last executing test programs: 4.485339718s ago: executing program 3 (id=8): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x6, 0x5, {0x1, 0x1}, {0x53, 0x2}, @cond=[{0x10, 0x3, 0x62, 0x0, 0xfd82, 0x5}, {0x7e08, 0x4, 0x3, 0x400, 0x4, 0x9}]}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) socket$nl_audit(0x10, 0x3, 0x9) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x1, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@mcast1}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x8}}]}, 0x1a0}}, 0x0) exit(0x7) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0x8000000000008, 0xffffffffffffffff, 0x4, {0x4, 0x1}, 0x7}, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010001000000fcdbdf251300000008000300", @ANYRES32=r8, @ANYBLOB="0400130006001200000000000600ab00060000000a000600080211000001000006001000a7"], 0x4c}, 0x1, 0x0, 0x0, 0x44054}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) pselect6(0x40, &(0x7f0000000900)={0x6, 0xfffefffffffffffd, 0x203, 0x3, 0x5, 0x52a9396a, 0x1, 0x8}, 0x0, &(0x7f0000000980)={0x8, 0x7fff, 0x0, 0xc, 0xf, 0x9, 0x8, 0x101}, &(0x7f00000009c0)={0x0, 0x3938700}, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket(0x1d, 0x6, 0xb265) bind$llc(r9, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x54, 0xcb, 0xfe, @remote}, 0x10) 3.54388498s ago: executing program 3 (id=12): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r0}, 0x18) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x252200, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f0000001940)=""/4105, &(0x7f0000001040)=0x1009) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0, 0x7}, 0x50) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x12c, @ioapic={0x100010000, 0x1, 0x0, 0x0, 0x0, [{0x6, 0x7, 0x8, '\x00', 0xab}, {0x2, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x3}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0xc, 0xc, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x9}, {0x94, 0x5, 0x9, '\x00', 0xfe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x8, '\x00', 0x33}, {0x81, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0x8, '\x00', 0xff}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0x6, 0x5, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd, '\x00', 0x2}, {0x8, 0x80, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xf}, {0x78, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x3, 0xc1, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0x6}, {0xc1, 0xd, 0x81, '\x00', 0x10}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 2.562145203s ago: executing program 3 (id=20): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001800010000000000000000000a6558000000fd00002c00003800160034000100090000000000000000041002fc000000ff020000000000000000000000000001fe8000000000000000000000000000aa060015000300000008000400", @ANYRES32], 0x64}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="34000000b57253007d5259e34088d14e0aa30c974b4972cd6c6f19bb55dc108f80c25533ecdabb10fafd0c88214e492306c6363d75bb649ffbfa1ea74829bbc5e0bc74ef153fde994845ae9c2771565ae4e3581f8131d32f63", @ANYRES16=r2, @ANYBLOB="01000000000000000000190000002000018008000300070000001400020067656e65766531000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000844}, 0x40000) syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x70, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x70, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) poll(&(0x7f0000000180)=[{r3, 0x48}], 0x1, 0x7fffffff) (async) poll(&(0x7f0000000180)=[{r3, 0x48}], 0x1, 0x7fffffff) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0), 0x28880, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xe) ioctl$BTRFS_IOC_SPACE_INFO(r5, 0x541b, 0x0) (async) ioctl$BTRFS_IOC_SPACE_INFO(r5, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x7, 0x3, 0x1, 0x1, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r6, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) 2.518046603s ago: executing program 0 (id=21): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x4, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x0, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x0, 0x14, 0x1}, @IPSET_ATTR_MARK={0x0, 0xa, 0x1, 0x0, 0x814}, @IPSET_ATTR_CADT_FLAGS={0x0, 0x8, 0x1, 0x0, 0x20}, @IPSET_ATTR_IP_TO={0x0, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x0, 0x2, 0x1, 0x0, @private0}}]}, @IPSET_ATTR_SETNAME={0x1b, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0600"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000440)="f257a8ea7bc263dfaeab968586dd", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x19, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000130d00"/20, @ANYRES32=0x0, @ANYBLOB="d11101000000000008000500", @ANYRES32=r6, @ANYBLOB="140012800d0001006d6163766c616e"], 0x44}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'ipvlan0\x00', &(0x7f00000003c0)=@ethtool_rxnfc={0x2a, 0xa, 0x9, {0x5, @sctp_ip6_spec={@local, @empty, 0x4e23, 0x4e21, 0xf1}, {0x0, @empty, 0xfffd, 0x1, [0x4a, 0x6]}, @sctp_ip4_spec={@dev={0xac, 0x14, 0x14, 0xf}, @private=0xa0100ff, 0x4e20, 0x4e21, 0xda}, {0x0, @empty, 0x8ee3, 0x0, [0xfffffff7, 0x9cc]}, 0x9}}}) socket$xdp(0x2c, 0x3, 0x0) r8 = socket$kcm(0x2c, 0x3, 0x0) close(r8) r9 = socket$inet6(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r9, &(0x7f0000005840)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10102, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r10, 0x40505330, &(0x7f0000000bc0)={0x800080, 0x856, 0x8, 0x9, 0x40, 0x558}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) 1.586064643s ago: executing program 2 (id=27): r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) lseek(r0, 0x8000000000000000, 0x4) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000040)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'syz2', 0x3a, 'Y$*@', 0x3a, './file0', 0x3a, [0x50, 0x46, 0x46]}, 0x32) 1.585373554s ago: executing program 0 (id=28): r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) accept4$alg(r1, 0x0, 0x0, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr-aes-aesni)\x00'}, 0x58) write$selinux_access(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) (async) accept4$alg(r1, 0x0, 0x0, 0x0) (async) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr-aes-aesni)\x00'}, 0x58) (async) write$selinux_access(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) (async) 1.380491983s ago: executing program 2 (id=29): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r0}, 0x18) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x252200, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f0000001940)=""/4105, &(0x7f0000001040)=0x1009) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0, 0x7}, 0x50) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x12c, @ioapic={0x100010000, 0x1, 0x0, 0x0, 0x0, [{0x6, 0x7, 0x8, '\x00', 0xab}, {0x2, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x3}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0xc, 0xc, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x9}, {0x94, 0x5, 0x9, '\x00', 0xfe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x8, '\x00', 0x33}, {0x81, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0x8, '\x00', 0xff}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0x6, 0x5, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd, '\x00', 0x2}, {0x8, 0x80, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xf}, {0x78, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x3, 0xc1, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0x6}, {0xc1, 0xd, 0x81, '\x00', 0x10}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1.380199844s ago: executing program 0 (id=30): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x8000, 0x800}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0x64010102}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x24040810) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES16=r1, @ANYBLOB="0000b6cd31a78b3b080300000000000000000000553eb738b7b18f4415983e633ab754df1b2aa8060141dc3de5da14fd1c80a02c01b7105a4722b32d78d1642f83de5682e7b919313cac8c671bb3edfbdef58764c63a10044dd4e21a4cae83c38a5194f2d3de14d5267f171c32f9ea10fc4f96c11c982d678562d330820e8f1d0716838382ea4daca1a381e18206af31586b7d1dced9487ab19835ffeea7baeb53285e20c845e997a9fc826f71af688295d2a1d1be18e2df464dcc678a8c08b277eee3dd67436b8b09228fa6244f512125d10ada54b5d434e28b6acdc49f9e5123b37d06462819635836862f199db9c97b83b7", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) 1.222068538s ago: executing program 1 (id=32): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000010301"], 0x20}}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000010301"], 0x20}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc0000, 0x2) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0xd, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0xd, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x9, &(0x7f0000000040)=0x9, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.114848093s ago: executing program 3 (id=33): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0), 0x100}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000025c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r8, 0xc0145401, &(0x7f0000000000)={{0x3, 0x2, 0xfffffffd, 0x2}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(r2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4001000010000100000000000000000000000000000000000000000000000000fe8000000b00000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000006c00000064010100000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000008000000000000000000000000000000ffffff7f00000000000000002dbd7000ff340000020004000000000000000000480003006465666c61746500"], 0x140}}, 0x0) 1.11326915s ago: executing program 0 (id=34): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x41000, 0xc193fb33447a5702, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, @void, @value}, 0x94) socket(0xa, 0x3, 0x3a) (async) r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001a00)={'ip6gre0\x00', &(0x7f0000001980)={'ip6_vti0\x00', 0x0, 0x6, 0x4, 0x90, 0xfff, 0x2, @private2, @remote, 0x1, 0xf897, 0x1}}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000013c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="bd0d25d4994b180000000000000000000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r6, @ANYBLOB="080003"], 0x80}}, 0x8000) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000b40), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x30, r10, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) (async) sendmsg$NL80211_CMD_DEL_TX_TS(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x30, r10, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) r13 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r13) (async) ptrace(0x10, r13) ptrace$setregs(0xd, r13, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$setregs(0xd, r13, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r13, 0x0, 0x0) (async) ptrace$cont(0x20, r13, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001a40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r15 = fsmount(0xffffffffffffffff, 0x1, 0x82) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r8, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xed, 0x6d}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r13}, @NL80211_ATTR_PID={0x8, 0x52, r14}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r15}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1d}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20040800) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r8, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xed, 0x6d}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r13}, @NL80211_ATTR_PID={0x8, 0x52, r14}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r15}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1d}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20040800) r16 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r16}, 0x0, 0x0}, 0x20) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000180000006000a004e24000014000900fec0ffffffffffff0000000000000001050002000a"], 0x38}}, 0x0) 896.789268ms ago: executing program 0 (id=35): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x240080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x48802, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) close(r3) read$FUSE(r2, &(0x7f0000000300)={0x2020}, 0xeffd) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000040)="3e0f38f0a0e7a3640f320fc7a80d00650f01df642e65660f384179862e0fc730f2260f30360f01c4f3d93af3f30f0159f7", 0x31}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r2, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000002340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4001}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@deltfilter={0x34, 0x2d, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff1, 0x8013}, {0x9, 0xfff2}, {0xf, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x4008000) ioctl$KVM_RUN(r4, 0xae80, 0x0) 884.43452ms ago: executing program 2 (id=36): mkdir(&(0x7f0000000440)='./file1\x00', 0x1) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000950000000000000041ff413e60946c8f1976b40a024a02bbe78ff2f8273e5339e943cf14b424c1ba566b3178ceea79703b888c840c616232355beddd0ae9180500a50ac733b842816df2abc1d38bdcf8c8b82101a5715c972fa3767265ce5fb8ea38b2358e6a83e395db"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000600)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0xcf) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r1, r4, 0x9, 0x0, @val=@netfilter={0x7, 0x0, 0x645, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000580)=[{0x10, 0x0, [0x401, 0xc4e1, 0x8, 0x9, 0xb, 0x6, 0xa, 0x883, 0xcc61, 0x3, 0x7, 0x7ff, 0xfffffc01, 0x1, 0x4, 0x80000001]}], r3, 0x1, 0x1, 0x48}}, 0x20) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x28, 0x1, 0x0, "4f80ff259b1c2ce2d2226bfb771f00ff065e07079c5e6f426ebb117c0caba25f", 0x32314752}) chdir(&(0x7f0000000140)='./file1\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r8 = accept4$x25(r6, &(0x7f0000000200), &(0x7f0000000280)=0x12, 0x80000) shutdown(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) write$cgroup_subtree(r2, &(0x7f0000000340)={[{0x2b, 'io'}, {0x2b, 'cpuacct'}, {0x0, 'net_prio'}, {0x2b, 'hugetlb'}]}, 0x20) r10 = dup3(r7, r9, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x14, 0x0, &(0x7f0000001380)) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x2, 0x2f170e35, 0x0, 0x0, 0x9, 0x9, 0x0, 0xffff, 0xdc}) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000001c0)='veth0_virt_wifi\x00', 0x10) fchown(r6, 0xee01, 0x0) 628.712358ms ago: executing program 0 (id=37): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0), 0x4903) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffff3f, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)='|', 0x1, 0xbcaf, 0x0, 0x0) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) 607.129671ms ago: executing program 2 (id=38): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1b6dc}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r4, 0x541b, &(0x7f0000000280)) 504.862013ms ago: executing program 1 (id=39): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], 0x15) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) read$FUSE(r3, &(0x7f0000002200)={0x2020}, 0x2020) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) lseek(r4, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000480)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200), r5, 0x0, 0x2, 0x4}}, 0x20) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',posixacl']) r6 = fcntl$getown(r2, 0x9) creat(&(0x7f0000000580)='./file0\x00', 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r8 = fanotify_init(0xf00, 0x0) fanotify_mark(r8, 0x1, 0x10001011, r7, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r7, &(0x7f00000004c0)='./file0\x00', 0x2) rename(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000200)='./bus\x00') ioctl$SG_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000140)={'\x00', 0x1, 0x4, 0x7fffffff, 0x9, 0x6, r6}) 357.758215ms ago: executing program 1 (id=40): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000140)={'gretap0\x00', r0, 0x700, 0x40, 0x40, 0x6, {{0x6, 0x4, 0x2, 0x7, 0x18, 0x65, 0x0, 0x8, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}]}}}}}) mkdir(&(0x7f0000000200)='./file1\x00', 0x63) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0xc0089364, &(0x7f0000000180)) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045f80024000000000021907800000000ffffffff0100003f00019078044937c800513b94"], 0x0) 277.335227ms ago: executing program 1 (id=41): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="fbd89b3e8977042b8d347071ecb9ced6ca30c62d075a011fd70630380f4fb526e74634260eaa7b3bddf26611e940db08172fad84fa1395", 0x37}, {&(0x7f0000000100)="24adae2b5c2fb0d06e", 0x9}], 0x2}, 0x34000041) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000b40)={&(0x7f00000001c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000840)=[{&(0x7f00000002c0)="083996547922806ed8ae1fba85a5ea279ab16e31a7774e2f12b12244042c4510c278f918304083adcefccf74c34139bfb1986931170d8e0fbc2429dd224b9d8aff3dce000179c193f83c98e39da0847e82473c", 0x53}, {&(0x7f00000003c0)="7ef5dbe63c8a7dffb7e249d53913895d3b327e54286905967c22bbe3401f9a2b286831121e1aba99f2ae5edc3abca4b40d1c895af2aa7603abba49c57456852461fc50bf5e8f09d486f335ef36c14f4f4c03b068d2b5092c3f1623d8c214ded7fe16f88aba934536fdbe27bd9411819d14ae7611f6a245a41842cf8bb647b8a0c995857be61a4cfdba17ebd2121dcb6bc00c25478fc61635b828679363a233df630bacd24546781e7b2281b76e29f504665f660c2349ecfe905cad44829028856edabb57942dba180666a10a4a87860b660812d5a5aabe60908d6091c06106e27ba3334c4558da6c31f6eb593dcd2bb7bb41", 0xf2}, {&(0x7f0000000540)="63c0515888448779952ff982e938b51cb2c7ff211257159596a664c971b2ee85a25c8e3ed451e626a2ec2b11c83f481d68c14242680a57accbafd636382eb154ba53ca2ca851ef7f295132", 0x4b}, {&(0x7f00000005c0)="70eb43e3f1239f5505c9df0b2734fa2e282c382e42f12696527881313ce4230421fe1bdcf64b14307d45c200715ccc25e24fc0f068b79a40d6804202e2d3e63ae7eed24e5dd9e3bb4f7851f8707a7adb9806734ee7b547a6ba8531a84c7b2292b212e9cc6c498b49d4781d5481da91a8c8afaf14ecdeea9d40ff081066e2c9a8d2c660b6c03d4cfde8491f6201a98ca451dfa7b6e020c96a2ae7189e36d0a5cbe3856ce8d46652587bc8c0ada49c5f011e7e3f6c172906bdf098b7a6fc41ab5fbaf8f57195a461c2dbdbf3b8af685a975770a258b227bcc4c5473c0df593dc22", 0xe0}, {&(0x7f00000006c0)="cea29e014c4aff56e370d8dfc40fbce0aafb01f4007389c3d83de5f35c578e7706f1542ce51ff081a312c5d68e785489e36770a5e692331cd28a1d10e16ab2a938e5243afbcf6501de6d6e62782d8b04b2581806f7709de0ee28d98ede43fc0959e21716767b9225f60fff5c402c9164d6f91823a92fa6fd75596ccb3a39280f47d5dbeb37dc7bd480", 0x89}, {&(0x7f00000004c0)="8b65681c160b836c630ce957f45298d31c625bf4e611ab05a7315181a6251458db9f740b04cf020dd7b42f01", 0x2c}, {&(0x7f0000000780)="2e088a6b2ca470f70c9b7d48b2835f43f6ed5aaa9ca1a0fdcde5bc1dfb9f10af49314765f65de83aabbe2c1a8dbc0d5ca8b88204e4f301f252a6456c0478268923b12c842bbb5f18c8c60e4dcd4873fea6b1c880f1ea5f2fff930dac05395e140c2b0967974ddbf1ed4d3e41b47b937edeada8ba4fc95f7a99b35eb51f7a25fbfd8cab2b1c88047ac7bb7b28da809cfbcffe660c0f3877", 0x97}], 0x7, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x270}, 0x1) listen(r5, 0x0) close(r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000011c0)={0x6, 0x1b, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000100000000000000061000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000097160400040000001800000003000000000000000b00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001140)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001180)={0x1, 0xa, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) 166.106056ms ago: executing program 3 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000003700)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000500)=@newchain={0x43c, 0x64, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {0x0, 0xd}, {0xf, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3f, 0x9, 0x9, 0x0, 0xd153, 0x1, 0x0, 0x200, 0xea90, 0x861, 0x1000, 0x5, 0x9, 0xb, 0x1, 0x7, 0x1, 0x0, 0x6090, 0x2000000, 0x6, 0x9, 0x4, 0x7fff, 0x7, 0x7, 0x6a, 0x8, 0xb, 0xa962, 0x932, 0x8, 0x6bf1, 0x480a, 0x6, 0x9da, 0x5, 0x100, 0x9, 0xec6, 0x100, 0xfff, 0x81, 0x7, 0x6, 0xd, 0x6, 0x682, 0x9b2, 0x6, 0x957, 0xfffffbdd, 0x1, 0x7, 0x7, 0x1, 0x3, 0x252b0000, 0x100, 0xfffffffd, 0x401, 0x0, 0x5, 0x401, 0x3, 0x1, 0x5, 0x1, 0x80008, 0x7, 0xffffffff, 0xe, 0x10000000, 0x1, 0x400, 0xd, 0x0, 0x80000001, 0xcb3, 0x7f, 0x1, 0x81, 0x4, 0x0, 0xffffffff, 0x1, 0x27180000, 0x8, 0x7fff, 0xbcf9, 0xf, 0x0, 0x2, 0x4, 0xb5c, 0x6, 0x4ec, 0x3, 0x3, 0x6, 0x9, 0x8, 0x7fffffff, 0x81, 0xabc0, 0x7e, 0x6, 0x2, 0x0, 0x0, 0xf, 0x2, 0x9, 0xff, 0x7631, 0x2, 0x37, 0x81, 0x101, 0x6, 0x3, 0x5, 0xfffffffe, 0x6, 0x5, 0x8, 0x5, 0x6, 0xe8f, 0x4d9a, 0x0, 0x800, 0x7, 0x7f, 0x9, 0x0, 0x6, 0x80, 0xd, 0x4, 0x0, 0xe9e, 0x2, 0x1000, 0x9, 0x4, 0x9, 0x100, 0x3, 0x6, 0x0, 0x6, 0x1ff, 0x7ff, 0xfffff9db, 0x0, 0x6, 0x80, 0x4, 0x200, 0x3, 0x5, 0x3302, 0x7, 0x1, 0x8, 0x9, 0xe, 0x7ac2, 0x6, 0x6, 0x81, 0xfffffffb, 0x2407, 0x2, 0x80000001, 0x8, 0xfffff0d1, 0x3, 0x401, 0x9, 0x5, 0x9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x6, 0x81, 0x1, 0x8, 0x0, 0x8, 0xe, 0x0, 0x100, 0x0, 0x1000, 0x3, 0x0, 0x4, 0x7, 0xff, 0x2, 0x4, 0xe, 0x2a, 0x90, 0x2, 0x0, 0x7fffffff, 0x8, 0x6, 0x4, 0x7, 0x7fffffff, 0x9e, 0x3993, 0x9, 0x6f, 0x2, 0x4, 0x934c, 0x5, 0xfff, 0x4, 0x3, 0xfffffff9, 0x1, 0x1, 0x1, 0x1, 0x5, 0x3, 0x0, 0x1, 0x101, 0x0, 0x4, 0x8, 0x1, 0x8, 0xfffff001, 0x7a, 0x2, 0x6, 0x2, 0x1, 0x1, 0x4, 0x80000001, 0xb, 0xfc, 0x4, 0x7]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r2, &(0x7f0000000340), 0x8) mount_setattr(r2, &(0x7f00000000c0)='./file0\x00', 0x1900, &(0x7f0000000100)={0x73, 0x4, 0x20000, {r2}}, 0x20) utimes(&(0x7f0000000080)='./file0\x00', 0x0) 165.788856ms ago: executing program 1 (id=43): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0xfffffffffffffffe) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) (async) mount(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000500)='pstore\x00', 0x0, 0x0) (async) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=""/124, 0x7c) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1000420, 0x0) 30.64395ms ago: executing program 1 (id=44): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r0}, 0x18) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x252200, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f0000001940)=""/4105, &(0x7f0000001040)=0x1009) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0, 0x7}, 0x50) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x12c, @ioapic={0x100010000, 0x1, 0x0, 0x0, 0x0, [{0x6, 0x7, 0x8, '\x00', 0xab}, {0x2, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x3}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0xc, 0xc, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x9}, {0x94, 0x5, 0x9, '\x00', 0xfe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x8, '\x00', 0x33}, {0x81, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0x8, '\x00', 0xff}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0x6, 0x5, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd, '\x00', 0x2}, {0x8, 0x80, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xf}, {0x78, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x3, 0xc1, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0x6}, {0xc1, 0xd, 0x81, '\x00', 0x10}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 29.956437ms ago: executing program 2 (id=45): r0 = getegid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002440)={{{@in6=@private0, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000002540)=0xe8) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r2, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x0, 0x8000, 0x0, 0x0, r4, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002680)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000002780)=0xe8) (async) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r7) (async, rerun: 32) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000027c0)={0x3, 0x0, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x10, 0x4}) (async, rerun: 32) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002800)={{{@in=@multicast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@private1}}, &(0x7f0000002900)=0xe8) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002940)={0x0, 0x0, 0x0}, &(0x7f0000002980)=0xc) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000001580)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r11, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002cc0)={0x0, 0x0, 0x0}, &(0x7f0000002d00)=0xc) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000002c0)="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", 0x2000, &(0x7f0000002e80)={&(0x7f0000000000)={0x50, 0x0, 0x6, {0x7, 0x2b, 0x9df, 0x20000041, 0x9, 0x9, 0x7fff, 0x400, 0x0, 0x0, 0x10, 0x8}}, &(0x7f0000000080)={0x18, 0xfffffffffffffffe, 0xd2a6}, &(0x7f0000004200)={0x18, 0xfffffffffffffff5, 0x3, {0x100}}, &(0x7f0000000100)={0x18, 0x24, 0x9, {0x7}}, &(0x7f0000000180)={0x18, 0x0, 0x3e, {0x9}}, &(0x7f0000000200)={0x28, 0xfffffffffffffffe, 0x0, {{0x74f, 0x100000000, 0x0, 0xffffffffffffffff}}}, &(0x7f00000022c0)={0x60, 0x0, 0x7, {{0xb, 0x0, 0x2, 0x2, 0xfff, 0x8, 0x1}}}, &(0x7f0000000240)={0x18, 0x0, 0x1e, {0xb}}, &(0x7f0000002340)={0x18, 0x0, 0x9, {'&.&.N/[\x00'}}, &(0x7f0000002380)={0x20, 0xffffffffffffffda, 0x7, {0x0, 0x6}}, &(0x7f00000023c0)={0x78, 0x0, 0x6, {0x85c, 0x3, 0x0, {0x1, 0x8, 0xfffffffffffffffe, 0x8000, 0x2, 0x5, 0x1, 0x4, 0xff, 0x4000, 0x5320, 0xffffffffffffffff, r0, 0x0, 0x5}}}, &(0x7f0000002580)={0x90, 0x0, 0x8000000000000001, {0x0, 0x0, 0x800, 0x6, 0x1, 0x3de, {0x6, 0x9, 0x8, 0x6, 0xbd15, 0xd1ee, 0x2, 0x1, 0x1, 0x6000, 0x7, r1, r4, 0x0, 0x401}}}, &(0x7f0000002640)={0x10, 0x0, 0x8}, &(0x7f00000029c0)=ANY=[@ANYBLOB="e801000000000000000800000000000006000000000000000200000000000000000000000000000002000000000000002f370000080000000600000000000000000000000000000001000000000000003a08000000000000070000000000000001000000000000000600000003000000060000000020000094060000", @ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="04000000c70e00000000000005000000000000000600000000000000070000000200000067656e65766500000600000000000000020000000000000007000000000000000000000000000000feffffff1c0900000500000000000000040000000000000000800000000000000200000000000000110e00000000000002000000000000000500000009000000ffffffff0020000007000000", @ANYRES32=r8, @ANYRES32=0xee00, @ANYBLOB="01ffffff09000000000000000000000000000000f2ffffffffffffff0000000004000000020000000000000003000000000000002d5800000000000000000000000000800100000001800000020000000000000006000000000000007f00000000000000f7000000000000000d00000000000000fc01000000000000000000100a000000b1b63c2600a0000006000000", @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0e0000000900000000000000030000000000005002a725846876f700070000000b00000067656e6576650000"], &(0x7f0000002bc0)={0xa0, 0xfffffffffffffffe, 0x5, {{0x6, 0x3, 0x2, 0x8, 0x6, 0x4, {0x1, 0x2, 0x100, 0x3, 0x37, 0x63, 0x2, 0xffffffff, 0x6, 0x6000, 0x1, r11, 0x0, 0x9, 0x3}}, {0x0, 0x11}}}, &(0x7f0000002c80)={0x20, 0x0, 0x401, {0x8000, 0x4, 0xc00, 0x8}}, &(0x7f0000002d40)={0x130, 0xfffffffffffffff5, 0x105, {0x2, 0x0, 0x0, '\x00', {0x1, 0x0, 0x80, 0x9, 0x0, r12, 0x4000, '\x00', 0x9, 0x3, 0x7, 0x9667, {0x4, 0x8}, {0x800, 0x101}, {0xae1e, 0x4}, {0xb, 0x3}, 0x8, 0x7, 0x0, 0xe06b}}}}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0x3c}}, 0x0) 848.096µs ago: executing program 2 (id=46): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0xb) (async) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x12, &(0x7f0000000200)={'trans=virtio,', {[{@noextend}]}}) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0xc, &(0x7f00000000c0)="e0", 0x1) (async) getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000000)=""/19, &(0x7f0000000040)=0x13) r3 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000000000034"], 0x18}, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = dup(r4) socket$pppoe(0x18, 0x1, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f000043f000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, &(0x7f0000000540)="36676465430f784580c463f96236bc0f01dff3490f1ecd400f01f82d0000000041d8e8f3450f0766baf80cb89406148cef66bafc0c66edb9800000c00f3235010000000f30", 0x45}], 0x1, 0x48, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 3 (id=47): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES64=r0], 0x0, 0x1c, 0x0, 0x4, 0x0, 0x0, @void, @value}, 0x28) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a"], 0x22) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x2, 0x12) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x3, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipmr_delroute={0x78, 0x19, 0x20, 0x70bd2b, 0x25dfdbfd, {0x80, 0x20, 0x10, 0x5e, 0xfe, 0x3, 0xc8, 0x1, 0x3000}, [@RTA_IIF={0x8, 0x3, r3}, @RTA_OIF={0x8, 0x4, r5}, @RTA_OIF={0x8, 0x4, r7}, @RTA_PREFSRC={0x8, 0x7, @multicast2}, @RTA_METRICS={0x3a, 0x8, 0x0, 0x1, "951f50353a5ee48b610c035ac69898240e9fcd42444bc5ffd18f09b61bb42485c0b6cc5bc8c19624d18948e518720170c07edbc2e345"}]}, 0x78}, 0x1, 0x0, 0x0, 0x93edd6555dd93f63}, 0x80) kernel console output (not intermixed with test programs): [ 44.625538][ T40] audit: type=1400 audit(1744249140.664:82): avc: denied { siginh } for pid=5915 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.894867][ T40] audit: type=1400 audit(1744249142.004:83): avc: denied { read } for pid=5338 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 45.903524][ T40] audit: type=1400 audit(1744249142.004:84): avc: denied { append } for pid=5338 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 45.920328][ T40] audit: type=1400 audit(1744249142.004:85): avc: denied { open } for pid=5338 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 45.947829][ T40] audit: type=1400 audit(1744249142.004:86): avc: denied { getattr } for pid=5338 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:14533' (ED25519) to the list of known hosts. [ 46.425396][ T40] audit: type=1400 audit(1744249142.534:87): avc: denied { name_bind } for pid=5923 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 50.686568][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 50.686586][ T40] audit: type=1400 audit(1744249146.794:90): avc: denied { mounton } for pid=5927 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 50.690501][ T5927] cgroup: Unknown subsys name 'net' [ 50.697714][ T40] audit: type=1400 audit(1744249146.794:91): avc: denied { mount } for pid=5927 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.745161][ T40] audit: type=1400 audit(1744249146.854:92): avc: denied { unmount } for pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.991704][ T5927] cgroup: Unknown subsys name 'cpuset' [ 51.051280][ T5927] cgroup: Unknown subsys name 'rlimit' [ 51.244554][ T40] audit: type=1400 audit(1744249147.354:93): avc: denied { setattr } for pid=5927 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.257872][ T40] audit: type=1400 audit(1744249147.364:94): avc: denied { create } for pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.265628][ T40] audit: type=1400 audit(1744249147.364:95): avc: denied { write } for pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.276837][ T40] audit: type=1400 audit(1744249147.364:96): avc: denied { read } for pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.302241][ T40] audit: type=1400 audit(1744249147.394:97): avc: denied { read } for pid=5656 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 51.313515][ T40] audit: type=1400 audit(1744249147.394:98): avc: denied { mounton } for pid=5927 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 51.334872][ T40] audit: type=1400 audit(1744249147.394:99): avc: denied { mount } for pid=5927 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 51.395512][ T5933] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 53.190133][ T5927] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.249641][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 62.249658][ T40] audit: type=1400 audit(1744249158.344:105): avc: denied { execmem } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 62.886693][ T40] audit: type=1400 audit(1744249158.994:106): avc: denied { create } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.907878][ T40] audit: type=1400 audit(1744249158.994:107): avc: denied { read write } for pid=5939 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.922404][ T40] audit: type=1400 audit(1744249158.994:108): avc: denied { open } for pid=5939 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.935838][ T40] audit: type=1400 audit(1744249159.004:109): avc: denied { ioctl } for pid=5939 comm="syz-executor" path="socket:[7182]" dev="sockfs" ino=7182 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.975113][ T5940] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.998198][ T5940] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.021012][ T68] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.025863][ T68] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.046577][ T68] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.051277][ T68] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.056752][ T68] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.062815][ T68] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.073375][ T68] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.091222][ T68] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.109571][ T5954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.120035][ T40] audit: type=1400 audit(1744249159.214:110): avc: denied { read } for pid=5944 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.126884][ T5951] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.130148][ T5954] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.130205][ T5955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.131223][ T5954] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.157781][ T40] audit: type=1400 audit(1744249159.214:111): avc: denied { open } for pid=5944 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.175542][ T5951] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.183463][ T40] audit: type=1400 audit(1744249159.224:112): avc: denied { mounton } for pid=5944 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 63.183649][ T5297] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.196105][ T5951] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.196565][ T5951] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.206549][ T5297] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.685970][ T40] audit: type=1400 audit(1744249159.794:113): avc: denied { module_request } for pid=5939 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 63.788900][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 64.107813][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 64.346468][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 64.443842][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 64.466152][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.469463][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.472445][ T5939] bridge_slave_0: entered allmulticast mode [ 64.475896][ T5939] bridge_slave_0: entered promiscuous mode [ 64.485527][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.499934][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.503877][ T5939] bridge_slave_1: entered allmulticast mode [ 64.508367][ T5939] bridge_slave_1: entered promiscuous mode [ 65.057494][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.062859][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.065445][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.068831][ T5944] bridge_slave_0: entered allmulticast mode [ 65.075369][ T5944] bridge_slave_0: entered promiscuous mode [ 65.117455][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.152465][ T5297] Bluetooth: hci0: command tx timeout [ 65.156180][ T5297] Bluetooth: hci1: command tx timeout [ 65.181207][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.184109][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.187575][ T5944] bridge_slave_1: entered allmulticast mode [ 65.196754][ T5944] bridge_slave_1: entered promiscuous mode [ 65.201334][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.204001][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.206739][ T5943] bridge_slave_0: entered allmulticast mode [ 65.211666][ T5943] bridge_slave_0: entered promiscuous mode [ 65.230898][ T5297] Bluetooth: hci3: command tx timeout [ 65.310893][ T5297] Bluetooth: hci2: command tx timeout [ 65.428655][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.438466][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.454722][ T5943] bridge_slave_1: entered allmulticast mode [ 65.459850][ T5943] bridge_slave_1: entered promiscuous mode [ 65.662063][ T5939] team0: Port device team_slave_0 added [ 65.705402][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.712436][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.719787][ T5939] team0: Port device team_slave_1 added [ 65.723031][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.725728][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.728402][ T5952] bridge_slave_0: entered allmulticast mode [ 65.732020][ T5952] bridge_slave_0: entered promiscuous mode [ 65.737079][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.751121][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.754869][ T5952] bridge_slave_1: entered allmulticast mode [ 65.768260][ T5952] bridge_slave_1: entered promiscuous mode [ 66.081807][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.120087][ T5944] team0: Port device team_slave_0 added [ 66.153120][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.160236][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.237290][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.240383][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.253128][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.293892][ T5944] team0: Port device team_slave_1 added [ 66.299171][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.395136][ T5943] team0: Port device team_slave_0 added [ 66.399582][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.402371][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.414281][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.488398][ T5943] team0: Port device team_slave_1 added [ 66.535495][ T5952] team0: Port device team_slave_0 added [ 66.582379][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.585754][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.606864][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.681523][ T5952] team0: Port device team_slave_1 added [ 66.684518][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.688352][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.709750][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.899777][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.905153][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.919708][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.925918][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.928623][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.960910][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.977062][ T5939] hsr_slave_0: entered promiscuous mode [ 66.980737][ T5939] hsr_slave_1: entered promiscuous mode [ 67.049150][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.052927][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.065496][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.109454][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.115129][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.126081][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.230859][ T5297] Bluetooth: hci1: command tx timeout [ 67.230972][ T5945] Bluetooth: hci0: command tx timeout [ 67.318129][ T5945] Bluetooth: hci3: command tx timeout [ 67.390859][ T5945] Bluetooth: hci2: command tx timeout [ 67.486955][ T5944] hsr_slave_0: entered promiscuous mode [ 67.500856][ T5944] hsr_slave_1: entered promiscuous mode [ 67.503345][ T5944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.505841][ T5944] Cannot create hsr debugfs directory [ 67.574951][ T5943] hsr_slave_0: entered promiscuous mode [ 67.578525][ T5943] hsr_slave_1: entered promiscuous mode [ 67.582094][ T5943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.586941][ T5943] Cannot create hsr debugfs directory [ 67.849942][ T5952] hsr_slave_0: entered promiscuous mode [ 67.856619][ T5952] hsr_slave_1: entered promiscuous mode [ 67.862028][ T5952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.864554][ T5952] Cannot create hsr debugfs directory [ 68.759357][ T5939] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.785486][ T5939] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.934746][ T5952] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.953447][ T5939] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.960444][ T5939] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.981900][ T5952] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.991668][ T5952] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.027286][ T5952] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.205945][ T5944] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.234487][ T5944] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.243893][ T5944] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.259388][ T5944] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.314000][ T5945] Bluetooth: hci0: command tx timeout [ 69.322868][ T5945] Bluetooth: hci1: command tx timeout [ 69.390800][ T5945] Bluetooth: hci3: command tx timeout [ 69.438319][ T5943] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.471391][ T5945] Bluetooth: hci2: command tx timeout [ 69.485066][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.516408][ T5943] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.525886][ T5943] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.573444][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.591277][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.615163][ T5943] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.656821][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.659861][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.716619][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.741346][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.744173][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.809786][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.812287][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.834839][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.851830][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.855806][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.873284][ T5952] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.896334][ T5952] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.937813][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.958954][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.966065][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.983005][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.988143][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.103198][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.104652][ T40] audit: type=1400 audit(1744249166.214:114): avc: denied { sys_module } for pid=5952 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 70.173870][ T5939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.295715][ T5944] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.309678][ T5944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.349344][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.403803][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.406823][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.437466][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.450745][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.587925][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.647685][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.690132][ T5952] veth0_vlan: entered promiscuous mode [ 70.724949][ T5952] veth1_vlan: entered promiscuous mode [ 70.801741][ T5939] veth0_vlan: entered promiscuous mode [ 70.815070][ T5939] veth1_vlan: entered promiscuous mode [ 70.877065][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.925529][ T5939] veth0_macvtap: entered promiscuous mode [ 70.971451][ T5939] veth1_macvtap: entered promiscuous mode [ 71.012675][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.034280][ T5952] veth0_macvtap: entered promiscuous mode [ 71.086597][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.093548][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.108049][ T5952] veth1_macvtap: entered promiscuous mode [ 71.130764][ T5944] veth0_vlan: entered promiscuous mode [ 71.143725][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.171503][ T5944] veth1_vlan: entered promiscuous mode [ 71.196364][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.201886][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.206359][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.212659][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.268496][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.272992][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.277612][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.282490][ T5952] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.285498][ T5952] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.308650][ T5952] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.315663][ T5952] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.362304][ T5939] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.365942][ T5939] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.376578][ T5939] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.401024][ T5945] Bluetooth: hci1: command tx timeout [ 71.402981][ T5939] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.403095][ T5297] Bluetooth: hci0: command tx timeout [ 71.482286][ T5944] veth0_macvtap: entered promiscuous mode [ 71.486916][ T5943] veth0_vlan: entered promiscuous mode [ 71.488274][ T5945] Bluetooth: hci3: command tx timeout [ 71.513815][ T5944] veth1_macvtap: entered promiscuous mode [ 71.546594][ T5943] veth1_vlan: entered promiscuous mode [ 71.561909][ T5945] Bluetooth: hci2: command tx timeout [ 71.651062][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.652889][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.658658][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.672454][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.675882][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.690947][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.693569][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.751690][ T5943] veth0_macvtap: entered promiscuous mode [ 71.760010][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.764330][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.781780][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.785857][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.825562][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.844924][ T5943] veth1_macvtap: entered promiscuous mode [ 71.858138][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.869413][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.940145][ T5944] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.943947][ T5944] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.950985][ T5944] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.967954][ T5944] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.051900][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.055039][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.081104][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.084311][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.090603][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.111668][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.115435][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.119719][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.129772][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.151693][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.156083][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.187733][ T40] audit: type=1400 audit(1744249168.274:115): avc: denied { mount } for pid=5952 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.225244][ T40] audit: type=1400 audit(1744249168.274:116): avc: denied { mounton } for pid=5952 comm="syz-executor" path="/syzkaller.88OGlD/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 72.235811][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.257917][ T40] audit: type=1400 audit(1744249168.324:117): avc: denied { mount } for pid=5952 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 72.257964][ T40] audit: type=1400 audit(1744249168.324:118): avc: denied { mounton } for pid=5952 comm="syz-executor" path="/syzkaller.88OGlD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 72.258009][ T40] audit: type=1400 audit(1744249168.334:119): avc: denied { mounton } for pid=5952 comm="syz-executor" path="/syzkaller.88OGlD/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 72.258051][ T40] audit: type=1400 audit(1744249168.334:120): avc: denied { unmount } for pid=5952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 72.269923][ T40] audit: type=1400 audit(1744249168.374:121): avc: denied { mounton } for pid=5952 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2778 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 72.287258][ T40] audit: type=1400 audit(1744249168.394:122): avc: denied { mount } for pid=5952 comm="syz-executor" name="/" dev="gadgetfs" ino=7717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 72.327752][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.367740][ T40] audit: type=1400 audit(1744249168.464:123): avc: denied { mounton } for pid=5952 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 72.379412][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.446827][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.453562][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.464639][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.497182][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.530390][ T5943] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.541854][ T5943] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.558491][ T5943] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.567645][ T5943] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.581020][ T5952] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.606961][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.612901][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.761826][ T6008] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 72.912497][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.920304][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.230489][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.249107][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.383465][ T1189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.402773][ T1189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.865990][ T6041] capability: warning: `syz.1.7' uses deprecated v2 capabilities in a way that may be insecure [ 74.007757][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8'. [ 74.031641][ T6040] openvswitch: netlink: IP tunnel dst address not specified [ 74.454075][ T6054] input: syz1 as /devices/virtual/input/input5 [ 74.882099][ T6064] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 75.133798][ T6075] netlink: 148 bytes leftover after parsing attributes in process `syz.2.16'. [ 75.136744][ T40] kauditd_printk_skb: 58 callbacks suppressed [ 75.136757][ T40] audit: type=1400 audit(1744249171.244:182): avc: denied { map_create } for pid=6061 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 75.166426][ T40] audit: type=1400 audit(1744249171.244:183): avc: denied { append } for pid=6074 comm="syz.2.16" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.183743][ T40] audit: type=1400 audit(1744249171.244:184): avc: denied { create } for pid=6074 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.201913][ T40] audit: type=1400 audit(1744249171.244:185): avc: denied { setopt } for pid=6074 comm="syz.2.16" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.206885][ T6076] Zero length message leads to an empty skb [ 75.212942][ T40] audit: type=1400 audit(1744249171.254:186): avc: denied { read write } for pid=6074 comm="syz.2.16" name="vbi8" dev="devtmpfs" ino=1029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 75.212980][ T40] audit: type=1400 audit(1744249171.254:187): avc: denied { open } for pid=6074 comm="syz.2.16" path="/dev/vbi8" dev="devtmpfs" ino=1029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 75.213012][ T40] audit: type=1400 audit(1744249171.274:188): avc: denied { map_read map_write } for pid=6061 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 75.213044][ T40] audit: type=1400 audit(1744249171.274:189): avc: denied { create } for pid=6062 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 75.213074][ T40] audit: type=1400 audit(1744249171.304:190): avc: denied { write } for pid=6062 comm="syz.1.14" path="socket:[8480]" dev="sockfs" ino=8480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 75.213107][ T40] audit: type=1400 audit(1744249171.304:191): avc: denied { nlmsg_read } for pid=6062 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 75.244349][ T6077] process 'syz.1.14' launched './file0' with NULL argv: empty string added [ 75.403751][ T6073] batadv_slave_1: entered promiscuous mode [ 75.669474][ T6091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=6091 comm=syz.2.19 [ 75.672196][ T6062] batadv_slave_1: left promiscuous mode [ 75.783221][ T6095] netlink: 'syz.0.21': attribute type 1 has an invalid length. [ 76.055499][ T835] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 76.169219][ T6114] netlink: 68 bytes leftover after parsing attributes in process `syz.2.26'. [ 76.192204][ T6114] netlink: 'syz.2.26': attribute type 10 has an invalid length. [ 76.203676][ T6114] batman_adv: batadv0: Adding interface: team0 [ 76.206332][ T6114] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.235097][ T835] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 76.259349][ T6114] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 76.265489][ C3] vkms_vblank_simulate: vblank timer overrun [ 76.291105][ T6115] netlink: 'syz.2.26': attribute type 10 has an invalid length. [ 76.295394][ T835] usb 8-1: config 0 has no interface number 0 [ 76.297173][ T6115] netlink: 2 bytes leftover after parsing attributes in process `syz.2.26'. [ 76.302711][ T835] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 76.302735][ T835] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 76.302750][ T835] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 76.302787][ T835] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 76.302802][ T835] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 76.302817][ T835] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 76.302849][ T835] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 76.302866][ T835] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.318297][ T835] usb 8-1: config 0 descriptor?? [ 76.331754][ T6115] team0: entered promiscuous mode [ 76.331777][ T6115] team_slave_0: entered promiscuous mode [ 76.332496][ T6115] team_slave_1: entered promiscuous mode [ 76.335505][ T6115] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.335711][ T6115] batman_adv: batadv0: Interface activated: team0 [ 76.335754][ T6115] batman_adv: batadv0: Interface deactivated: team0 [ 76.335766][ T6115] batman_adv: batadv0: Removing interface: team0 [ 76.353733][ C3] vkms_vblank_simulate: vblank timer overrun [ 76.401665][ C3] vkms_vblank_simulate: vblank timer overrun [ 76.495045][ C3] vkms_vblank_simulate: vblank timer overrun [ 76.553820][ T6115] bridge0: port 3(team0) entered blocking state [ 76.556535][ T6115] bridge0: port 3(team0) entered disabled state [ 76.560423][ T6115] team0: entered allmulticast mode [ 76.562090][ T6096] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 76.573015][ T6115] team_slave_0: entered allmulticast mode [ 76.573034][ T6115] team_slave_1: entered allmulticast mode [ 76.575477][ T6115] bridge0: port 3(team0) entered blocking state [ 76.575559][ T6115] bridge0: port 3(team0) entered forwarding state [ 76.616544][ T6096] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 76.634560][ T835] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 76.753925][ T6117] binfmt_misc: register: failed to install interpreter file ./file0 [ 76.853771][ C3] vkms_vblank_simulate: vblank timer overrun [ 77.067755][ T5947] usb 8-1: USB disconnect, device number 2 [ 77.111951][ T5947] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 77.158650][ T6136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.32'. [ 77.165722][ C3] vkms_vblank_simulate: vblank timer overrun [ 77.169278][ T6135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.32'. [ 77.613827][ C3] vkms_vblank_simulate: vblank timer overrun [ 77.897064][ C3] vkms_vblank_simulate: vblank timer overrun [ 78.424377][ T6176] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.481336][ C3] ================================================================== [ 78.486780][ C3] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 78.490330][ C3] Read of size 1 at addr ffff88802b130418 by task syz.0.34/6146 [ 78.512228][ C3] [ 78.513077][ C3] CPU: 3 UID: 0 PID: 6146 Comm: syz.0.34 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) [ 78.513097][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.513105][ C3] Call Trace: [ 78.513111][ C3] [ 78.513117][ C3] dump_stack_lvl+0x116/0x1f0 [ 78.513140][ C3] print_report+0xc3/0x670 [ 78.513155][ C3] ? __virt_addr_valid+0x5e/0x590 [ 78.513172][ C3] ? __phys_addr+0xc6/0x150 [ 78.513190][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 78.513204][ C3] kasan_report+0xe0/0x110 [ 78.513219][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 78.513235][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 78.513249][ C3] __kasan_check_byte+0x36/0x50 [ 78.513262][ C3] lock_acquire+0xfc/0x350 [ 78.513276][ C3] ? do_raw_spin_unlock+0x53/0x230 [ 78.513290][ C3] ? .slowpath+0x9/0x18 [ 78.513306][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 78.513319][ C3] ? p9_req_put+0xaf/0x250 [ 78.513336][ C3] p9_req_put+0xaf/0x250 [ 78.513353][ C3] req_done+0x1dc/0x2e0 [ 78.513366][ C3] ? __pfx_req_done+0x10/0x10 [ 78.513380][ C3] ? __pfx_req_done+0x10/0x10 [ 78.513394][ C3] vring_interrupt+0x31b/0x400 [ 78.513411][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 78.513425][ C3] __handle_irq_event_percpu+0x229/0x7d0 [ 78.513448][ C3] handle_irq_event+0xab/0x1e0 [ 78.513463][ C3] handle_edge_irq+0x263/0xd10 [ 78.513481][ C3] __common_interrupt+0xdf/0x250 [ 78.513494][ C3] common_interrupt+0xba/0xe0 [ 78.513508][ C3] [ 78.513513][ C3] [ 78.513519][ C3] asm_common_interrupt+0x26/0x40 [ 78.513533][ C3] RIP: 0010:kasan_check_range+0x64/0x1a0 [ 78.513551][ C3] Code: 89 fd 48 b8 00 00 00 00 00 fc ff df 4d 89 d1 48 c1 ed 03 49 c1 e9 03 48 01 c5 49 01 c1 48 89 e8 49 8d 59 01 48 89 da 48 29 ea <48> 83 fa 10 0f 8e 8d 00 00 00 41 89 eb 41 83 e3 07 0f 85 9a 00 00 [ 78.513563][ C3] RSP: 0018:ffffc900032af0e8 EFLAGS: 00000202 [ 78.513594][ C3] RAX: fffff940002a9790 RBX: fffff940002a9791 RCX: ffffffff81fd17bc [ 78.513604][ C3] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffea000154bc80 [ 78.513613][ C3] RBP: fffff940002a9790 R08: 0000000000000000 R09: fffff940002a9790 [ 78.513622][ C3] R10: ffffea000154bc87 R11: 0000000000000000 R12: 0000000000001000 [ 78.513630][ C3] R13: ffff888036318808 R14: 0000000000001000 R15: ffff888036318858 [ 78.513643][ C3] ? shmem_write_end+0xcc/0x4d0 [ 78.513661][ C3] shmem_write_end+0xcc/0x4d0 [ 78.513673][ C3] generic_perform_write+0x26e/0x930 [ 78.513692][ C3] ? __pfx_generic_perform_write+0x10/0x10 [ 78.513707][ C3] ? inode_needs_update_time.part.0+0x191/0x270 [ 78.513726][ C3] shmem_file_write_iter+0x10e/0x140 [ 78.513744][ C3] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 78.513759][ C3] __kernel_write_iter+0x317/0xa90 [ 78.513781][ C3] ? __pfx___kernel_write_iter+0x10/0x10 [ 78.513801][ C3] ? __up_read+0x1f8/0x750 [ 78.513816][ C3] ? dump_user_range+0x73d/0xb30 [ 78.513839][ C3] dump_user_range+0x418/0xb30 [ 78.513861][ C3] ? __pfx_dump_user_range+0x10/0x10 [ 78.513880][ C3] ? elf_coredump_extra_notes_write+0xbd/0x430 [ 78.513898][ C3] ? __pfx_writenote+0x10/0x10 [ 78.513914][ C3] elf_core_dump+0x288a/0x3a90 [ 78.513932][ C3] ? __pfx_elf_core_dump+0x10/0x10 [ 78.513943][ C3] ? kasan_save_stack+0x42/0x60 [ 78.513955][ C3] ? kasan_save_stack+0x33/0x60 [ 78.513965][ C3] ? kasan_save_track+0x14/0x30 [ 78.513974][ C3] ? __kasan_kmalloc+0xaa/0xb0 [ 78.513984][ C3] ? do_coredump+0x17aa/0x4480 [ 78.513996][ C3] ? get_signal+0x22e3/0x26d0 [ 78.514007][ C3] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 78.514022][ C3] ? 0xffffffffff600000 [ 78.514042][ C3] ? do_coredump+0x3183/0x4480 [ 78.514057][ C3] do_coredump+0x3183/0x4480 [ 78.514076][ C3] ? __pfx_do_coredump+0x10/0x10 [ 78.514093][ C3] ? stack_trace_save+0x8e/0xc0 [ 78.514109][ C3] ? __pfx_stack_trace_save+0x10/0x10 [ 78.514124][ C3] ? stack_depot_save_flags+0x28/0xa50 [ 78.514137][ C3] ? __lock_acquire+0xaa4/0x1ba0 [ 78.514149][ C3] ? __kasan_slab_free+0x51/0x70 [ 78.514160][ C3] ? kmem_cache_free+0x2d4/0x4d0 [ 78.514171][ C3] ? __sigqueue_free+0xba/0x2a0 [ 78.514181][ C3] ? get_signal+0xcba/0x26d0 [ 78.514195][ C3] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 78.514222][ C3] ? proc_coredump_connector+0x2d1/0x4f0 [ 78.514236][ C3] ? __pfx_proc_coredump_connector+0x10/0x10 [ 78.514252][ C3] ? rcu_is_watching+0x12/0xc0 [ 78.514270][ C3] get_signal+0x22e3/0x26d0 [ 78.514287][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 78.514304][ C3] ? __pfx_get_signal+0x10/0x10 [ 78.514326][ C3] arch_do_signal_or_restart+0x8f/0x7d0 [ 78.514348][ C3] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 78.514371][ C3] ? exc_general_protection+0x1ba/0x230 [ 78.514395][ C3] irqentry_exit_to_user_mode+0x13f/0x280 [ 78.514415][ C3] asm_exc_general_protection+0x26/0x30 [ 78.514429][ C3] RIP: 00fb:0x0 [ 78.514437][ C3] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 78.514449][ C3] RSP: 002b:0000000000000000 EFLAGS: 00000202 [ 78.514459][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 78.514466][ C3] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 78.514472][ C3] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 78.514479][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 78.514485][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.514496][ C3] [ 78.514500][ C3] [ 78.947836][ C3] Allocated by task 6181: [ 78.949235][ C3] kasan_save_stack+0x33/0x60 [ 78.950659][ C3] kasan_save_track+0x14/0x30 [ 78.952023][ C3] __kasan_kmalloc+0xaa/0xb0 [ 78.953353][ C3] p9_client_create+0xc7/0x11c0 [ 78.955274][ C3] v9fs_session_init+0x1f7/0x1a80 [ 78.957396][ C3] v9fs_mount+0xc5/0xa30 [ 78.961301][ C3] legacy_get_tree+0x109/0x220 [ 78.963685][ C3] vfs_get_tree+0x8b/0x340 [ 78.978918][ C3] path_mount+0x14d4/0x1f30 [ 78.980548][ C3] __x64_sys_mount+0x28d/0x310 [ 78.982386][ C3] do_syscall_64+0xcd/0x260 [ 78.984157][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.986456][ C3] [ 78.987345][ C3] Freed by task 6181: [ 79.003200][ C3] kasan_save_stack+0x33/0x60 [ 79.004919][ C3] kasan_save_track+0x14/0x30 [ 79.006629][ C3] kasan_save_free_info+0x3b/0x60 [ 79.018894][ C3] __kasan_slab_free+0x51/0x70 [ 79.020746][ C3] kfree+0x2b6/0x4d0 [ 79.022163][ C3] p9_client_create+0xa28/0x11c0 [ 79.023907][ C3] v9fs_session_init+0x1f7/0x1a80 [ 79.025437][ C3] v9fs_mount+0xc5/0xa30 [ 79.026718][ C3] legacy_get_tree+0x109/0x220 [ 79.038425][ C3] vfs_get_tree+0x8b/0x340 [ 79.039964][ C3] path_mount+0x14d4/0x1f30 [ 79.042000][ C3] __x64_sys_mount+0x28d/0x310 [ 79.043733][ C3] do_syscall_64+0xcd/0x260 [ 79.045470][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.048041][ C3] [ 79.049128][ C3] The buggy address belongs to the object at ffff88802b130400 [ 79.049128][ C3] which belongs to the cache kmalloc-512 of size 512 [ 79.054323][ C3] The buggy address is located 24 bytes inside of [ 79.054323][ C3] freed 512-byte region [ffff88802b130400, ffff88802b130600) [ 79.075141][ C3] [ 79.076208][ C3] The buggy address belongs to the physical page: [ 79.078970][ C3] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b130 [ 79.083975][ C3] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 79.098107][ C3] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 79.101410][ C3] page_type: f5(slab) [ 79.103377][ C3] raw: 00fff00000000040 ffff88801b442c80 dead000000000100 dead000000000122 [ 79.108247][ C3] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 79.119151][ C3] head: 00fff00000000040 ffff88801b442c80 dead000000000100 dead000000000122 [ 79.127716][ C3] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 79.131667][ C3] head: 00fff00000000002 ffffea0000ac4c01 00000000ffffffff 00000000ffffffff [ 79.145641][ C3] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 79.149338][ C3] page dumped because: kasan: bad access detected [ 79.151853][ C3] page_owner tracks the page as allocated [ 79.153847][ C3] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5939, tgid 5939 (syz-executor), ts 70007830198, free_ts 69837464301 [ 79.172915][ C3] post_alloc_hook+0x181/0x1b0 [ 79.174885][ C3] get_page_from_freelist+0x1193/0x39b0 [ 79.177162][ C3] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 79.208614][ C3] alloc_pages_mpol+0x1fb/0x550 [ 79.210995][ C3] new_slab+0x23c/0x330 [ 79.213115][ C3] ___slab_alloc+0xd9c/0x1940 [ 79.215374][ C3] __slab_alloc.constprop.0+0x56/0xb0 [ 79.218611][ C3] __kmalloc_noprof+0x2f2/0x510 [ 79.230711][ C3] fib6_info_alloc+0x40/0x160 [ 79.232614][ C3] ip6_route_info_create+0x33f/0x18e0 [ 79.234970][ C3] addrconf_f6i_alloc+0x391/0x670 [ 79.237081][ C3] ipv6_add_addr+0x531/0x1fe0 [ 79.261991][ C3] inet6_addr_add+0x256/0x960 [ 79.263886][ C3] inet6_rtm_newaddr+0x1619/0x1c70 [ 79.272191][ C3] rtnetlink_rcv_msg+0x95b/0xe90 [ 79.274195][ C3] netlink_rcv_skb+0x16a/0x440 [ 79.276280][ C3] page last free pid 58 tgid 58 stack trace: [ 79.291149][ C3] __free_frozen_pages+0x69d/0xff0 [ 79.293119][ C3] qlist_free_all+0x4e/0x120 [ 79.294932][ C3] kasan_quarantine_reduce+0x195/0x1e0 [ 79.297073][ C3] __kasan_slab_alloc+0x69/0x90 [ 79.301195][ C3] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 79.305782][ C3] __alloc_skb+0x2b2/0x380 [ 79.308082][ C3] mld_newpack.isra.0+0x18e/0xa20 [ 79.309938][ C3] add_grhead+0x299/0x340 [ 79.312149][ C3] add_grec+0x112a/0x1680 [ 79.315590][ C3] mld_ifc_work+0x41f/0xca0 [ 79.317862][ C3] process_one_work+0x9cc/0x1b70 [ 79.320639][ C3] worker_thread+0x6c8/0xf10 [ 79.327098][ C3] kthread+0x3c2/0x780 [ 79.329996][ C3] ret_from_fork+0x45/0x80 [ 79.355381][ C3] ret_from_fork_asm+0x1a/0x30 [ 79.368643][ C3] [ 79.369717][ C3] Memory state around the buggy address: [ 79.378446][ C3] ffff88802b130300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 79.385967][ C3] ffff88802b130380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 79.390199][ C3] >ffff88802b130400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.393404][ C3] ^ [ 79.407156][ C3] ffff88802b130480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.436560][ C3] ffff88802b130500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.440570][ C3] ================================================================== [ 79.447470][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 79.457713][ C3] CPU: 3 UID: 0 PID: 6146 Comm: syz.0.34 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) [ 79.465248][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.469259][ C3] Call Trace: [ 79.470453][ C3] [ 79.471559][ C3] dump_stack_lvl+0x3d/0x1f0 [ 79.473606][ C3] panic+0x71c/0x800 [ 79.488510][ C3] ? __pfx_panic+0x10/0x10 [ 79.495998][ C3] ? __pfx__printk+0x10/0x10 [ 79.498713][ C3] ? end_report+0x4c/0x170 [ 79.502185][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 79.507751][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 79.517999][ C3] check_panic_on_warn+0xab/0xb0 [ 79.520896][ C3] end_report+0x107/0x170 [ 79.523585][ C3] kasan_report+0xee/0x110 [ 79.534518][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 79.538953][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 79.541998][ C3] __kasan_check_byte+0x36/0x50 [ 79.560130][ C3] lock_acquire+0xfc/0x350 [ 79.562937][ C3] ? do_raw_spin_unlock+0x53/0x230 [ 79.574862][ C3] ? .slowpath+0x9/0x18 [ 79.576499][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 79.586520][ C3] ? p9_req_put+0xaf/0x250 [ 79.588904][ C3] p9_req_put+0xaf/0x250 [ 79.595712][ C3] req_done+0x1dc/0x2e0 [ 79.598210][ C3] ? __pfx_req_done+0x10/0x10 [ 79.614082][ C3] ? __pfx_req_done+0x10/0x10 [ 79.620604][ C3] vring_interrupt+0x31b/0x400 [ 79.629837][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 79.643738][ C3] __handle_irq_event_percpu+0x229/0x7d0 [ 79.652235][ C3] handle_irq_event+0xab/0x1e0 [ 79.658909][ C3] handle_edge_irq+0x263/0xd10 [ 79.663564][ C3] __common_interrupt+0xdf/0x250 [ 79.668782][ C3] common_interrupt+0xba/0xe0 [ 79.672785][ C3] [ 79.678609][ C3] [ 79.680309][ C3] asm_common_interrupt+0x26/0x40 [ 79.685182][ C3] RIP: 0010:kasan_check_range+0x64/0x1a0 [ 79.689588][ C3] Code: 89 fd 48 b8 00 00 00 00 00 fc ff df 4d 89 d1 48 c1 ed 03 49 c1 e9 03 48 01 c5 49 01 c1 48 89 e8 49 8d 59 01 48 89 da 48 29 ea <48> 83 fa 10 0f 8e 8d 00 00 00 41 89 eb 41 83 e3 07 0f 85 9a 00 00 [ 79.714282][ C3] RSP: 0018:ffffc900032af0e8 EFLAGS: 00000202 [ 79.721937][ C3] RAX: fffff940002a9790 RBX: fffff940002a9791 RCX: ffffffff81fd17bc [ 79.728913][ C3] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffea000154bc80 [ 79.736131][ C3] RBP: fffff940002a9790 R08: 0000000000000000 R09: fffff940002a9790 [ 79.745485][ C3] R10: ffffea000154bc87 R11: 0000000000000000 R12: 0000000000001000 [ 79.753685][ C3] R13: ffff888036318808 R14: 0000000000001000 R15: ffff888036318858 [ 79.762514][ C3] ? shmem_write_end+0xcc/0x4d0 [ 79.765530][ C3] shmem_write_end+0xcc/0x4d0 [ 79.772587][ C3] generic_perform_write+0x26e/0x930 [ 79.775262][ C3] ? __pfx_generic_perform_write+0x10/0x10 [ 79.782182][ C3] ? inode_needs_update_time.part.0+0x191/0x270 [ 79.788277][ C3] shmem_file_write_iter+0x10e/0x140 [ 79.794285][ C3] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 79.802604][ C3] __kernel_write_iter+0x317/0xa90 [ 79.807983][ C3] ? __pfx___kernel_write_iter+0x10/0x10 [ 79.816653][ C3] ? __up_read+0x1f8/0x750 [ 79.820172][ C3] ? dump_user_range+0x73d/0xb30 [ 79.823764][ C3] dump_user_range+0x418/0xb30 [ 79.829064][ C3] ? __pfx_dump_user_range+0x10/0x10 [ 79.834936][ C3] ? elf_coredump_extra_notes_write+0xbd/0x430 [ 79.839062][ C3] ? __pfx_writenote+0x10/0x10 [ 79.852330][ C3] elf_core_dump+0x288a/0x3a90 [ 79.859520][ C3] ? __pfx_elf_core_dump+0x10/0x10 [ 79.862762][ C3] ? kasan_save_stack+0x42/0x60 [ 79.866034][ C3] ? kasan_save_stack+0x33/0x60 [ 79.868830][ C3] ? kasan_save_track+0x14/0x30 [ 79.879720][ C3] ? __kasan_kmalloc+0xaa/0xb0 [ 79.882544][ C3] ? do_coredump+0x17aa/0x4480 [ 79.886380][ C3] ? get_signal+0x22e3/0x26d0 [ 79.889199][ C3] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 79.895375][ C3] ? 0xffffffffff600000 [ 79.906181][ C3] ? do_coredump+0x3183/0x4480 [ 79.912797][ C3] do_coredump+0x3183/0x4480 [ 79.916169][ C3] ? __pfx_do_coredump+0x10/0x10 [ 79.921274][ C3] ? stack_trace_save+0x8e/0xc0 [ 79.928530][ C3] ? __pfx_stack_trace_save+0x10/0x10 [ 79.934399][ C3] ? stack_depot_save_flags+0x28/0xa50 [ 79.940300][ C3] ? __lock_acquire+0xaa4/0x1ba0 [ 79.949063][ C3] ? __kasan_slab_free+0x51/0x70 [ 79.955898][ C3] ? kmem_cache_free+0x2d4/0x4d0 [ 79.960587][ C3] ? __sigqueue_free+0xba/0x2a0 [ 79.966213][ C3] ? get_signal+0xcba/0x26d0 [ 79.974287][ C3] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 79.977834][ C3] ? proc_coredump_connector+0x2d1/0x4f0 [ 79.988280][ C3] ? __pfx_proc_coredump_connector+0x10/0x10 [ 79.995985][ C3] ? rcu_is_watching+0x12/0xc0 [ 79.998585][ C3] get_signal+0x22e3/0x26d0 [ 80.002301][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 80.023224][ C3] ? __pfx_get_signal+0x10/0x10 [ 80.025091][ C3] arch_do_signal_or_restart+0x8f/0x7d0 [ 80.040391][ C3] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 80.044455][ C3] ? exc_general_protection+0x1ba/0x230 [ 80.049478][ C3] irqentry_exit_to_user_mode+0x13f/0x280 [ 80.052738][ C3] asm_exc_general_protection+0x26/0x30 [ 80.060848][ C3] RIP: 00fb:0x0 [ 80.062780][ C3] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 80.069093][ C3] RSP: 002b:0000000000000000 EFLAGS: 00000202 [ 80.071574][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 80.080396][ C3] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.091253][ C3] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.096154][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 80.099998][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.104498][ C3] [ 80.110051][ C3] Kernel Offset: disabled [ 80.112877][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:39:34 Registers: info registers vcpu 0 CPU#0 RAX=00000000000b6de9 RBX=0000000000000000 RCX=ffffffff8b723439 RDX=0000000000000000 RSI=ffffffff8dbeef8e RDI=ffffffff8bf465c0 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000001 R9 =ffffed100d4865bd R10=ffff88806a432deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90865310 R15=0000000000000000 RIP=ffffffff8b721ccf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 000fffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 000fffff 00000000 FS =0000 0000000000000000 000fffff 00000000 GS =0000 ffff8880d69b3000 000fffff 00000000 LDT=0000 0000000000000000 000fffff 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000200000001000 CR3=0000000051272000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faaa040f712 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faaa040f71f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faaa040f719 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faaa040f72d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faaa040f7b3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faaa040f891 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faaa057d488 00007faaa057d480 00007faaa057d478 00007faaa057d450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faaa10dd100 00007faaa057d440 00007faaa057d458 00007faaa057d4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faaa057d498 00007faaa057d490 00007faaa057d488 00007faaa057d480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000070 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000202 RBX=0000000000000013 RCX=ffffffff84d5e18d RDX=ffff888025412440 RSI=ffffffff84d5dd68 RDI=0000000000000005 RBP=ffffffff8ef5cd1f RSP=ffffc900045768d8 R8 =0000000000000005 R9 =0000000000000019 R10=0000000000000013 R11=ffff888029f70030 R12=0000000000000000 R13=dffffc0000000000 R14=0000000000000001 R15=ffff888029f70000 RIP=ffffffff81bb3dcb RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f37bffd56c0 ffffffff 00c00000 GS =0000 ffff8880d6ab3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f796e2a7f98 CR3=0000000029edc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf29417a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f37c220f712 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f37c220f71f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f37c220f719 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f37c220f72d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f37c220f7b3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f37c220f891 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000080 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000080 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000001000008fb RBX=0000000000000001 RCX=0000000000000830 RDX=0000000000000001 RSI=00000000000000fb RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc900043efb30 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=ffff88806a439dc0 R15=0000000000000000 RIP=ffffffff81688cd8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055557f29a500 ffffffff 00c00000 GS =0000 ffff8880d6bb3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007faaa125cd58 CR3=0000000051272000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faaa040f712 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faaa040f71f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faaa040f719 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faaa040f72d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faaa040f7b3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faaa040f891 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faaa057d488 00007faaa057d480 00007faaa057d478 00007faaa057d450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faaa10dd100 00007faaa057d440 00007faaa057d458 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faaa057d498 00007faaa057d490 00007faaa057d488 00007faaa057d480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000070 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854e0a85 RDI=ffffffff9ae254e0 RBP=ffffffff9ae254a0 RSP=ffffc900006f8768 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9ae254a0 R15=ffffffff854e0a20 RIP=ffffffff854e0aaf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f37bfff66c0 ffffffff 00c00000 GS =0000 ffff8880d6cb3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007faaa129df98 CR3=0000000024752000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faaa040f712 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faaa040f71f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faaa040f719 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faaa040f72d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faaa040f7b3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faaa040f891 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faaa057d488 00007faaa057d480 00007faaa057d478 00007faaa057d450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faaa10dd100 00007faaa057d440 00007faaa057d458 00007faaa057d4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faaa057d498 00007faaa057d490 00007faaa057d488 00007faaa057d480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000070 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000