last executing test programs: 1.380992105s ago: executing program 3 (id=51): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) io_pgetevents(0x0, 0x9, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) r5 = io_uring_setup(0x3c93, &(0x7f0000000900)={0x0, 0x1246, 0x80, 0x1, 0xe0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xaece, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000000)={r10, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)={r11}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r12 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r12, &(0x7f0000001840)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff07000000fc5e15f4c3d3fbd80dad000057f2"], 0x125) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'tunl0\x00', 0x2}, 0x18) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="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"/328], 0x148}], 0x1, 0x0, 0x0, 0x2}, 0x0) 1.310128388s ago: executing program 3 (id=55): r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8910, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x7800, 0x40, 0xf, 0xd1c0, {{0x5, 0x4, 0x3, 0xe, 0x14, 0x65, 0x0, 0x0, 0x29, 0x0, @private=0xa010102, @private=0xa010100}}}}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x14, &(0x7f0000000840)=@ringbuf={{}, {}, {}, [@cb_func, @cb_func, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f1ffffff210000400000000009"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r5, &(0x7f0000001440)=""/126, 0x7e, 0x2) (async) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdffffff000000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000002000b7020000020000008500000084000000b70000000000000095000000000000006688b14bacbd96e0f54b7717ea4b99300a6261b8db5df2d144547f4ec980fba2c16675ff93ee54386a6cdbdecd5dab15ec9b1a90b75033441095aa3d200f4ee21d95e988f1db25456dae06473a5d894fdc53ec721797ade1889236"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.191278798s ago: executing program 3 (id=56): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e070c7b0c"], 0x7) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/tcp_cdg', 0x0, 0x0) mknodat$loop(r0, &(0x7f00000001c0)='./file2\x00', 0x2000, 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000010c0)="96", 0x1}], 0x1}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.190770344s ago: executing program 3 (id=57): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0x0, 0x0, 0xffff}, 'syz1\x00', 0x26}) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000030000000000000000000000000a000000000000000000f1ff0b001400a3a444c19e3d6c9bfa4e9f3d9026f1f4387016dbf6d1603995f08dcb9dfd43d3e1c9b400c8d6eac3a6ec14dce7900c31da156b1eec38ac21420a5d9ee321eb8a7ea9a4ea450d46de9642bf7826eeab064dd728d977bd1e8e1b4d65d72ac6dbc00da5e019a9da1a8acbd2397084e0b26a006024984185a7d79b4684953db325f55fc8fa15ef990b7900e057a8ebf2beaef1f781fb34b9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x28}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000030000000000000000000000000a000000000000000000f1ff0b001400a3a444c19e3d6c9bfa4e9f3d9026f1f4387016dbf6d1603995f08dcb9dfd43d3e1c9b400c8d6eac3a6ec14dce7900c31da156b1eec38ac21420a5d9ee321eb8a7ea9a4ea450d46de9642bf7826eeab064dd728d977bd1e8e1b4d65d72ac6dbc00da5e019a9da1a8acbd2397084e0b26a006024984185a7d79b4684953db325f55fc8fa15ef990b7900e057a8ebf2beaef1f781fb34b9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x28}}, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet(0x2, 0x2, 0x0) (async) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061104e000000000007"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) setsockopt$inet_mreqsrc(r6, 0x0, 0x26, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) (async) setsockopt$inet_mreqsrc(r6, 0x0, 0x26, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) mkdir(&(0x7f00000022c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8afa89, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) (async) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) sendto$inet6(r5, &(0x7f0000000200)="2284a848ea248466eb1a7f548b876e48c5939b3deb41edca8a0cada3ae649a0bb6d8e57194f98fd54da6a845a98fa165bf13ee0d4980910cabfb20feca0d8280ed88089e3fbe7af95ef5b90e1aa465c5973b6379b44737b86521df4127a4a0f0b175bc2480dd11bf94cb8b0df76a58e16d8006de19d93f1648b75d647128f9a61795040efa1ac0fee2228c91d0955cfd508512c4a0a2e540a1249f0450105dff1a287b91103c6a2f9db2b53f7652", 0xae, 0x20040050, &(0x7f00000002c0)={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x41}, 0x1}, 0x1c) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r3, &(0x7f00000012c0)={'syz1\x00', {0xb, 0x7f, 0x3ff, 0x9}, 0x55, [0x2, 0x5, 0xb16d, 0x3, 0x146, 0x8001, 0x4, 0x4, 0x6, 0x6, 0x7, 0xffffffff, 0x90, 0x1e2d3371, 0x8, 0x10000, 0x9, 0x8, 0x3, 0x3, 0x2, 0x1, 0x5, 0x7, 0xa8, 0x1000, 0x43c4, 0x8, 0x7ff, 0x728dde75, 0x7dde86c9, 0xfffffff7, 0x2, 0x9, 0x6, 0x80000000, 0x0, 0x3ff, 0xb92, 0x1, 0x1, 0x99, 0xae1, 0x9, 0x200, 0xe3a, 0x2, 0x80, 0x7fff, 0xd, 0x4, 0x3, 0x6dae, 0x8, 0x7f, 0x8, 0x3b, 0x9, 0x7, 0x5, 0x1000, 0x8000, 0x60, 0x7], [0x8, 0x625, 0x1, 0x101, 0xfffff48d, 0x1, 0x400, 0x84, 0x8d8, 0x0, 0x3, 0x7, 0x8, 0xf401, 0xaf1, 0x4, 0x6, 0x5, 0x10001, 0x2, 0x9989, 0x9, 0x7, 0x4, 0x6, 0x0, 0x8, 0x7fff, 0x5, 0x8, 0x0, 0x7fffffff, 0x8, 0x1ff, 0xb, 0x1, 0x8000, 0x0, 0x0, 0x3, 0xe, 0x10001, 0x1c000000, 0x0, 0x9, 0xc, 0x8, 0x0, 0x6, 0x6, 0x89, 0x6, 0x2, 0x8, 0x80000000, 0xb, 0xffffffff, 0xf, 0x8, 0x2, 0x6, 0x40, 0x6, 0x81], [0x1, 0x43b7, 0x6, 0xff, 0xfffffff9, 0x3, 0x1, 0x0, 0x1000, 0x80, 0x10001, 0x0, 0x24, 0x5, 0x3, 0x7, 0x3, 0x1, 0x4, 0x0, 0x9, 0x3, 0xfffffffd, 0x0, 0x6, 0x800, 0x2, 0x3, 0x18, 0xffffffff, 0x5, 0x2, 0x7, 0x1000, 0xe, 0x4, 0x97, 0x5, 0x5, 0xfffffff7, 0x2, 0x5, 0x50000, 0x1ff, 0x7, 0x4, 0xd, 0x6, 0xc, 0x7, 0x4, 0xcca5, 0x8, 0x8, 0x10000, 0x3ff, 0x7, 0x7fffffff, 0x688, 0xff, 0x8, 0x23, 0x1000000, 0x7], [0x1ff, 0x2, 0x6, 0x58, 0x2, 0x7a, 0x2, 0xd, 0x0, 0x1, 0x0, 0xfff, 0xc4, 0x1, 0x5, 0x6, 0x0, 0xf9, 0xff, 0x1, 0x9, 0x1, 0x6, 0x1, 0x6, 0x69f, 0xffffffff, 0x3, 0x4, 0x8, 0x81, 0x9, 0xffff, 0x3, 0x3, 0x7, 0x40, 0x1000, 0x5, 0xfff, 0x5, 0x7, 0x1e, 0x9, 0x8, 0x5, 0xffffffdc, 0x1, 0x2, 0x7, 0x7, 0x4, 0xca5e, 0x9, 0x9, 0x9, 0x8, 0x6, 0x9, 0x3, 0x3, 0xab1, 0x1, 0xd]}, 0x45c) (async) write$uinput_user_dev(r3, &(0x7f00000012c0)={'syz1\x00', {0xb, 0x7f, 0x3ff, 0x9}, 0x55, [0x2, 0x5, 0xb16d, 0x3, 0x146, 0x8001, 0x4, 0x4, 0x6, 0x6, 0x7, 0xffffffff, 0x90, 0x1e2d3371, 0x8, 0x10000, 0x9, 0x8, 0x3, 0x3, 0x2, 0x1, 0x5, 0x7, 0xa8, 0x1000, 0x43c4, 0x8, 0x7ff, 0x728dde75, 0x7dde86c9, 0xfffffff7, 0x2, 0x9, 0x6, 0x80000000, 0x0, 0x3ff, 0xb92, 0x1, 0x1, 0x99, 0xae1, 0x9, 0x200, 0xe3a, 0x2, 0x80, 0x7fff, 0xd, 0x4, 0x3, 0x6dae, 0x8, 0x7f, 0x8, 0x3b, 0x9, 0x7, 0x5, 0x1000, 0x8000, 0x60, 0x7], [0x8, 0x625, 0x1, 0x101, 0xfffff48d, 0x1, 0x400, 0x84, 0x8d8, 0x0, 0x3, 0x7, 0x8, 0xf401, 0xaf1, 0x4, 0x6, 0x5, 0x10001, 0x2, 0x9989, 0x9, 0x7, 0x4, 0x6, 0x0, 0x8, 0x7fff, 0x5, 0x8, 0x0, 0x7fffffff, 0x8, 0x1ff, 0xb, 0x1, 0x8000, 0x0, 0x0, 0x3, 0xe, 0x10001, 0x1c000000, 0x0, 0x9, 0xc, 0x8, 0x0, 0x6, 0x6, 0x89, 0x6, 0x2, 0x8, 0x80000000, 0xb, 0xffffffff, 0xf, 0x8, 0x2, 0x6, 0x40, 0x6, 0x81], [0x1, 0x43b7, 0x6, 0xff, 0xfffffff9, 0x3, 0x1, 0x0, 0x1000, 0x80, 0x10001, 0x0, 0x24, 0x5, 0x3, 0x7, 0x3, 0x1, 0x4, 0x0, 0x9, 0x3, 0xfffffffd, 0x0, 0x6, 0x800, 0x2, 0x3, 0x18, 0xffffffff, 0x5, 0x2, 0x7, 0x1000, 0xe, 0x4, 0x97, 0x5, 0x5, 0xfffffff7, 0x2, 0x5, 0x50000, 0x1ff, 0x7, 0x4, 0xd, 0x6, 0xc, 0x7, 0x4, 0xcca5, 0x8, 0x8, 0x10000, 0x3ff, 0x7, 0x7fffffff, 0x688, 0xff, 0x8, 0x23, 0x1000000, 0x7], [0x1ff, 0x2, 0x6, 0x58, 0x2, 0x7a, 0x2, 0xd, 0x0, 0x1, 0x0, 0xfff, 0xc4, 0x1, 0x5, 0x6, 0x0, 0xf9, 0xff, 0x1, 0x9, 0x1, 0x6, 0x1, 0x6, 0x69f, 0xffffffff, 0x3, 0x4, 0x8, 0x81, 0x9, 0xffff, 0x3, 0x3, 0x7, 0x40, 0x1000, 0x5, 0xfff, 0x5, 0x7, 0x1e, 0x9, 0x8, 0x5, 0xffffffdc, 0x1, 0x2, 0x7, 0x7, 0x4, 0xca5e, 0x9, 0x9, 0x9, 0x8, 0x6, 0x9, 0x3, 0x3, 0xab1, 0x1, 0xd]}, 0x45c) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000180)={r0}) 1.190499753s ago: executing program 3 (id=58): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10122, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r2, 0x0, 0x0, 0x8400, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x8}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x4c, &(0x7f000002eff0)={0x0, 0x0}, 0x10) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRESHEX=r1, @ANYRESHEX, @ANYRESOCT=r1, @ANYBLOB="3cbf9e0985b1b97697ff6e8f29bb661b893c377ec99cec8ff0e3df264a3de72ef902fad3929b71e0e90188b5f87d7835fd0d9b53be79a503cf05e8bfc04dd4a9c43017f1475d7081fab1415ee5cbd221ca21ba4f66f3d2adf18d383cf9337a549b", @ANYBLOB="7832653238a74c295949971f8e172519565a32959822dcf951a5b15ff755beecaae0ce5dc55bc0be7a4113985de516843111bc", @ANYRESDEC=r5, @ANYRES16=r4, @ANYRES8=r5], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x17, 0x10, r6, 0x0) r7 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000001500)={@local, @local, @void, {@generic={0x8863}}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x1a, 0x81}}, './file0\x00'}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x25, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x434800}}, @jmp={0x5, 0x1, 0x0, 0xe, 0x0, 0xfffffffffffffff8, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x5038}, @jmp={0x5, 0x0, 0x2, 0x6, 0xb, 0x4, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @jmp={0x5, 0x0, 0xc, 0x6, 0x1, 0x2, 0xffffffffffffffff}, @map_fd={0x18, 0x6, 0x1, 0x0, r6}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x6, 0x5f, &(0x7f0000000240)=""/95, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x3, 0xd, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000480)=[r6, r6, 0xffffffffffffffff, r6, r6, r6, r6, r6, r6, r6], &(0x7f00000004c0)=[{0x2, 0x5, 0xe, 0x3}], 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@cgroup, 0x1, 0x0, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000740)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@map=r6, r8, 0x1b, 0x2010, r9, @value=r11, @void, @void, @void, r10}, 0x20) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r7, 0x80000000) 959.596033ms ago: executing program 2 (id=62): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f00000000c0)={[{@dyn}]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x3502, 0x2, 0x1}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x13c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) statx(0xffffffffffffffff, 0x0, 0x4000, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='selinux_audited\x00', r1, 0x0, 0x6}, 0x18) unshare(0x2a020480) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x89e0, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000240)='./file0\x00', 0x8c7) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002680)=[{{&(0x7f00000004c0), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000540)=""/106, 0x6a}, {&(0x7f0000000200)=""/46, 0x2e}], 0x2}}, {{&(0x7f00000005c0), 0x6e, &(0x7f0000000680)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/53, 0x35}, {&(0x7f00000017c0)=""/148, 0x94}, {&(0x7f0000001880)=""/209, 0xd1}, {&(0x7f0000001980)=""/149, 0x95}, {&(0x7f0000001a40)=""/203, 0xcb}, {&(0x7f0000001b40)=""/144, 0x90}], 0x7, &(0x7f0000001c00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000001c40)=@abs, 0x6e, &(0x7f0000002080)=[{&(0x7f0000001cc0)=""/107, 0x6b}, {&(0x7f0000001d40)=""/232, 0xe8}, {&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/72, 0x48}, {&(0x7f0000001ec0)=""/151, 0x97}, {&(0x7f0000001f80)=""/212, 0xd4}], 0x6, &(0x7f0000002100)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f0000002200), 0x6e, &(0x7f00000022c0)=[{&(0x7f0000002280)=""/60, 0x3c}], 0x1, &(0x7f0000002300)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000002340)=@abs, 0x6e, &(0x7f00000025c0)=[{&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/71, 0x47}, {&(0x7f0000002440)=""/24, 0x18}, {&(0x7f0000002480)=""/72, 0x48}, {&(0x7f0000002500)=""/192, 0xc0}], 0x5, &(0x7f0000002640)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}], 0x5, 0x3dbc3d193648d478, &(0x7f00000027c0)={0x77359400}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0x0) keyctl$set_timeout(0xf, r7, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 881.445621ms ago: executing program 2 (id=63): r0 = syz_io_uring_setup(0x3e, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}) listen(r3, 0x0) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 881.201414ms ago: executing program 2 (id=64): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000080)) sendto$inet6(r0, &(0x7f0000000040)="ea", 0x1, 0x4000054, &(0x7f0000000000)={0xa, 0x4e23, 0x20000, @local, 0x7}, 0x1c) 879.407982ms ago: executing program 2 (id=65): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e070c7b0c"], 0x7) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/tcp_cdg', 0x0, 0x0) mknodat$loop(r0, &(0x7f00000001c0)='./file2\x00', 0x2000, 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000010c0)="96", 0x1}], 0x1}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 831.181716ms ago: executing program 2 (id=66): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2711, 0x0, &(0x7f0000000180)) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_wolinfo={0x4e, 0x2, 0x7fff, "fc0cdefb479b"}}) 830.974468ms ago: executing program 2 (id=67): r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000100)='h', 0x1, 0x44801, &(0x7f0000000240)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000001c0)) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x40) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000080)={0x0, @bt={0xffffffff, 0x6e50, 0x0, 0x0, 0x5, 0xfa, 0x1, 0xff, 0x0, 0x8, 0xfffffff6, 0xa4, 0x8, 0x7f, 0x30, 0x0, {0x10}, 0x0, 0xff}}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@empty, @in=@empty, 0x4e22, 0x5, 0x4e23, 0x0, 0x2, 0x80, 0x80, 0x11, 0x0, r2}, {0xfa22, 0x80000000, 0x0, 0xfffffffffffffffb, 0x7, 0x8, 0x8000, 0xb}, {0xd64, 0x2, 0x0, 0xd066}, 0xf, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, {{@in=@empty, 0x4d6, 0x1d}, 0x2, @in=@multicast1, 0x34ff, 0x2, 0x2, 0x7, 0xf, 0x2, 0x40}}, 0xe8) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000340)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b", 0x48}], 0x1) 198.262091ms ago: executing program 0 (id=80): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs_stats\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000480)='asymmetric\x00', 0x0, &(0x7f00000007c0)="1082", 0x1a, r1) 198.046866ms ago: executing program 0 (id=81): r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000000)=0x10008f1) 197.693012ms ago: executing program 0 (id=82): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) r2 = syz_open_dev$video4linux(&(0x7f0000001dc0), 0x5, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x30) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='ufs\x00', 0xa00000, &(0x7f0000000140)='grpquota') (async) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='ufs\x00', 0xa00000, &(0x7f0000000140)='grpquota') r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) (async) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fedbdf25020000000800090002"], 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000000)={0x0, 0x0, {0xefffffff, 0x4, 0x7ff}}) 141.344702ms ago: executing program 1 (id=85): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000280)=0x7, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x7, 0x0, &(0x7f0000000180)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) accept$ax25(r0, &(0x7f0000000340)={{}, [@netrom, @null, @remote, @bcast, @remote, @null, @netrom, @rose]}, &(0x7f0000000200)=0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x24, r6, 0x1, 0x0, 0xfffffffe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48008}, 0x2000c010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 141.063234ms ago: executing program 3 (id=86): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x35, 0x30, r2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0x40405515, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0xffffffff}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfd22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000300)={0x1, 0x1}) socket$vsock_stream(0x28, 0x1, 0x0) 140.606459ms ago: executing program 1 (id=87): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a000000140007800800124000000000050015"], 0x64}}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='batadv_slave_0\x00', 0x10) shutdown(r1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f00000000c0)=0x8) listen(r1, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x0, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)="d8000000180081034e91f783db4cb9040a1d020006007409e8fc55a10a0015000400142603600e120800060000000401a8000800080002000000000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d4e1cace81ed0bffece0b42a9ecbeeccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93000000000000004867edef090d82c399b3b549", 0xd8}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) poll(&(0x7f0000000040), 0x55, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a000000140007800800124000000000050015"], 0x64}}, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='batadv_slave_0\x00', 0x10) (async) shutdown(r1, 0x0) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000280)=0x10) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f00000000c0)=0x8) (async) listen(r1, 0x9) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x0, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)="d8000000180081034e91f783db4cb9040a1d020006007409e8fc55a10a0015000400142603600e120800060000000401a8000800080002000000000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d4e1cace81ed0bffece0b42a9ecbeeccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93000000000000004867edef090d82c399b3b549", 0xd8}], 0x1}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) poll(&(0x7f0000000040), 0x55, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x50}}, 0x0) (async) 107.48035ms ago: executing program 32 (id=86): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x35, 0x30, r2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0x40405515, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0xffffffff}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfd22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000300)={0x1, 0x1}) socket$vsock_stream(0x28, 0x1, 0x0) 61.299782ms ago: executing program 0 (id=89): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={0x0, 0x34}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_newrule={0x30, 0x20, 0x20, 0x70bd29, 0x25dfdbfe, {0xa, 0x80, 0x20, 0x9, 0x3, 0x0, 0x0, 0x5, 0x10018}, [@FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x24008800) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d40)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xf, 0x2, {{0x0, 0x0, 0x0, 0x2}}}}, @TCA_STAB={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40005}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b07020040f20000140012800bed000067656e65766500000400028008000a0095f670a70d2cc318c1db3b2caaf252142252cc965bd245dd28584b55b638396bfe7beb4f62e9684680d2", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={0x0, 0x34}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_newrule={0x30, 0x20, 0x20, 0x70bd29, 0x25dfdbfe, {0xa, 0x80, 0x20, 0x9, 0x3, 0x0, 0x0, 0x5, 0x10018}, [@FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x24008800) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d40)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xf, 0x2, {{0x0, 0x0, 0x0, 0x2}}}}, @TCA_STAB={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40005}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b07020040f20000140012800bed000067656e65766500000400028008000a0095f670a70d2cc318c1db3b2caaf252142252cc965bd245dd28584b55b638396bfe7beb4f62e9684680d2", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) (async) 60.964472ms ago: executing program 1 (id=90): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x8000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x75989a01, 0xffffffff, 0xb, 0x4c0d, r1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0xb, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="00eb00000000002ac00d8443ca4600000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 58.989124ms ago: executing program 1 (id=91): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 32) r1 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x28000, 0x40) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f00000000c0)=0x5) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x80000006, 0x0, 0x0, 0x4}]}, 0x10) (rerun: 32) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x3, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)="49eee5e9a4", 0x5}], 0x1}}], 0x2, 0x28048825) (async) sendmmsg$inet6(r0, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="c25cb1a33fe15983f00e8fe6ae8ef00ce0e5cfd57c1e7275a478afe69f8725af17482d104bb628ec", 0x28}], 0x1}}], 0x1, 0x80) 58.407233ms ago: executing program 0 (id=92): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xb4}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x22}]}, 0x2c}}, 0x80) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000002c0)={0xc, r4}) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"]) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000002c0)={0x0, 0xfffffffffffffd49, &(0x7f0000000240)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8}]}, 0x34}}, 0x4004800) writev(r0, &(0x7f00000017c0)=[{&(0x7f0000000040)="273eebfe167c0e923301b61c42cb1d11f41d00bdab2aae0e00005a56", 0x1c}], 0x1) 58.139168ms ago: executing program 1 (id=93): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e070c7b0c"], 0x7) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat$loop(r0, &(0x7f00000001c0)='./file2\x00', 0x2000, 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000010c0)="96", 0x1}], 0x1}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 57.85777ms ago: executing program 0 (id=94): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (rerun: 32) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000001c0)={@val={0x2000, 0x88fb}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xe3, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x600, 0x0, 0xcf, 0x0, @wg=@data={0x4, 0x9, 0xf59, "85b8e6665d890582126b83824ec5eabb03a01fcf153a3646ecf39707b92f780837084c4cc8a19acf27b70180327f6abf78820fc7874ee8774d5b70f2e9f184db67007ec1be931e3dc74d973d2e9f6f23571bebe1d1b1fbb3efc0e8ebf0e49c43d86afabb8d481fc31ddcb37cce1c21feb3af6ee3d9b411a3bfc800465412292f36d5f103e723d7c1903dfb50f380ddba1d723abb6c5b5d8c0682b2bcbdeeac1003e2a1a7c61321e3e7d2b82c3b9492b8533f316f982f03"}}}}}}}, 0xf5) (async, rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (rerun: 32) ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0xc008ae09, &(0x7f0000000080)=""/157) 196.514µs ago: executing program 1 (id=95): r0 = openat$fb1(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x5, 0x2, 0x9}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffbffffffffff}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x20, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) quotactl_fd$Q_SYNC(r0, 0x6b87ff2e0fe340dd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x3f, 0x0, 0x1, 0x3e, 0x0, 0x0, {}, {0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) openat$fb1(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r2, r1, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0xffffffffffffffff}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x5, 0x2, 0x9}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffbffffffffff}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x20, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async) quotactl_fd$Q_SYNC(r0, 0x6b87ff2e0fe340dd, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x3f, 0x0, 0x1, 0x3e, 0x0, 0x0, {}, {0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) (async) 0s ago: executing program 4 (id=88): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000540)={@local, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "f91e2e", 0x18, 0x3c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@hopopts={0x88}], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "706a01", 0x0, "cc1978"}}}}}}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="583bd766363d942a49cf", 0xfffffffffffffd48, 0x8040, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) kernel console output (not intermixed with test programs): [ 38.183674][ T39] audit: type=1400 audit(1736341942.867:81): avc: denied { rlimitinh } for pid=5916 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.190346][ T39] audit: type=1400 audit(1736341942.867:82): avc: denied { siginh } for pid=5916 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:55843' (ED25519) to the list of known hosts. [ 39.203082][ T39] audit: type=1400 audit(1736341943.907:83): avc: denied { name_bind } for pid=5920 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.221925][ T39] audit: type=1400 audit(1736341943.927:84): avc: denied { execute } for pid=5922 comm="sh" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.228244][ T39] audit: type=1400 audit(1736341943.927:85): avc: denied { execute_no_trans } for pid=5922 comm="sh" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.580700][ T39] audit: type=1400 audit(1736341945.287:86): avc: denied { mounton } for pid=5922 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 40.581409][ T5922] cgroup: Unknown subsys name 'net' [ 40.587414][ T39] audit: type=1400 audit(1736341945.287:87): avc: denied { mount } for pid=5922 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 40.720848][ T5922] cgroup: Unknown subsys name 'cpuset' [ 40.723505][ T5922] cgroup: Unknown subsys name 'rlimit' [ 40.867219][ T5924] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 41.254357][ T5922] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 43.223833][ T39] kauditd_printk_skb: 18 callbacks suppressed [ 43.223843][ T39] audit: type=1400 audit(1736341947.927:106): avc: denied { create } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.231466][ T39] audit: type=1400 audit(1736341947.927:107): avc: denied { read write } for pid=5933 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 43.238695][ T39] audit: type=1400 audit(1736341947.927:108): avc: denied { open } for pid=5933 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 43.245643][ T39] audit: type=1400 audit(1736341947.937:109): avc: denied { ioctl } for pid=5933 comm="syz-executor" path="socket:[2782]" dev="sockfs" ino=2782 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.251998][ T5938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 43.255744][ T5938] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 43.257925][ T5938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 43.259990][ T5938] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 43.261998][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 43.262429][ T5941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 43.263967][ T5938] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 43.266029][ T5941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 43.266898][ T5945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 43.267222][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 43.267867][ T5938] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 43.267916][ T5945] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 43.267995][ T5945] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 43.268193][ T5945] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 43.268325][ T5945] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 43.268444][ T5945] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 43.270173][ T39] audit: type=1400 audit(1736341947.977:110): avc: denied { read } for pid=5943 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 43.271275][ T5947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 43.271503][ T5945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 43.271638][ T5945] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 43.271822][ T5938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 43.273538][ T39] audit: type=1400 audit(1736341947.977:111): avc: denied { open } for pid=5943 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 43.274220][ T5938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 43.274792][ T5938] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 43.274870][ T5938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 43.276563][ T5938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 43.277461][ T39] audit: type=1400 audit(1736341947.977:112): avc: denied { mounton } for pid=5943 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 43.369112][ T39] audit: type=1400 audit(1736341948.067:113): avc: denied { module_request } for pid=5934 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 43.389322][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 43.411746][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 43.416756][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 43.526119][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.528626][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.531149][ T5934] bridge_slave_0: entered allmulticast mode [ 43.533755][ T5934] bridge_slave_0: entered promiscuous mode [ 43.537446][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.540071][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.542629][ T5934] bridge_slave_1: entered allmulticast mode [ 43.544852][ T5934] bridge_slave_1: entered promiscuous mode [ 43.574552][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 43.622056][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.624706][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.626654][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.628737][ T5939] bridge_slave_0: entered allmulticast mode [ 43.631083][ T5939] bridge_slave_0: entered promiscuous mode [ 43.633493][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.636136][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.638709][ T5943] bridge_slave_0: entered allmulticast mode [ 43.641318][ T5943] bridge_slave_0: entered promiscuous mode [ 43.645925][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.654171][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.656108][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.658015][ T5939] bridge_slave_1: entered allmulticast mode [ 43.660568][ T5939] bridge_slave_1: entered promiscuous mode [ 43.662452][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.664414][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.666378][ T5943] bridge_slave_1: entered allmulticast mode [ 43.668302][ T5943] bridge_slave_1: entered promiscuous mode [ 43.698249][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.711144][ T5934] team0: Port device team_slave_0 added [ 43.719978][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.723089][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.731549][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.733782][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.736095][ T5933] bridge_slave_0: entered allmulticast mode [ 43.738236][ T5933] bridge_slave_0: entered promiscuous mode [ 43.741277][ T5934] team0: Port device team_slave_1 added [ 43.743897][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.756939][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.758938][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.761923][ T5933] bridge_slave_1: entered allmulticast mode [ 43.763940][ T5933] bridge_slave_1: entered promiscuous mode [ 43.788160][ T5943] team0: Port device team_slave_0 added [ 43.791012][ T5943] team0: Port device team_slave_1 added [ 43.801299][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.803285][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.810564][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.814108][ T5939] team0: Port device team_slave_0 added [ 43.816490][ T5939] team0: Port device team_slave_1 added [ 43.829785][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.832107][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.839817][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.861386][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.863313][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.870367][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.874475][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.879208][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.882116][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.884118][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.893196][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.897593][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.900326][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.909593][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.928261][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.930707][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.938194][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.949961][ T5934] hsr_slave_0: entered promiscuous mode [ 43.951887][ T5934] hsr_slave_1: entered promiscuous mode [ 43.961315][ T5933] team0: Port device team_slave_0 added [ 43.964052][ T5933] team0: Port device team_slave_1 added [ 44.010229][ T5943] hsr_slave_0: entered promiscuous mode [ 44.012804][ T5943] hsr_slave_1: entered promiscuous mode [ 44.015349][ T5943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.017598][ T5943] Cannot create hsr debugfs directory [ 44.021421][ T5939] hsr_slave_0: entered promiscuous mode [ 44.023297][ T5939] hsr_slave_1: entered promiscuous mode [ 44.025115][ T5939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.027249][ T5939] Cannot create hsr debugfs directory [ 44.040657][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.042657][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.049960][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.067634][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.069746][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.076825][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.130464][ T5933] hsr_slave_0: entered promiscuous mode [ 44.132711][ T5933] hsr_slave_1: entered promiscuous mode [ 44.134513][ T5933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.136667][ T5933] Cannot create hsr debugfs directory [ 44.207932][ T5934] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 44.212769][ T5934] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 44.226084][ T5934] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 44.231676][ T5934] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 44.245528][ T5939] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 44.248468][ T5939] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 44.251536][ T5939] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 44.254391][ T5939] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 44.264103][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.266614][ T5934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.269424][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.272044][ T5934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.280276][ T5943] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 44.285152][ T5943] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 44.288443][ T5943] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 44.292300][ T5943] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 44.299588][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.302433][ T5939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.305435][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.308180][ T5939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.323888][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.325961][ T5943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.328061][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.330118][ T5943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.333924][ T5933] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 44.337866][ T5933] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 44.342360][ T5933] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 44.346298][ T5933] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 44.367617][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.369697][ T5933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.371792][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.373768][ T5933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.380525][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.390321][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.393512][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.396850][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.400783][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.403839][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.406871][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.412947][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.416365][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.432322][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.436052][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.446331][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.449167][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.455215][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.464498][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.468171][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.474300][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.476640][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.485638][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.487682][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.494541][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.496865][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.499688][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.501672][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.509036][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.516319][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.520712][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.522652][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.546570][ T39] audit: type=1400 audit(1736341949.247:114): avc: denied { sys_module } for pid=5934 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 44.546677][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.555592][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.565478][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.567687][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.598575][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.614039][ T5934] veth0_vlan: entered promiscuous mode [ 44.618057][ T5934] veth1_vlan: entered promiscuous mode [ 44.625565][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.632265][ T5934] veth0_macvtap: entered promiscuous mode [ 44.637188][ T5934] veth1_macvtap: entered promiscuous mode [ 44.651703][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.657606][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.662136][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.667263][ T5934] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.672597][ T5934] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.676076][ T5934] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.679604][ T5934] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.687605][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.690818][ T5939] veth0_vlan: entered promiscuous mode [ 44.694383][ T5939] veth1_vlan: entered promiscuous mode [ 44.717761][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.720739][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.722599][ T5933] veth0_vlan: entered promiscuous mode [ 44.726671][ T5939] veth0_macvtap: entered promiscuous mode [ 44.733778][ T5939] veth1_macvtap: entered promiscuous mode [ 44.736748][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.738881][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.740982][ T5933] veth1_vlan: entered promiscuous mode [ 44.745062][ T5943] veth0_vlan: entered promiscuous mode [ 44.749266][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.749730][ T39] audit: type=1400 audit(1736341949.457:115): avc: denied { mount } for pid=5934 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 44.752875][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.762940][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.765639][ T5943] veth1_vlan: entered promiscuous mode [ 44.769050][ T5934] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 44.776593][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.780389][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.783416][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.789254][ T5939] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.792160][ T5939] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.794794][ T5939] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.797205][ T5939] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.802445][ T5933] veth0_macvtap: entered promiscuous mode [ 44.809239][ T5933] veth1_macvtap: entered promiscuous mode [ 44.812924][ T5943] veth0_macvtap: entered promiscuous mode [ 44.817874][ T5943] veth1_macvtap: entered promiscuous mode [ 44.822604][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.825615][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.828273][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.831895][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.835201][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.840594][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.843490][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.846216][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.849192][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.853170][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.858794][ T5933] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.861509][ T5933] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.864124][ T5933] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.866553][ T5933] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.871524][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.874483][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.877127][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.880203][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.882961][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.885914][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.889135][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.892642][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.895523][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.896271][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.900935][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.903611][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.906452][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.909135][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.912292][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.915873][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.924709][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.927817][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.932352][ T5943] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.934981][ T5943] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.937409][ T5943] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.940464][ T5943] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.955692][ T1187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.957977][ T1187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.972985][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.975204][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.978339][ T6014] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 44.982424][ T1187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.984850][ T1187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.998661][ T1187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.001187][ T1187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.007180][ T6020] netlink: 'syz.0.12': attribute type 30 has an invalid length. [ 45.012712][ T6020] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 45.015984][ T6020] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 45.030781][ T6024] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 45.213217][ T6052] trusted_key: syz.3.21 sent an empty control message without MSG_MORE. [ 45.264321][ T6056] netlink: 'syz.3.21': attribute type 1 has an invalid length. [ 45.339630][ T5936] Bluetooth: hci2: command tx timeout [ 45.340303][ T5938] Bluetooth: hci3: command tx timeout [ 45.341250][ T5936] Bluetooth: hci0: command tx timeout [ 45.342940][ T5938] Bluetooth: hci1: command tx timeout [ 45.550474][ T6058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.22'. [ 45.606447][ T6060] program syz.1.23 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.633725][ T6062] 9p: Unknown uid 00000000004294967295 [ 45.691974][ T6064] netlink: 'syz.1.25': attribute type 16 has an invalid length. [ 45.694948][ T6064] netlink: 'syz.1.25': attribute type 3 has an invalid length. [ 45.697757][ T6064] netlink: 'syz.1.25': attribute type 1 has an invalid length. [ 45.700909][ T6064] netlink: 'syz.1.25': attribute type 2 has an invalid length. [ 45.703835][ T6064] netlink: 64022 bytes leftover after parsing attributes in process `syz.1.25'. [ 45.728827][ T6066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.26'. [ 45.732127][ T6066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26'. [ 45.909468][ T6071] 9pnet_fd: Insufficient options for proto=fd [ 46.006321][ T6076] capability: warning: `syz.2.29' uses deprecated v2 capabilities in a way that may be insecure [ 46.031002][ T6079] syz.3.31 uses obsolete (PF_INET,SOCK_PACKET) [ 46.034908][ T6079] kernel profiling enabled (shift: 0) [ 46.037916][ T6081] xt_hashlimit: size too large, truncated to 1048576 [ 46.501523][ T6092] syzkaller1: entered promiscuous mode [ 46.503121][ T6092] syzkaller1: entered allmulticast mode [ 46.931714][ T6101] netlink: 'syz.3.36': attribute type 1 has an invalid length. [ 46.964300][ T6107] netlink: 'syz.3.38': attribute type 4 has an invalid length. [ 46.966752][ T6107] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.38'. [ 47.024616][ T6116] Zero length message leads to an empty skb [ 47.068186][ T6125] syz.1.44: attempt to access beyond end of device [ 47.068186][ T6125] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 47.072536][ T6125] syz.1.44: attempt to access beyond end of device [ 47.072536][ T6125] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 47.076153][ T6125] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 47.078830][ T6125] syz.1.44: attempt to access beyond end of device [ 47.078830][ T6125] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 47.082795][ T6125] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 47.085735][ T6125] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 47.087884][ T6125] UDF-fs: Scanning with blocksize 512 failed [ 47.089922][ T6125] syz.1.44: attempt to access beyond end of device [ 47.089922][ T6125] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 47.093574][ T6125] syz.1.44: attempt to access beyond end of device [ 47.093574][ T6125] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 47.097177][ T6125] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 47.100203][ T6125] syz.1.44: attempt to access beyond end of device [ 47.100203][ T6125] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 47.103812][ T6125] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 47.106533][ T6125] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 47.108636][ T6125] UDF-fs: Scanning with blocksize 1024 failed [ 47.110537][ T6125] syz.1.44: attempt to access beyond end of device [ 47.110537][ T6125] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 47.114083][ T6125] syz.1.44: attempt to access beyond end of device [ 47.114083][ T6125] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 47.117723][ T6125] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 47.120666][ T6125] syz.1.44: attempt to access beyond end of device [ 47.120666][ T6125] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 47.124515][ T6125] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 47.127352][ T6125] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 47.129636][ T6125] UDF-fs: Scanning with blocksize 2048 failed [ 47.131544][ T6125] syz.1.44: attempt to access beyond end of device [ 47.131544][ T6125] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 47.135860][ T6125] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 47.138942][ T6125] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 47.141813][ T6125] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 47.144648][ T6125] UDF-fs: Scanning with blocksize 4096 failed [ 47.146490][ T6125] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 47.153686][ T6135] sctp: [Deprecated]: syz.2.46 (pid 6135) Use of struct sctp_assoc_value in delayed_ack socket option. [ 47.153686][ T6135] Use struct sctp_sack_info instead [ 47.206354][ T6142] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 47.419502][ T5936] Bluetooth: hci1: command tx timeout [ 47.419594][ T5938] Bluetooth: hci2: command tx timeout [ 47.419726][ T5945] Bluetooth: hci3: command tx timeout [ 47.429470][ T5938] Bluetooth: hci0: command tx timeout [ 47.705507][ T6158] overlayfs: missing 'lowerdir' [ 47.735483][ T6162] netlink: 'syz.1.54': attribute type 19 has an invalid length. [ 47.832563][ T5938] Bluetooth: hci1: unexpected cc 0x0c7b length: 1 < 5 [ 47.855271][ T6170] input: syz1 as /devices/virtual/input/input5 [ 48.054719][ T6173] tc_dump_action: action bad kind [ 48.071384][ T6175] process 'syz.2.60' launched './file0' with NULL argv: empty string added [ 48.118136][ T6180] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 48.179877][ T5938] Bluetooth: hci0: unexpected cc 0x0c7b length: 1 < 5 [ 48.488068][ T6195] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 48.524874][ T39] kauditd_printk_skb: 157 callbacks suppressed [ 48.524889][ T39] audit: type=1400 audit(1736341953.227:273): avc: denied { sys_module } for pid=6199 comm="syz.1.70" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.593623][ T39] audit: type=1400 audit(1736341953.297:274): avc: denied { create } for pid=6205 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 48.609804][ T6213] netlink: 'syz.1.73': attribute type 29 has an invalid length. [ 48.612655][ T39] audit: type=1400 audit(1736341953.317:275): avc: denied { name_connect } for pid=6212 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 48.664742][ T6214] netlink: 596 bytes leftover after parsing attributes in process `syz.1.73'. [ 48.667926][ T6215] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5292 sclass=netlink_route_socket pid=6215 comm=syz.1.73 [ 48.689807][ T5938] Bluetooth: hci3: unexpected cc 0x0c7b length: 1 < 5 [ 48.705454][ T39] audit: type=1400 audit(1736341953.407:276): avc: denied { ioctl } for pid=6219 comm="syz.1.75" path="socket:[9764]" dev="sockfs" ino=9764 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.712889][ T39] audit: type=1400 audit(1736341953.417:277): avc: denied { bind } for pid=6219 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 48.718240][ T39] audit: type=1400 audit(1736341953.417:278): avc: denied { bind } for pid=6219 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 48.723900][ T39] audit: type=1400 audit(1736341953.417:279): avc: denied { write } for pid=6219 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 48.734997][ T39] audit: type=1400 audit(1736341953.437:280): avc: denied { setopt } for pid=6223 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.741983][ T39] audit: type=1400 audit(1736341953.437:281): avc: denied { write } for pid=6223 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.757409][ T6227] overlay: Unknown parameter 'pcr' [ 48.757808][ T6226] overlay: Unknown parameter 'pcr' [ 48.762686][ T6226] ======================================================= [ 48.762686][ T6226] WARNING: The mand mount option has been deprecated and [ 48.762686][ T6226] and is ignored by this kernel. Remove the mand [ 48.762686][ T6226] option from the mount to silence this warning. [ 48.762686][ T6226] ======================================================= [ 48.762798][ T6227] 9pnet_fd: Insufficient options for proto=fd [ 48.772925][ T6226] 9pnet_fd: Insufficient options for proto=fd [ 48.777361][ T6226] team0: No ports can be present during mode change [ 48.796583][ T39] audit: type=1400 audit(1736341953.497:282): avc: denied { read } for pid=6229 comm="syz.1.78" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 48.798007][ T6230] binder: BINDER_SET_CONTEXT_MGR already set [ 48.805915][ T6230] binder: 6229:6230 ioctl 4018620d 200001c0 returned -16 [ 48.869139][ T5938] Bluetooth: hci3: unexpected cc 0x0c7b length: 1 < 5 [ 48.915879][ T1187] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.939012][ T6258] IPv6: NLM_F_CREATE should be specified when creating new route [ 48.961409][ T6270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.89'. [ 48.964518][ T6270] netem: invalid attributes len -13 [ 48.966897][ T6270] netem: change failed [ 48.968320][ T6270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.89'. [ 48.972995][ T1187] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.973835][ T6276] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.001703][ T5938] Bluetooth: hci3: unexpected cc 0x0c7b length: 1 < 5 [ 49.033859][ T1187] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.079518][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'. [ 49.084850][ T1187] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.113868][ T43] ================================================================== [ 49.116323][ T43] BUG: KASAN: slab-use-after-free in move_to_new_folio+0x12e/0x700 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 49.118488][ T43] Read of size 8 at addr ffff888024486038 by task kcompactd0/43 [ 49.121748][ T43] [ 49.122656][ T43] CPU: 2 UID: 0 PID: 43 Comm: kcompactd0 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 49.123031][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'. [ 49.125727][ T43] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.125740][ T43] Call Trace: [ 49.125744][ T43] [ 49.125747][ T43] dump_stack_lvl+0x116/0x1f0 [ 49.134151][ T43] print_report+0xc3/0x620 [ 49.135440][ T43] ? __virt_addr_valid+0x5e/0x590 [ 49.136850][ T43] ? __phys_addr+0xc6/0x150 [ 49.138157][ T43] kasan_report+0xd9/0x110 [ 49.139551][ T43] ? move_to_new_folio+0x12e/0x700 [ 49.141095][ T43] ? move_to_new_folio+0x12e/0x700 [ 49.142538][ T43] kasan_check_range+0xef/0x1a0 [ 49.143916][ T43] move_to_new_folio+0x12e/0x700 [ 49.145313][ T43] migrate_pages_batch+0x200c/0x3150 [ 49.146817][ T43] ? __pfx_compaction_free+0x10/0x10 [ 49.148311][ T43] ? __pfx_migrate_pages_batch+0x10/0x10 [ 49.149875][ T43] ? trace_contention_end.constprop.0+0x10c/0x170 [ 49.151700][ T43] ? __pv_queued_spin_lock_slowpath+0x28a/0xc90 [ 49.153455][ T43] ? sched_balance_rq+0x14c4/0x2ec0 [ 49.154928][ T43] migrate_pages_sync+0x131/0x910 [ 49.156312][ T43] ? __pfx_compaction_alloc+0x10/0x10 [ 49.157772][ T43] ? __pfx_compaction_free+0x10/0x10 [ 49.159239][ T43] ? z3fold_page_isolate+0x430/0x510 [ 49.160755][ T43] ? rcu_is_watching+0x12/0xc0 [ 49.162092][ T43] ? __pfx_migrate_pages_sync+0x10/0x10 [ 49.163687][ T43] ? __pfx_lock_release+0x10/0x10 [ 49.165139][ T43] ? __pfx_lock_release+0x10/0x10 [ 49.166580][ T43] ? isolate_movable_page+0x3b/0x7f0 [ 49.168122][ T43] ? isolate_movable_page+0x3b/0x7f0 [ 49.169648][ T43] migrate_pages+0x1a46/0x21f0 [ 49.171029][ T43] ? __pfx_compaction_alloc+0x10/0x10 [ 49.172581][ T43] ? __pfx_compaction_free+0x10/0x10 [ 49.174106][ T43] ? __pfx_migrate_pages+0x10/0x10 [ 49.175648][ T43] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 49.177457][ T43] compact_zone+0x1f68/0x4280 [ 49.178828][ T43] ? rcu_is_watching+0x12/0xc0 [ 49.180225][ T43] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 49.181755][ T43] ? trace_irq_enable.constprop.0+0xea/0x140 [ 49.183451][ T43] ? __pfx_compact_zone+0x10/0x10 [ 49.185058][ T43] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 49.186551][ T43] ? __try_to_del_timer_sync+0x116/0x170 [ 49.188099][ T43] ? rcu_is_watching+0x12/0xc0 [ 49.189435][ T43] ? trace_irq_enable.constprop.0+0xea/0x140 [ 49.191121][ T43] compact_node+0x1a2/0x2d0 [ 49.192406][ T43] ? __pfx_compact_node+0x10/0x10 [ 49.193802][ T43] ? __pfx_extfrag_for_order+0x10/0x10 [ 49.195358][ T43] ? rcu_is_watching+0x12/0xc0 [ 49.196692][ T43] kcompactd+0x779/0xdf0 [ 49.197857][ T43] ? __pfx_kcompactd+0x10/0x10 [ 49.199186][ T43] ? __pfx_autoremove_wake_function+0x10/0x10 [ 49.200923][ T43] ? lockdep_hardirqs_on+0x7c/0x110 [ 49.202399][ T43] ? __kthread_parkme+0x148/0x220 [ 49.203804][ T43] ? __pfx_kcompactd+0x10/0x10 [ 49.205139][ T43] kthread+0x2c1/0x3a0 [ 49.206307][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 49.207755][ T43] ? __pfx_kthread+0x10/0x10 [ 49.209046][ T43] ret_from_fork+0x45/0x80 [ 49.210286][ T43] ? __pfx_kthread+0x10/0x10 [ 49.211563][ T43] ret_from_fork_asm+0x1a/0x30 [ 49.212895][ T43] [ 49.213808][ T43] [ 49.214485][ T43] Allocated by task 37: [ 49.215661][ T43] kasan_save_stack+0x33/0x60 [ 49.216995][ T43] kasan_save_track+0x14/0x30 [ 49.218305][ T43] __kasan_slab_alloc+0x89/0x90 [ 49.219692][ T43] kmem_cache_alloc_lru_noprof+0x226/0x3d0 [ 49.221315][ T43] shmem_alloc_inode+0x25/0x50 [ 49.222690][ T43] alloc_inode+0x5d/0x230 [ 49.223913][ T43] new_inode+0x22/0x210 [ 49.225062][ T43] shmem_get_inode+0x194/0xf00 [ 49.226443][ T43] shmem_mknod+0x1a8/0x450 [ 49.227714][ T43] vfs_mknod+0x5d7/0x8e0 [ 49.228924][ T43] devtmpfs_work_loop+0x1a8/0x7d0 [ 49.230334][ T43] devtmpfsd+0x4c/0x50 [ 49.231509][ T43] kthread+0x2c1/0x3a0 [ 49.232689][ T43] ret_from_fork+0x45/0x80 [ 49.234167][ T43] ret_from_fork_asm+0x1a/0x30 [ 49.235585][ T43] [ 49.236290][ T43] Freed by task 16: [ 49.237397][ T43] kasan_save_stack+0x33/0x60 [ 49.238752][ T43] kasan_save_track+0x14/0x30 [ 49.240110][ T43] kasan_save_free_info+0x3b/0x60 [ 49.241654][ T43] __kasan_slab_free+0x51/0x70 [ 49.243025][ T43] kmem_cache_free+0x152/0x4c0 [ 49.244542][ T43] i_callback+0x43/0x70 [ 49.245744][ T43] rcu_core+0x79d/0x14d0 [ 49.246962][ T43] handle_softirqs+0x213/0x8f0 [ 49.248357][ T43] run_ksoftirqd+0x3a/0x60 [ 49.249645][ T43] smpboot_thread_fn+0x661/0xa30 [ 49.251061][ T43] kthread+0x2c1/0x3a0 [ 49.252238][ T43] ret_from_fork+0x45/0x80 [ 49.253535][ T43] ret_from_fork_asm+0x1a/0x30 [ 49.254901][ T43] [ 49.255603][ T43] Last potentially related work creation: [ 49.257193][ T43] kasan_save_stack+0x33/0x60 [ 49.258527][ T43] __kasan_record_aux_stack+0xba/0xd0 [ 49.260057][ T43] __call_rcu_common.constprop.0+0x99/0x7a0 [ 49.261725][ T43] destroy_inode+0x12c/0x1b0 [ 49.263046][ T43] evict+0x5ed/0x960 [ 49.264166][ T43] iput+0x52a/0x890 [ 49.265254][ T43] do_unlinkat+0x5c3/0x760 [ 49.266531][ T43] __x64_sys_unlink+0xc5/0x110 [ 49.267917][ T43] do_syscall_64+0xcd/0x250 [ 49.269202][ T43] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.270868][ T43] [ 49.271547][ T43] The buggy address belongs to the object at ffff888024485b70 [ 49.271547][ T43] which belongs to the cache shmem_inode_cache of size 1544 [ 49.275648][ T43] The buggy address is located 1224 bytes inside of [ 49.275648][ T43] freed 1544-byte region [ffff888024485b70, ffff888024486178) [ 49.279510][ T43] [ 49.280202][ T43] The buggy address belongs to the physical page: [ 49.282010][ T43] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24480 [ 49.284465][ T43] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 49.286853][ T43] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 49.288973][ T43] page_type: f5(slab) [ 49.290103][ T43] raw: 00fff00000000040 ffff88801ca8e780 dead000000000122 0000000000000000 [ 49.292522][ T43] raw: 0000000000000000 0000000000130013 00000001f5000000 0000000000000000 [ 49.294946][ T43] head: 00fff00000000040 ffff88801ca8e780 dead000000000122 0000000000000000 [ 49.297446][ T43] head: 0000000000000000 0000000000130013 00000001f5000000 0000000000000000 [ 49.299857][ T43] head: 00fff00000000003 ffffea0000912001 ffffffffffffffff 0000000000000000 [ 49.302282][ T43] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 49.304662][ T43] page dumped because: kasan: bad access detected [ 49.306450][ T43] page_owner tracks the page as allocated [ 49.308013][ T43] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 37, tgid 37 (kdevtmpfs), ts 5644401756, free_ts 0 [ 49.313346][ T43] post_alloc_hook+0x2d1/0x350 [ 49.314718][ T43] get_page_from_freelist+0xfce/0x2f80 [ 49.316250][ T43] __alloc_pages_noprof+0x223/0x25b0 [ 49.317699][ T43] alloc_pages_mpol_noprof+0x2c9/0x610 [ 49.319232][ T43] new_slab+0x2c9/0x410 [ 49.320415][ T43] ___slab_alloc+0xd7d/0x17a0 [ 49.321725][ T43] __slab_alloc.constprop.0+0x56/0xb0 [ 49.323256][ T43] kmem_cache_alloc_lru_noprof+0xff/0x3d0 [ 49.324898][ T43] shmem_alloc_inode+0x25/0x50 [ 49.326322][ T43] alloc_inode+0x5d/0x230 [ 49.327570][ T43] new_inode+0x22/0x210 [ 49.328747][ T43] shmem_get_inode+0x194/0xf00 [ 49.330091][ T43] shmem_mknod+0x1a8/0x450 [ 49.331345][ T43] vfs_mknod+0x5d7/0x8e0 [ 49.332530][ T43] devtmpfs_work_loop+0x1a8/0x7d0 [ 49.333937][ T43] devtmpfsd+0x4c/0x50 [ 49.335096][ T43] page_owner free stack trace missing [ 49.336628][ T43] [ 49.337304][ T43] Memory state around the buggy address: [ 49.338868][ T43] ffff888024485f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.341106][ T43] ffff888024485f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.343319][ T43] >ffff888024486000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.345532][ T43] ^ [ 49.347141][ T43] ffff888024486080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.349343][ T43] ffff888024486100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc [ 49.351529][ T43] ================================================================== [ 49.353810][ C2] vkms_vblank_simulate: vblank timer overrun [ 49.356100][ T43] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 49.358119][ T43] CPU: 2 UID: 0 PID: 43 Comm: kcompactd0 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 49.361022][ T43] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.363974][ T43] Call Trace: [ 49.364924][ T43] [ 49.365758][ T43] dump_stack_lvl+0x3d/0x1f0 [ 49.367049][ T43] panic+0x71d/0x800 [ 49.368164][ T43] ? __pfx_panic+0x10/0x10 [ 49.369425][ T43] ? rcu_is_watching+0x12/0xc0 [ 49.370782][ T43] ? preempt_schedule_thunk+0x1a/0x30 [ 49.372308][ T43] ? preempt_schedule_common+0x44/0xc0 [ 49.373867][ T43] ? check_panic_on_warn+0x1f/0xb0 [ 49.375341][ T43] check_panic_on_warn+0xab/0xb0 [ 49.376767][ T43] end_report+0x117/0x180 [ 49.378013][ T43] kasan_report+0xe9/0x110 [ 49.379298][ T43] ? move_to_new_folio+0x12e/0x700 [ 49.380750][ T43] ? move_to_new_folio+0x12e/0x700 [ 49.382212][ T43] kasan_check_range+0xef/0x1a0 [ 49.383657][ T43] move_to_new_folio+0x12e/0x700 [ 49.385114][ T43] migrate_pages_batch+0x200c/0x3150 [ 49.386666][ T43] ? __pfx_compaction_free+0x10/0x10 [ 49.388208][ T43] ? __pfx_migrate_pages_batch+0x10/0x10 [ 49.389829][ T43] ? trace_contention_end.constprop.0+0x10c/0x170 [ 49.391684][ T43] ? __pv_queued_spin_lock_slowpath+0x28a/0xc90 [ 49.393478][ T43] ? sched_balance_rq+0x14c4/0x2ec0 [ 49.394988][ T43] migrate_pages_sync+0x131/0x910 [ 49.396486][ T43] ? __pfx_compaction_alloc+0x10/0x10 [ 49.398025][ T43] ? __pfx_compaction_free+0x10/0x10 [ 49.399520][ T43] ? z3fold_page_isolate+0x430/0x510 [ 49.401014][ T43] ? rcu_is_watching+0x12/0xc0 [ 49.402366][ T43] ? __pfx_migrate_pages_sync+0x10/0x10 [ 49.403899][ T43] ? __pfx_lock_release+0x10/0x10 [ 49.405305][ T43] ? __pfx_lock_release+0x10/0x10 [ 49.406737][ T43] ? isolate_movable_page+0x3b/0x7f0 [ 49.408182][ T43] ? isolate_movable_page+0x3b/0x7f0 [ 49.409660][ T43] migrate_pages+0x1a46/0x21f0 [ 49.411024][ T43] ? __pfx_compaction_alloc+0x10/0x10 [ 49.412524][ T43] ? __pfx_compaction_free+0x10/0x10 [ 49.413997][ T43] ? __pfx_migrate_pages+0x10/0x10 [ 49.415495][ T43] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 49.417244][ T43] compact_zone+0x1f68/0x4280 [ 49.418567][ T43] ? rcu_is_watching+0x12/0xc0 [ 49.419910][ T43] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 49.421428][ T43] ? trace_irq_enable.constprop.0+0xea/0x140 [ 49.423083][ T43] ? __pfx_compact_zone+0x10/0x10 [ 49.424502][ T43] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 49.426038][ T43] ? __try_to_del_timer_sync+0x116/0x170 [ 49.427596][ T43] ? rcu_is_watching+0x12/0xc0 [ 49.428936][ T43] ? trace_irq_enable.constprop.0+0xea/0x140 [ 49.430585][ T43] compact_node+0x1a2/0x2d0 [ 49.431857][ T43] ? __pfx_compact_node+0x10/0x10 [ 49.433269][ T43] ? __pfx_extfrag_for_order+0x10/0x10 [ 49.434772][ T43] ? rcu_is_watching+0x12/0xc0 [ 49.436162][ T43] kcompactd+0x779/0xdf0 [ 49.437384][ T43] ? __pfx_kcompactd+0x10/0x10 [ 49.438738][ T43] ? __pfx_autoremove_wake_function+0x10/0x10 [ 49.440487][ T43] ? lockdep_hardirqs_on+0x7c/0x110 [ 49.441976][ T43] ? __kthread_parkme+0x148/0x220 [ 49.443385][ T43] ? __pfx_kcompactd+0x10/0x10 [ 49.444725][ T43] kthread+0x2c1/0x3a0 [ 49.445869][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 49.447304][ T43] ? __pfx_kthread+0x10/0x10 [ 49.448610][ T43] ret_from_fork+0x45/0x80 [ 49.449869][ T43] ? __pfx_kthread+0x10/0x10 [ 49.451182][ T43] ret_from_fork_asm+0x1a/0x30 [ 49.452544][ T43] [ 49.454054][ T43] Kernel Offset: disabled [ 49.455331][ T43] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:12:33 Registers: info registers vcpu 0 CPU#0 RAX=00000000000340e4 RBX=0000000000000000 RCX=ffffffff8b29e7d9 RDX=ffffed100d4c6fee RSI=ffffffff8bd1ec20 RDI=ffffffff81709509 RBP=fffffbfff1bd2ef8 RSP=ffffffff8de07e20 R8 =0000000000000000 R9 =ffffed100d4c6fed R10=ffff88806a637f6b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de977c0 R14=ffffffff905f3d90 R15=0000000000000000 RIP=ffffffff8b29fbbf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffe1945f768 CR3=0000000050f9c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff90fd03ec RDX=0000000000000001 RSI=0000000000000001 RDI=ffffffff90775558 RBP=ffffc90004987170 RSP=ffffc900049870b8 R8 =ffffffff90fd03f2 R9 =ffffffff90fd03f0 R10=ffffc90004987128 R11=000000000000d43c R12=ffffc90004987178 R13=ffffc90004987128 R14=ffffc9000498715d R15=0000000000000001 RIP=ffffffff81494445 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f27830a7d60 CR3=000000000df7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f278254b6a3 00007f278254b6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc5437360 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000300000014 0000000200000021 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000500000007 0000000400000017 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555797a8270 00005555797a7d80 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100001800401 0000020806060154 ac00080001e00300 100001d003001000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01c00302100001b0 0304c0100010031a 0028000000000019 0005000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000080c72f 58c818bc0f000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851be9f5 RDI=ffffffff9ab0fb20 RBP=ffffffff9ab0fae0 RSP=ffffc900007b6f08 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=000000000000006f R14=ffffffff851be990 R15=0000000000000000 RIP=ffffffff851bea1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3c2fedf444 CR3=000000004c1de000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc745b6540 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a02a02a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a02a02aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a02a02aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a02a02ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a02a02b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a02a02c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000060 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000060 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffea0000929f80 RCX=ffffffff81e4bc49 RDX=ffff88801aee8000 RSI=0000000000000000 RDI=0000000000000007 RBP=ffff8880294e8000 RSP=ffffc90003697c78 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000200 R11=00000000000a4012 R12=ffff888045efe000 R13=0000000000000200 R14=0000000000000001 R15=ffff88801aee8000 RIP=ffffffff81e4bf98 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556c163500 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2e720000 CR3=0000000045efe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf6a80620 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f935f802a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f935f802aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f935f802aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f935f802ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f935f802b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f935f802c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c667265766f20 6772612061746164 000a747261745374 6f687370616e5300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49435740534a05 4257440544514441 000a515744515351 4a4d5655444b5300 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000