last executing test programs: 3.459403095s ago: executing program 0 (id=25): r0 = fsopen(&(0x7f0000000180)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x6794, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x2, 0x20000007, 0x4, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0x8000000000000000, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x3, 0x35, 0x8}) r2 = socket$inet6(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0x89, 0x0, 0xf, 0x8000000000000000, 0xe, 0x2, 0x9, 0x4, 0x5, 0x8000000040000000, 0xc, 0x4, 0x7, 0x9, 0x8, 0x3, 0x8, 0x80000000, 0xffffffffffbffffe, 0x5, 0x7, 0x7, 0x3, 0x6}) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x0, 0x30, 0x30, 0x62, 0x66, 0x34]}, &(0x7f0000000100)={0x0, "007f2233445566778899aad9ccddeeff001122000000000000000000000000000000000000000000000004000000000100", 0x40}, 0x48, r1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount(&(0x7f00000006c0)=@sg0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000180)='exofs\x00', 0x2210010, 0x0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000005c0), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000040), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x33, 0x30, 0x30, 0x38, 0x66, 0x37, 0x63, 0x39, 0x30, 0x37, 0x0, 0x37]}, &(0x7f0000000600)={0x0, "000d2233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233055566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x33}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x6f, 0x30, 0x6b, 0x61, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x64, 0x38, 0x63, 0x30, 0x37, 0x32, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) 3.31068677s ago: executing program 0 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r0, &(0x7f00000004c0)='\x00', 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x20000210) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000300)={0x2020}, 0x2020) mkdirat(r2, &(0x7f0000000340)='./file0\x00', 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8840, 0x0) r5 = syz_open_pts(r4, 0x141601) write(r5, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000080)={0x400008, 0x1ffffffe, 0x0, 0x3, 0x19, "680c1acfa4a5000000070000faffffff000800"}) close_range(r3, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000240)='./file0\x00', 0x2, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80a42, 0x47) write$P9_RVERSION(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500040065ffff010000800900323030302e4c47fef87836d9"], 0x15) r7 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) write$char_usb(r8, &(0x7f0000006800)="10", 0x20) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x2840, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 1.861486579s ago: executing program 3 (id=47): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400100001000130100000000000000007f00000100000000000000000000ad1820c991a0ee0000000000000000000000995b0000000000000000000000000000000000000000b946d761dd369874a36fea8c3befe387cfeda6b971b3394908bebbf3fcc6edf8ccc2b3e03db621b51fc2141bf94bd9d4e880475edfa88f42410d20eaa7871f9943a1b6e2607b77564c72a00fe07088047c883b825ed2e22f7a0ecd8b3ddf6e132274f70424d924aca806c9e61a9971d6955ff0f7c185d9203e90913d25ce8b4b01735b1e3b9fc245b8d3413c0e53f8ec9744a988c27ed01486d0daa5adca2b9d994c0dca8c8fe0485f", @ANYRES32=r0, @ANYRES32=0xee00, @ANYBLOB="e00000010000000000000000000000000000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000300000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800160000100000"], 0x140}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) memfd_create(&(0x7f0000001840)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x01\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86zm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf\x00\x00\x00\x00\x91.~\xf8\x11\x91\x13L:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x007\xcc\xe8\ba\x19\x00\x84\xc9\xe4a4\x83\xf1\xa1^\xcb\xb3\xd5\n\xbc\xb9\x9a\x9d?8\xe3=\xb3{\xb5\xf4\xc0\xef\xfe\xe0:\xcb\xca\x95\xc2\x0e\x89\x89\'T\xde\xd5\xba3,\xd2f\xe2\r\x96K\x83\x8a\x16 \x9a\x9200}Y\xbc\xd0\x14z\xba\xca\x10\x98\x16\xff\xa5\xa50\x96&\xfd\xb7\xb0o\x8e}\xfe\xfa$i\xc4\xa1\xde\xc8.\xc4\x1bP\x01i\xc9\x88\xb5_\x00\xfa\xc8\x8aXVF\x16\\\xac/\xb5\x88%\xebf\xaa\xc9\xf1E\xf0\x18\t\x80\xfd\xa4\xe0\xde\x14J@2U\aR\x89\xc6g(\xc8\x85\x17B\x16m\xfe\x05MR7\x16\xc1\x84l\xed\x84\x97\xc0\xda9\x9b\x11\x91\xef\xd7:\xc0@d\x0e\x14\x0f8\xf1$;\x8dcF\x03A\x1fi\xc6T\xe1\x95\x16V\x19e\x14\xd4\xdf\xfb\xba\x90\xcdyq^0xffffffffffffffff}, 0x4800) syz_open_dev$ptys(0xc, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c00990008000000300000001400040073797a6b616c6c9d792ca9000000000008000500040000000500530001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) (async) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x40103, 0x0) poll(&(0x7f0000000140)=[{r7, 0x10}], 0x1, 0x128) (async) splice(r3, 0x0, r2, 0x0, 0x18, 0x7) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x801, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (rerun: 64) 1.86088062s ago: executing program 3 (id=48): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffffffffffed0}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x40000040, @mcast2, 0x8}, 0x1c) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000700)="65f2a50f20e06635000020000f22e066b9800000c00f326635000400000f300f01df66b8040700000f23d80f21f86635800000700f23f86526f30f00d00f62a05131f43e2e0f005908660f2f62ee", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x8001, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000d0000000001000026a03a3a33ae6a6130000000002c000000030a01080000000000000000010000000900010073797a30000000000900030073797a320000000014000000060a010400000000000000000100000014000000110001"], 0x88}}, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000500), 0x22, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000600)={0x1, @vbi={0x8, 0x8, 0x6, 0x35323645, [0x0, 0x2], [0x40, 0xfffffffd], 0x108}}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000600000000060015000100000018001680140001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r8, &(0x7f0000000000), 0x400000000000235, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r9, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="24aa0b7112fa6fb800", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fcdbdf255700000008000300", @ANYRES32=r6, @ANYBLOB="060095007f000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4048804) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000003940)=0x10) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000000000)=""/36, &(0x7f0000000040)=0x24) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000003980)={0x1, 0x4, 0x0, 0xfffffffd, 0x17, "0000000000000000f20d2a5000000318e4fc00"}) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r9, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000", @ANYRES16=r10, @ANYBLOB="00042dbd7000fddbdf25060000000800030002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40186f40, &(0x7f0000000180)={0xffffffff, 0x1, 0xf3f, 0x1, 'syz0\x00', 0x10003}) r11 = add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000102030405060708090a0b0c0d0e0f0e1112131415161718191a1b1c1d1e1f2021222324e37d967bf79a939e0e9ff7f41381062526272829e5902c2d2e2f3031e49334c5b2641eea6ca1000c44edb94409f709f53ac8a3f84686a86bbd7450678c1d3511052eb44cacdf7ec83020886d727beeb9933ffcf6673ae77fcb150fc30f9ff799ebbd3ab53c80a9bb4c159825ea1ace94ef67f3f45e60497954138cdefbfe10346dc208ee5ef9481b4f883a65be35c60b32d3c95e1e7dd1667ab9d0608a27bc08b25819502de343f8169cdef8ba68bde68799387ac49e0d0f8441"], 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_QUERY(0x18, r11, 0x0, &(0x7f0000000440)='/dev/video#\x00', &(0x7f0000000480)) 1.686272163s ago: executing program 3 (id=49): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r1 = fsopen(&(0x7f0000000080)='msdos\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x600}) (async) io_setup(0x9fa1, &(0x7f0000000040)) 1.461593302s ago: executing program 2 (id=50): r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r1, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000600), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)="ef3c4f6a07b06292143939f653c2efd94c532d0adad2606430901bc2984e289c3a56f59d711086b33009db6a110df7497836a26ab00515ff12c672ca8e7752eda54da766a068a3baf2e40e14ddefd7648ffea02a35e9adb050a24900393c4c9e41870a4b62105589fd79eda8f447e44f3def3550bcb93bf3fdda670b9d78a2c631abf103ad", 0xffffffffffffff28, 0xfffffffffffffffc) (async) add_key$user(&(0x7f0000000600), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)="ef3c4f6a07b06292143939f653c2efd94c532d0adad2606430901bc2984e289c3a56f59d711086b33009db6a110df7497836a26ab00515ff12c672ca8e7752eda54da766a068a3baf2e40e14ddefd7648ffea02a35e9adb050a24900393c4c9e41870a4b62105589fd79eda8f447e44f3def3550bcb93bf3fdda670b9d78a2c631abf103ad", 0xffffffffffffff28, 0xfffffffffffffffc) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x0) read$FUSE(r2, &(0x7f0000002340)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f0000002340)={0x2020}, 0x2020) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="3ed55c", 0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0xd49980, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000004900)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002cbd7000fcdbdf254c00000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="90000000", @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="0c00990006000000470000000e00cd00c40c09000800e600000000003c003300a09c3900080211000001080211000001505050505050f70f0000ca0005008c18d603383c6cea33b3c4ca1833711641a18a9bc6451567cbc21400cd000800080001000000ff0f06000500030008005700fc07000031872c0844f1fd0c7f043af6c2c5db0f196d81dcf77cf32377b9e6d193e2f60446bf9765440a47781b85196c9e9e6cfcf60dbd69f539b42aa6fd63bd458c03f9be154a9dd3ac90a094905f83fb94704329c30da2"], 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x58000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d) (async) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="bd"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='syz', r1) r9 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, r0) r10 = add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f00000006c0)={'fscrypt:', @desc4}, &(0x7f0000000700)={0x0, "a7594b8f826f0339d785dd6ba10913d70da5061567a1ae696e5dc9e0f2024aaea661801483d12ccd61c84b9738aa20b3a5a927314e5defcdf36273da194e45a2", 0x2e}, 0x48, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r9, r10, 0x1) r11 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000500)={0x0, "cf08012aafb774bf39f6326fd3b19a90fcd1eaa8a04cda84f10de529b0e30590bb49e5176adbe8a6547a0307b4687520943b5c18e657dc73edba9a3a3270bb18", 0x33}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r11, 0x20, 0x64}, &(0x7f0000000480)=ANY=[@ANYBLOB="656e633d706b63733120686173683d736861312d61767832000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/79], &(0x7f0000000200)="62585244dae92ff7249810f2e5d3bb8f1892c1ba2c1c6361f630bad16a2df5db", &(0x7f0000000240)="baccf77fbcc5629122606b483e4ed500849526410de7277ef673da6aeecfb218594125fe93089e0177286f15141dd9105ee981b9206ce615c5751daf654ebcc5288bebfb0283235d3ec56f8cb589b9d373c26234f75230259b6960a5518b78e3b7127ebe") (async) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r11, 0x20, 0x64}, &(0x7f0000000480)=ANY=[@ANYBLOB="656e633d706b63733120686173683d736861312d61767832000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/79], &(0x7f0000000200)="62585244dae92ff7249810f2e5d3bb8f1892c1ba2c1c6361f630bad16a2df5db", &(0x7f0000000240)="baccf77fbcc5629122606b483e4ed500849526410de7277ef673da6aeecfb218594125fe93089e0177286f15141dd9105ee981b9206ce615c5751daf654ebcc5288bebfb0283235d3ec56f8cb589b9d373c26234f75230259b6960a5518b78e3b7127ebe") add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, r11) 1.459659654s ago: executing program 0 (id=51): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000009, 0x1010, r0, 0xec376000) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000000c0)='source', 0x0, r2) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x4c, 0x0, 0x1, 0x0, 0x0, 0x8051}, 0x24000800) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r11, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x20000) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x8001, 0x38, {"f16b2400"}, 0x5, 0x2, 0x1ff}}}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500dc111a3d29f9244a7b971054a54ed826d5621428e34b2389dbb3e5e4bdd555f6a40a9e9a83e7122c0d838d8329c9b4dbe505d891a4824fb1824416787af18875a39a13cfa38824", @ANYRES32=r5, @ANYRES8=r3, @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 1.191239207s ago: executing program 2 (id=52): r0 = add_key$keyring(&(0x7f0000002e00), &(0x7f0000002e40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r0) r2 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x56, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) setresgid(0x0, 0xee00, 0x0) r3 = semget$private(0x0, 0x4, 0x6bb) semop(r3, &(0x7f0000000180)=[{0x1, 0xfffd}], 0x1) semtimedop(r3, &(0x7f0000000000)=[{0x3, 0x4, 0x1800}], 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d706f6c3d6c6f63616c2c6d706f6c3d6c6f639e9986ad7a616ce07374617469633a21"]) 1.091261913s ago: executing program 3 (id=53): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101040, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @empty, @void, {@generic={0x88f7}}}, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_load_code={0x12e, 0x19, {0x0, "f4"}}], 0x31}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x68, 0x64, 0x0, 0x8, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x20, 0x606f, 0x0, 0xe7, {[@exp_fastopen={0xfe, 0x14, 0xf989, "e0625660bac570f7f163f1bb3603f207"}, @timestamp={0x8, 0xa, 0x9, 0x6}, @window={0x3, 0x0, 0x1}, @exp_smc={0xfe, 0x6}, @nop, @mss={0x2, 0x3, 0x200}, @mss={0x2, 0x4, 0x5}, @timestamp={0x8, 0xa, 0xe6, 0x10000}]}}}}}}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000005c0)="0f1cbe0000ba6100b05eee440f20c066350900000044070722c0b838000f00d8ba400066b80000000066eff4d09800000f4da2ee005df2ab", 0x38}], 0x1, 0x15, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x101fd, 0x5, 0x100000, 0x2000, &(0x7f0000015000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_io_uring_setup(0x113f, &(0x7f0000000080)={0x0, 0x7011, 0x80, 0x0, 0xfffffffc, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_FSETXATTR={0x29, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f000000ae80)='./file0\x00'}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x88884004, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf7}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x7, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) io_uring_setup(0x7a2b, &(0x7f0000000140)={0x0, 0x3a69, 0x0, 0x0, 0x31f}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x5}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) r8 = accept(r7, 0x0, 0x0) sendmsg$unix(r8, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="941f56d25eb9149fc73a36b5f6c2dd8a9a19f0fa8aecf5a2c376fd879a5dfdb5015ccebec1a4c1de4726b1af3dc8a9e2789626e2a76e22e33d5638ed9a400cc1a2cb0f28753c7de337997558d40150bb9c2cb97f9144c048e5e8d84af36bb1ed1cb6db2732b766f43f2cdfb443a77ee51a2126ae8f2b2d0ba5b5a9491fa69dbed30e92f199bde912d338a2bb77b92ef9ee61b1d3ecaf4cb9ec48c0ebfd045f8c4814a70ce5d0ad80afba5c7311ec0ef90f086d8f34796390ebafe5de1736c9e9fef66fc85b0f886111c0e755d35ccd13cc7b49cae4783c93d852ccfc3dc4", 0xde}], 0x1, 0x0, 0x0, 0x20000c05}, 0x4000001) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r8, 0xf503, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.02131643s ago: executing program 0 (id=54): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES16, @ANYBLOB="b967a1ea6c402193a1cae71ed9a62a14cb717286abc2d3d92d57ac9e14e476c75860b67764e8dbbd978b9e3f96d20a76305f304ea12d08e4480ca92614bca5090b768d83c5b60bead0585d9b0adf62ff8abe66c3924a0d86a42eef777f6073c7b3689734983214f535fc5c58b7", @ANYRESHEX, @ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRES8, @ANYRES8=0x0, @ANYBLOB="3af80eb17f955a02ca890dbc885493704a9049c102854a4a8eafb98977f79dbb3b3efe7f65b50e5bd0649831fcf4ba2c1c3eb94ce7c8188c94df4382ed90ea04307e0bf6d86828186c5ddbe8103b7375b9198dcbeb3937bd6417b173eb82", @ANYRES32=r0, @ANYRES32=r0], 0x50) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000004c0)=0x40) (async) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CANCEL(r3, 0x6407) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) (async, rerun: 64) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) (async) setresuid(0x0, 0xee01, 0xffffffffffffffff) (async) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') (async) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd06000040", 0x27}], 0x2, 0x0, 0x4) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000540)='%+9llu \x00'}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r5, 0x21, &(0x7f0000000440)={0x0, 0x2aaf, 0x0, 0x0, 0x9}, 0x1) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001b40)={&(0x7f0000000180)="1ed9d683cdd5584141b33a36794e18bb84250cb90714e80769bf2aa7ab1ce2e8eca7470a5256632b09203a586ebc7b858bb19318095e1c9854fdb103632748dd0caf602f30dc792e702431a043fe5860c9346b0eb6162652ae5a3dc8dad6bc7ef466166c4a4200e9a72d086f50c142a76d01cbc11bebcc5b81f8dd64e9bada848241275c6edba0877e8cfa14f68eb892765d367e1acecfc0685fd6253e27d9fc5a94df2aa21775f1ab8b197d6596ae87014a2d444d196d1488969149636b6cd5957f552bfd", &(0x7f0000000280)=""/78, &(0x7f0000000b00)="e23f33093bbdcaf34f51099ea7dee8f12f10c9c9073cb86face400416019b16cdbe98f257c749b9a59a379b686271c454ed7ec26bc1fd8e4940397b2d7a0d2dd23580116183924e658f63ab982c1cef18d8ae3b1ceb0184d4bba28f27aa5d8afb21ce36c35f4d080cffdf37b30b1b648626400adf8eea13a6201b12cdd866695758289542dbb91b2704d4bffa45b83427081c661e78f44c8627d4798a724236937ca64717531318fef8ec791311492c38176aa18ab0c57f462b4219ca997472f3b63e47f243a0b5e14eb83ad7cc83718c531985f7c59f976fffda875b2729232b9851e4995fa7ec3e6d9dff9608cb783db610f61a5c2670f0da1da4953370a6c0e012fa711b551b54d76101e5b634a6d2f18f483ecb6db0687a7d4fb20bdb4b582aec74b2c33fe017cfbc0b5bd210b194fc992a49e363307b8953757007dd30e92e25dd58671d9f2cb684731b9ae9a91dc82df80637c6c72c4b7545c040356bd92168e917f92725bff0e4400a9bb290b251e352f05834570bc72921fa6f44e5416af99ce6a359170f454a20dbb2b81a4d7d76c4f720692158045a68c405796babcbe9982e50c9bfdd077654e02674fcb1453ac4c5e1d783be245f2f39a514fea313ef230a45da06ffec0d0baf0a6484a9363acc28bd39a3b8ef065b11da1fad75cc48af928b0c4082c1523fa230cb05a0c90419c3efb11eb0e28dac9a18d9426d49ca3b7cea68e282bf86d36ca4b146e56c8dbb42952dcae242917979de85d5f64bed086f94aec5a20567795637f93daf3aa88c3a6c11228a39371b161493b887fe6781aa5e8647754d1034cdf970e1d72fd4f336b06c604efc3d3967276e77cd00f8c1b3e2d70bcc4ce56fb3bedf585cd5be096cd37021e3f0050a5195b2704f5b444b1a3a01d9e1436281846c3399d2b03d655ed431a26738c077aad8d09a4fdd8ed848996edea0bbaff284e0f4923449f706832fd59e7b8f86ae0f4db1601e7f8bfe2402e9d4839d6c123a4519ab24f32eceb1e46970270afedae41563cbecd1db7d97d1c850a89daef0a0da0e46a58222571886d79278574aecb1f4775e7247002b7ce6f8b0079d5b90bdd3450169d7eb54fc4269bf0dd4c9416cd127b50d23b4700ee35b1f199a7d69460d4002390fd1e4de0f3c0eb57c8cb2907f6b24d5f11f31dbd2484f802838dd13d18cc16ea8e481ddc0df772192f1a5683ea041d1ea1a460e8bdbb137bffe12ff9bce41795c49278d11933f76398c976b8efa2773494a70cc9cc397e1a00b50ec6257577cd8858e2e8d7a7d5344c8d29961ad2cb7f89d95dc6c735e58fbbbec028481fe527dc595000f509b1a26017032ca4ccdb3ad331effba45959f6fcf8139c1de63b201c27c565869f5abacbf56817f3a5b161e8005621b0b68c5713bda8dac2fa1396396c29e00f3206502f663061a35aa028f2a40a7d246b499eebc2b1326e128a3bd1bd60d446ab6d466cc8545d2d1f815490af59ac649599b1ae0784bd165d0eb37efdd3d3897140e1ff58f3355aac5ce71af647fea5fbec017bc3ef36b751bfdda0ae3119cf109321dd4c2e5ed23ea1b38e4617c46a36226b8765e5a298585ae5fa55ceb2c56bdf3d93977f17571b48d5664b8cc3bd74544ddb2e2df64cc99521bc574dcedcf5dc128cb1165701aef45d45a2fdcb4d4ffca738986dc1a53744c9cebc44638dcb25a8635130360fc5eff5b3f7977e70b2cd7ff85b52f0212a99371a69fe27fdc3995a46a2126fc421dcf064cecb658324b391e3e43b2b5090d1b4383eed993bd72a185e8d6b36e467f7ec83bef5c0cdfa3ec14f58b440abc79f40995bd708d70b234109ccb68c4970fa82fbb4fe8e728ee443078f6da6f8df6eb4407bcd9f446706499e5d48dbf9d42a2b6a587af05994fa1ad109659419c5047e0c8c7eb477cc8061af47e236ac9f7630df587ca1a5cf8968dbe82a63aee8db1f68de0a3d605b136f009d32f71de82b962dfb440464b605861327f854177aac45f3b32b7f83a9cb1d18053523a99928a715da157253d5f860a05dee2e24189983a5637f0bc3bf682bc18e1b57c5c256e66e2ea5021fa047258a924bed1a265ab3882cc9b0b2671666496f144192985e2ede2733cb607cde990f546837e43bef644847b7a20d5959ff1f0c7a56fd1c0f5a8d9605b4cf2166e5d71fb6b355c98ed445d4beebca7f9c9ed85284590c8601727188567c613101203a1c68d473859017aac019842ecd49b0396fa6604ba94157b4979c7e56d1be190647370bd60d6b649794388a225fe42a81026b09efbaedf7231709a21fc16b6c236179504937da47ed402cc34c1216f63130465782303c6bcec28b6fd2f90cc276855b49552c9baa9301cece75a49805df075c53007462c73b3ab1d07b70aa47e0083ced756877c95647f4e582e6f6d5accfbcc06dc5cb27c9bc28ea41e62aef91a730b4b020a8513b3ce16a6dffdedabd0aaaa30863fcc1ff15ef872407b5f1957665610b28b91b862cf50fc03d8f6a4a26ac6ae6d8983407461204f10a0091978ccd1f8e42e6de17d2fa9280f5caca370756c67945bf41ccdc522f9d98ff94f92a42a583a6bd1bdc6fb0543ffa8b48c24d8c2cf54f75f5e675269da9e15e2c94759bf7f01c5e7996a230d85580ea1ca7717d1b72cdf9ee228d55068460203383364216d08efa8752fb1fe1ae42027438daedc3c143b9d6fbeccf9f5230561d859ed63e36f1e57de79c62d0d6d842aa1fbf60541e805706020ef2286270bf690e459b761805f36f53baef299dfcd15a8ec23fe88ceb985721d3e899b50c4ed1bed6326ba949e53406d4f9884554552a8dc49e4e9cdcb6d64c804045217386f102b55ec11eb5a8f0742a947230f024cef7cb9a0efb33d0cff69c9e48e4b89d2fc83955d0837f5b3e988651d5c35936c21fb3e493e2e528540cbdd51933c81a545d83f471edd4f9476e958d0597b3fe48040e6bd53ee2d59c43103b11d11e939b9c2b857067e5b4be3d9d1734f602e17d390fcb99140077eb109c5600fabc66c13b5d25d3e500a23ec3e1791f8520fef985078f4f9dd2016b10a8778013b0633d91a0ae6048525b64971570fd6c9be08f8d2cfe21e777499914841ab8a195f248f157cb366189e4ef9a3b981488469b406c7a4e8b3006fc16865d5c0fea0868f4bb0813881f673385974e9634accb028002042db49ce6b5b4f79243cc815117ccafe80df47a38864ad71b4eb6eab97865f85f095e36807ce42b25fb10e3db3805d633b8107672fd2616ea81202fdb8e49fe85f9c2964ea725fbc07192bbee49c869506795b38a366490ed27431811a3d85e0726fdd4e995f85c5d1db20c4ca594bf697077fef8fe5bc83820fc4e6088ddc248956b490019bb044fa2093ef793790a062f59dbfade8ebe0a2fd7f5c4869dc892249f18a4426e1b151016b785b5f823c8ad13f55aeededbc0fdb67a9ff8258a1dcda4b0be4841d9bdb319dfcbc775042824ef3e45f1df3b455d70398cb19aba6f733d045b77077df0411c75a8791e76ae911f192a8d4e11a53f0a51ed7da1cfa9cbd5ccd93d2f7167ede86503e8871ed84263a681639c515a621aa5c3fc368c0f3d2b74d23e8958c943b127a92387aa94d5216329f0d09e1b4f980cb435c7c8151b45fb0fca1ff9fe84362c7ead4c2031f0a30b7b83adf9f548b6e71118d68c089f04716a6083e4d13348b69e03a58ebdc945b27dda0a23f1d04da3301a9c5f5a786babcec7f4f7668104b5ec905117171918eaa53fb1425525656375bab32dee9a113f034eea4b9323629f1019e320bd03117312ecb004a81aa7cab6cdb9078f9debf6caf631ee16d1ced50e3a95500f8e3589647c85def1f2aa1cc0480185d0c139efb631017b9246572d9f4dedf8e043593ea6993be8f60fc73d74a2ff2606fd2ef11b969df6882652bab42a0f427d091427273dd545e2645a83469276b41cfa2adbef1b78216c1304af980cee8e57469fb458c2d9c4f1decbf7c2ea8f02f91f06275f3f762efb2a39a174a9f1cfdc9d3bac2e95626d903231012ffeaf504de68d89c0307b403dc1c908fedec7bf99fd1a3cf8b4389e33881e022f04fb04971bffc62f6105301e01b329db36f1cf176aefdea8f5dddf7987b0e043358fd611d9af6791ca3a72b3e8e154ac3d240494844d9c7567dfd873d63c7443e978eb47bad7fb090a480e215b26f4704a8d2377069ce4f426bf6a0e12202f5decfddee67ad735a32081d580fa30a1af395308b4299c33ce45f00bab6a3c1bb43d167f1c7f5cfe8114b550f90dc74cf36dc5c7d419f389dffa725ef43fa0f1b3dab52d0f22bad370681792f8fc44254bbb979ed80b3970ccce56bd7edc4c916132c75d01954afa2c5f3fc9060e537471e0603d93193931b4ae511c6d067b271e15789a9bb16a15ea5e07c95b789734eab61c8793b18c0eec5d81d5a258668d05346ad7fcc571ec7a810d01e2e4afc825b6ae90dab87f28b6ff00207fb60d685ea2fe06eb5c65fea9c7efdb64afb42f8d8f55c0c7b4e52beb3fc42fba6acff26c83c92ca499f5b7fcf94cb10cbc8dda78e87735b48d6c55d5132d3adf6ffe570f0caae79ce3b16aabe91e26eb13c70cc0af0314f7ff657d745563d6fae65ea65c636642a2c668a082b891842e0d0a4c34975ed3822df26eea31185d6ba1d87e1aad755465bf10be7f10e9892fc214ae2c482bc5bb44ac1e50f5470884a218046e4d41676011fbefa1cd4ae904d50aecdf4e2ba7a15ad3f194674836d9cd4cc8167007673bc10a55c752a5da42c0c130522d58f6a4b0d99152bfa3e92eb5fcdec7606b3981bd8c7b29647eede8a707ff9af3c2c11e9b7acaaf5346fedfaddc72b2b4b8a8afe1dfdf682c2dfb4ab85782125072daa4270994940b357f0e95b1e32d3cdfa3a6543da65b667f02f18472cdd13442632abed5ed6c3598803a2bbebcde74ed0e51b3539cb7db434b3c9398d98e00dcc1518bc2596088c997ad9cf30b424f8514eea766f647afc717bedc3b0be38067fbc6f062de086291055b6a824d35ad83a68d5a28fb79334039b8929548c9a7d1ec5b01a305e53f7af79b50f2729b2926113f937a4f3fd1cac803b544c73ec155f591fd45c93592d8f55340f1be29f5ce4726fd58540649b84143a01a3f35db37db812e4aea4f3ab0991ae3b1740b075a67195e8349fa6a529ce572da48995eff4345bb2d584a8022fcca353868326151c4576995a62aee1d4c0d33224d5313f14bc1e912948db9489b02c6df76988aea0d8c0e3cf4f29bd590f8a6c99b9a49c4735433632a03dd3c225a581177013b0c3f299bab4f6f79367a64e9f3e3728d04c8c7d0dc099cb7fcc20249fbf77c8c07c81eb68a6b2150632d4762cb819a98104cc8d3d252360cdf82818ecfa78eadad0b94bba75fd854139ec1e845fa35ade23733faaffe0ea66d1fa9b7eaa455738e6dd00c6c4fee0365660b635cb2219e3e1e11a510efa5a2a8c5af615ca02ba504f7bbfa9dc882c61607035e8c265587c95175186b43861ea724e21b1f34ecaa309d9b91edcafb38c3e05c2f92debd36cc16abc57dd33e4272d73ffd774995dac65f5540aacf26946a26d2d42117b75d08f21e2a5a290e7224f61a59fc38bd5a7a2d0dcc3edae632948b5bc3f732a4f0818ebd66a08fb496850346f48490fc05834630e1ae8d8e82ca25c96157ab6bc4fd2adaa3655aa3b6781628405ca6982b36b4a9a6b04436c9b3477b59cb0d47ee67abef284b1e7757cf72c2f845f9bd7a3bb7a1067a2eb9b6", &(0x7f0000001b00)="f45ba0dcd111", 0x4, r1, 0x4}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff4b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYRES8=r1], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 921.420496ms ago: executing program 0 (id=55): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x3}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f0000008280)=[{{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000300)=""/118, 0x76}, {&(0x7f0000000380)=""/147, 0x93}, {&(0x7f0000000440)=""/209, 0xd1}, {&(0x7f0000000540)=""/61, 0x3d}, {&(0x7f0000000580)=""/253, 0xfd}, {&(0x7f0000000680)=""/235, 0xeb}], 0x6, &(0x7f0000000800)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000940)=""/65, 0x41}, {&(0x7f00000009c0)=""/145, 0x91}, {&(0x7f0000000a80)=""/164, 0xa4}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/29, 0x1d}, {&(0x7f0000001b80)=""/119, 0x77}, {&(0x7f0000001c00)=""/169, 0xa9}], 0x7, &(0x7f0000001d40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000001dc0)=@abs, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001e40)=""/130, 0x82}], 0x1, &(0x7f0000001f40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000001f80), 0x6e, &(0x7f0000002280)=[{&(0x7f0000002000)=""/172, 0xac}, {&(0x7f00000020c0)=""/166, 0xa6}, {&(0x7f0000002180)=""/228, 0xe4}], 0x3, &(0x7f00000022c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000002380)=@abs, 0x6e, &(0x7f00000034c0)=[{&(0x7f0000002400)=""/136, 0x88}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x2, &(0x7f0000003500)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f00000035c0), 0x6e, &(0x7f0000008180)=[{&(0x7f0000003640)=""/240, 0xf0}, {&(0x7f0000004000)=""/4096, 0x1000}, {&(0x7f0000005000)=""/4096, 0x1000}, {&(0x7f0000006000)=""/4096, 0x1000}, {&(0x7f0000007000)=""/110, 0x6e}, {&(0x7f0000007080)=""/4096, 0x1000}, {&(0x7f0000008080)=""/233, 0xe9}], 0x7, &(0x7f0000008200)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}], 0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x69, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x4, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 630.551197ms ago: executing program 1 (id=58): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x3, 0x0}, 0x8) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x8000000000000003, {}, 0x2}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8=r3], &(0x7f00000000c0)='GPL\x00', 0xfa, 0x1000, &(0x7f000062b000)=""/4096, 0x40f00, 0x23, '\x00', r5, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x12, r3}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42404}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r6}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a05000000000000000000020000000900010073797a30000000000900020073797a3019"], 0xc0}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x8001, 0x5, 0x8, 0x1a95d2cb, 0x101, 0x9, 0x2, 0xc, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r8, &(0x7f00000000c0)=0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f0000000480)="70e490971d91232a4204f73bd7e6bc31bba5c54ff8b16bc41b1af9b1b371b8cdf8a9fa6718cd728147ab09bc8f56fcbcbdd7070a1ad3f7990cd6348faa05cd911a6c96737c2f56c19574545fe26567da9e91d63244a4542c49ea0d5b4b064b56720c5b82c241ff10732514a487f4f55b9d4d5f4de69eff5af673eb133642eeffca5c054a491976c20d847dbf482ad3c671e1182a01aaf842f7f3c498c09f", &(0x7f0000000540)=""/219, &(0x7f0000000640)="1f6a313d9bc598a8a4ba497100e8e38415fc73fb1b27099cff9961c9d5a394ddf74a25a396b32be22fe43b91cf48026e089577098111c4d0a529b95811cd77b07d2d9995c98b1a0ae6d797362ba2e509a414932c77559f4b32cfe938740d77bd4003bfd7c2553412490faa07457494d940cc0f3ce9198fafbafa4c04dcd44ec5d4a55726e3a9a5dfb2b10b", &(0x7f0000000700)="0765a8c0195d4012607faa1a92633fd0cca0054352", 0x0, r0}, 0x38) socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="840000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000010000054001280080001006774700048000280080007000000000a080004000000000014000800fe8000000000000000000000000000aa0800030005000000050005"], 0x84}}, 0x0) 581.433929ms ago: executing program 1 (id=59): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3400000018000101fd0f00000000000002000000fd000009000400000600150002000000100016800c000280"], 0x34}}, 0x44890) 580.904508ms ago: executing program 1 (id=60): r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000280)={"635e88f0", 0xf1, 0xd, 0x63, 0xfffffbff, 0xed, "f2c81d1e5f26a0b60979564db516f9", "11407a4a", "f0039c4b", "3a194aab", ["592ad56aaba512aa7e7d4687", "f989528865de18686a614093", "f26907ac93194161884d5580", "8c4d4311bce397cadd7e6c2f"]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000004c00)=ANY=[@ANYBLOB="043e7022"], 0x20) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x104, r2, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0xd4, 0x33, @data_frame={@msdu=@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_a, @random="92798397555c", @device_a, {0x1, 0x8}, "", @value={0x1, 0x0, 0x2, 0x0, 0x2}, @value=@ver_80211n={0x0, 0x6, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, @random="3a61f4976b9ce2a0adc5be5c51aa30dcb229c47273e4d30cc4a4f242b7525f75a1c302e1d8137e1a846b4b0dae697cb7b0b13c9fa94f6094cf76a659e76ff04e5b125ab233ad50f80dd6c3becdd24facae9e4e4fe0786364660535848179b977997f8a01488943c20e76aa33a096f05b5d9d10ec2ac59578152b19cf7c83e6ed72db438b106fbeb075e6cd596d4de5e27713d7ec38cac1a5679614669819a5c9db605dad225231e9dc7ca9159a03ff60f8cf"}}]}, 0x104}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xffffff71}}, './file0\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)={0x284, r2, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x3f}}}}, [@NL80211_ATTR_FRAME={0x18, 0x33, @ctrl_frame=@bar={{}, {0x2}, @device_b, @device_a, @compressed={{0x0, 0x0, 0x1, 0x0, 0xb}, {0x8, 0x4}}}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x883e}, @NL80211_ATTR_FRAME={0x98, 0x33, @ctrl_frame=@ba={{}, {0xf}, @device_a, @device_b, @basic={{0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x1}, "df278556714fcf349f242f1625652813bb4246ce08ddae38a9da94b327d3f5e9b07a649c480c8a682cbd93252c6677461d8c69274926bbe047bb9beef96196f88790729efee66b4110c30ef15f0d273574afb04f3142e0f01f764d3244b5a1000f41dbae279aeaba6d3ded6b11ef64eedf9d97b0e6bdbaabd1bf4368abaa6f33"}}}, @NL80211_ATTR_FRAME={0x7e, 0x33, @data_frame={@msdu=@type00={{0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x80}, @broadcast, @device_b, @random="1191498ecadd", {0xc}}, @random="284437feced79226ed7cdc21199d293d0c1e7c242f1720d3cab61b5a2d5ea3373e3477bac0ef32ccf2222257f88cfa54d3b82fd7ddb3ef5166ef0d81b76576d112a3dc2a3534bfed077fe5dcc4d96585faf78a629c2d3ef92c0a4a048dc86178cc02"}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7}, @device_a, @broadcast}}, @NL80211_ATTR_FRAME={0xef, 0x33, @mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x5f7}, @device_a, @broadcast, @from_mac=@broadcast, {0xa, 0x4}}, @void, @void, @val={0x3, 0x1, 0xb0}, @val={0x2d, 0x1a, {0x10, 0x1, 0x7, 0x0, {0x4, 0x9, 0x0, 0x6, 0x0, 0x0, 0x1, 0x2}, 0x0, 0x8, 0xcd}}, @void, [{0xdd, 0xb2, "0aef9f626dfb653e46b2cefc588932250ae4b4bd42371d9e7510983886f217a3fdee3564483634bcc0696e1043021144bc3029cfe80f89edefcea9f51cd4a0a8640359dc76a3cec066ddea13d69ca5e77f2d3a877eac5d0e9b1858dc1eac7391b06abcb4c7e5b3a9c6f3fc091d32b9b392a03e0be266e72ac8665dfbd547de914bbe1f908e3a911bb07849f102dcee4c1c2aec3510dc96ad02cdf48834630322e1ed0e36d59ee009427fa75c870a8150d92d"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x43fc}]}, 0x284}, 0x1, 0x0, 0x0, 0x840}, 0x10) 501.634675ms ago: executing program 1 (id=61): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRESOCT=r2, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYBLOB="e3c463d59aa8a57844ea56cf30858d273b1711287270c8e8c8129c40ad71b9f9af83d461bc2e6f0678cb090fe58ee3044977f8459feabd791ee63ec3f859eb15c8690f0ada01ed3bbfff9204ddda916cba4590a7b566fbdac7b9adf5db17ec4938ab542bca7becdcf86c02fa5e13a87238b5b17ceaf6872f31ca64c5be020db54a8f4dec58af136b6235d2e117c2e4ba13a87d42"], 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x44, 0x11, 0x839, 0x70bd28, 0x25dfdbfa, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xa, 0xc}, {0x5, 0xfff1}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x103}, {0xffffff32, 0xb, 0xffff474c}, {0x8, 0xb, 0xfffffff8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004884}, 0x8b1) 500.603425ms ago: executing program 1 (id=62): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x15) (async) ioctl$TIOCSSOFTCAR(r0, 0x5412, &(0x7f0000000540)=0x11) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x4) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) 421.225291ms ago: executing program 1 (id=63): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000100), 0x10) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000280)={&(0x7f00000002c0)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x8001) (async, rerun: 64) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x80, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010100}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1}}}}}}, 0x0) (async, rerun: 64) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x15, 0x0, 0x1}, {0x4}, {0x6, 0x0, 0x0, 0x6}]}) clock_gettime(0xfffffff2, &(0x7f0000000000)) 320.222424ms ago: executing program 2 (id=64): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35b6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884", 0x45}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c4e3356d16c7430f01c9c4c379052804b9800000c00f3235000100000f308fc9c801dc646467450f381d1cce650f07c4828d9f870a000000470f2245460f2241", 0x40}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) close(r3) ioctl$KVM_RUN(r4, 0xae80, 0x0) 181.442727ms ago: executing program 2 (id=65): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002800), 0x60c00, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f00000028c0)={0x10, 0x1}) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/fail_page_alloc/times\x00', 0x1, 0x0) write(r1, &(0x7f0000000580)='100\n\x00', 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000e0001310828a2af45bca2696d0000000f0002006e6174646576730200000000000000009b06000006001140ffff00000800130006000000050014000100"/78], 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x4010) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'ip_vti0\x00', 0x2000}) socket$packet(0x11, 0x2, 0x300) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) pwritev2(r5, 0x0, 0x0, 0xca3, 0xffff, 0x18) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x100000020, 0x3, 0x2, 0x106c, 0x102, 0x8000000000000, 0x1000000003, 0x0, 0x8, 0x10, 0x6, 0x0, 0x8000], 0x1, 0x3c4210}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06", 0x8, 0x4000000, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a"], 0x14}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}}, 0x0) recvmmsg(r6, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002160, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x7fffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq]}, 0xfffffffffffffeb3}}, 0x24040084) (async) socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 111.054617ms ago: executing program 3 (id=66): openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) listen(r1, 0x50) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000840)=""/4096, &(0x7f0000001840)=0x1000) (async) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000840)=""/4096, &(0x7f0000001840)=0x1000) listen(r0, 0x5) (async) listen(r0, 0x5) syz_emit_ethernet(0x4f, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c2d01000019840100000000000000000002000000010102fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@alu={0x7, 0x0, 0x5, 0x9, 0x0, 0x0, 0xfc7cce807af2adb8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x8}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000005c0), 0x87af, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000240)=""/187, 0xbb, 0x0, &(0x7f0000000440)=""/208, 0xd0}}, 0x10) r3 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) io_uring_setup(0x27e5, &(0x7f0000000040)={0x0, 0xf7ac, 0x200, 0x3, 0x21c, 0x0, r3}) (async) io_uring_setup(0x27e5, &(0x7f0000000040)={0x0, 0xf7ac, 0x200, 0x3, 0x21c, 0x0, r3}) io_uring_register$IORING_REGISTER_FILES(r3, 0x20, &(0x7f0000000000)=[r3], 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) setrlimit(0x7, &(0x7f0000000400)) ioctl$sock_SIOCGSKNS(r4, 0x894c, 0x0) 110.758748ms ago: executing program 2 (id=67): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a14000000090a01040000000000000000090960a5fe4ef43cf51fa12d1914620a0000042c0000000c0a010100000000000000000a0000060980a50073795f30000000000800044000000001040003801400000011"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0xd, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040080}, 0x40000) 104.960957ms ago: executing program 0 (id=68): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000200)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d02, 0xec000000}]}) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000040)={[0xe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8000000001002, 0x1, 0x6, 0x6, 0xffffffffffff0001, 0x4000002373, 0x80000000008bd9, 0xfffffffffffffefd, 0x7f, 0x20], 0x25000, 0x386343}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 102.786266ms ago: executing program 3 (id=69): setns(0xc9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000520000/0x1000)=nil, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) mmap(&(0x7f00008a9000/0x13000)=nil, 0x13000, 0x1000001, 0x11, r1, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x101100, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) ioctl$XFS_IOC_FSGROWFSLOG(r2, 0x4008586f, &(0x7f0000000000)={0x3, 0x2}) mount(&(0x7f00000001c0)=@filename='127.0.0.1:file0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='nfs4\x00', 0x0, &(0x7f0000000140)='addr=127.0.0.1,port=2049,clientaddr=127.0.0.1,minorversion=1\x00') 0s ago: executing program 2 (id=70): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0xd, 0x0, &(0x7f0000000100)) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, 0x0) (async) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f00000005c0)={0x20003, 0x0, {[0x5, 0x6, 0x40003, 0xa, 0xfffffffffffffffe, 0x6, 0xffffffff]}}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): [ 38.009631][ T42] audit: type=1400 audit(1785398301.763:114): avc: denied { rlimitinh } for pid=5640 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.016606][ T42] audit: type=1400 audit(1785398301.763:115): avc: denied { siginh } for pid=5640 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.592844][ T42] audit: type=1400 audit(1785398303.373:116): avc: denied { write } for pid=5645 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.657917][ T42] audit: type=1400 audit(1785398303.433:117): avc: denied { write } for pid=5648 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:45499' (ED25519) to the list of known hosts. [ 40.137475][ T42] audit: type=1400 audit(1785398303.913:118): avc: denied { name_bind } for pid=5653 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.181534][ T42] audit: type=1400 audit(1785398303.953:119): avc: denied { execute } for pid=5654 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.188515][ T42] audit: type=1400 audit(1785398303.953:120): avc: denied { execute_no_trans } for pid=5654 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.650805][ T42] audit: type=1400 audit(1785398304.423:121): avc: denied { write } for pid=5655 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.718148][ T42] audit: type=1400 audit(1785398304.493:122): avc: denied { write } for pid=5658 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.817718][ T42] audit: type=1400 audit(1785398304.593:123): avc: denied { write } for pid=5662 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.861777][ T42] audit: type=1400 audit(1785398304.633:124): avc: denied { write } for pid=5666 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.124457][ T42] audit: type=1400 audit(1785398304.903:125): avc: denied { write } for pid=5669 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.638165][ T5654] cgroup: Unknown subsys name 'net' [ 42.806722][ T5654] cgroup: Unknown subsys name 'cpuset' [ 42.813177][ T5654] cgroup: Unknown subsys name 'rlimit' [ 43.078450][ T5719] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.813708][ T5654] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.547969][ T42] kauditd_printk_skb: 35 callbacks suppressed [ 47.547989][ T42] audit: type=1400 audit(1785398311.323:161): avc: denied { execmem } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.743811][ T42] audit: type=1400 audit(1785398311.523:162): avc: denied { create } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.756335][ T42] audit: type=1400 audit(1785398311.523:163): avc: denied { read write } for pid=5734 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.765050][ T42] audit: type=1400 audit(1785398311.523:164): avc: denied { open } for pid=5734 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.773834][ T42] audit: type=1400 audit(1785398311.533:165): avc: denied { ioctl } for pid=5734 comm="syz-executor" path="socket:[8371]" dev="sockfs" ino=8371 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.774498][ T5741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.774617][ T5738] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.785084][ T5744] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.788349][ T5741] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.793438][ T5747] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.796502][ T5741] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.798529][ T5746] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.799144][ T5747] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.800256][ T5747] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.800883][ T5747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.803321][ T5747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.803650][ T5741] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.805096][ T5746] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.807230][ T5747] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.807734][ T42] audit: type=1400 audit(1785398311.583:166): avc: denied { read } for pid=5743 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.807868][ T42] audit: type=1400 audit(1785398311.583:167): avc: denied { open } for pid=5743 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.808845][ T42] audit: type=1400 audit(1785398311.583:168): avc: denied { mounton } for pid=5743 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.811862][ T5750] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.813115][ T5747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.813576][ T42] audit: type=1400 audit(1785398311.593:169): avc: denied { module_request } for pid=5743 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.816567][ T5750] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.820379][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.824242][ T5747] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.834415][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.842783][ T42] audit: type=1400 audit(1785398311.623:170): avc: denied { sys_module } for pid=5743 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.434494][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.438251][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.440769][ T5734] bridge_slave_0: entered allmulticast mode [ 48.444436][ T5734] bridge_slave_0: entered promiscuous mode [ 48.480426][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.482888][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.485230][ T5734] bridge_slave_1: entered allmulticast mode [ 48.488048][ T5734] bridge_slave_1: entered promiscuous mode [ 48.574972][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.605622][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.607991][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.610318][ T5735] bridge_slave_0: entered allmulticast mode [ 48.613076][ T5735] bridge_slave_0: entered promiscuous mode [ 48.618011][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.649833][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.652944][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.655904][ T5735] bridge_slave_1: entered allmulticast mode [ 48.658737][ T5735] bridge_slave_1: entered promiscuous mode [ 48.685800][ T5734] team0: Port device team_slave_0 added [ 48.710935][ T5734] team0: Port device team_slave_1 added [ 48.713274][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.716474][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.719572][ T5743] bridge_slave_0: entered allmulticast mode [ 48.723576][ T5743] bridge_slave_0: entered promiscuous mode [ 48.728650][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.744154][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.759813][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.762297][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.764610][ T5743] bridge_slave_1: entered allmulticast mode [ 48.767326][ T5743] bridge_slave_1: entered promiscuous mode [ 48.802632][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.804888][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.812807][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.825256][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.828299][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.830644][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.833122][ T5742] bridge_slave_0: entered allmulticast mode [ 48.836162][ T5742] bridge_slave_0: entered promiscuous mode [ 48.840668][ T5735] team0: Port device team_slave_0 added [ 48.843356][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.845579][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.854888][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.861230][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.865251][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.867732][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.870226][ T5742] bridge_slave_1: entered allmulticast mode [ 48.872905][ T5742] bridge_slave_1: entered promiscuous mode [ 48.885932][ T5735] team0: Port device team_slave_1 added [ 48.927358][ T5743] team0: Port device team_slave_0 added [ 48.941711][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.944458][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.953764][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.960616][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.966617][ T5743] team0: Port device team_slave_1 added [ 48.979600][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.981816][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.989920][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.999820][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.024017][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.026910][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.036692][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.068216][ T5734] hsr_slave_0: entered promiscuous mode [ 49.072367][ T5734] hsr_slave_1: entered promiscuous mode [ 49.075941][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.078361][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.087272][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.102702][ T5742] team0: Port device team_slave_0 added [ 49.124765][ T5742] team0: Port device team_slave_1 added [ 49.143794][ T5735] hsr_slave_0: entered promiscuous mode [ 49.146980][ T5735] hsr_slave_1: entered promiscuous mode [ 49.149910][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 49.152472][ T5735] Cannot create hsr debugfs directory [ 49.216732][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.219661][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.229758][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.244222][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.246540][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.254616][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.261375][ T5743] hsr_slave_0: entered promiscuous mode [ 49.263865][ T5743] hsr_slave_1: entered promiscuous mode [ 49.265994][ T5743] debugfs: 'hsr0' already exists in 'hsr' [ 49.267788][ T5743] Cannot create hsr debugfs directory [ 49.414969][ T5742] hsr_slave_0: entered promiscuous mode [ 49.417817][ T5742] hsr_slave_1: entered promiscuous mode [ 49.420770][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 49.423729][ T5742] Cannot create hsr debugfs directory [ 49.662481][ T5734] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.670720][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.674561][ T5734] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.681217][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.687191][ T5734] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.691778][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.695192][ T5734] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.700138][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.743676][ T5735] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.749278][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.755551][ T5735] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.761868][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.765450][ T5735] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.769668][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.773303][ T5735] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.778503][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.848449][ T5742] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.853148][ T5094] Bluetooth: hci1: command tx timeout [ 49.853154][ T5747] Bluetooth: hci2: command tx timeout [ 49.853673][ T5744] Bluetooth: hci0: command tx timeout [ 49.854249][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.855359][ T5742] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.866854][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.877640][ T5742] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.881734][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.885161][ T5742] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.891653][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.932305][ T5744] Bluetooth: hci3: command tx timeout [ 49.968945][ T5743] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.974259][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.976997][ T5743] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.983513][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.988679][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.992717][ T5743] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.999427][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.004990][ T5743] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.010847][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.048600][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.074715][ T163] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.077234][ T163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.093606][ T163] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.096042][ T163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.108335][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.137657][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.155995][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.174431][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.182482][ T163] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.185070][ T163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.196497][ T163] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.198857][ T163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.202269][ T163] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.204729][ T163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.213966][ T163] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.216786][ T163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.226856][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.258779][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.276823][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.279267][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.285990][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.289087][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.355096][ T5743] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.534331][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.574044][ T5734] veth0_vlan: entered promiscuous mode [ 50.585226][ T5734] veth1_vlan: entered promiscuous mode [ 50.617716][ T5734] veth0_macvtap: entered promiscuous mode [ 50.626221][ T5734] veth1_macvtap: entered promiscuous mode [ 50.637546][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.650089][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.666473][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.669972][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.687398][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.691011][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.699554][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.706589][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.709427][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.768721][ T5742] veth0_vlan: entered promiscuous mode [ 50.771268][ T5735] veth0_vlan: entered promiscuous mode [ 50.793354][ T163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.796329][ T163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.810421][ T5735] veth1_vlan: entered promiscuous mode [ 50.814356][ T5742] veth1_vlan: entered promiscuous mode [ 50.836108][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.839458][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.846243][ T5743] veth0_vlan: entered promiscuous mode [ 50.857955][ T5743] veth1_vlan: entered promiscuous mode [ 50.879747][ T5742] veth0_macvtap: entered promiscuous mode [ 50.884211][ T5734] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.890363][ T5742] veth1_macvtap: entered promiscuous mode [ 50.901517][ T5735] veth0_macvtap: entered promiscuous mode [ 50.913580][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.917779][ T5743] veth0_macvtap: entered promiscuous mode [ 50.926349][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.929030][ T5735] veth1_macvtap: entered promiscuous mode [ 50.934730][ T5743] veth1_macvtap: entered promiscuous mode [ 50.950297][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.960024][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.963510][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.968964][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.971385][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.980935][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.990147][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.001539][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.011584][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.016361][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.027124][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.030867][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.036991][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.051584][ T5888] syz.3.5 uses obsolete (PF_INET,SOCK_PACKET) [ 51.052306][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.074214][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.084492][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.087238][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.090248][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.149482][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.153807][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.168172][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.171451][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.188173][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.190929][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.208231][ T163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.211392][ T163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.237908][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.240920][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.395403][ T5881] IPVS: starting estimator thread 0... [ 51.439437][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'. [ 51.442869][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'. [ 51.492341][ T5908] IPVS: using max 26 ests per chain, 62400 per kthread [ 51.599792][ T5926] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13'. [ 51.791801][ T5937] netlink: 'syz.0.18': attribute type 1 has an invalid length. [ 51.866161][ T5940] vlan2: entered allmulticast mode [ 51.867819][ T5940] macsec0: entered allmulticast mode [ 51.869634][ T5940] veth1_macvtap: entered allmulticast mode [ 51.871043][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.875110][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.877770][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.880316][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.884300][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.887352][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.889911][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.892739][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.896238][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.899359][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.903726][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.906488][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.909651][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.912744][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.916003][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.918682][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.921921][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.925996][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.930503][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.932332][ T5744] Bluetooth: hci1: command tx timeout [ 51.933329][ T5747] Bluetooth: hci2: command tx timeout [ 51.938404][ T5094] Bluetooth: hci0: command tx timeout [ 51.940120][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.943888][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.947845][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.950872][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.954392][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.957432][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.961696][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.965940][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.969420][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.972690][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.975898][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.978406][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.978425][ T5947] syzkaller0: entered promiscuous mode [ 51.983726][ T5947] syzkaller0: entered allmulticast mode [ 51.984242][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.989682][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.995073][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.997901][ T5947] tipc: Started in network mode [ 51.997988][ T5943] overlayfs: failed to resolve './file0': -2 [ 51.999757][ T5947] tipc: Node identity a6c53d328f51, cluster identity 4711 [ 52.004342][ T5947] tipc: Enabled bearer , priority 0 [ 52.004517][ T5943] overlayfs: failed to resolve './file0': -2 [ 52.010180][ T5943] overlayfs: failed to resolve './file0': -2 [ 52.010270][ T5946] tipc: Resetting bearer [ 52.016542][ T5943] overlayfs: failed to resolve './file0': -2 [ 52.019173][ T5943] overlayfs: failed to resolve './file0': -2 [ 52.022418][ T5094] Bluetooth: hci3: command tx timeout [ 52.023099][ T5943] overlayfs: failed to resolve './file0': -2 [ 52.023391][ T5946] tipc: Disabling bearer [ 52.030411][ T5943] overlayfs: failed to resolve './file0': -2 [ 52.033263][ T5943] overlayfs: failed to resolve './file0': -2 [ 52.035739][ T5943] overlayfs: failed to resolve './file0': -2 [ 52.041055][ T5943] overlayfs: failed to resolve './file0': -2 [ 52.045038][ T5943] overlayfs: failed to resolve './file0': -2 [ 52.048267][ T5943] overlayfs: failed to resolve './file0': -2 [ 52.051484][ T5943] overlayfs: failed to resolve './file0': -2 [ 52.055356][ T5943] overlayfs: failed to resolve './file0': -2 [ 52.058598][ T5943] overlayfs: failed to resolve './file0': -2 [ 52.061732][ T5943] overlayfs: failed to resolve './file0': -2 [ 52.065318][ T5943] overlayfs: failed to resolve './file0': -2 [ 52.068473][ T5943] overlayfs: failed to resolve './file0': -2 [ 52.071456][ T5943] overlayfs: failed to resolve './file0': -2 [ 52.075904][ T5943] overlayfs: failed to resolve './file0': -2 [ 52.078975][ T5943] overlayfs: failed to resolve './file0': -2 [ 52.082131][ T5943] overlayfs: failed to resolve './file0': -2 [ 52.085502][ T5943] overlayfs: failed to resolve './file0': -2 [ 52.087980][ T5943] overlayfs: failed to resolve './file0': -2 [ 52.090995][ T5943] overlayfs: failed to resolve './file0': -2 [ 52.096336][ T5943] overlayfs: failed to resolve './file0': -2 [ 52.098925][ T5943] overlayfs: failed to resolve './file0': -2 [ 52.101732][ T5943] overlayfs: failed to resolve './file0': -2 [ 52.104559][ T5943] overlayfs: failed to resolve './file0': -2 [ 52.108341][ T5943] overlayfs: failed to resolve './file0': -2 [ 52.111887][ T5943] overlayfs: failed to resolve './file0': -2 [ 52.158882][ T5951] hugetlbfs: syz.0.22 (5951): Using mlock ulimits for SHM_HUGETLB is obsolete [ 52.252259][ T5967] netlink: 'syz.3.26': attribute type 1 has an invalid length. [ 52.266392][ T5964] hfs: unable to load iocharset "io#harset" [ 52.407203][ T5981] overlayfs: failed to resolve './file1': -2 [ 52.463752][ T5930] orangefs_mount: mount request failed with -4 [ 52.610690][ T6009] netlink: 28 bytes leftover after parsing attributes in process `syz.3.37'. [ 52.614607][ T6009] netlink: 28 bytes leftover after parsing attributes in process `syz.3.37'. [ 52.617956][ T6010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.37'. [ 52.620601][ T6010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.37'. [ 52.623669][ T6010] Zero length message leads to an empty skb [ 52.670529][ T42] kauditd_printk_skb: 104 callbacks suppressed [ 52.670548][ T42] audit: type=1326 audit(2000000000.390:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6011 comm="syz.3.39" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f041999df99 code=0x0 [ 52.672168][ T5838] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 52.723817][ T42] audit: type=1400 audit(2000000000.450:276): avc: denied { create } for pid=6011 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 52.730701][ T6017] CIFS: bad ip= option (.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð) [ 52.738042][ T42] audit: type=1400 audit(2000000000.460:277): avc: denied { write } for pid=6011 comm="syz.3.39" path="socket:[10436]" dev="sockfs" ino=10436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 52.832404][ T5838] usb 5-1: Using ep0 maxpacket: 32 [ 52.837253][ T5838] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 52.841004][ T5838] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 52.844950][ T5838] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 52.846507][ T42] audit: type=1400 audit(2000000000.570:278): avc: denied { map } for pid=6019 comm="syz.2.40" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 52.848783][ T5838] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 52.860224][ T42] audit: type=1400 audit(2000000000.570:279): avc: denied { read } for pid=6019 comm="syz.2.40" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 52.867604][ T5838] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 52.876254][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.879164][ T5838] usb 5-1: Product: syz [ 52.880484][ T5838] usb 5-1: Manufacturer: syz [ 52.881965][ T5838] usb 5-1: SerialNumber: syz [ 52.895244][ C3] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 52.899699][ T5838] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input5 [ 52.982165][ T1358] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 53.112570][ T5838] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 53.115790][ T5838] (id 0x00) [ 53.146519][ T1358] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 53.150010][ T1358] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 53.153918][ T1358] usb 6-1: config 0 interface 0 has no altsetting 0 [ 53.159170][ T1358] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 53.162994][ T1358] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 53.166284][ T1358] usb 6-1: Product: syz [ 53.167967][ T1358] usb 6-1: Manufacturer: syz [ 53.170019][ T1358] usb 6-1: SerialNumber: syz [ 53.172156][ T5838] rc_core: IR keymap rc-imon-pad not found [ 53.174330][ T5838] Registered IR keymap rc-empty [ 53.175432][ T1358] usb 6-1: config 0 descriptor?? [ 53.176264][ T5838] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 53.180762][ T1358] hub 6-1:0.0: bad descriptor, ignoring hub [ 53.181547][ T5838] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 53.184423][ T1358] hub 6-1:0.0: probe with driver hub failed with error -5 [ 53.195800][ T1358] usb 6-1: selecting invalid altsetting 0 [ 53.313415][ T5838] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0 [ 53.319385][ T5838] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input6 [ 53.330115][ T5838] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:2> initialized [ 53.558105][ T42] audit: type=1400 audit(2000000001.280:280): avc: denied { ioctl } for pid=6029 comm="syz.3.42" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10449 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.559588][ T6030] veth1_macvtap: left promiscuous mode [ 53.571898][ T6030] macsec0: entered promiscuous mode [ 53.573794][ T6030] macsec0: entered allmulticast mode [ 53.599594][ T6030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.42'. [ 53.604568][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.608432][ T6030] veth1_macvtap: entered promiscuous mode [ 53.610468][ T6030] veth1_macvtap: entered allmulticast mode [ 53.612862][ T6030] macsec0: left promiscuous mode [ 53.614964][ T6030] macsec0: left allmulticast mode [ 53.616633][ T6030] veth1_macvtap: left allmulticast mode [ 53.621353][ T6030] veth1_macvtap: left promiscuous mode [ 53.623373][ T6030] macsec0: entered promiscuous mode [ 53.625114][ T6030] macsec0: entered allmulticast mode [ 53.656910][ T42] audit: type=1400 audit(2000000001.380:281): avc: denied { read write } for pid=6036 comm="syz.3.43" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 53.666880][ T42] audit: type=1400 audit(2000000001.380:282): avc: denied { create } for pid=6036 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.674941][ T42] audit: type=1400 audit(2000000001.380:283): avc: denied { write } for pid=6036 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.681101][ T42] audit: type=1400 audit(2000000001.380:284): avc: denied { nlmsg_write } for pid=6036 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.763018][ T6051] imon:display_open: display port is already open [ 53.803454][ T6007] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 54.012230][ T5094] Bluetooth: hci0: command tx timeout [ 54.012473][ T5744] Bluetooth: hci1: command tx timeout [ 54.015636][ T5747] Bluetooth: hci2: command tx timeout [ 54.044113][ T1134] ata1.00: exception Emask 0x0 SAct 0x20000 SErr 0x0 action 0x6 [ 54.047484][ T1134] ata1.00: waking up from sleep [ 54.049347][ T1134] ata1: hard resetting link [ 54.092107][ T5747] Bluetooth: hci3: command tx timeout [ 54.170100][ T6007] usb 6-1: failed to restore interface 0 altsetting 251 (error=-71) [ 54.177861][ T1358] usb 6-1: USB disconnect, device number 2 [ 54.210705][ T5881] usb 5-1: USB disconnect, device number 2 [ 54.374958][ T1134] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 54.380937][ T1134] ata1.00: configured for UDMA/100 [ 54.383713][ T1134] ata1: EH complete [ 54.533100][ T6082] tmpfs: Bad value for 'mpol' [ 54.958144][ T6104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.57'. [ 55.038382][ T6107] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 55.048969][ T6107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.58'. [ 55.095241][ T6109] netlink: 'syz.1.59': attribute type 2 has an invalid length. [ 55.565598][ T6136] IPVS: length: 4096 != 24 [ 55.567287][ T6135] IPVS: length: 4096 != 24 [ 55.649524][ T6139] vhci_hcd vhci_hcd.0: remove, state 4 [ 55.656395][ T6139] usb usb38: USB disconnect, device number 1 [ 55.701464][ T12] vhci_hcd vhci_hcd.0: stop threads [ 55.704140][ T12] vhci_hcd vhci_hcd.0: release socket [ 55.706423][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 55.711807][ T12] vhci_hcd vhci_hcd.0: stop threads [ 55.714136][ T12] vhci_hcd vhci_hcd.0: release socket [ 55.718025][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 55.720748][ T12] vhci_hcd vhci_hcd.0: stop threads [ 55.723118][ T12] vhci_hcd vhci_hcd.0: release socket [ 55.725600][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 55.728989][ T12] vhci_hcd vhci_hcd.0: stop threads [ 55.731332][ T12] vhci_hcd vhci_hcd.0: release socket [ 55.733750][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 55.736329][ T12] vhci_hcd vhci_hcd.0: stop threads [ 55.738622][ T12] vhci_hcd vhci_hcd.0: release socket [ 55.740884][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 55.744828][ T12] vhci_hcd vhci_hcd.0: stop threads [ 55.746754][ T12] vhci_hcd vhci_hcd.0: release socket [ 55.748494][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 55.750398][ T12] vhci_hcd vhci_hcd.0: stop threads [ 55.752179][ T12] vhci_hcd vhci_hcd.0: release socket [ 55.753932][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 55.755834][ T12] vhci_hcd vhci_hcd.0: stop threads [ 55.757482][ T12] vhci_hcd vhci_hcd.0: release socket [ 55.759296][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 55.761067][ T6139] vhci_hcd vhci_hcd.0: USB bus 38 deregistered [ 55.767593][ T6139] vhci_hcd vhci_hcd.0: remove, state 4 [ 55.769957][ T6139] usb usb37: USB disconnect, device number 1 [ 55.795704][ T6139] vhci_hcd vhci_hcd.0: USB bus 37 deregistered [ 55.796424][ T12] vhci_hcd vhci_hcd.0: stop threads [ 55.803029][ T12] ================================================================== [ 55.805665][ T12] BUG: KASAN: slab-use-after-free in vhci_shutdown_connection.cold+0x2f1/0x37c [ 55.808560][ T12] Read of size 8 at addr ffff88802d110530 by task kworker/u32:0/12 [ 55.812640][ T12] [ 55.813760][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted syzkaller #0 PREEMPT(full) [ 55.813774][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.813789][ T12] Workqueue: usbip_event event_handler [ 55.813810][ T12] Call Trace: [ 55.813821][ T12] [ 55.813825][ T12] dump_stack_lvl+0x100/0x190 [ 55.813841][ T12] print_report+0x13d/0x4b0 [ 55.813858][ T12] ? __virt_addr_valid+0x239/0x430 [ 55.813873][ T12] ? vhci_shutdown_connection.cold+0x2f1/0x37c [ 55.813893][ T12] kasan_report+0xdf/0x1c0 [ 55.813908][ T12] ? vhci_shutdown_connection.cold+0x2f1/0x37c [ 55.813927][ T12] vhci_shutdown_connection.cold+0x2f1/0x37c [ 55.813946][ T12] event_handler+0x216/0x570 [ 55.813957][ T12] process_one_work+0xa23/0x1940 [ 55.813972][ T12] ? __pfx_process_one_work+0x10/0x10 [ 55.813986][ T12] ? __pfx_event_handler+0x10/0x10 [ 55.813996][ T12] worker_thread+0x5ef/0xe50 [ 55.814010][ T12] ? kthread+0x13a/0x450 [ 55.814020][ T12] ? __pfx_worker_thread+0x10/0x10 [ 55.814032][ T12] kthread+0x370/0x450 [ 55.814042][ T12] ? __pfx_kthread+0x10/0x10 [ 55.814052][ T12] ret_from_fork+0x72b/0xd50 [ 55.814069][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 55.814085][ T12] ? __switch_to+0x800/0x10f0 [ 55.814096][ T12] ? __pfx_kthread+0x10/0x10 [ 55.814106][ T12] ret_from_fork_asm+0x1a/0x30 [ 55.814125][ T12] [ 55.814129][ T12] [ 55.862212][ T12] Allocated by task 1: [ 55.863479][ T12] kasan_save_stack+0x30/0x50 [ 55.864945][ T12] kasan_save_track+0x14/0x30 [ 55.866396][ T12] __kasan_kmalloc+0xaa/0xb0 [ 55.868000][ T12] __kmalloc_noprof+0x322/0x820 [ 55.869972][ T12] __usb_create_hcd+0x5e/0xac0 [ 55.871913][ T12] vhci_hcd_probe+0xf3/0x4e0 [ 55.873736][ T12] platform_probe+0x106/0x1d0 [ 55.875749][ T12] really_probe+0x241/0xa60 [ 55.877540][ T12] __driver_probe_device+0x20e/0x450 [ 55.879672][ T12] driver_probe_device+0x4a/0x140 [ 55.881668][ T12] __device_attach_driver+0x1df/0x320 [ 55.883927][ T12] bus_for_each_drv+0x159/0x1e0 [ 55.885896][ T12] __device_attach+0x1e4/0x4d0 [ 55.887765][ T12] device_initial_probe+0xaf/0xd0 [ 55.889707][ T12] bus_probe_device+0x64/0x160 [ 55.891529][ T12] device_add+0x121d/0x1970 [ 55.893429][ T12] platform_device_add+0x35a/0x800 [ 55.895578][ T12] platform_device_register_full+0x5cf/0x830 [ 55.898053][ T12] vhci_hcd_init+0x1a1/0x2f0 [ 55.899846][ T12] do_one_initcall+0x11d/0x700 [ 55.901402][ T12] kernel_init_freeable+0x6ea/0x7b0 [ 55.903042][ T12] kernel_init+0x1f/0x1e0 [ 55.904450][ T12] ret_from_fork+0x72b/0xd50 [ 55.906048][ T12] ret_from_fork_asm+0x1a/0x30 [ 55.907968][ T12] [ 55.908831][ T12] Freed by task 6139: [ 55.910174][ T12] kasan_save_stack+0x30/0x50 [ 55.911663][ T12] kasan_save_track+0x14/0x30 [ 55.913512][ T12] kasan_save_free_info+0x3b/0x70 [ 55.915382][ T12] __kasan_slab_free+0x5f/0x80 [ 55.916897][ T12] kfree+0x22b/0x6c0 [ 55.918192][ T12] usb_put_hcd+0x149/0x1f0 [ 55.919616][ T12] vhci_hcd_remove+0x107/0x1b0 [ 55.921199][ T12] platform_remove+0x5f/0x80 [ 55.922676][ T12] device_remove+0xcb/0x180 [ 55.924142][ T12] device_release_driver_internal+0x44e/0x620 [ 55.926064][ T12] unbind_store+0xf8/0x110 [ 55.927506][ T12] drv_attr_store+0x74/0xb0 [ 55.929233][ T12] sysfs_kf_write+0xf2/0x150 [ 55.930749][ T12] kernfs_fop_write_iter+0x3e0/0x5f0 [ 55.932739][ T12] vfs_write+0x6ac/0x1050 [ 55.934145][ T12] ksys_write+0x12a/0x250 [ 55.935827][ T12] do_syscall_64+0x115/0x870 [ 55.937299][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.939196][ T12] [ 55.939961][ T12] Last potentially related work creation: [ 55.941782][ T12] kasan_save_stack+0x30/0x50 [ 55.943283][ T12] kasan_record_aux_stack+0xa7/0xc0 [ 55.945104][ T12] insert_work+0x36/0x230 [ 55.946573][ T12] __queue_work+0x9bc/0x12b0 [ 55.948237][ T12] queue_work_on+0x1a9/0x1e0 [ 55.949732][ T12] usb_hcd_giveback_urb+0x330/0x4a0 [ 55.951378][ T12] unlink1+0x418/0x510 [ 55.952679][ T12] usb_hcd_unlink_urb+0x131/0x210 [ 55.954281][ T12] usb_kill_urb+0x121/0x320 [ 55.955735][ T12] hub_quiesce+0x1e9/0x320 [ 55.957172][ T12] hub_suspend+0x4ab/0x9e0 [ 55.958794][ T12] usb_suspend_both+0x288/0x950 [ 55.960348][ T12] usb_runtime_suspend+0x49/0x120 [ 55.961970][ T12] __rpm_callback+0xc8/0x620 [ 55.963631][ T12] rpm_callback+0x16a/0x1b0 [ 55.965092][ T12] rpm_suspend+0x2f4/0x11a0 [ 55.966527][ T12] __pm_runtime_suspend+0xba/0x1a0 [ 55.968164][ T12] usb_new_device.cold+0xd61/0x115c [ 55.969805][ T12] register_root_hub+0x4e6/0x639 [ 55.971363][ T12] usb_add_hcd.cold+0xccd/0x1158 [ 55.972928][ T12] vhci_hcd_probe+0x14b/0x4e0 [ 55.974633][ T12] platform_probe+0x106/0x1d0 [ 55.976515][ T12] really_probe+0x241/0xa60 [ 55.978078][ T12] __driver_probe_device+0x20e/0x450 [ 55.979791][ T12] driver_probe_device+0x4a/0x140 [ 55.981395][ T12] __device_attach_driver+0x1df/0x320 [ 55.983091][ T12] bus_for_each_drv+0x159/0x1e0 [ 55.984669][ T12] __device_attach+0x1e4/0x4d0 [ 55.986214][ T12] device_initial_probe+0xaf/0xd0 [ 55.987944][ T12] bus_probe_device+0x64/0x160 [ 55.989557][ T12] device_add+0x121d/0x1970 [ 55.991028][ T12] platform_device_add+0x35a/0x800 [ 55.992645][ T12] platform_device_register_full+0x5cf/0x830 [ 55.994553][ T12] vhci_hcd_init+0x1a1/0x2f0 [ 55.996309][ T12] do_one_initcall+0x11d/0x700 [ 55.998084][ T12] kernel_init_freeable+0x6ea/0x7b0 [ 55.999725][ T12] kernel_init+0x1f/0x1e0 [ 56.001274][ T12] ret_from_fork+0x72b/0xd50 [ 56.003112][ T12] ret_from_fork_asm+0x1a/0x30 [ 56.004774][ T12] [ 56.005685][ T12] Second to last potentially related work creation: [ 56.007997][ T12] kasan_save_stack+0x30/0x50 [ 56.009551][ T12] kasan_record_aux_stack+0xa7/0xc0 [ 56.011194][ T12] insert_work+0x36/0x230 [ 56.012565][ T12] __queue_work+0x9bc/0x12b0 [ 56.014037][ T12] queue_work_on+0x1a9/0x1e0 [ 56.015512][ T12] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 56.017153][ T12] usb_hcd_submit_urb+0xab7/0x2150 [ 56.018892][ T12] usb_submit_urb+0x827/0x19b0 [ 56.020399][ T12] usb_start_wait_urb+0x10e/0x580 [ 56.021994][ T12] usb_control_msg+0x328/0x4b0 [ 56.023505][ T12] hub_ext_port_status+0x152/0x600 [ 56.025141][ T12] hub_activate+0x6e5/0x1c40 [ 56.026618][ T12] process_one_work+0xa23/0x1940 [ 56.028207][ T12] worker_thread+0x5ef/0xe50 [ 56.029684][ T12] kthread+0x370/0x450 [ 56.030977][ T12] ret_from_fork+0x72b/0xd50 [ 56.032444][ T12] ret_from_fork_asm+0x1a/0x30 [ 56.033975][ T12] [ 56.034769][ T12] The buggy address belongs to the object at ffff88802d110000 [ 56.034769][ T12] which belongs to the cache kmalloc-8k of size 8192 [ 56.039286][ T12] The buggy address is located 1328 bytes inside of [ 56.039286][ T12] freed 8192-byte region [ffff88802d110000, ffff88802d112000) [ 56.043558][ T12] [ 56.044354][ T12] The buggy address belongs to the physical page: [ 56.046388][ T12] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d110 [ 56.049311][ T12] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 56.051964][ T12] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 56.054349][ T12] page_type: f5(slab) [ 56.055634][ T12] raw: 00fff00000000040 ffff88801bc43180 dead000000000122 0000000000000000 [ 56.058367][ T12] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 56.061023][ T12] head: 00fff00000000040 ffff88801bc43180 dead000000000122 0000000000000000 [ 56.063718][ T12] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 56.066426][ T12] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 56.069356][ T12] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 56.072078][ T12] page dumped because: kasan: bad access detected [ 56.074117][ T12] page_owner tracks the page as allocated [ 56.075906][ T12] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 9433673416, free_ts 0 [ 56.082059][ T12] post_alloc_hook+0xfd/0x120 [ 56.083560][ T12] get_page_from_freelist+0xf48/0x3530 [ 56.085291][ T12] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 56.087162][ T12] new_slab+0xa2/0x640 [ 56.088489][ T12] refill_objects+0xe3/0x410 [ 56.089965][ T12] __pcs_replace_empty_main+0x376/0x680 [ 56.091707][ T12] __kmalloc_cache_noprof+0x479/0x6c0 [ 56.093404][ T12] dummy_hcd_init+0x3ce/0xc00 [ 56.094917][ T12] do_one_initcall+0x11d/0x700 [ 56.096466][ T12] kernel_init_freeable+0x6ea/0x7b0 [ 56.098118][ T12] kernel_init+0x1f/0x1e0 [ 56.099501][ T12] ret_from_fork+0x72b/0xd50 [ 56.100988][ T12] ret_from_fork_asm+0x1a/0x30 [ 56.102514][ T12] page_owner free stack trace missing [ 56.104227][ T12] [ 56.104998][ T12] Memory state around the buggy address: [ 56.106765][ T12] ffff88802d110400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 56.109261][ T12] ffff88802d110480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 56.111766][ T12] >ffff88802d110500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 56.114293][ T12] ^ [ 56.116056][ T12] ffff88802d110580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 56.118555][ T12] ffff88802d110600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 56.121055][ T12] ================================================================== [ 56.125566][ T5747] Bluetooth: hci1: command tx timeout [ 56.125713][ T5744] Bluetooth: hci2: command tx timeout [ 56.127383][ T5747] Bluetooth: hci0: command tx timeout [ 56.131991][ T12] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 56.134344][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted syzkaller #0 PREEMPT(full) [ 56.137270][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.140433][ T12] Workqueue: usbip_event event_handler [ 56.142175][ T12] Call Trace: [ 56.143245][ T12] [ 56.144210][ T12] dump_stack_lvl+0x100/0x190 [ 56.145731][ T12] vpanic+0x552/0x970 [ 56.146999][ T12] ? __pfx_vpanic+0x10/0x10 [ 56.148434][ T12] ? mark_held_locks+0x40/0x70 [ 56.149989][ T12] ? vhci_shutdown_connection.cold+0x2f1/0x37c [ 56.151924][ T12] panic+0xd1/0xe0 [ 56.153113][ T12] ? __pfx_panic+0x10/0x10 [ 56.154589][ T12] ? vhci_shutdown_connection.cold+0x2f1/0x37c [ 56.156533][ T12] ? preempt_schedule_common+0x42/0xc0 [ 56.158268][ T12] ? check_panic_on_warn+0x1f/0x90 [ 56.159876][ T12] check_panic_on_warn.cold+0x19/0x34 [ 56.161578][ T12] end_report.part.0+0x3a/0x90 [ 56.163097][ T12] kasan_report.cold+0xe/0x18 [ 56.164606][ T12] ? vhci_shutdown_connection.cold+0x2f1/0x37c [ 56.166563][ T12] vhci_shutdown_connection.cold+0x2f1/0x37c [ 56.168440][ T12] event_handler+0x216/0x570 [ 56.169917][ T12] process_one_work+0xa23/0x1940 [ 56.171480][ T12] ? __pfx_process_one_work+0x10/0x10 [ 56.173164][ T12] ? __pfx_event_handler+0x10/0x10 [ 56.174827][ T12] worker_thread+0x5ef/0xe50 [ 56.176296][ T12] ? kthread+0x13a/0x450 [ 56.177663][ T12] ? __pfx_worker_thread+0x10/0x10 [ 56.179273][ T12] kthread+0x370/0x450 [ 56.180568][ T12] ? __pfx_kthread+0x10/0x10 [ 56.182048][ T12] ret_from_fork+0x72b/0xd50 [ 56.183511][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 56.185181][ T12] ? __switch_to+0x800/0x10f0 [ 56.186778][ T12] ? __pfx_kthread+0x10/0x10 [ 56.188265][ T12] ret_from_fork_asm+0x1a/0x30 [ 56.189841][ T12] [ 56.191452][ T12] Kernel Offset: disabled [ 56.192820][ T12] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:58:39 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a38b65 RDI=ffffffff9ba07b40 RBP=ffffffff9ba07b00 RSP=ffffc900000f75d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000061 R14=ffffffff9b6fa209 R15=ffffffff85a38b00 RIP=ffffffff85a38b8f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ddc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc9db75da08 CR3=000000003f058000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea497ae76 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea497ae76 00007ffea497ae7c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0419a354a7 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0419a354e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0419a3564b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0419a354d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000306f65 6469762f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000134c46 474a550c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0419bf15f8 00007f0419bf15c8 00007f0419bf1600 00007f0419bf15e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000041 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000081f5ced5 RBX=ffffffff81f5ced5 RCX=ffffffff81f5cd65 RDX=ffffffff81f5ced5 RSI=ffffffff81f5ced5 RDI=000000000000000d RBP=0000000000000000 RSP=00007ffea497a9c8 R8 =00007f0419c10000 R9 =00007f0419c12000 R10=0000000081f5ced9 R11=000000000000000d R12=00007f0419c26038 R13=0000000000050aab R14=ffffffff81f5ced5 R15=00007f041a755720 RIP=00007f04198517b0 RFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055558e9e6500 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3e7e43 CR3=000000003f058000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0030656c69663a31 2e302e302e373231 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea497ae76 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea497ae76 00007ffea497ae7c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0419a354a7 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0419a354e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0419a3564b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0419a354d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00313d6e6f697372 6576726f6e696d2c 312e302e302e3732 313d72646461746e ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0419bf15f8 00007f0419bf15c8 00007f0419bf1600 00007f0419bf15e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000041 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000005e179 RBX=ffff88801eed4a80 RCX=ffffffff8bbb22d5 RDX=0000000000000000 RSI=ffffffff8e1a6f32 RDI=ffffffff8c402680 RBP=ffffed1003dda950 RSP=ffffc90000187e00 R8 =0000000000000001 R9 =ffffed100d4c678d R10=ffff88806a633c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=dffffc0000000000 RIP=ffffffff8bbb089f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5fdc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc9d8bd4ff8 CR3=000000005ac3e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000010100 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd88114e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd88114e6 00007fffd88114ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9daa354a7 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9daa354e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9daa3564b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9daa354d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9dabf15f8 00007fc9dabf15c8 00007fc9dabf1600 00007fc9dabf15e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000038 0000000000000001 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88806a73c800 RCX=ffffffff81fdebd4 RDX=ffff88801eea0000 RSI=ffffffff81fdebae RDI=ffff88801eea0000 RBP=ffffc90000157cd8 RSP=ffffc90000157b60 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff88806a633c60 R12=0000000000000003 R13=ffffed100d4e7901 R14=ffff88806a73c808 R15=0000000000000001 RIP=ffffffff81fdebb5 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60dc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000110c3decbb CR3=000000003f058000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0030656c69663a31 2e302e302e373231 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea497ae76 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea497ae76 00007ffea497ae7c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0419a354a7 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0419a354e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0419a3564b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0419a354d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00313d6e6f697372 6576726f6e696d2c 312e302e302e3732 313d72646461746e ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0419bf15f8 00007f0419bf15c8 00007f0419bf1600 00007f0419bf15e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000041 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000