778529][ T6151] veth0_virt_wifi: entered allmulticast mode [ 51.783485][ T6151] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 51.789364][ T6151] veth1_vlan: entered allmulticast mode [ 51.794780][ T6151] veth0_vlan: entered allmulticast mode [ 51.803082][ T6151] vlan0: entered allmulticast mode [ 51.805794][ T6151] vlan1: entered allmulticast mode [ 51.808420][ T6151] macvlan0: entered allmulticast mode [ 51.813167][ T6151] macvlan1: entered allmulticast mode [ 51.817540][ T6151] ipvlan0: entered allmulticast mode [ 51.819727][ T6151] ipvlan1: entered allmulticast mode [ 51.822324][ T6151] veth1_macvtap: entered allmulticast mode [ 51.826195][ T6151] veth0_macvtap: entered allmulticast mode [ 51.830075][ T6151] macvtap0: entered allmulticast mode [ 51.833888][ T6151] macsec0: entered allmulticast mode [ 51.838092][ T6151] geneve0: entered allmulticast mode [ 51.844697][ T6151] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.848406][ T6151] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.852261][ T6151] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.856849][ T6151] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.863767][ T6151] geneve1: entered allmulticast mode [ 51.870496][ T6151] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 51.877389][ T6151] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 51.882971][ T6151] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 51.888994][ T6151] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 51.908594][ T6151] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 51.920760][ T6151] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 52.069730][ T6168] netlink: 48 bytes leftover after parsing attributes in process `syz.2.46'. [ 52.134054][ T6169] bpf: Bad value for 'uid' [ 52.136569][ T6169] Bluetooth: MGMT ver 1.23 [ 52.308430][ T6171] overlay: ./file1 is not a directory [ 52.341445][ T6173] sysfs: cannot create duplicate filename '/module/raw_gadget' [ 52.343847][ T6173] CPU: 2 UID: 0 PID: 6173 Comm: syz.0.50 Not tainted 6.15.0-rc4-syzkaller-00309-g081bc61f9312 #0 PREEMPT(full) [ 52.343861][ T6173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.343867][ T6173] Call Trace: [ 52.343870][ T6173] [ 52.343874][ T6173] dump_stack_lvl+0x16c/0x1f0 [ 52.343892][ T6173] sysfs_warn_dup+0x7f/0xa0 [ 52.343908][ T6173] sysfs_create_dir_ns+0x24b/0x2b0 [ 52.343924][ T6173] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 52.343939][ T6173] ? find_held_lock+0x2b/0x80 [ 52.343954][ T6173] ? do_raw_spin_unlock+0x172/0x230 [ 52.343966][ T6173] kobject_add_internal+0x2c4/0x9b0 [ 52.343983][ T6173] kobject_init_and_add+0x11b/0x190 [ 52.343998][ T6173] ? __pfx_kobject_init_and_add+0x10/0x10 [ 52.344020][ T6173] lookup_or_create_module_kobject.part.0+0xbe/0x170 [ 52.344037][ T6173] lookup_or_create_module_kobject+0x41/0x60 [ 52.344052][ T6173] module_add_driver+0x23a/0x420 [ 52.344066][ T6173] bus_add_driver+0x32e/0x690 [ 52.344087][ T6173] driver_register+0x15c/0x4b0 [ 52.344098][ T6173] usb_gadget_register_driver_owner+0x132/0x330 [ 52.344116][ T6173] raw_ioctl+0x17d0/0x2c30 [ 52.344135][ T6173] ? __pfx_raw_ioctl+0x10/0x10 [ 52.344150][ T6173] ? selinux_file_ioctl+0x180/0x270 [ 52.344165][ T6173] ? selinux_file_ioctl+0xb4/0x270 [ 52.344180][ T6173] ? __pfx_raw_ioctl+0x10/0x10 [ 52.344196][ T6173] __x64_sys_ioctl+0x190/0x200 [ 52.344211][ T6173] do_syscall_64+0xcd/0x260 [ 52.344225][ T6173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.344236][ T6173] RIP: 0033:0x7fa3bef8e56b [ 52.344244][ T6173] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 52.344254][ T6173] RSP: 002b:00007fa3bfec3f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.344263][ T6173] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007fa3bef8e56b [ 52.344269][ T6173] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 000000000000000b [ 52.344275][ T6173] RBP: 00007fa3bfec4fe0 R08: 0000000000000000 R09: 00302e6364755f79 [ 52.344281][ T6173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.344286][ T6173] R13: 00007fa3bfec3fb0 R14: 0000200000000340 R15: 00007fa3bf2e0b88 [ 52.344299][ T6173] [ 52.344310][ T6173] kobject: kobject_add_internal failed for raw_gadget with -EEXIST, don't try to register things with the same name in the same directory. [ 52.414007][ T6178] atomic_op ffff88802a18e198 conn xmit_atomic 0000000000000000 [ 52.415617][ T6173] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN NOPTI [ 52.438049][ T6173] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 52.441736][ T6173] CPU: 3 UID: 0 PID: 6173 Comm: syz.0.50 Not tainted 6.15.0-rc4-syzkaller-00309-g081bc61f9312 #0 PREEMPT(full) [ 52.446436][ T6173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.449832][ T6173] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 52.451685][ T6173] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 52.457792][ T6173] RSP: 0018:ffffc9000409fbd8 EFLAGS: 00010082 [ 52.459721][ T6173] RAX: dffffc0000000000 RBX: 0000000000000020 RCX: 0000000000000000 [ 52.462272][ T6173] RDX: 0000000000000000 RSI: ffffffff8b6f691a RDI: dffffc0000000004 [ 52.464883][ T6173] RBP: 0000000000000020 R08: 0000000000000001 R09: 0000000000000000 [ 52.467342][ T6173] R10: ffffffff90850517 R11: 0000000000000000 R12: ffffffff8b6f691a [ 52.469976][ T6173] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.472565][ T6173] FS: 00007fa3bfec66c0(0000) GS:ffff8880d6cdf000(0000) knlGS:0000000000000000 [ 52.475421][ T6173] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.477600][ T6173] CR2: 000055555fbc5808 CR3: 000000004d24a000 CR4: 0000000000352ef0 [ 52.480165][ T6173] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.482722][ T6173] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.485300][ T6173] Call Trace: [ 52.486387][ T6173] [ 52.487348][ T6173] __kasan_check_byte+0x13/0x50 [ 52.488904][ T6173] lock_acquire+0xfc/0x350 [ 52.490363][ T6173] ? kobject_init_and_add+0x123/0x190 [ 52.492084][ T6173] _raw_spin_lock_irqsave+0x3a/0x60 [ 52.493816][ T6173] ? complete+0x1d/0x200 [ 52.495201][ T6173] complete+0x1d/0x200 [ 52.496526][ T6173] kobject_put+0x1e4/0x5a0 [ 52.497993][ T6173] lookup_or_create_module_kobject.part.0+0x11d/0x170 [ 52.500179][ T6173] lookup_or_create_module_kobject+0x41/0x60 [ 52.502166][ T6173] module_add_driver+0x23a/0x420 [ 52.503829][ T6173] bus_add_driver+0x32e/0x690 [ 52.505355][ T6173] driver_register+0x15c/0x4b0 [ 52.506917][ T6173] usb_gadget_register_driver_owner+0x132/0x330 [ 52.508910][ T6173] raw_ioctl+0x17d0/0x2c30 [ 52.510356][ T6173] ? __pfx_raw_ioctl+0x10/0x10 [ 52.511901][ T6173] ? selinux_file_ioctl+0x180/0x270 [ 52.513599][ T6173] ? selinux_file_ioctl+0xb4/0x270 [ 52.515257][ T6173] ? __pfx_raw_ioctl+0x10/0x10 [ 52.516818][ T6173] __x64_sys_ioctl+0x190/0x200 [ 52.518440][ T6173] do_syscall_64+0xcd/0x260 [ 52.519956][ T6173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.521866][ T6173] RIP: 0033:0x7fa3bef8e56b [ 52.523320][ T6173] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 52.529352][ T6173] RSP: 002b:00007fa3bfec3f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.531988][ T6173] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007fa3bef8e56b [ 52.534503][ T6173] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 000000000000000b [ 52.537010][ T6173] RBP: 00007fa3bfec4fe0 R08: 0000000000000000 R09: 00302e6364755f79 [ 52.539574][ T6173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.542071][ T6173] R13: 00007fa3bfec3fb0 R14: 0000200000000340 R15: 00007fa3bf2e0b88 [ 52.544578][ T6173] [ 52.545601][ T6173] Modules linked in: [ 52.546858][ T6173] ---[ end trace 0000000000000000 ]--- [ 52.548583][ T6173] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 52.550475][ T6173] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 52.556661][ T6173] RSP: 0018:ffffc9000409fbd8 EFLAGS: 00010082 [ 52.558619][ T6173] RAX: dffffc0000000000 RBX: 0000000000000020 RCX: 0000000000000000 [ 52.561112][ T6173] RDX: 0000000000000000 RSI: ffffffff8b6f691a RDI: dffffc0000000004 [ 52.563678][ T6173] RBP: 0000000000000020 R08: 0000000000000001 R09: 0000000000000000 [ 52.566321][ T6173] R10: ffffffff90850517 R11: 0000000000000000 R12: ffffffff8b6f691a [ 52.568925][ T6173] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.571546][ T6173] FS: 00007fa3bfec66c0(0000) GS:ffff8880d6cdf000(0000) knlGS:0000000000000000 [ 52.574540][ T6173] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.576656][ T6173] CR2: 000055555fbc5808 CR3: 000000004d24a000 CR4: 0000000000352ef0 [ 52.579183][ T6173] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.581728][ T6173] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.584305][ T6173] Kernel panic - not syncing: Fatal exception [ 52.586963][ T6173] Kernel Offset: disabled [ 52.588331][ T6173] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:50:07 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88806a73f740 RCX=ffffffff81af1bb9 RDX=ffff88801cae4880 RSI=ffffffff81af1b93 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900000c79d0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed100d4e7ee9 R13=0000000000000001 R14=dffffc0000000000 R15=ffff88806a43b040 RIP=ffffffff81bb3356 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69df000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c36d94a CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3220411a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3220411a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3220411a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3220411aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3220411b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3220411c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3220583488 00007f3220583480 00007f3220583478 00007f3220583450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f32210ed100 00007f3220583440 00007f3220580004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3220583498 00007f3220583490 00007f3220583488 00007f3220583480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000021014 RBX=0000000000000001 RCX=ffffffff8b6cd419 RDX=ffffed100d4a65be RSI=ffffffff8bf48260 RDI=ffffffff81919901 RBP=ffffed1003ad8488 RSP=ffffc90000177df8 R8 =0000000000000000 R9 =ffffed100d4a65bd R10=ffff88806a532deb R11=0000000000000000 R12=0000000000000001 R13=ffff88801d6c2440 R14=ffffffff90850510 R15=0000000000000000 RIP=ffffffff8b6cbcaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6adf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005602e56a8908 CR3=000000002585d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde9539da0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcfc8611a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcfc8611a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcfc8611a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcfc8611aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcfc8611b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcfc8611c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e776f6e6b6e7500 6f6c6c3332302500 657a697320740004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b524a4b4e4b5000 4a49491617150000 405f4c560551464a 5751560541444700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 0000000000000000 0000000000000000 00000000000002bc ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a7415a0 RCX=ffffffff81af1bb9 RDX=ffff888024c44880 RSI=ffffffff81af1b93 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90003a977f8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffed100d4e82b5 R13=0000000000000001 R14=dffffc0000000000 R15=ffff88806a63b040 RIP=ffffffff81af1b9a RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555fbc5500 ffffffff 00c00000 GS =0000 ffff8880d6bdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f32210e56c0 CR3=0000000049f5b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc35744d70 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3220411a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3220411a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3220411a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3220411aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3220411b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3220411c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000048 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000048 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854f56b5 RDI=ffffffff9adf94e0 RBP=ffffffff9adf94a0 RSP=ffffc9000409f540 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9adf94a0 R15=ffffffff854f5650 RIP=ffffffff854f56df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa3bfec66c0 ffffffff 00c00000 GS =0000 ffff8880d6cdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055555fbc5808 CR3=000000004d24a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc35744d70 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3220411a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3220411a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3220411a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3220411aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3220411b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3220411c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000