last executing test programs: 2.259369801s ago: executing program 0 (id=13): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x16}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xc, 0xfff1}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$802154_raw(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)="92004499", 0x4}, 0x1, 0x0, 0x0, 0x40000}, 0x240488c4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1805b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 2.054110879s ago: executing program 0 (id=16): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x8c941, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x1000, 0xd}}) ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x2, 0x0, 0x98, &(0x7f0000000280)={0x3fc, 0x1000, 0xd}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='gfs2\x00', 0x205040, &(0x7f00000035c0)='quota') 1.91010407s ago: executing program 0 (id=17): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x200000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r2, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x80}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000001) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) write$P9_RMKNOD(r3, &(0x7f0000000200)={0x14, 0x13, 0x1, {0x80, 0x3, 0x3}}, 0x14) r4 = socket$inet_sctp(0x2, 0x2, 0x84) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r5, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x6e}}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x40040) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000003c0)=0x0) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000480)={0x0, "d252f94c5ad77140f3fe8cdd34f4d355"}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000001480)={{r0}, r7, 0x2, @inherit={0x58, &(0x7f0000000400)={0x0, 0x2, 0x9, 0x401, {0x24, 0x0, 0x0, 0x2c, 0x8000000000000001}, [0x101, 0xfffffffffffffffd]}}, @devid=r8}) bind$inet6(r3, &(0x7f0000002480)={0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002580)={&(0x7f0000002500)={0x58, r5, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x8]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x4, 0xc]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xf82}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000040}, 0x20008000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000002740)={'ip6tnl0\x00', &(0x7f00000026c0)={'syztnl2\x00', 0x0, 0x4, 0x81, 0x9, 0x9, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00', 0x8, 0x88, 0x7, 0x2}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002940)={r3, 0x20, &(0x7f0000002900)={&(0x7f00000027c0)=""/77, 0x4d, 0x0, &(0x7f0000002840)=""/154, 0x9a}}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000002a40)={0x10, 0xd, &(0x7f0000002600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000002680)='syzkaller\x00', 0x27f, 0x0, 0x0, 0x41100, 0x0, '\x00', r9, @sk_msg, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002780)={0x5, 0xe, 0x6f, 0x4}, 0x10, r10, r3, 0x7, &(0x7f0000002980)=[0xffffffffffffffff], &(0x7f00000029c0)=[{0x0, 0x1, 0x8, 0x9}, {0x5, 0x4, 0xf}, {0x3, 0x5, 0x1, 0x7}, {0x4, 0x3, 0x9, 0x3}, {0x5, 0x1, 0xa, 0x2}, {0x4, 0x1, 0xc, 0x5}, {0x1, 0x5, 0x9, 0xb}], 0x10, 0xff, @void, @value}, 0x94) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000002c40)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002c00)={&(0x7f0000002b40)={0xa4, r5, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x80, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x11, 0x4, "c29a77a2bcdc648324868704b9"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x11, 0x4, "5e60e5802e52f56b113ebcdf8e"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "8f3add8a"}, @NL80211_KEY_SEQ={0x12, 0x4, "adc3cb7e1b9a3c06e5c887d2a3d7"}, @NL80211_KEY_SEQ={0x9, 0x4, "fee2d73d7b"}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bd9212bf859973a6ed84eebe82"}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r12 = pidfd_getfd(0xffffffffffffffff, r11, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000002c80)=[0x7, 0x4]) setsockopt$IP_VS_SO_SET_ADDDEST(r12, 0x0, 0x487, &(0x7f0000002cc0)={{0x3b, @multicast1, 0x4e21, 0x0, 'fo\x00', 0x1, 0x5, 0x49}, {@loopback, 0x4e24, 0x10000, 0xf9, 0x9, 0xd1c}}, 0x44) setsockopt$netlink_NETLINK_CAP_ACK(r12, 0x10e, 0xa, &(0x7f0000002d40)=0x7, 0x4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000002d80)={0x1, 'syzkaller1\x00', {}, 0xfffc}) openat$cgroup_type(r12, &(0x7f0000002dc0), 0x2, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000002ec0)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e40)={0x1c, r5, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8) statx(r12, &(0x7f0000002f00)='./file0/../file0\x00', 0x2000, 0x4, &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0xab, &(0x7f0000003040)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @val={@void, {0x8100, 0x5, 0x1, 0x1}}, {@llc_tr={0x11, {@snap={0x1, 0x1, "25e7", "168ebd", 0xdada, "671be9ab772766c48381667193d75bb0158841b2ca5e0c8b1e424ba5447280bf2168cf0327fff3374c9007cfc6deb4941f64d356799eb3b39b6c4b122726709d3788c99a4a5415c4b5a4cc7a5deed697460d97b059281b3f2e16f192f57e26e5f8e25791d63dd511ae0ba2cf78346c5e71fb2ed91cc91d25576446f0971041c57f52d52ad8d14582de808410b46ca674"}}}}}, &(0x7f0000003100)={0x1, 0x4, [0x40e, 0x961, 0x2dc, 0x821]}) quotactl_fd$Q_GETINFO(r12, 0xffffffff80000502, r13, &(0x7f0000003140)) 1.909673956s ago: executing program 3 (id=18): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x1, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x18, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0x6, 0x6, '\t\x00'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x40000) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0', 0x3a, [0x43, 0x4f]}, 0x2d) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r7], 0x54}}, 0xa0000) r8 = socket$netlink(0x10, 0x3, 0x8) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r10, @ANYBLOB="01"], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000110001002dbd7000fbdbdf2500000000", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = socket(0xa, 0x80805, 0x0) sendmsg$inet_sctp(r11, &(0x7f0000000500)={&(0x7f00000005c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000140)="02", 0x1}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000840000100529e5202000a273527be1cbea676f00000800000000000000"], 0x18, 0x840}, 0x8000) socket$key(0xf, 0x3, 0x2) r12 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0) close(r12) socket$inet_mptcp(0x2, 0x1, 0x106) r13 = accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14) getpeername$packet(r13, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) syz_genetlink_get_family_id$team(&(0x7f0000000400), 0xffffffffffffffff) 1.658853417s ago: executing program 0 (id=19): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000700)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0], 0x0, 0x35, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0x98, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000d40)={'ip6gre0\x00', &(0x7f0000000cc0)={'syztnl0\x00', r2, 0x29, 0x1, 0x2, 0xeb9, 0x30, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x40, 0x700, 0x1, 0x10001}}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_setup(0x5, &(0x7f0000000000)=0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000d80), 0x10) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r8, 0xc0cc5615, &(0x7f0000000040)={0xa, @output={0x1000, 0x0, {0xfff, 0x8}, 0x6, 0x26}}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000a80)={0x1, 0x0, [{0xa50a27af40c9b30b, 0xb8, &(0x7f0000000940)=""/184}]}) r9 = dup(r7) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r11}, &(0x7f0000000a00), &(0x7f0000000a40)=r10}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r11}, &(0x7f0000000880), &(0x7f00000008c0)=r10}, 0x20) ioctl$VHOST_NET_SET_BACKEND(r10, 0x4008af30, &(0x7f00000006c0)={0x1, r10}) sendmsg$IPSET_CMD_GET_BYINDEX(r9, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6400000a00000306000b000400000006000b000400000006000b0003000000050801000700000006000b0000000000050001000700000004df0100070000000500030007000000050001000700000006000b0003000000"], 0x64}, 0x1, 0x0, 0x0, 0x4044054}, 0x40) r12 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x8, 0x200180) r13 = eventfd(0xf0) r14 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r15, r14, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000e40)=[@text32={0x20, &(0x7f0000000dc0)="0fc77ea2660f7ceab9800000c00f3235010000000f30b9ad080000b8268c0000ba000000000f30c4c1fa1682000000000fae04420f01c8b9800000c00f3235000400000f30363e0f01c4660f38818100000000", 0x53}], 0x1, 0x4, &(0x7f0000000e80)=[@vmwrite={0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}], 0x1) r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_adj\x00') write$tcp_mem(r16, &(0x7f00000010c0)={0x8000000000000000, 0x20, 0x5}, 0x48) io_submit(r4, 0x4, &(0x7f0000000500)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x5d03, r3, &(0x7f0000000080)="8298c2f86d8e2fea68601ee98c5f5ec26e3fd73e32e01b347e88aecdeb15fb4894509accae7e709fc31bdc89e73fbe2aad04d01205fbca9230b55561046bc82fd9a9189f645c551cd104a9df51b1883224e7239b4be4a57547c4633adfd616a05812860617c99f6f573704460576714dfbf433189dfbd410a99f", 0x7a, 0x7ff, 0x0, 0x3}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000140)="99e2e4bbdf9200747f057ec02bcfbd01dcd9a49183ff9cfd8b5214618eb7f2c87009b49eefe24f0f2389caf06c66b66ba445a693cfe73709ff22bb0fd8aec87de5f19d8bc7b87a9ce6ee1f2cbd2af8305339174a48fb91", 0x57, 0x6, 0x0, 0x1, r9}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x2345, r12, &(0x7f0000000300)="2b094d6c47c4066bc8f1ca2637d0b18cf338de75f44777e1c9a930f123fc3e3b430615ce790113c4d9c22721daa431081b2dcb9feb5b6681828fea336c62ef1f25290bf0578c9116d6ed3ab9", 0x4c, 0x8, 0x0, 0x0, r13}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x3, r3, &(0x7f00000003c0)="2fc37e6b59e2a11c6ce0774971d8c763fce5bfb17c0cf5c99f5885129ee67a0d9b03b7c87c399784e9279d2a57ea87de202043f1d6a2e8bc701ff535f419e2c55ea0b0b64eeaaefff62b95553dd0b08ed60718b3d477bc0393f4ca2a6241aa4d3fcba6385a25a7836d3c19ca399c08db36bc560304b38a243de9fc3be29644d33c9d72b706fb1e6811ead58818819670cf6f6358672cf209af36538db539fc8262c21f63613fd80eab10b8f0e3d66c905e1ede2de545fe0417", 0xb9, 0x5, 0x0, 0x2, r14}]) 1.410277692s ago: executing program 0 (id=20): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$dsp(r0, &(0x7f0000000000)=""/84, 0xfffffffffffffeb1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) read$dsp(r0, &(0x7f0000000000)=""/84, 0xfffffffffffffeb1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) 1.329466289s ago: executing program 0 (id=21): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000002010101000000000000000002000006040002800c0019"], 0x24}, 0x1, 0x0, 0x0, 0x80000}, 0x4000) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8, r0}, 0x18) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x48980, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x20000000009) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x8, 0xfffeffff, 0x2, 0xaa14, r1, 0xc, '\x00', r2, r4, 0x2, 0x4, 0x5, 0x3, @value=r5, @void, @void, @value}, 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85ff000000000000bc1010000000000904000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.030310278s ago: executing program 3 (id=23): r0 = socket(0x10, 0x3, 0x0) (async) setreuid(0xee00, 0xee00) setreuid(0x0, 0xee01) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x80) (async) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="78224fc427ed619f319b73733d616e792c63616368653d66736361636865"]) chdir(&(0x7f00000000c0)='./file0\x00') creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r1 = io_uring_setup(0x13b5, &(0x7f0000000140)={0x0, 0x5606, 0x40, 0xdfffffff, 0x2fa}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) (async) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000000000)={r1}, 0x1) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}, 0x1, 0x4c00000000000000}, 0x0) 960.33617ms ago: executing program 1 (id=25): openat$vcs(0xffffffffffffff9c, &(0x7f0000002380), 0x701, 0x0) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002380), 0x701, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="ad4300000000009c260821"], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000003b80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001a00020000000800170003000000080013000000000008000300000002000800070000000200080002"], 0x5c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) lseek(r0, 0xa, 0x1) r5 = syz_open_dev$vim2m(&(0x7f0000000b00), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x24, 0x2, 0x0, "732283ef1acb5aa7abe50000000009be3e8100", 0x34565559}) 959.832129ms ago: executing program 3 (id=27): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x2, 0x0, 0x3}}, 0x26) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x100}, 0xc) r3 = socket$netlink(0x10, 0x3, 0xc) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000000)={0x11}) iopl(0x3) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2000020}, 0xc) close(r1) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000001c0)={'pim6reg\x00', {0x2, 0x4e23, @multicast2}}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000600)=0x2) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="80fd"], 0x9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e63925789381db3fe455e8dadc7dcf81189517730bed5d8036168bd2e27cc611027d29066927603deb92de3141e8ed7ac5b8902070203cdfdc506c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7964a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e623950c4f67581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bffead9e1b96c6a6cb639bca6d", @ANYRES16=r1, @ANYRESDEC=r3], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 860.402279ms ago: executing program 1 (id=28): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x149000, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000380)=[{0xff, 0x0, 0x3, 0x0, @tick=0x6, {}, {0xfe}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @time={0x8001, 0x8}, {0x8, 0x12}, {}, @addr={0x2a, 0x2}}], 0x38) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x23}], 0x1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x800000000000001) ioctl$PTP_EXTTS_REQUEST2(r2, 0xc4c03d12, &(0x7f0000000040)={0x6, 0x2}) 779.47239ms ago: executing program 1 (id=29): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0xffff, 0x3a, '\x00', 0x3a, '\'', 0x3a, './file0'}, 0x29) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044002) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x71) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c81c}, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x28, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_TARGET_NETNSID={0x8}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x28}}, 0x0) 774.858227ms ago: executing program 3 (id=30): syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@empty, @local, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x8864, 0x6, 0x0, 0x1}}, {@llc={0x8864, {@llc={0xf4, 0x80, "1a"}}}}}, 0x0) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@empty, @local, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x8864, 0x6, 0x0, 0x1}}, {@llc={0x8864, {@llc={0xf4, 0x80, "1a"}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x8, 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="850000005500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 708.803182ms ago: executing program 2 (id=31): setuid(0xee00) (async, rerun: 64) r0 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffdfffffffff, 0x0, 0x0, 0x0, 0xfffffffffffff4f7, 0x0, 0x6}, {}, 0x0, 0x0, 0x0, 0x1, 0x3}, {{@in=@multicast1, 0x4d6, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b7050000000000007910a80000000000c3a00000000000009500000000ca39496efaa63ab93dc5352d000000614329ebfe769a60e49a52eac935e5d370ed06a46d492970fa2c53fb2795fcf811ef4aebd8cf707e73c58a0287e296cec1eb97a155fe6a0529ad8f69249c2cc6cd66eaff44dd2941f74ec2d4366c25fdf426910fab2f2e3108771150df82fc0727f0cb78658662"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async, rerun: 64) syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 64) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r2, &(0x7f0000000040), 0x8) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5437, 0x0) 637.255016ms ago: executing program 1 (id=32): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}}, 0x20040000) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x6, 0x0, 0x400, 0xc08}}, 0x11c) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000340)=""/145, 0x91}, {0x0}], 0x2) r1 = memfd_secret(0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000002000a0002"], 0x28}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8808}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 632.676747ms ago: executing program 3 (id=33): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) close_range(r0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 556.827045ms ago: executing program 2 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x90, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0x27c, 0x21, 0x1, 0x0, 0x1, {{@in, @in6=@remote}}, [@migrate={0x219, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast, 0x3c, 0x4, 0x0, 0x3505, 0xa, 0x2}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty, 0x6c, 0x1, 0x0, 0x3506, 0x2, 0x2}, {@in=@empty, @in=@private=0xa010100, @in6=@remote, @in6=@mcast2, 0x33, 0x2, 0x0, 0x0, 0xa, 0xa}, {@in=@local, @in6=@local, @in6=@empty, @in6=@private2, 0xff, 0x3, 0x0, 0x3503, 0x8, 0x2}, {@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@private, @in=@dev, 0x0, 0x1, 0x0, 0x3506, 0x2, 0xf}, {@in6=@mcast2, @in=@broadcast, @in6=@private2, @in6=@remote}]}, @policy_type={0xa}, @replay_esn_val={0x40, 0x17, {0x9, 0x70bd29, 0x70bd2d, 0x70bd27, 0x70bd28, 0x7f, [0x0, 0x7, 0x7, 0x5, 0x80, 0x0, 0x5, 0xfffffff7, 0x6]}}, @proto={0x5, 0x19, 0x6c}, @mark={0xc, 0x15, {0x35075d, 0x3}}]}, 0x27c}}, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x84, @empty, 0x1d, 0x3, 'sh\x00', 0x30, 0x4, 0x75}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 555.770175ms ago: executing program 3 (id=35): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0xfffffc8b, 0x60000801}, 0x24008001) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r2, 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000", 0xffffffffffffffff}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000040)={0x80109, "fa02946a000000001dda524f03000000000000000000003673000000002000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45bebe3f5b53e0ca3710c0000cdc67c5e3126628168", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0x40103e05, &(0x7f0000000080)={"df000000000000000000000000000000000000002000a400", r6}) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/182, 0xb6}, {&(0x7f00000002c0)=""/206, 0xce}, {&(0x7f00000003c0)=""/18, 0x12}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/191, 0xbf}, {&(0x7f0000000140)=""/86, 0x56}, {&(0x7f0000000480)=""/133, 0x85}, {&(0x7f0000000200)=""/89, 0xffffffc2}, {&(0x7f0000000540)=""/52, 0x34}], 0x9, 0x7f, 0x2, 0x6) 399.362303ms ago: executing program 2 (id=36): r0 = syz_io_uring_setup(0x495, &(0x7f0000000000)={0x0, 0xe140, 0x20000, 0x0, 0x3c7}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)='./file0\x00'}) io_uring_enter(r0, 0x3516, 0x100000, 0x0, 0x0, 0x0) 393.879902ms ago: executing program 1 (id=37): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x7b, 0x4) gettid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x103102, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r5, 0xc008ae91, &(0x7f00000006c0)={0x8, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000480)={0x0, 0x0, @pic={0x7, 0xb, 0x80, 0x8, 0x6, 0x9, 0x81, 0x0, 0xd, 0xfc, 0x2, 0x8, 0x50, 0x4, 0x6, 0x5}}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x7ffd, 0x7, 0x1, 0x1c, 0x5, 0x2, 0xd, 0x2, 0xf9, 0x4, 0x80, 0x9, 0x6}, {0x6, 0x80, 0x7, 0xc4, 0x9, 0x7, 0x8, 0x6, 0x7, 0xff, 0x0, 0x81}, {0xe2a5, 0xd, 0x5, 0x9, 0x2, 0x6, 0x9, 0x4, 0x7f, 0x6, 0x56, 0x7, 0x100}], 0x4}) r7 = socket(0x10, 0x803, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f5ce"]) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x437, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483, 0x605}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x6}]}}}]}, 0x3c}}, 0x0) ioctl$KVM_SET_TSC_KHZ(r9, 0xaea2, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x7, 0x8000, 0x100000040, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0xffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff], 0x10000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 249.757356ms ago: executing program 2 (id=38): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8001, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d8c7067e5252508e4e1d44e77b0d8ff5ba4b5049389cb830820219a07651bf618b859136ea156ef7aff2d3c088e39b22e686325616cfdf966e676fa1874d9d5d39721d9ca18fb13736e402fe871af43981993c5036abf1c8ab6c1e6d26c0523092d5f17d0c062fc542b6288e7bba8850f8cec650a15032c8f98be58b491ea53b26c7a9ac59c473ddcbef38e969a25eb8190ea99009bfbc4346572c6740adaf9c0c344cb5c40579e1c2a02c0b4d5e9968d997cfbf77e65fec2f60a2ae9a0596ddde56c2ff87c021e826bd71c14e6698822a4cf", @ANYRESDEC=0x0]) (async) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='adfs\x00', 0x208000, 0x0) (async) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2048) (async) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a?\x00\x00\x00\x82q\xee'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000b80)={'tunl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x7800, 0x7, 0x7, 0x9, {{0x5, 0x4, 0x1, 0x0, 0x14, 0x64, 0x0, 0x3, 0x2f, 0x0, @loopback, @private=0xa010100}}}}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x17, 0x0, [{0x9b8, 0x0, 0x2}, {0xafe, 0x0, 0xff}]}) (async) open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 160.114ms ago: executing program 2 (id=39): r0 = socket(0x2a, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x15e16}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) unshare(0xe000880) (async, rerun: 64) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008"], 0x38}}, 0x0) 99.575242ms ago: executing program 1 (id=40): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) poll(&(0x7f0000000480)=[{r2, 0x2432}, {r0, 0x4002}, {0xffffffffffffffff, 0x41}, {r1, 0x3150}], 0x4, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="bb64753734e50b1e3f220065b7a35d32", 0x10) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) setsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f00000004c0)="41ee89f3f971ab0035685b8a4621c167aa0c42abf780be634f5ac921218e8691ea3dd19749174c83b4668afa6bfe9fc72e43096abc70be109668fcb4be38001bc21b6854c454afcce3853731a684616045ab9e751150c47ac8adff1ddfad1ef1cd016b411b07f722457e54b10cecaddeb772df5f9ed72a", 0x77) ftruncate(r1, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) lseek(r1, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000380)={0x0, 0x0, [0xfffffffffffffff8, 0x1, 0x7, 0xfd4, 0x8, 0x8, 0x300000, 0x1]}) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) read$FUSE(r2, &(0x7f0000000bc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000400)={0x50, 0x0, r7, {0x7, 0x29, 0x1, 0x29018000, 0x4, 0x4, 0x5, 0x6, 0x0, 0x0, 0x80, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)=ANY=[]) 0s ago: executing program 2 (id=41): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x10) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) (async) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) (async) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r2 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r2, &(0x7f0000ff6000/0x4000)=nil, 0x400c) (async) shmat(r2, &(0x7f0000ff6000/0x4000)=nil, 0x400c) mremap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ff9000/0x3000)=nil) (async) mremap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ff9000/0x3000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ff7000/0x2000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) (async) sendto$inet6(r3, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000140)={0x1, 0x6, 0x2, 0x0}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xf, 0x3, 0x1}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) shutdown(r3, 0x1) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000340)={&(0x7f0000000100), &(0x7f0000000240)=""/132, 0x84}) (async) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000340)={&(0x7f0000000100), &(0x7f0000000240)=""/132, 0x84}) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) (async) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)}}, 0x40) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): [ 44.013321][ T40] audit: type=1400 audit(1749798498.134:61): avc: denied { siginh } for pid=5909 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:53256' (ED25519) to the list of known hosts. [ 45.018736][ T40] audit: type=1400 audit(1749798499.164:62): avc: denied { name_bind } for pid=5919 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.035614][ T40] audit: type=1400 audit(1749798499.174:63): avc: denied { write } for pid=5920 comm="sh" path="pipe:[4936]" dev="pipefs" ino=4936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 45.047844][ T40] audit: type=1400 audit(1749798499.194:64): avc: denied { execute } for pid=5920 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.054637][ T40] audit: type=1400 audit(1749798499.194:65): avc: denied { execute_no_trans } for pid=5920 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 47.023506][ T40] audit: type=1400 audit(1749798501.164:66): avc: denied { mounton } for pid=5920 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.026388][ T5920] cgroup: Unknown subsys name 'net' [ 47.140153][ T5920] cgroup: Unknown subsys name 'cpuset' [ 47.146598][ T5920] cgroup: Unknown subsys name 'rlimit' [ 47.341016][ T5924] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.037599][ T5920] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.075341][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 51.075355][ T40] audit: type=1400 audit(1749798505.214:80): avc: denied { execmem } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 51.255630][ T40] audit: type=1400 audit(1749798505.394:81): avc: denied { create } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.261941][ T40] audit: type=1400 audit(1749798505.394:82): avc: denied { create } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.268359][ T40] audit: type=1400 audit(1749798505.394:83): avc: denied { read write } for pid=5933 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.275522][ T40] audit: type=1400 audit(1749798505.394:84): avc: denied { read write } for pid=5934 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.282852][ T40] audit: type=1400 audit(1749798505.394:85): avc: denied { read write } for pid=5935 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.290257][ T40] audit: type=1400 audit(1749798505.394:86): avc: denied { open } for pid=5935 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.297659][ T40] audit: type=1400 audit(1749798505.394:88): avc: denied { open } for pid=5934 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.303558][ T5946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.305716][ T5949] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.306632][ T5948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.306911][ T40] audit: type=1400 audit(1749798505.394:87): avc: denied { open } for pid=5933 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.307909][ T5949] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.308121][ T5949] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.308565][ T5949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.308845][ T5949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.310479][ T5946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.311844][ T40] audit: type=1400 audit(1749798505.404:89): avc: denied { ioctl } for pid=5935 comm="syz-executor" path="socket:[4941]" dev="sockfs" ino=4941 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.315753][ T5946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.319429][ T5949] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.320039][ T5949] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.320338][ T5949] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.324002][ T5950] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.328625][ T5946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.330408][ T5950] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.333296][ T5946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.335363][ T5950] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.341886][ T5946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.344553][ T5950] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.365928][ T5950] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.529724][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 51.582082][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 51.618076][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 51.684033][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.687879][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.690300][ T5937] bridge_slave_0: entered allmulticast mode [ 51.692907][ T5937] bridge_slave_0: entered promiscuous mode [ 51.712861][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.715161][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.717570][ T5937] bridge_slave_1: entered allmulticast mode [ 51.720492][ T5937] bridge_slave_1: entered promiscuous mode [ 51.769831][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 51.796147][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.798396][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.800658][ T5933] bridge_slave_0: entered allmulticast mode [ 51.803260][ T5933] bridge_slave_0: entered promiscuous mode [ 51.809374][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.811602][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.813851][ T5933] bridge_slave_1: entered allmulticast mode [ 51.817230][ T5933] bridge_slave_1: entered promiscuous mode [ 51.882093][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.919088][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.923386][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.929550][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.931808][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.934039][ T5935] bridge_slave_0: entered allmulticast mode [ 51.937404][ T5935] bridge_slave_0: entered promiscuous mode [ 51.942750][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.995842][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.998950][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.002010][ T5935] bridge_slave_1: entered allmulticast mode [ 52.006197][ T5935] bridge_slave_1: entered promiscuous mode [ 52.054613][ T5933] team0: Port device team_slave_0 added [ 52.069510][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.071762][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.073999][ T5934] bridge_slave_0: entered allmulticast mode [ 52.076612][ T5934] bridge_slave_0: entered promiscuous mode [ 52.098587][ T5933] team0: Port device team_slave_1 added [ 52.102052][ T5937] team0: Port device team_slave_0 added [ 52.104094][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.107781][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.110020][ T5934] bridge_slave_1: entered allmulticast mode [ 52.112584][ T5934] bridge_slave_1: entered promiscuous mode [ 52.119493][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.159323][ T5937] team0: Port device team_slave_1 added [ 52.199664][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.203039][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.205236][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.213138][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.282053][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.284282][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.292376][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.296492][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.298698][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.307040][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.314060][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.318796][ T5935] team0: Port device team_slave_0 added [ 52.326092][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.328303][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.336322][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.340976][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.345291][ T5935] team0: Port device team_slave_1 added [ 52.440142][ T5933] hsr_slave_0: entered promiscuous mode [ 52.442455][ T5933] hsr_slave_1: entered promiscuous mode [ 52.448028][ T5934] team0: Port device team_slave_0 added [ 52.450353][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.452522][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.462082][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.467100][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.469480][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.478778][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.487497][ T5934] team0: Port device team_slave_1 added [ 52.524643][ T5937] hsr_slave_0: entered promiscuous mode [ 52.527044][ T5937] hsr_slave_1: entered promiscuous mode [ 52.529100][ T5937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.531589][ T5937] Cannot create hsr debugfs directory [ 52.620170][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.622397][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.631869][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.671001][ T5935] hsr_slave_0: entered promiscuous mode [ 52.673248][ T5935] hsr_slave_1: entered promiscuous mode [ 52.675318][ T5935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.677981][ T5935] Cannot create hsr debugfs directory [ 52.680465][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.682644][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.690703][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.827474][ T5934] hsr_slave_0: entered promiscuous mode [ 52.829649][ T5934] hsr_slave_1: entered promiscuous mode [ 52.831722][ T5934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.834037][ T5934] Cannot create hsr debugfs directory [ 53.027999][ T5933] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.034815][ T5933] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.039708][ T5933] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.048727][ T5933] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.073659][ T5934] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.078059][ T5934] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.082407][ T5934] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.086854][ T5934] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.137889][ T5937] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.147787][ T5937] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.155943][ T5937] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.160198][ T5937] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.202607][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.208513][ T5935] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.212665][ T5935] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.216814][ T5935] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.230451][ T5935] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.239812][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.245472][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.254517][ T169] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.257076][ T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.276621][ T169] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.279627][ T169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.284975][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.301490][ T169] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.303771][ T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.307727][ T169] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.310081][ T169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.337036][ T5950] Bluetooth: hci0: command tx timeout [ 53.337042][ T5943] Bluetooth: hci3: command tx timeout [ 53.384068][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.406739][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.415354][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.415843][ T5943] Bluetooth: hci1: command tx timeout [ 53.415858][ T5950] Bluetooth: hci2: command tx timeout [ 53.421153][ T169] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.424711][ T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.434140][ T1258] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.436456][ T1258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.444012][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.453250][ T169] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.455961][ T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.475091][ T169] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.477583][ T169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.503430][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.513821][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.561986][ T5934] veth0_vlan: entered promiscuous mode [ 53.566089][ T5933] veth0_vlan: entered promiscuous mode [ 53.572399][ T5934] veth1_vlan: entered promiscuous mode [ 53.578546][ T5933] veth1_vlan: entered promiscuous mode [ 53.591985][ T5934] veth0_macvtap: entered promiscuous mode [ 53.604728][ T5934] veth1_macvtap: entered promiscuous mode [ 53.617914][ T5933] veth0_macvtap: entered promiscuous mode [ 53.627329][ T5933] veth1_macvtap: entered promiscuous mode [ 53.631729][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.643134][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.649457][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.655926][ T5934] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.659486][ T5934] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.662379][ T5934] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.665059][ T5934] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.671292][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.685291][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.696196][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.707974][ T5933] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.710739][ T5933] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.713744][ T5933] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.717822][ T5933] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.746661][ T5937] veth0_vlan: entered promiscuous mode [ 53.754673][ T5935] veth0_vlan: entered promiscuous mode [ 53.760779][ T5937] veth1_vlan: entered promiscuous mode [ 53.772924][ T5935] veth1_vlan: entered promiscuous mode [ 53.806047][ T169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.806246][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.808635][ T169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.810891][ T5937] veth0_macvtap: entered promiscuous mode [ 53.811080][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.814591][ T5937] veth1_macvtap: entered promiscuous mode [ 53.833562][ T5935] veth0_macvtap: entered promiscuous mode [ 53.848046][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.850548][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.853447][ T5935] veth1_macvtap: entered promiscuous mode [ 53.864936][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.879630][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.880160][ T218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.884975][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.886050][ T218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.893445][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.894602][ T5934] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 53.898257][ T5937] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.903299][ T5937] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.907089][ T5937] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.909832][ T5937] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.916458][ T5935] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.919193][ T5935] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.921906][ T5935] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.924690][ T5935] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.023230][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.026091][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.032673][ T169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.035231][ T169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.051438][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 54.064226][ T169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.068127][ T169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.068635][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.073103][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.265825][ T6004] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 54.438036][ T6004] usb 7-1: not running at top speed; connect to a high speed hub [ 54.450222][ T6004] usb 7-1: config 1 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 54.454237][ T6004] usb 7-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 54.465975][ T5983] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 54.477277][ T6004] usb 7-1: config 1 interface 0 has no altsetting 0 [ 54.491335][ T6004] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 54.495826][ T6004] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.499500][ T6004] usb 7-1: Product: ▜໯괒﷉郔ਊ嶌枣뇥⊪담䃆疓맧柼篙㘁㭝朣錝逿䡫콇猨ᄺ㱶陞얛㯹睤♃憴๟ᤧ듟೿路﫴꧉Ⳁﱙ壂鋪ṁ킞쾷⌱ᮌꡎ歚䈨䖅徲囤骋ꇪꑑ鈝뼬빞萼㝳卶센쩃᝻靠巳碤楂禷囡衊鼯ᬕ೮ᙱ哺⤿숒 [ 54.510314][ T6004] usb 7-1: Manufacturer: 捄봣撐η뎦엜ꀥ᱀湮㥶㜋銦书➮缾헛ᵸ⢗壙⣍㬮홇ض假䆖囗嫑꼳꣘鎅鄆䜰ி縥척㧳峟믳㉦唧迉㡈濇悔羠㤽涪䰜兜ⓤ䍱靡䔵ꟸ雛터嗂⊠ڽ䲩락喺ᖕ툫 [ 54.518789][ T6004] usb 7-1: SerialNumber: ࠁ [ 54.528963][ T6029] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 54.533892][ T6029] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 54.553674][ T6068] overlayfs: overlapping lowerdir path [ 54.646292][ T5983] usb 6-1: Using ep0 maxpacket: 8 [ 54.660227][ T5983] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 54.662866][ T5983] usb 6-1: config 179 has no interface number 0 [ 54.664860][ T5983] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 54.671201][ T5983] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 54.674681][ T5983] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 54.678492][ T5983] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 54.682092][ T5983] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 54.686224][ T5983] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 54.689025][ T5983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.693270][ T5945] udevd[5945]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 54.698506][ T6041] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 54.880902][ T6080] netlink: 'syz.3.18': attribute type 9 has an invalid length. [ 54.883406][ T6080] netlink: 'syz.3.18': attribute type 7 has an invalid length. [ 54.887433][ T6080] netlink: 'syz.3.18': attribute type 8 has an invalid length. [ 54.895477][ T6080] netlink: 'syz.3.18': attribute type 1 has an invalid length. [ 54.911958][ T5983] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input5 [ 54.956144][ T6081] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18'. [ 54.956605][ T6004] usb 7-1: USB disconnect, device number 2 [ 55.127753][ T24] usb 6-1: USB disconnect, device number 2 [ 55.127831][ C3] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 55.132748][ C3] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 55.132831][ T24] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 55.366994][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 55.415976][ T5950] Bluetooth: hci3: command tx timeout [ 55.425701][ T5950] Bluetooth: hci0: command tx timeout [ 55.496932][ T5950] Bluetooth: hci1: command tx timeout [ 55.499345][ T5950] Bluetooth: hci2: command tx timeout [ 55.540557][ T6094] fuse: Unknown parameter '0x0000000000000005' [ 55.763979][ T6106] warning: `syz.3.27' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 55.878270][ T6107] netlink: 'syz.2.26': attribute type 21 has an invalid length. [ 55.880714][ T6107] netlink: 128 bytes leftover after parsing attributes in process `syz.2.26'. [ 55.883504][ T6107] netlink: 'syz.2.26': attribute type 4 has an invalid length. [ 55.886670][ T6107] netlink: 'syz.2.26': attribute type 5 has an invalid length. [ 55.889011][ T6107] netlink: 3 bytes leftover after parsing attributes in process `syz.2.26'. [ 56.076050][ T40] kauditd_printk_skb: 378 callbacks suppressed [ 56.076061][ T40] audit: type=1400 audit(1749798510.224:468): avc: denied { ioctl } for pid=6121 comm="syz.3.33" path="/dev/video2" dev="devtmpfs" ino=958 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 56.089083][ T40] audit: type=1400 audit(1749798510.224:469): avc: denied { read write } for pid=5933 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 56.097978][ T40] audit: type=1400 audit(1749798510.224:470): avc: denied { read write open } for pid=5933 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 56.110890][ T40] audit: type=1400 audit(1749798510.224:471): avc: denied { ioctl } for pid=5933 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 56.121900][ T40] audit: type=1400 audit(1749798510.224:472): avc: denied { ioctl } for pid=6121 comm="syz.3.33" path="/dev/video2" dev="devtmpfs" ino=958 ioctlcmd=0x5612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 56.133654][ T40] audit: type=1400 audit(1749798510.254:473): avc: denied { read write } for pid=5937 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 56.138071][ T6046] hid-generic 0000:0006:0000.0002: unknown main item tag 0x0 [ 56.143270][ T40] audit: type=1400 audit(1749798510.254:474): avc: denied { read write open } for pid=5937 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 56.143494][ T6046] hid-generic 0000:0006:0000.0002: unknown main item tag 0x0 [ 56.151985][ T40] audit: type=1400 audit(1749798510.254:475): avc: denied { ioctl } for pid=5937 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 56.154684][ T6046] hid-generic 0000:0006:0000.0002: unknown main item tag 0x0 [ 56.164362][ T40] audit: type=1400 audit(1749798510.264:476): avc: denied { read write } for pid=6122 comm="syz.1.32" name="uhid" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 56.168781][ T6046] hid-generic 0000:0006:0000.0002: hidraw1: HID v4.00 Device [syz0] on syz1 [ 56.172017][ T40] audit: type=1400 audit(1749798510.264:477): avc: denied { read write open } for pid=6122 comm="syz.1.32" path="/dev/uhid" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 56.183443][ T6127] netlink: 16 bytes leftover after parsing attributes in process `syz.2.34'. [ 56.186206][ T6128] ======================================================= [ 56.186206][ T6128] WARNING: The mand mount option has been deprecated and [ 56.186206][ T6128] and is ignored by this kernel. Remove the mand [ 56.186206][ T6128] option from the mount to silence this warning. [ 56.186206][ T6128] ======================================================= [ 56.198685][ T6128] 9pnet_virtio: no channels available for device syz [ 56.205408][ T6124] netlink: 28 bytes leftover after parsing attributes in process `syz.1.32'. [ 56.207915][ T6046] IPVS: starting estimator thread 0... [ 56.209106][ T6124] netlink: 'syz.1.32': attribute type 7 has an invalid length. [ 56.212448][ T6124] netlink: 'syz.1.32': attribute type 8 has an invalid length. [ 56.214920][ T6124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32'. [ 56.242556][ T6129] fido_id[6129]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 56.258515][ T6124] mmap: syz.1.32 (6124) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.305977][ T6130] IPVS: using max 45 ests per chain, 108000 per kthread [ 56.446197][ T6139] fuse: Unknown parameter '184467440737095516150x0000000000000003' [ 56.449836][ T6140] syz.2.38: attempt to access beyond end of device [ 56.449836][ T6140] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 56.454319][ T6140] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 56.519861][ T6146] Zero length message leads to an empty skb [ 56.520157][ T6144] netlink: 16 bytes leftover after parsing attributes in process `syz.2.39'. [ 56.676783][ T6151] ================================================================== [ 56.679517][ T6151] BUG: KASAN: slab-out-of-bounds in _raw_spin_lock+0x2e/0x40 [ 56.681926][ T6151] Read of size 1 at addr ffff88802cfdd360 by task syz.2.41/6151 [ 56.685661][ T6151] [ 56.686477][ T6151] CPU: 1 UID: 0 PID: 6151 Comm: syz.2.41 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 56.686491][ T6151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.686498][ T6151] Call Trace: [ 56.686502][ T6151] [ 56.686506][ T6151] dump_stack_lvl+0x116/0x1f0 [ 56.686526][ T6151] print_report+0xcd/0x680 [ 56.686541][ T6151] ? __virt_addr_valid+0x81/0x610 [ 56.686554][ T6151] ? __phys_addr+0xe8/0x180 [ 56.686565][ T6151] ? _raw_spin_lock+0x2e/0x40 [ 56.686578][ T6151] kasan_report+0xe0/0x110 [ 56.686593][ T6151] ? _raw_spin_lock+0x2e/0x40 [ 56.686607][ T6151] ? _raw_spin_lock+0x2e/0x40 [ 56.686619][ T6151] __kasan_check_byte+0x36/0x50 [ 56.686638][ T6151] lock_acquire+0xfc/0x350 [ 56.686654][ T6151] ? __pfx___mutex_lock+0x10/0x10 [ 56.686672][ T6151] _raw_spin_lock+0x2e/0x40 [ 56.686684][ T6151] ? __futex_pivot_hash+0x1dd/0x540 [ 56.686698][ T6151] __futex_pivot_hash+0x1dd/0x540 [ 56.686713][ T6151] futex_hash_allocate+0xad1/0xf00 [ 56.686728][ T6151] ? __pfx_futex_hash_allocate+0x10/0x10 [ 56.686742][ T6151] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 56.686755][ T6151] ? cap_task_prctl+0x2af/0xa80 [ 56.686767][ T6151] ? static_key_count+0x5a/0x70 [ 56.686779][ T6151] futex_hash_prctl+0x1f4/0x650 [ 56.686794][ T6151] __do_sys_prctl+0x171f/0x24c0 [ 56.686806][ T6151] ? __pfx___do_sys_prctl+0x10/0x10 [ 56.686818][ T6151] do_syscall_64+0xcd/0x4c0 [ 56.686834][ T6151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.686845][ T6151] RIP: 0033:0x7f85e2b8e929 [ 56.686854][ T6151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.686864][ T6151] RSP: 002b:00007f85e3916038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 56.686875][ T6151] RAX: ffffffffffffffda RBX: 00007f85e2db6080 RCX: 00007f85e2b8e929 [ 56.686882][ T6151] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 56.686888][ T6151] RBP: 00007f85e2c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 56.686894][ T6151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.686900][ T6151] R13: 0000000000000001 R14: 00007f85e2db6080 R15: 00007fffd59fcdd8 [ 56.686909][ T6151] [ 56.686913][ T6151] [ 56.768482][ T6151] Allocated by task 6150: [ 56.770079][ T6151] kasan_save_stack+0x33/0x60 [ 56.771981][ T6151] kasan_save_track+0x14/0x30 [ 56.773894][ T6151] __kasan_kmalloc+0xaa/0xb0 [ 56.775810][ T6151] __kvmalloc_node_noprof+0x27b/0x620 [ 56.777959][ T6151] futex_hash_allocate+0x49d/0xf00 [ 56.780083][ T6151] futex_hash_prctl+0x1f4/0x650 [ 56.782051][ T6151] __do_sys_prctl+0x171f/0x24c0 [ 56.784058][ T6151] do_syscall_64+0xcd/0x4c0 [ 56.785923][ T6151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.788317][ T6151] [ 56.789281][ T6151] The buggy address belongs to the object at ffff88802cfdd300 [ 56.789281][ T6151] which belongs to the cache kmalloc-cg-64 of size 64 [ 56.794943][ T6151] The buggy address is located 32 bytes to the right of [ 56.794943][ T6151] allocated 64-byte region [ffff88802cfdd300, ffff88802cfdd340) [ 56.800708][ T6151] [ 56.801745][ T6151] The buggy address belongs to the physical page: [ 56.804014][ T6151] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2cfdd [ 56.806748][ T6151] memcg:ffff8880480e8e01 [ 56.808075][ T6151] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 56.810321][ T6151] page_type: f5(slab) [ 56.811589][ T6151] raw: 00fff00000000000 ffff88801b849a40 dead000000000122 0000000000000000 [ 56.814245][ T6151] raw: 0000000000000000 0000000080200020 00000000f5000000 ffff8880480e8e01 [ 56.816896][ T6151] page dumped because: kasan: bad access detected [ 56.818885][ T6151] page_owner tracks the page as allocated [ 56.820680][ T6151] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5935, tgid 5935 (syz-executor), ts 55253855712, free_ts 55027475599 [ 56.826531][ T6151] post_alloc_hook+0x1c0/0x230 [ 56.828114][ T6151] get_page_from_freelist+0x1321/0x3890 [ 56.829885][ T6151] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 56.831735][ T6151] alloc_pages_mpol+0x1fb/0x550 [ 56.833246][ T6151] new_slab+0x23b/0x330 [ 56.834574][ T6151] ___slab_alloc+0xd9c/0x1940 [ 56.836072][ T6151] __slab_alloc.constprop.0+0x56/0xb0 [ 56.837754][ T6151] __kmalloc_cache_noprof+0xfb/0x3e0 [ 56.839416][ T6151] alloc_fdtable+0xa0/0x2b0 [ 56.840887][ T6151] dup_fd+0x83b/0xb90 [ 56.842170][ T6151] copy_process+0x230c/0x76a0 [ 56.843650][ T6151] kernel_clone+0xfc/0x960 [ 56.845055][ T6151] __do_sys_clone+0xce/0x120 [ 56.846521][ T6151] do_syscall_64+0xcd/0x4c0 [ 56.847954][ T6151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.849827][ T6151] page last free pid 5945 tgid 5945 stack trace: [ 56.851798][ T6151] free_unref_folios+0xa65/0x1800 [ 56.853467][ T6151] folios_put_refs+0x56f/0x740 [ 56.855032][ T6151] truncate_inode_pages_range+0x311/0xe50 [ 56.856861][ T6151] blkdev_flush_mapping+0xfb/0x290 [ 56.858491][ T6151] blkdev_put_whole+0xc4/0xf0 [ 56.860000][ T6151] bdev_release+0x47e/0x6d0 [ 56.861446][ T6151] blkdev_release+0x15/0x20 [ 56.862903][ T6151] __fput+0x402/0xb70 [ 56.864180][ T6151] fput_close_sync+0x118/0x260 [ 56.865692][ T6151] __x64_sys_close+0x8b/0x120 [ 56.867182][ T6151] do_syscall_64+0xcd/0x4c0 [ 56.868631][ T6151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.870503][ T6151] [ 56.871274][ T6151] Memory state around the buggy address: [ 56.873037][ T6151] ffff88802cfdd200: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 56.875560][ T6151] ffff88802cfdd280: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 56.878105][ T6151] >ffff88802cfdd300: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 56.880618][ T6151] ^ [ 56.882848][ T6151] ffff88802cfdd380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 56.885334][ T6151] ffff88802cfdd400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 56.887816][ T6151] ================================================================== [ 56.890759][ T6151] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 56.893014][ T6151] CPU: 1 UID: 0 PID: 6151 Comm: syz.2.41 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 56.896650][ T6151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.899983][ T6151] Call Trace: [ 56.901047][ T6151] [ 56.901990][ T6151] dump_stack_lvl+0x3d/0x1f0 [ 56.903466][ T6151] panic+0x71c/0x800 [ 56.904714][ T6151] ? __pfx_panic+0x10/0x10 [ 56.906144][ T6151] ? irqentry_exit+0x3b/0x90 [ 56.907620][ T6151] ? lockdep_hardirqs_on+0x7c/0x110 [ 56.909254][ T6151] ? _raw_spin_lock+0x2e/0x40 [ 56.910801][ T6151] ? check_panic_on_warn+0x1f/0xb0 [ 56.912421][ T6151] ? _raw_spin_lock+0x2e/0x40 [ 56.913914][ T6151] check_panic_on_warn+0xab/0xb0 [ 56.915503][ T6151] end_report+0x107/0x170 [ 56.916878][ T6151] kasan_report+0xee/0x110 [ 56.918320][ T6151] ? _raw_spin_lock+0x2e/0x40 [ 56.919843][ T6151] ? _raw_spin_lock+0x2e/0x40 [ 56.921333][ T6151] __kasan_check_byte+0x36/0x50 [ 56.922881][ T6151] lock_acquire+0xfc/0x350 [ 56.924293][ T6151] ? __pfx___mutex_lock+0x10/0x10 [ 56.925884][ T6151] _raw_spin_lock+0x2e/0x40 [ 56.927324][ T6151] ? __futex_pivot_hash+0x1dd/0x540 [ 56.928969][ T6151] __futex_pivot_hash+0x1dd/0x540 [ 56.930634][ T6151] futex_hash_allocate+0xad1/0xf00 [ 56.932251][ T6151] ? __pfx_futex_hash_allocate+0x10/0x10 [ 56.934010][ T6151] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 56.935907][ T6151] ? cap_task_prctl+0x2af/0xa80 [ 56.937449][ T6151] ? static_key_count+0x5a/0x70 [ 56.938989][ T6151] futex_hash_prctl+0x1f4/0x650 [ 56.940555][ T6151] __do_sys_prctl+0x171f/0x24c0 [ 56.942098][ T6151] ? __pfx___do_sys_prctl+0x10/0x10 [ 56.943747][ T6151] do_syscall_64+0xcd/0x4c0 [ 56.945187][ T6151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.947050][ T6151] RIP: 0033:0x7f85e2b8e929 [ 56.948466][ T6151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.954457][ T6151] RSP: 002b:00007f85e3916038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 56.957054][ T6151] RAX: ffffffffffffffda RBX: 00007f85e2db6080 RCX: 00007f85e2b8e929 [ 56.959525][ T6151] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 56.962021][ T6151] RBP: 00007f85e2c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 56.964491][ T6151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.966944][ T6151] R13: 0000000000000001 R14: 00007f85e2db6080 R15: 00007fffd59fcdd8 [ 56.969401][ T6151] [ 56.971074][ T6151] Kernel Offset: disabled [ 56.972450][ T6151] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:08:30 Registers: info registers vcpu 0 CPU#0 RAX=00000000000adaef RBX=0000000000000000 RCX=ffffffff8b7fec99 RDX=0000000000000000 RSI=ffffffff8de19624 RDI=ffffffff8c157060 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a80f50 R15=0000000000000000 RIP=ffffffff8b7fd7ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6754000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f85e3936f98 CR3=0000000051f83000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd59fd160 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85e2c11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85e2c11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85e2c11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85e2c11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85e2c11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85e2c11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000004c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 000000000000004c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b6495 RDI=ffffffff9b0883a0 RBP=ffffffff9b088360 RSP=ffffc9000522f6a8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000066 R14=ffffffff9b088360 R15=ffffffff855b6430 RIP=ffffffff855b64bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f85e39166c0 ffffffff 00c00000 GS =0000 ffff8880d6854000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f85e3915f98 CR3=00000000555f7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=00000000000000ff Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85e2c11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85e2c11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85e2c11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85e2c11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85e2c11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85e2c11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85e2d84488 00007f85e2d84480 00007f85e2d84478 00007f85e2d84450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85e38ed100 00007f85e2d84440 00007f85e2d84458 00007f85e2d844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85e2d84498 00007f85e2d84490 00007f85e2d84488 00007f85e2d84480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 000000000000004c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000004ff9d RBX=0000000000000002 RCX=ffffffff8b7fec99 RDX=0000000000000000 RSI=ffffffff8de19624 RDI=ffffffff8c157060 RBP=ffffed1003bd1910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6645 R10=ffff88806a63322b R11=0000000000000001 R12=0000000000000002 R13=ffff88801de8c880 R14=ffffffff90a80f50 R15=0000000000000000 RIP=ffffffff8b7fd7ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6954000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f268c366d58 CR3=00000000555c2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f268b611b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f268b611b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f268b611b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f268b611b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f268b611bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f268b611c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f268b784488 00007f268b784480 00007f268b784478 00007f268b784450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f268c2ed100 00007f268b784440 00007f268b784458 00007f268b7844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f268b784498 00007f268b784490 00007f268b784488 00007f268b784480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 31dd1ffc68a03109 a6ec445c288dec41 33e1b6600a7a4197 5187f81680ac1248 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fab75b97ee6c6da4 24d78657e7c9c3a0 62fcd9e26d842050 77d5f83ab4342d40 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 31dd1ffc68a03109 a6ec445c288dec41 33e1b6600a7a4197 5187f81680ac1248 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 836ee70ffacbffcf 2ba9814b2e913e7c a1e9d449ac457ec6 f33bd650c8a0f5d4 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c6e0ca6f00e69905 7ed2797fcc1a1919 93229ef1c13e6e1c 57a4e093a9beccd9 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000004cf49 RBX=0000000000000003 RCX=ffffffff8b7fec99 RDX=0000000000000000 RSI=ffffffff8de19624 RDI=ffffffff8c157060 RBP=ffffed1003c54000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6645 R10=ffff88806a73322b R11=0000000000000001 R12=0000000000000003 R13=ffff88801e2a0000 R14=ffffffff90a80f50 R15=0000000000000000 RIP=ffffffff8b7fd7ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a54000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f268c365f98 CR3=00000000555c2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f268b611b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f268b611b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f268b611b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f268b611b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f268b611bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f268b611c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f268b784488 00007f268b784480 00007f268b784478 00007f268b784450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f268c2ed100 00007f268b784440 00007f268b784458 00007f268b7844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f268b784498 00007f268b784490 00007f268b784488 00007f268b784480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 31dd1ffc68a03109 a6ec445c288dec41 33e1b6600a7a4197 5187f81680ac1248 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fab75b97ee6c6da4 24d78657e7c9c3a0 62fcd9e26d842050 77d5f83ab4342d40 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 31dd1ffc68a03109 a6ec445c288dec41 33e1b6600a7a4197 5187f81680ac1248 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 836ee70ffacbffcf 2ba9814b2e913e7c a1e9d449ac457ec6 f33bd650c8a0f5d4 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c6e0ca6f00e69905 7ed2797fcc1a1919 93229ef1c13e6e1c 57a4e093a9beccd9 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000