last executing test programs: 2.014695957s ago: executing program 1 (id=2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x2002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) userfaultfd(0x801) userfaultfd(0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)) r3 = syz_open_dev$dri(&(0x7f0000000580), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f00000005c0)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000600)={&(0x7f0000000640)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000680)={0x1, 0x1, &(0x7f00000006c0)=[r4], &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=[0x2], 0x0, 0x1}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000800)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000840)={[0x8, 0x40, 0x9, 0xf, 0x4, 0xf, 0xe8, 0x3ff, 0xfffffffffffffc00, 0x3, 0x7, 0x8, 0x0, 0x7, 0x9, 0x84], 0xeeef0000, 0x1700d1}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newsa={0x15c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0xa, 0x2}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x15c}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000003c0)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000000440)="64f3a49a2aa20eeb7d00b8000000000f23d80f21f835400000400f23f8f466baf80cb876d28082ef66bafc0cb0b2c4c1f9fa933f490000c4e2b928bc765862e16af20fe6d4f3d973fc0f07670f35", 0x4e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.935156726s ago: executing program 2 (id=3): set_mempolicy(0x2002, &(0x7f0000000000)=0x2000009, 0x9) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x5, 0x0, 0x3, 0xa, 0x5, 0x80, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x0, 0x12, 0x8, 0x80}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x37, 0xa, 0xb, 0x76, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x5, 0xe, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900), &(0x7f0000000940), 0x8, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0), 0x0, 0x3, r1}, 0x38) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22, 0xfffffffd, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000340), 0x4) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000240)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="03000000300000000009010000001c0001d1010b5af21dc516db80060002000000ffffffff"], 0x30}, 0x1, 0xff07}, 0x2000000) writev(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000380)={0x1f, 0x0, 0x1}, 0x6) close_range(r6, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r8, r9, r10, 0x0) 1.909486966s ago: executing program 3 (id=4): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) preadv(r0, 0x0, 0x0, 0x8001, 0x8001) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x1f, 0x0) 1.768474067s ago: executing program 2 (id=6): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40042, 0xc5) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0xb0000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_int(r2, 0x0, 0x3, 0x0, &(0x7f0000000280)) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000080)={@my=0x0}) r3 = userfaultfd(0x80001) socket(0x400000000010, 0x1, 0xfffffffd) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) socket$kcm(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/user\x00') open_by_handle_at(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r4], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x5) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r3], 0x60}}, 0x20000041) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000100)={{@my=0x0}, 0x1, 0x0, 0x10001}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000140)={0x20000020064e, 0x0, 0x200000, 0x3, 0x5, 0x9}) r6 = syz_open_dev$sg(&(0x7f0000000480), 0x0, 0x802) r7 = syz_open_procfs(0x0, &(0x7f00000004c0)='fd/3\x00') r8 = mq_open(&(0x7f0000000640)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r8, 0x0, 0x0, 0xa, 0x0) close(r8) mq_unlink(&(0x7f0000000b00)='eth0\x00') mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x1489a, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c80"]) 1.763576246s ago: executing program 3 (id=7): dup(0xffffffffffffffff) landlock_create_ruleset(0xfffffffffffffffe, 0x5c, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x10001, 0x4}) timer_settime(0x0, 0x1, &(0x7f0000000180)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) listen(0xffffffffffffffff, 0x800) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000400)={0x23, 0x0, 0x58}, 0x10) sendto$phonet(r1, 0x0, 0x0, 0x80, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) 1.701578849s ago: executing program 3 (id=8): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3ffe, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140)=@gcm_128={{0x304}, "33e275106ce797ba", "afc000", "1f991d9c", "d570f648c0ec6f65"}, 0x28) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000814}, 0x4094) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={0x0, 0x0}}, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000200), 0x4, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000a300)='./file0\x00', 0x101001, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x5, 0x8, 0x76, 0x1, 0x3, 0x0}) syz_open_procfs(r4, &(0x7f0000006100)='cmdline\x00') 1.681408856s ago: executing program 2 (id=9): socket(0x10, 0x803, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x42082, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x0, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000f80)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000fc0)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001000)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000001100), 0x39) sendmsg$kcm(r4, &(0x7f0000001140)={&(0x7f0000001180)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000001200)=[{&(0x7f0000001240)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.505985133s ago: executing program 2 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) syz_emit_ethernet(0x42, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f00000008c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./proc/mtrr\x00', 0x2, 0x0) unshare(0x60000600) unshare(0x2c040600) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000003000000003800000700000011"], 0x48) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc1842, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) unshare(0x900) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @broadcast}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='new0default user:s'], 0x2a, 0x0) add_key(&(0x7f0000000540)='encrypted\x00', &(0x7f00000006c0), &(0x7f0000000700), 0xca, 0xfffffffffffffffe) close(r3) symlink(&(0x7f0000000700)='.\x00', &(0x7f0000000740)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x0) mkdir(&(0x7f00000007c0)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000880)='./bus\x00', &(0x7f0000000980), 0x0, &(0x7f00000009c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000a00)='./bus\x00') lchown(&(0x7f0000000a40)='./file0\x00', 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x100, r1}, 0x38) ioctl(r0, 0x40104d06, &(0x7f0000000940)="00000200000000000000020001") 857.259408ms ago: executing program 1 (id=12): dup(0xffffffffffffffff) landlock_create_ruleset(0xfffffffffffffffe, 0x5c, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x10001, 0x4}) timer_settime(0x0, 0x1, &(0x7f0000000180)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) listen(0xffffffffffffffff, 0x800) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000400)={0x23, 0x0, 0x58}, 0x10) (fail_nth: 3) sendto$phonet(r1, 0x0, 0x0, 0x80, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) 852.792324ms ago: executing program 1 (id=13): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000040)="0000000001000000", 0x8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000100)="0000000001000000", 0x8) setsockopt(r1, 0x84, 0x81, &(0x7f0000000140)="0000000001000000", 0x8) connect(r1, &(0x7f0000000200)=@in={0x2, 0x4e20, @loopback}, 0x80) 740.138194ms ago: executing program 1 (id=15): set_mempolicy(0x2002, &(0x7f0000000000)=0x2000009, 0x9) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x5, 0x0, 0x3, 0xa, 0x5, 0x80, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x0, 0x12, 0x8, 0x80}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x37, 0xa, 0xb, 0x76, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x5, 0xe, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900), &(0x7f0000000940), 0x8, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0), 0x0, 0x3, r1}, 0x38) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22, 0xfffffffd, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000340), 0x4) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000240)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="03000000300000000009010000001c0001d1010b5af21dc516db80060002000000ffffffff"], 0x30}, 0x1, 0xff07}, 0x2000000) writev(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000380)={0x1f, 0x0, 0x1}, 0x6) close_range(r6, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r8, r9, r10, 0x0) 673.263221ms ago: executing program 0 (id=16): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) preadv(r0, 0x0, 0x0, 0x8001, 0x8001) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x1f, 0x0) 662.393246ms ago: executing program 1 (id=17): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r2, 0x0, 0x6, &(0x7f0000000b40), &(0x7f0000000b80)=0x2) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x170, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@linear={0x0, 0x2000, 0x0, 0x38, 'linear\x00', {@ram={'/dev/ram', 0x0}, 0x20, '0'}}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = epoll_create(0x10002e78) epoll_wait(r4, &(0x7f0000000a80)=[{}], 0x1, 0xb55) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000ac0)={0x10000001}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r3) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000009c0), 0x483) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000a00)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000a40)={{0x0, 0x3, 0x84000001, 0x1, 0xfffefffc}}) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x158, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x0, @stats_create={'@stats_create ', '-', 0x20, '/1'}}}) mknodat$dm(0xffffffffffffff9c, &(0x7f0000000740)='./dm0\x00', 0x6180, r1) r6 = openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000780)='./dm0\x00', 0x2, 0x0) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x150, 0x138, 0x0, 0x0, 0x1, 0x0, 0x0, @by_uuid={0x0, '\x00', {'CRP-syz', 0x0, '1\x00'}}, {0x10, @mpath='enable_group 1'}}) pwrite64(r6, &(0x7f00000007c0)="0102030405060708", 0x8, 0x1000) mkdir(&(0x7f0000000940)='./file0\x00', 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, 0x0, &(0x7f0000000b40)) ioctl$DM_DEV_REMOVE(r0, 0xc138fd04, &(0x7f0000000800)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) 563.098966ms ago: executing program 0 (id=18): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40042, 0xc5) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0xb0000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_int(r1, 0x0, 0x3, 0x0, &(0x7f0000000280)) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0}) userfaultfd(0x80001) socket(0x400000000010, 0x1, 0xfffffffd) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) socket$kcm(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/user\x00') open_by_handle_at(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r2], 0x0) 140.878753ms ago: executing program 0 (id=19): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x9) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xe0302, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000100)={0xff6a, 0x2, r2}) 140.732844ms ago: executing program 2 (id=20): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000d00)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x9) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000d80)=""/18, 0xfdef}], 0x1, 0xe, 0x6) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000dc0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 131.627536ms ago: executing program 0 (id=21): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000010c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xe0c}, 0x1, 0x0, 0x0, 0x4000}, 0x3ab44abf7d5a0a79) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8000, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'CRP-syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000002d00)={0x4, 0x0, 0x0, 0x1e0, 0x138, 0x1, 0x0, 0x10, 0x0, 0x0, @by_dev={r2}, [@multipath={0x0, 0x848, 0x0, 0x96, 'multipath\x00', {'2 queue_mode rq', 0x20, '0', 0x20, 0x1, 0x20, 0x1}}]}) 81.079826ms ago: executing program 3 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000200)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000240)='./mnt\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) userfaultfd(0x801) r1 = socket(0x1a, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xe, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000008c0)='GPL\x00', 0x4, 0xc3, &(0x7f0000000900)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000a00), 0x3e, 0x10, &(0x7f0000000a40), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x60e7248c}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000c00)=ANY=[@ANYBLOB="040e040e2720"], 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000440)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x15, 0x0, &(0x7f00000006c0)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r5], 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8010) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000580)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x40400d4) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000c40), 0x4) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000680)) 447.154µs ago: executing program 0 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0xc9) write(r0, &(0x7f0000000200)='27', 0x2) unshare(0x24060400) 0s ago: executing program 0 (id=24): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = openat$dm_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8a02, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'CRP-syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0x20000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '3\x00'}}, [@snapshot={0x0, 0x2880, 0x0, 0x70, 'snapshot\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, 'PO', 0x20, '256', ' 2 discard_zeroes_cow discard_passdown_origin'}}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:53736' (ED25519) to the list of known hosts. [ 39.719893][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 39.719910][ T42] audit: type=1400 audit(1792763104.133:138): avc: denied { name_bind } for pid=5763 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.752676][ T42] audit: type=1400 audit(1792763104.163:139): avc: denied { execute } for pid=5764 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.753285][ T42] audit: type=1400 audit(1792763104.163:140): avc: denied { execute_no_trans } for pid=5764 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.140041][ T42] audit: type=1400 audit(1792763106.553:141): avc: denied { mounton } for pid=5764 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.141741][ T42] audit: type=1400 audit(1792763106.553:142): avc: denied { mount } for pid=5764 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.143823][ T5764] cgroup: Unknown subsys name 'net' [ 42.145350][ T42] audit: type=1400 audit(1792763106.553:143): avc: denied { unmount } for pid=5764 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.308630][ T5764] cgroup: Unknown subsys name 'cpuset' [ 42.312298][ T5764] cgroup: Unknown subsys name 'rlimit' [ 42.430608][ T42] audit: type=1400 audit(1792763106.843:144): avc: denied { setattr } for pid=5764 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.430956][ T42] audit: type=1400 audit(1792763106.843:145): avc: denied { create } for pid=5764 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.431193][ T42] audit: type=1400 audit(1792763106.843:146): avc: denied { write } for pid=5764 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.431426][ T42] audit: type=1400 audit(1792763106.843:147): avc: denied { read } for pid=5764 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.489796][ T5769] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.159168][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.387011][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 46.387028][ T42] audit: type=1400 audit(1792763110.803:154): avc: denied { execmem } for pid=5771 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.559507][ T42] audit: type=1400 audit(1792763110.973:155): avc: denied { create } for pid=5775 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.560018][ T42] audit: type=1400 audit(1792763110.973:156): avc: denied { read write } for pid=5775 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.560939][ T42] audit: type=1400 audit(1792763110.973:157): avc: denied { open } for pid=5775 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.572832][ T42] audit: type=1400 audit(1792763110.983:158): avc: denied { ioctl } for pid=5775 comm="syz-executor" path="socket:[2768]" dev="sockfs" ino=2768 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.587436][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.588470][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.589839][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.590085][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.590530][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.590664][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.591501][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.591898][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.592215][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.594057][ T5137] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.599903][ T42] audit: type=1400 audit(1792763111.013:159): avc: denied { read } for pid=5776 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.601444][ T42] audit: type=1400 audit(1792763111.013:160): avc: denied { open } for pid=5776 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.601869][ T42] audit: type=1400 audit(1792763111.013:161): avc: denied { mounton } for pid=5776 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.606250][ T42] audit: type=1400 audit(1792763111.023:162): avc: denied { module_request } for pid=5776 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.610786][ T42] audit: type=1400 audit(1792763111.023:163): avc: denied { module_request } for pid=5775 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.610990][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.611648][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.612713][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.613905][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.614454][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.614652][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.615266][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.615422][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.615795][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.615919][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.791274][ T5776] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 46.794135][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.794583][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.795162][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.795859][ T5775] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 46.870243][ T5785] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 46.877826][ T5784] infiniband rxe0: set active [ 46.878140][ T5784] infiniband rxe0: added rxe_eth0 [ 46.883863][ T58] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.888458][ T5784] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 46.888477][ T5784] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 46.888498][ T5784] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 46.890191][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.908999][ T5784] RDS/IB: rxe0: added [ 46.909137][ T5784] smc: adding ib device rxe0 with port count 1 [ 46.909170][ T5784] smc: ib device rxe0 port 1 has no pnetid [ 46.923936][ T2127] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.997586][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.102548][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.126428][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.126534][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.126626][ T5775] bridge_slave_0: entered allmulticast mode [ 47.127729][ T5775] bridge_slave_0: entered promiscuous mode [ 47.137537][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.137592][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.137648][ T5775] bridge_slave_1: entered allmulticast mode [ 47.138334][ T5775] bridge_slave_1: entered promiscuous mode [ 47.139444][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.139516][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.139604][ T5776] bridge_slave_0: entered allmulticast mode [ 47.140305][ T5776] bridge_slave_0: entered promiscuous mode [ 47.141685][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.141724][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.141877][ T5776] bridge_slave_1: entered allmulticast mode [ 47.142584][ T5776] bridge_slave_1: entered promiscuous mode [ 47.169379][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.171036][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.173094][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.189457][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.204460][ T5776] team0: Port device team_slave_0 added [ 47.205693][ T5776] team0: Port device team_slave_1 added [ 47.224835][ T5775] team0: Port device team_slave_0 added [ 47.235742][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.235751][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.235763][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.237827][ T5775] team0: Port device team_slave_1 added [ 47.254329][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.254338][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.254351][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.254890][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.254899][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.254912][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.255346][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.255354][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.255366][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.259050][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.295856][ T5775] hsr_slave_0: entered promiscuous mode [ 47.296591][ T5775] hsr_slave_1: entered promiscuous mode [ 47.313031][ T5776] hsr_slave_0: entered promiscuous mode [ 47.313552][ T5776] hsr_slave_1: entered promiscuous mode [ 47.313863][ T5776] debugfs: 'hsr0' already exists in 'hsr' [ 47.313908][ T5776] Cannot create hsr debugfs directory [ 47.402016][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.402105][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.402161][ T5785] bridge_slave_0: entered allmulticast mode [ 47.402842][ T5785] bridge_slave_0: entered promiscuous mode [ 47.407353][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.407391][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.407444][ T5785] bridge_slave_1: entered allmulticast mode [ 47.408060][ T5785] bridge_slave_1: entered promiscuous mode [ 47.462524][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.472959][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.496375][ T5785] team0: Port device team_slave_0 added [ 47.497923][ T5785] team0: Port device team_slave_1 added [ 47.551467][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.551479][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.551492][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.552435][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.552442][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.552455][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.585568][ T5785] hsr_slave_0: entered promiscuous mode [ 47.586049][ T5785] hsr_slave_1: entered promiscuous mode [ 47.586337][ T5785] debugfs: 'hsr0' already exists in 'hsr' [ 47.586349][ T5785] Cannot create hsr debugfs directory [ 47.586740][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.590954][ T5775] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.591487][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.595463][ T5775] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.596952][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.600956][ T5775] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.601387][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.606174][ T5775] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.705028][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.705175][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.705261][ T5784] bridge_slave_0: entered allmulticast mode [ 47.706277][ T5784] bridge_slave_0: entered promiscuous mode [ 47.707762][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.707802][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.707875][ T5784] bridge_slave_1: entered allmulticast mode [ 47.708763][ T5784] bridge_slave_1: entered promiscuous mode [ 47.736936][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.739093][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.740786][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.740837][ T5775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.741078][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.741127][ T5775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.744228][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.751870][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.757271][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.757638][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.761282][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.761798][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.766660][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.772519][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.806866][ T5784] team0: Port device team_slave_0 added [ 47.808464][ T5784] team0: Port device team_slave_1 added [ 47.828561][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.828571][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.828584][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.831123][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.831132][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.831145][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.845034][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.845109][ T5776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.845213][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.845256][ T5776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.875129][ T5784] hsr_slave_0: entered promiscuous mode [ 47.875586][ T5784] hsr_slave_1: entered promiscuous mode [ 47.875878][ T5784] debugfs: 'hsr0' already exists in 'hsr' [ 47.875889][ T5784] Cannot create hsr debugfs directory [ 47.916489][ T5785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.919671][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.920769][ T5785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.922644][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.923544][ T5785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.925851][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.943326][ T5785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.947979][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.970130][ T229] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.970806][ T229] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.971355][ T229] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.971642][ T229] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.003143][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.044402][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.057030][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.064067][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.064171][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.093654][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.093736][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.110783][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.111006][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.113884][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.114552][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.117291][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.118620][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.122148][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.123144][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.128512][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.132244][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.132311][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.157116][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.157162][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.198674][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.228023][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.242701][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.242786][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.251295][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.251346][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.285257][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.297276][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.303446][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.303511][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.308530][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.308572][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.479855][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.481176][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.502539][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.528778][ T5776] veth0_vlan: entered promiscuous mode [ 48.535669][ T5776] veth1_vlan: entered promiscuous mode [ 48.545364][ T5775] veth0_vlan: entered promiscuous mode [ 48.547156][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.558441][ T5785] veth0_vlan: entered promiscuous mode [ 48.563245][ T5776] veth0_macvtap: entered promiscuous mode [ 48.567294][ T5775] veth1_vlan: entered promiscuous mode [ 48.571942][ T5785] veth1_vlan: entered promiscuous mode [ 48.577455][ T5776] veth1_macvtap: entered promiscuous mode [ 48.605766][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.608112][ T5775] veth0_macvtap: entered promiscuous mode [ 48.615459][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.616541][ T5784] veth0_vlan: entered promiscuous mode [ 48.619028][ T5775] veth1_macvtap: entered promiscuous mode [ 48.626161][ T5784] veth1_vlan: entered promiscuous mode [ 48.629777][ T5785] veth0_macvtap: entered promiscuous mode [ 48.638266][ T5785] veth1_macvtap: entered promiscuous mode [ 48.639619][ T5646] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.639761][ T5646] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.644872][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.655660][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.667452][ T5783] Bluetooth: hci2: command tx timeout [ 48.667591][ T5783] Bluetooth: hci0: command tx timeout [ 48.667638][ T67] Bluetooth: hci1: command tx timeout [ 48.667869][ T5780] Bluetooth: hci3: command tx timeout [ 48.684024][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.687666][ T5869] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.687719][ T5869] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.687782][ T5869] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.688825][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.688838][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.695882][ T5784] veth0_macvtap: entered promiscuous mode [ 48.708188][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.708785][ T5869] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.708943][ T5869] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.709098][ T5869] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.737395][ T5784] veth1_macvtap: entered promiscuous mode [ 48.748401][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.748417][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.762757][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.762776][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.789920][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.790591][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.790606][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.793380][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.838607][ T106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.838622][ T106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.878634][ T5776] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.901746][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.901762][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.914953][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.914965][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.918647][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.918685][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.918713][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.918744][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.918783][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.918814][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.918846][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.918877][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.944561][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.944578][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.086208][ T5941] FAULT_INJECTION: forcing a failure. [ 49.086208][ T5941] name failslab, interval 1, probability 0, space 0, times 1 [ 49.086228][ T5941] CPU: 3 UID: 0 PID: 5941 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 49.086242][ T5941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.086249][ T5941] Call Trace: [ 49.086253][ T5941] [ 49.086259][ T5941] dump_stack_lvl+0x100/0x190 [ 49.086285][ T5941] should_fail_ex.cold+0x5/0xa [ 49.086302][ T5941] ? __pfx_proc_fill_super+0x10/0x10 [ 49.086319][ T5941] should_failslab+0xc2/0x120 [ 49.086337][ T5941] ? __pfx_proc_fill_super+0x10/0x10 [ 49.086352][ T5941] __kmalloc_cache_noprof+0x91/0x6d0 [ 49.086365][ T5941] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 49.086378][ T5941] ? proc_fill_super+0x7d/0x860 [ 49.086394][ T5941] ? __pfx_proc_fill_super+0x10/0x10 [ 49.086408][ T5941] proc_fill_super+0x7d/0x860 [ 49.086423][ T5941] ? __pfx_proc_fill_super+0x10/0x10 [ 49.086438][ T5941] get_tree_nodev+0xdd/0x190 [ 49.086453][ T5941] vfs_get_tree+0x92/0x320 [ 49.086465][ T5941] path_mount+0x7d0/0x2850 [ 49.086480][ T5941] ? __pfx_path_mount+0x10/0x10 [ 49.086492][ T5941] ? lockdep_hardirqs_on+0x7d/0x110 [ 49.086508][ T5941] ? putname+0xb1/0x110 [ 49.086517][ T5941] ? kmem_cache_free+0x127/0x6c0 [ 49.086534][ T5941] ? __x64_sys_mount+0x293/0x310 [ 49.086546][ T5941] __x64_sys_mount+0x293/0x310 [ 49.086559][ T5941] ? __pfx___x64_sys_mount+0x10/0x10 [ 49.086576][ T5941] do_syscall_64+0x123/0x790 [ 49.086592][ T5941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.086604][ T5941] RIP: 0033:0x7f47f8b9f559 [ 49.086613][ T5941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.086625][ T5941] RSP: 002b:00007f47f9a43028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 49.086637][ T5941] RAX: ffffffffffffffda RBX: 00007f47f8e25fa0 RCX: 00007f47f8b9f559 [ 49.086644][ T5941] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000000 [ 49.086651][ T5941] RBP: 00007f47f8c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 49.086657][ T5941] R10: 000000000000001f R11: 0000000000000246 R12: 0000000000000000 [ 49.086664][ T5941] R13: 00007f47f8e26038 R14: 00007f47f8e25fa0 R15: 00007ffd1230fa08 [ 49.086678][ T5941] [ 49.087532][ T5933] ima: policy update failed [ 49.193397][ T5948] Zero length message leads to an empty skb [ 49.476569][ T5966] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.567943][ T5974] trusted_key: encrypted_key: insufficient parameters specified [ 49.589294][ T5970] syzkaller0: entered promiscuous mode [ 49.589310][ T5970] syzkaller0: entered allmulticast mode [ 50.226943][ T5982] ima: policy update failed [ 50.303319][ T5990] FAULT_INJECTION: forcing a failure. [ 50.303319][ T5990] name failslab, interval 1, probability 0, space 0, times 0 [ 50.303339][ T5990] CPU: 1 UID: 0 PID: 5990 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 50.303352][ T5990] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.303358][ T5990] Call Trace: [ 50.303363][ T5990] [ 50.303368][ T5990] dump_stack_lvl+0x100/0x190 [ 50.303388][ T5990] should_fail_ex.cold+0x5/0xa [ 50.303404][ T5990] should_failslab+0xc2/0x120 [ 50.303423][ T5990] __kvmalloc_node_noprof+0x113/0x9b0 [ 50.303441][ T5990] ? shrinker_alloc+0x6f1/0xd00 [ 50.303457][ T5990] shrinker_alloc+0x6f1/0xd00 [ 50.303474][ T5990] ? __pfx_shrinker_alloc+0x10/0x10 [ 50.303489][ T5990] ? lockdep_init_map_type+0x5c/0x250 [ 50.303502][ T5990] ? lockdep_init_map_type+0x5c/0x250 [ 50.303515][ T5990] ? __raw_spin_lock_init+0x3a/0x110 [ 50.303530][ T5990] ? __init_rwsem+0x10e/0x180 [ 50.303546][ T5990] sget_fc+0x97d/0x1f60 [ 50.303563][ T5990] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 50.303578][ T5990] ? kasan_save_track+0x14/0x30 [ 50.303593][ T5990] ? __pfx_set_anon_super_fc+0x10/0x10 [ 50.303606][ T5990] ? __pfx_sget_fc+0x10/0x10 [ 50.303619][ T5990] ? hook_capable+0x1bc/0x500 [ 50.303633][ T5990] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 50.303647][ T5990] ? rcu_is_watching+0x13/0xc0 [ 50.303670][ T5990] ? cap_capable+0x107/0x430 [ 50.303686][ T5990] ? __pfx_proc_fill_super+0x10/0x10 [ 50.303702][ T5990] get_tree_nodev+0x28/0x190 [ 50.303717][ T5990] vfs_get_tree+0x92/0x320 [ 50.303730][ T5990] path_mount+0x7d0/0x2850 [ 50.303747][ T5990] ? __pfx_path_mount+0x10/0x10 [ 50.303759][ T5990] ? lockdep_hardirqs_on+0x7d/0x110 [ 50.303775][ T5990] ? putname+0xb1/0x110 [ 50.303785][ T5990] ? kmem_cache_free+0x127/0x6c0 [ 50.303802][ T5990] ? __x64_sys_mount+0x293/0x310 [ 50.303814][ T5990] __x64_sys_mount+0x293/0x310 [ 50.303826][ T5990] ? __pfx___x64_sys_mount+0x10/0x10 [ 50.303844][ T5990] do_syscall_64+0x123/0x790 [ 50.303860][ T5990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.303873][ T5990] RIP: 0033:0x7fe4f359f559 [ 50.303883][ T5990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.303894][ T5990] RSP: 002b:00007fe4f4444028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 50.303905][ T5990] RAX: ffffffffffffffda RBX: 00007fe4f3825fa0 RCX: 00007fe4f359f559 [ 50.303913][ T5990] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000000 [ 50.303919][ T5990] RBP: 00007fe4f3636b20 R08: 0000000000000000 R09: 0000000000000000 [ 50.303926][ T5990] R10: 000000000000001f R11: 0000000000000246 R12: 0000000000000000 [ 50.303932][ T5990] R13: 00007fe4f3826038 R14: 00007fe4f3825fa0 R15: 00007fff9c5656b8 [ 50.303947][ T5990] [ 50.736082][ T67] Bluetooth: hci1: command tx timeout [ 50.736142][ T67] Bluetooth: hci2: command tx timeout [ 50.736189][ T5780] Bluetooth: hci3: command tx timeout [ 50.738425][ T5783] Bluetooth: hci0: command tx timeout [ 50.853965][ T5999] device-mapper: table: 248:1: multipath: priority group count mismatch (-EINVAL) [ 50.853984][ T5999] device-mapper: ioctl: error adding target to table [ 50.940920][ T6009] ================================================================== [ 50.940929][ T6009] BUG: KASAN: slab-use-after-free in snapshot_ctr+0x1c20/0x1fd0 [ 50.940950][ T6009] Read of size 8 at addr ffff888064e0c498 by task syz.0.24/6009 [ 50.940958][ T6009] [ 50.940966][ T6009] CPU: 3 UID: 0 PID: 6009 Comm: syz.0.24 Tainted: G L syzkaller #0 PREEMPT(full) [ 50.940982][ T6009] Tainted: [L]=SOFTLOCKUP [ 50.940986][ T6009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.940992][ T6009] Call Trace: [ 50.940997][ T6009] [ 50.941001][ T6009] dump_stack_lvl+0x100/0x190 [ 50.941018][ T6009] print_report+0x13d/0x4b0 [ 50.941060][ T6009] ? __virt_addr_valid+0x239/0x430 [ 50.941074][ T6009] ? snapshot_ctr+0x1c20/0x1fd0 [ 50.941090][ T6009] kasan_report+0xdf/0x1c0 [ 50.941109][ T6009] ? snapshot_ctr+0x1c20/0x1fd0 [ 50.941127][ T6009] snapshot_ctr+0x1c20/0x1fd0 [ 50.941144][ T6009] ? kasan_save_track+0x14/0x30 [ 50.941165][ T6009] ? __pfx_snapshot_ctr+0x10/0x10 [ 50.941182][ T6009] ? dm_split_args+0xc1/0x570 [ 50.941194][ T6009] ? rcu_is_watching+0x13/0xc0 [ 50.941210][ T6009] ? dm_split_args+0xc1/0x570 [ 50.941221][ T6009] ? kfree+0x1e5/0x6d0 [ 50.941234][ T6009] ? skip_spaces+0xee/0x130 [ 50.941249][ T6009] dm_table_add_target+0x58b/0xee0 [ 50.941262][ T6009] ? __pfx_dm_table_add_target+0x10/0x10 [ 50.941275][ T6009] ? dm_table_create+0x2d3/0x3d0 [ 50.941287][ T6009] table_load+0x3b9/0x7b0 [ 50.941298][ T6009] ? __pfx_table_load+0x10/0x10 [ 50.941307][ T6009] ? __might_fault+0xc5/0x140 [ 50.941318][ T6009] ? __might_fault+0xc5/0x140 [ 50.941331][ T6009] ctl_ioctl+0x4d2/0xcc0 [ 50.941346][ T6009] ? __pfx_table_load+0x10/0x10 [ 50.941356][ T6009] ? __pfx_ctl_ioctl+0x10/0x10 [ 50.941377][ T6009] ? selinux_file_ioctl+0x1e0/0x290 [ 50.941388][ T6009] dm_ctl_ioctl+0x22/0x30 [ 50.941403][ T6009] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 50.941419][ T6009] __x64_sys_ioctl+0x18e/0x210 [ 50.941433][ T6009] do_syscall_64+0x123/0x790 [ 50.941449][ T6009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.941460][ T6009] RIP: 0033:0x7fe4f359f559 [ 50.941468][ T6009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.941479][ T6009] RSP: 002b:00007fe4f4444028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.941490][ T6009] RAX: ffffffffffffffda RBX: 00007fe4f3825fa0 RCX: 00007fe4f359f559 [ 50.941498][ T6009] RDX: 0000200000000380 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 50.941504][ T6009] RBP: 00007fe4f3636b20 R08: 0000000000000000 R09: 0000000000000000 [ 50.941511][ T6009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.941517][ T6009] R13: 00007fe4f3826038 R14: 00007fe4f3825fa0 R15: 00007fff9c5656b8 [ 50.941528][ T6009] [ 50.941532][ T6009] [ 50.941534][ T6009] Allocated by task 6009: [ 50.941539][ T6009] kasan_save_stack+0x30/0x50 [ 50.941553][ T6009] kasan_save_track+0x14/0x30 [ 50.941566][ T6009] __kasan_kmalloc+0xaa/0xb0 [ 50.941579][ T6009] __kmalloc_cache_node_noprof+0x30c/0x710 [ 50.941594][ T6009] dm_get_table_device+0x2fc/0x820 [ 50.941610][ T6009] dm_get_device+0x525/0x7e0 [ 50.941620][ T6009] snapshot_ctr+0x201/0x1fd0 [ 50.941634][ T6009] dm_table_add_target+0x58b/0xee0 [ 50.941645][ T6009] table_load+0x3b9/0x7b0 [ 50.941652][ T6009] ctl_ioctl+0x4d2/0xcc0 [ 50.941666][ T6009] dm_ctl_ioctl+0x22/0x30 [ 50.941680][ T6009] __x64_sys_ioctl+0x18e/0x210 [ 50.941691][ T6009] do_syscall_64+0x123/0x790 [ 50.941704][ T6009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.941714][ T6009] [ 50.941716][ T6009] Freed by task 6009: [ 50.941721][ T6009] kasan_save_stack+0x30/0x50 [ 50.941734][ T6009] kasan_save_track+0x14/0x30 [ 50.941747][ T6009] kasan_save_free_info+0x3b/0x70 [ 50.941758][ T6009] __kasan_slab_free+0x5f/0x80 [ 50.941772][ T6009] kfree+0x22b/0x6d0 [ 50.941781][ T6009] dm_put_table_device+0x2bf/0x380 [ 50.941795][ T6009] dm_get_device+0x3f1/0x7e0 [ 50.941804][ T6009] snapshot_ctr+0x326/0x1fd0 [ 50.941819][ T6009] dm_table_add_target+0x58b/0xee0 [ 50.941829][ T6009] table_load+0x3b9/0x7b0 [ 50.941837][ T6009] ctl_ioctl+0x4d2/0xcc0 [ 50.941851][ T6009] dm_ctl_ioctl+0x22/0x30 [ 50.941865][ T6009] __x64_sys_ioctl+0x18e/0x210 [ 50.941877][ T6009] do_syscall_64+0x123/0x790 [ 50.941889][ T6009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.941898][ T6009] [ 50.941901][ T6009] The buggy address belongs to the object at ffff888064e0c480 [ 50.941901][ T6009] which belongs to the cache kmalloc-96 of size 96 [ 50.941920][ T6009] The buggy address is located 24 bytes inside of [ 50.941920][ T6009] freed 96-byte region [ffff888064e0c480, ffff888064e0c4e0) [ 50.941931][ T6009] [ 50.941934][ T6009] The buggy address belongs to the physical page: [ 50.941939][ T6009] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x64e0c [ 50.941949][ T6009] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 50.941959][ T6009] page_type: f5(slab) [ 50.941969][ T6009] raw: 00fff00000000000 ffff88801d442280 dead000000000122 0000000000000000 [ 50.941979][ T6009] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000 [ 50.941986][ T6009] page dumped because: kasan: bad access detected [ 50.941992][ T6009] page_owner tracks the page as allocated [ 50.941995][ T6009] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 41, tgid 41 (kworker/3:1), ts 50906349174 [ 50.942012][ T6009] post_alloc_hook+0xfd/0x120 [ 50.942022][ T6009] get_page_from_freelist+0x110d/0x35d0 [ 50.942035][ T6009] __alloc_frozen_pages_noprof+0x2e9/0x32e0 [ 50.942048][ T6009] new_slab+0xa9/0x6e0 [ 50.942058][ T6009] refill_objects+0xe3/0x410 [ 50.942069][ T6009] __pcs_replace_empty_main+0x35e/0x650 [ 50.942079][ T6009] __kmalloc_cache_noprof+0x4ef/0x6d0 [ 50.942091][ T6009] nsim_fib_event_work+0x156e/0x6330 [ 50.942107][ T6009] process_one_work+0xac7/0x1b10 [ 50.942122][ T6009] worker_thread+0x5ef/0xe50 [ 50.942136][ T6009] kthread+0x373/0x450 [ 50.942155][ T6009] ret_from_fork+0x730/0xd60 [ 50.942166][ T6009] ret_from_fork_asm+0x1a/0x30 [ 50.942177][ T6009] page last free pid 6005 tgid 6005 ts 50904673580 stack trace: [ 50.942184][ T6009] __free_frozen_pages+0x79f/0x10f0 [ 50.942194][ T6009] tlb_finish_mmu+0x27d/0x810 [ 50.942203][ T6009] exit_mmap+0x454/0xa00 [ 50.942219][ T6009] __mmput+0x12a/0x410 [ 50.942234][ T6009] mmput+0x62/0x70 [ 50.942249][ T6009] do_exit+0x80c/0x2a00 [ 50.942260][ T6009] do_group_exit+0xd5/0x2a0 [ 50.942272][ T6009] __x64_sys_exit_group+0x3e/0x50 [ 50.942284][ T6009] x64_sys_call+0x1567/0x1570 [ 50.942295][ T6009] do_syscall_64+0x123/0x790 [ 50.942311][ T6009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.942322][ T6009] [ 50.942324][ T6009] Memory state around the buggy address: [ 50.942329][ T6009] ffff888064e0c380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 50.942337][ T6009] ffff888064e0c400: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 50.942344][ T6009] >ffff888064e0c480: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 50.942349][ T6009] ^ [ 50.942355][ T6009] ffff888064e0c500: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 50.942362][ T6009] ffff888064e0c580: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 50.942368][ T6009] ================================================================== [ 50.942374][ T6009] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 51.188200][ T6009] CPU: 3 UID: 0 PID: 6009 Comm: syz.0.24 Tainted: G L syzkaller #0 PREEMPT(full) [ 51.192190][ T6009] Tainted: [L]=SOFTLOCKUP [ 51.193813][ T6009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.197339][ T6009] Call Trace: [ 51.198443][ T6009] [ 51.199415][ T6009] dump_stack_lvl+0x100/0x190 [ 51.200929][ T6009] vpanic+0x553/0x970 [ 51.202389][ T6009] ? __pfx_vpanic+0x10/0x10 [ 51.203847][ T6009] ? __pfx_vprintk_emit+0x10/0x10 [ 51.205492][ T6009] ? snapshot_ctr+0x1c20/0x1fd0 [ 51.207085][ T6009] panic+0xd1/0xe0 [ 51.208325][ T6009] ? __pfx_panic+0x10/0x10 [ 51.209771][ T6009] ? snapshot_ctr+0x1c20/0x1fd0 [ 51.211354][ T6009] check_panic_on_warn.cold+0x19/0x34 [ 51.213073][ T6009] end_report.part.0+0x3a/0x90 [ 51.214642][ T6009] kasan_report.cold+0xe/0x18 [ 51.216164][ T6009] ? snapshot_ctr+0x1c20/0x1fd0 [ 51.217762][ T6009] snapshot_ctr+0x1c20/0x1fd0 [ 51.219300][ T6009] ? kasan_save_track+0x14/0x30 [ 51.220856][ T6009] ? __pfx_snapshot_ctr+0x10/0x10 [ 51.222512][ T6009] ? dm_split_args+0xc1/0x570 [ 51.224027][ T6009] ? rcu_is_watching+0x13/0xc0 [ 51.225601][ T6009] ? dm_split_args+0xc1/0x570 [ 51.227137][ T6009] ? kfree+0x1e5/0x6d0 [ 51.228464][ T6009] ? skip_spaces+0xee/0x130 [ 51.230096][ T6009] dm_table_add_target+0x58b/0xee0 [ 51.231979][ T6009] ? __pfx_dm_table_add_target+0x10/0x10 [ 51.233772][ T6009] ? dm_table_create+0x2d3/0x3d0 [ 51.235372][ T6009] table_load+0x3b9/0x7b0 [ 51.236780][ T6009] ? __pfx_table_load+0x10/0x10 [ 51.238363][ T6009] ? __might_fault+0xc5/0x140 [ 51.239898][ T6009] ? __might_fault+0xc5/0x140 [ 51.241436][ T6009] ctl_ioctl+0x4d2/0xcc0 [ 51.242804][ T6009] ? __pfx_table_load+0x10/0x10 [ 51.244387][ T6009] ? __pfx_ctl_ioctl+0x10/0x10 [ 51.245948][ T6009] ? selinux_file_ioctl+0x1e0/0x290 [ 51.247665][ T6009] dm_ctl_ioctl+0x22/0x30 [ 51.249088][ T6009] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 51.250696][ T6009] __x64_sys_ioctl+0x18e/0x210 [ 51.252260][ T6009] do_syscall_64+0x123/0x790 [ 51.253779][ T6009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.255675][ T6009] RIP: 0033:0x7fe4f359f559 [ 51.257128][ T6009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.263218][ T6009] RSP: 002b:00007fe4f4444028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.265855][ T6009] RAX: ffffffffffffffda RBX: 00007fe4f3825fa0 RCX: 00007fe4f359f559 [ 51.268367][ T6009] RDX: 0000200000000380 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 51.270909][ T6009] RBP: 00007fe4f3636b20 R08: 0000000000000000 R09: 0000000000000000 [ 51.273448][ T6009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.275955][ T6009] R13: 00007fe4f3826038 R14: 00007fe4f3825fa0 R15: 00007fff9c5656b8 [ 51.278484][ T6009] [ 51.280106][ T6009] Kernel Offset: disabled [ 51.281494][ T6009] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:45:15 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff825efda6 RBX=ffffffff825efdcd RCX=ffffffff825efda6 RDX=ffffffff825efdcd RSI=ffffffff825efda6 RDI=00007f1a99dfd008 RBP=0000000000000000 RSP=00007ffcd7f167d0 R8 =00007f1a9aa10000 R9 =00007f1a9aa12000 R10=00000000825efdaa R11=0000000000000006 R12=00007f1a9aa26128 R13=0000000000001ae9 R14=ffffffff825efdcd R15=00007f1a9b555720 RIP=00007f1a9a673acd RFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00005555735c3500 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1a9b6b7d58 CR3=0000000064dfd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a9b55d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd7f16c76 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd7f16c76 00007ffcd7f16c7c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a9a83714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a9a837184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a9a8372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a9a837176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a9a9f9600 00007f1a9a9f95e0 00007f1a9a9f95e8 00007f1a9a9f9618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a9b55d020 00007f1a9a9f95c0 00007f1a9a9f95d0 00007f1a9a9f9610 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a9a9f95f8 00007f1a9a9f95c8 00007f1a9a9f9600 00007f1a9a9f95e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff97bb7838 RBX=0000000000000261 RCX=00000000000180ed RDX=ffffffff97bf0ca0 RSI=00000000000002e9 RDI=ffffffff994cdfb8 RBP=0000000000000030 RSP=ffffc900075fed88 R8 =ffffffff97bf0cd0 R9 =0000000000000260 R10=ffffc900075fef18 R11=0000000000000000 R12=ffffffff81e82da0 R13=ffffc900075fee30 R14=ffffffff81e83750 R15=ffffffff9941e538 RIP=ffffffff81e84192 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d45e2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1a9b6b6ff8 CR3=0000000064dfd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd7f16c76 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd7f16c76 00007ffcd7f16c7c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a9a83714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a9a837184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a9a8372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a9a837176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a9a9f95f8 00007f1a9a9f95c8 00007f1a9a9f9600 00007f1a9a9f95e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffff888023fd4508 RBX=ffffffff9cdffe88 RCX=ffffffff81e90ff8 RDX=ffff888024a0c488 RSI=ffffffff853a023f RDI=ffffffff9cdffe88 RBP=0000000000000282 RSP=ffffc900032d79e0 R8 =0000000000000001 R9 =fffff5200065af36 R10=0000000000000003 R11=0000000000000000 R12=dffffc0000000000 R13=000000000004fa15 R14=0000000000000004 R15=ffffc9002dfa4000 RIP=ffffffff81e8bc53 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d46e2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8d290fd878 CR3=0000000027ebc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556f93b874 000055556f93b870 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff0f0e0d0c 0b0a090807060504 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e025f9e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556f9419f8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c003000000000000 0000746f68737061 6e7301ffffffffff ffffffdf0813a003 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d203604080808082 0013d0036d61722f 7665642f01ffffff ffffffffffef0813 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80820013e4036d61 722f7665642f01ff ffffffffffffffef 0813d40340020013 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40020013ec034f50 01ffffffffffffff fffb0813e8034002 0013e60360408080 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010e80041893c7f4 9208000100000008 06060113b4000200 14ce036e69676972 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f5f6e776f647373 61705f6472616373 696420776f635f73 656f72657a5f6472 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6163736964203220 01ffffffffffffff ffa50813f4033635 3201ffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffff90813ee0340 020013ec034f5001 ffffffffffffffff fb0813e803400200 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b70ae5 RDI=ffffffff9cee40c0 RBP=ffffffff9cee4080 RSP=ffffc90004ae70a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000020 R14=000000000000000e R15=ffffc90004ae73b8 RIP=ffffffff85b70b0f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe4f44446c0 ffffffff 00c00000 GS =0000 ffff8880d47e2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c45edcb CR3=0000000064e2f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff9c565ba6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff9c565ba6 00007fff9c565bac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4f363714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4f3637184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4f36372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4f3637176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4f37f95f8 00007fe4f37f95c8 00007fe4f37f9600 00007fe4f37f95e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 000000000000004c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000