Warning: Permanently added '[localhost]:32509' (ECDSA) to the list of known hosts. 2025/11/16 12:40:34 fuzzer started 2025/11/16 12:40:34 dialing manager at localhost:37161 syzkaller login: [ 58.949615] cgroup: Unknown subsys name 'net' [ 59.006598] cgroup: Unknown subsys name 'cpuset' [ 59.022183] cgroup: Unknown subsys name 'rlimit' 2025/11/16 12:40:44 syscalls: 2214 2025/11/16 12:40:44 code coverage: enabled 2025/11/16 12:40:44 comparison tracing: enabled 2025/11/16 12:40:44 extra coverage: enabled 2025/11/16 12:40:44 setuid sandbox: enabled 2025/11/16 12:40:44 namespace sandbox: enabled 2025/11/16 12:40:44 Android sandbox: enabled 2025/11/16 12:40:44 fault injection: enabled 2025/11/16 12:40:44 leak checking: enabled 2025/11/16 12:40:44 net packet injection: enabled 2025/11/16 12:40:44 net device setup: enabled 2025/11/16 12:40:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/11/16 12:40:44 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/11/16 12:40:44 USB emulation: enabled 2025/11/16 12:40:44 hci packet injection: enabled 2025/11/16 12:40:44 wifi device emulation: enabled 2025/11/16 12:40:44 802.15.4 emulation: enabled 2025/11/16 12:40:44 fetching corpus: 50, signal 20035/21887 (executing program) 2025/11/16 12:40:44 fetching corpus: 100, signal 34405/37925 (executing program) 2025/11/16 12:40:44 fetching corpus: 150, signal 46176/51198 (executing program) 2025/11/16 12:40:44 fetching corpus: 200, signal 51831/58382 (executing program) 2025/11/16 12:40:44 fetching corpus: 250, signal 57476/65466 (executing program) 2025/11/16 12:40:44 fetching corpus: 300, signal 61668/71056 (executing program) 2025/11/16 12:40:44 fetching corpus: 350, signal 64964/75728 (executing program) 2025/11/16 12:40:44 fetching corpus: 400, signal 68460/80599 (executing program) 2025/11/16 12:40:45 fetching corpus: 450, signal 72039/85496 (executing program) 2025/11/16 12:40:45 fetching corpus: 500, signal 75759/90470 (executing program) 2025/11/16 12:40:45 fetching corpus: 550, signal 78680/94626 (executing program) 2025/11/16 12:40:45 fetching corpus: 600, signal 81049/98264 (executing program) 2025/11/16 12:40:45 fetching corpus: 650, signal 86599/104718 (executing program) 2025/11/16 12:40:45 fetching corpus: 700, signal 89811/108981 (executing program) 2025/11/16 12:40:45 fetching corpus: 750, signal 91805/112102 (executing program) 2025/11/16 12:40:45 fetching corpus: 800, signal 93543/115019 (executing program) 2025/11/16 12:40:45 fetching corpus: 850, signal 95815/118342 (executing program) 2025/11/16 12:40:45 fetching corpus: 900, signal 97563/121184 (executing program) 2025/11/16 12:40:45 fetching corpus: 950, signal 99742/124375 (executing program) 2025/11/16 12:40:46 fetching corpus: 1000, signal 101915/127526 (executing program) 2025/11/16 12:40:46 fetching corpus: 1050, signal 105004/131408 (executing program) 2025/11/16 12:40:46 fetching corpus: 1100, signal 106408/133838 (executing program) 2025/11/16 12:40:46 fetching corpus: 1150, signal 107766/136212 (executing program) 2025/11/16 12:40:46 fetching corpus: 1200, signal 109485/138891 (executing program) 2025/11/16 12:40:46 fetching corpus: 1250, signal 111279/141588 (executing program) 2025/11/16 12:40:46 fetching corpus: 1300, signal 113276/144452 (executing program) 2025/11/16 12:40:46 fetching corpus: 1350, signal 114726/146826 (executing program) 2025/11/16 12:40:46 fetching corpus: 1400, signal 116292/149277 (executing program) 2025/11/16 12:40:46 fetching corpus: 1450, signal 117305/151306 (executing program) 2025/11/16 12:40:46 fetching corpus: 1500, signal 119188/153907 (executing program) 2025/11/16 12:40:47 fetching corpus: 1550, signal 120645/156189 (executing program) 2025/11/16 12:40:47 fetching corpus: 1600, signal 121617/158133 (executing program) 2025/11/16 12:40:47 fetching corpus: 1650, signal 122693/160089 (executing program) 2025/11/16 12:40:47 fetching corpus: 1700, signal 124462/162574 (executing program) 2025/11/16 12:40:47 fetching corpus: 1750, signal 125422/164404 (executing program) 2025/11/16 12:40:47 fetching corpus: 1800, signal 126523/166364 (executing program) 2025/11/16 12:40:47 fetching corpus: 1850, signal 128159/168696 (executing program) 2025/11/16 12:40:47 fetching corpus: 1900, signal 129411/170691 (executing program) 2025/11/16 12:40:47 fetching corpus: 1950, signal 130578/172606 (executing program) 2025/11/16 12:40:47 fetching corpus: 2000, signal 131332/174205 (executing program) 2025/11/16 12:40:47 fetching corpus: 2050, signal 132275/175945 (executing program) 2025/11/16 12:40:47 fetching corpus: 2100, signal 133428/177850 (executing program) 2025/11/16 12:40:48 fetching corpus: 2150, signal 134399/179631 (executing program) 2025/11/16 12:40:48 fetching corpus: 2200, signal 135613/181510 (executing program) 2025/11/16 12:40:48 fetching corpus: 2250, signal 137667/184039 (executing program) 2025/11/16 12:40:48 fetching corpus: 2300, signal 138712/185770 (executing program) 2025/11/16 12:40:48 fetching corpus: 2350, signal 139455/187305 (executing program) 2025/11/16 12:40:48 fetching corpus: 2400, signal 140218/188816 (executing program) 2025/11/16 12:40:48 fetching corpus: 2450, signal 141140/190439 (executing program) 2025/11/16 12:40:48 fetching corpus: 2500, signal 142427/192301 (executing program) 2025/11/16 12:40:48 fetching corpus: 2550, signal 143113/193781 (executing program) 2025/11/16 12:40:48 fetching corpus: 2600, signal 143968/195364 (executing program) 2025/11/16 12:40:49 fetching corpus: 2650, signal 144499/196738 (executing program) 2025/11/16 12:40:49 fetching corpus: 2700, signal 145428/198290 (executing program) 2025/11/16 12:40:49 fetching corpus: 2750, signal 146476/199908 (executing program) 2025/11/16 12:40:49 fetching corpus: 2800, signal 147970/201775 (executing program) 2025/11/16 12:40:49 fetching corpus: 2850, signal 148903/203272 (executing program) 2025/11/16 12:40:49 fetching corpus: 2900, signal 150354/205049 (executing program) 2025/11/16 12:40:49 fetching corpus: 2950, signal 151107/206390 (executing program) 2025/11/16 12:40:49 fetching corpus: 3000, signal 151995/207832 (executing program) 2025/11/16 12:40:49 fetching corpus: 3050, signal 152862/209309 (executing program) 2025/11/16 12:40:49 fetching corpus: 3100, signal 153384/210563 (executing program) 2025/11/16 12:40:50 fetching corpus: 3150, signal 153962/211792 (executing program) 2025/11/16 12:40:50 fetching corpus: 3200, signal 154481/213000 (executing program) 2025/11/16 12:40:50 fetching corpus: 3250, signal 155232/214316 (executing program) 2025/11/16 12:40:50 fetching corpus: 3300, signal 156292/215735 (executing program) 2025/11/16 12:40:50 fetching corpus: 3350, signal 157550/217297 (executing program) 2025/11/16 12:40:50 fetching corpus: 3400, signal 158456/218671 (executing program) 2025/11/16 12:40:50 fetching corpus: 3450, signal 158920/219805 (executing program) 2025/11/16 12:40:50 fetching corpus: 3500, signal 159452/220948 (executing program) 2025/11/16 12:40:50 fetching corpus: 3550, signal 160054/222051 (executing program) 2025/11/16 12:40:50 fetching corpus: 3600, signal 161191/223523 (executing program) 2025/11/16 12:40:51 fetching corpus: 3650, signal 162077/224768 (executing program) 2025/11/16 12:40:51 fetching corpus: 3700, signal 163067/226085 (executing program) 2025/11/16 12:40:51 fetching corpus: 3750, signal 163638/227250 (executing program) 2025/11/16 12:40:51 fetching corpus: 3800, signal 164290/228424 (executing program) 2025/11/16 12:40:51 fetching corpus: 3850, signal 164778/229486 (executing program) 2025/11/16 12:40:51 fetching corpus: 3900, signal 165548/230666 (executing program) 2025/11/16 12:40:51 fetching corpus: 3950, signal 166006/231685 (executing program) 2025/11/16 12:40:51 fetching corpus: 4000, signal 166864/232897 (executing program) 2025/11/16 12:40:51 fetching corpus: 4050, signal 167757/234124 (executing program) 2025/11/16 12:40:52 fetching corpus: 4100, signal 168356/235198 (executing program) 2025/11/16 12:40:52 fetching corpus: 4150, signal 168919/236238 (executing program) 2025/11/16 12:40:52 fetching corpus: 4200, signal 169414/237251 (executing program) 2025/11/16 12:40:52 fetching corpus: 4250, signal 169988/238323 (executing program) 2025/11/16 12:40:52 fetching corpus: 4300, signal 170344/239230 (executing program) 2025/11/16 12:40:52 fetching corpus: 4350, signal 170696/240172 (executing program) 2025/11/16 12:40:52 fetching corpus: 4400, signal 171307/241170 (executing program) 2025/11/16 12:40:52 fetching corpus: 4450, signal 171714/242128 (executing program) 2025/11/16 12:40:52 fetching corpus: 4500, signal 172206/243120 (executing program) 2025/11/16 12:40:52 fetching corpus: 4550, signal 172870/244123 (executing program) 2025/11/16 12:40:52 fetching corpus: 4600, signal 173374/245079 (executing program) 2025/11/16 12:40:53 fetching corpus: 4650, signal 173882/246069 (executing program) 2025/11/16 12:40:53 fetching corpus: 4700, signal 174277/246971 (executing program) 2025/11/16 12:40:53 fetching corpus: 4750, signal 175158/248063 (executing program) 2025/11/16 12:40:53 fetching corpus: 4800, signal 175649/249065 (executing program) 2025/11/16 12:40:53 fetching corpus: 4850, signal 176158/249945 (executing program) 2025/11/16 12:40:53 fetching corpus: 4900, signal 176728/250895 (executing program) 2025/11/16 12:40:53 fetching corpus: 4950, signal 177226/251804 (executing program) 2025/11/16 12:40:53 fetching corpus: 5000, signal 177763/252724 (executing program) 2025/11/16 12:40:53 fetching corpus: 5050, signal 178189/253585 (executing program) 2025/11/16 12:40:53 fetching corpus: 5100, signal 178894/254533 (executing program) 2025/11/16 12:40:54 fetching corpus: 5150, signal 179216/255367 (executing program) 2025/11/16 12:40:54 fetching corpus: 5200, signal 179624/256167 (executing program) 2025/11/16 12:40:54 fetching corpus: 5250, signal 180236/257046 (executing program) 2025/11/16 12:40:54 fetching corpus: 5300, signal 181066/257999 (executing program) 2025/11/16 12:40:54 fetching corpus: 5350, signal 181459/258836 (executing program) 2025/11/16 12:40:54 fetching corpus: 5400, signal 181850/259665 (executing program) 2025/11/16 12:40:54 fetching corpus: 5450, signal 182174/260475 (executing program) 2025/11/16 12:40:54 fetching corpus: 5500, signal 182647/261249 (executing program) 2025/11/16 12:40:54 fetching corpus: 5550, signal 183103/262075 (executing program) 2025/11/16 12:40:54 fetching corpus: 5600, signal 183541/262892 (executing program) 2025/11/16 12:40:54 fetching corpus: 5650, signal 183837/263673 (executing program) 2025/11/16 12:40:55 fetching corpus: 5700, signal 184205/264446 (executing program) 2025/11/16 12:40:55 fetching corpus: 5750, signal 184769/265225 (executing program) 2025/11/16 12:40:55 fetching corpus: 5800, signal 185159/265962 (executing program) 2025/11/16 12:40:55 fetching corpus: 5850, signal 185627/266774 (executing program) 2025/11/16 12:40:55 fetching corpus: 5900, signal 186055/267528 (executing program) 2025/11/16 12:40:55 fetching corpus: 5950, signal 186437/268285 (executing program) 2025/11/16 12:40:55 fetching corpus: 6000, signal 187156/269064 (executing program) 2025/11/16 12:40:55 fetching corpus: 6050, signal 187647/269827 (executing program) 2025/11/16 12:40:55 fetching corpus: 6100, signal 188134/270606 (executing program) 2025/11/16 12:40:55 fetching corpus: 6150, signal 188399/271361 (executing program) 2025/11/16 12:40:55 fetching corpus: 6200, signal 188676/272038 (executing program) 2025/11/16 12:40:56 fetching corpus: 6250, signal 189083/272727 (executing program) 2025/11/16 12:40:56 fetching corpus: 6300, signal 189501/273437 (executing program) 2025/11/16 12:40:56 fetching corpus: 6350, signal 189860/274128 (executing program) 2025/11/16 12:40:56 fetching corpus: 6400, signal 190248/274825 (executing program) 2025/11/16 12:40:56 fetching corpus: 6450, signal 190704/275549 (executing program) 2025/11/16 12:40:56 fetching corpus: 6500, signal 191060/276214 (executing program) 2025/11/16 12:40:56 fetching corpus: 6550, signal 191424/276931 (executing program) 2025/11/16 12:40:56 fetching corpus: 6600, signal 191976/277625 (executing program) 2025/11/16 12:40:56 fetching corpus: 6650, signal 192424/278290 (executing program) 2025/11/16 12:40:56 fetching corpus: 6700, signal 193042/278967 (executing program) 2025/11/16 12:40:56 fetching corpus: 6750, signal 193422/279657 (executing program) 2025/11/16 12:40:57 fetching corpus: 6800, signal 193704/280291 (executing program) 2025/11/16 12:40:57 fetching corpus: 6850, signal 194144/280933 (executing program) 2025/11/16 12:40:57 fetching corpus: 6900, signal 194731/281593 (executing program) 2025/11/16 12:40:57 fetching corpus: 6950, signal 195056/282219 (executing program) 2025/11/16 12:40:57 fetching corpus: 7000, signal 195395/282847 (executing program) 2025/11/16 12:40:57 fetching corpus: 7050, signal 195689/283462 (executing program) 2025/11/16 12:40:57 fetching corpus: 7100, signal 196024/284054 (executing program) 2025/11/16 12:40:57 fetching corpus: 7150, signal 196308/284054 (executing program) 2025/11/16 12:40:57 fetching corpus: 7200, signal 196803/284054 (executing program) 2025/11/16 12:40:57 fetching corpus: 7250, signal 197281/284054 (executing program) 2025/11/16 12:40:58 fetching corpus: 7300, signal 197726/284054 (executing program) 2025/11/16 12:40:58 fetching corpus: 7350, signal 198016/284054 (executing program) 2025/11/16 12:40:58 fetching corpus: 7400, signal 198291/284054 (executing program) 2025/11/16 12:40:58 fetching corpus: 7450, signal 198691/284054 (executing program) 2025/11/16 12:40:58 fetching corpus: 7500, signal 199013/284054 (executing program) 2025/11/16 12:40:58 fetching corpus: 7550, signal 199352/284054 (executing program) 2025/11/16 12:40:58 fetching corpus: 7600, signal 199624/284056 (executing program) 2025/11/16 12:40:58 fetching corpus: 7650, signal 200074/284056 (executing program) 2025/11/16 12:40:58 fetching corpus: 7700, signal 200457/284056 (executing program) 2025/11/16 12:40:58 fetching corpus: 7750, signal 200736/284056 (executing program) 2025/11/16 12:40:58 fetching corpus: 7800, signal 201131/284056 (executing program) 2025/11/16 12:40:59 fetching corpus: 7850, signal 201501/284056 (executing program) 2025/11/16 12:40:59 fetching corpus: 7900, signal 201838/284056 (executing program) 2025/11/16 12:40:59 fetching corpus: 7950, signal 202083/284056 (executing program) 2025/11/16 12:40:59 fetching corpus: 8000, signal 202382/284056 (executing program) 2025/11/16 12:40:59 fetching corpus: 8050, signal 202710/284056 (executing program) 2025/11/16 12:40:59 fetching corpus: 8100, signal 203019/284056 (executing program) 2025/11/16 12:40:59 fetching corpus: 8150, signal 203321/284056 (executing program) 2025/11/16 12:40:59 fetching corpus: 8200, signal 203675/284067 (executing program) 2025/11/16 12:40:59 fetching corpus: 8250, signal 203973/284067 (executing program) 2025/11/16 12:40:59 fetching corpus: 8300, signal 204176/284067 (executing program) 2025/11/16 12:40:59 fetching corpus: 8350, signal 204515/284067 (executing program) 2025/11/16 12:40:59 fetching corpus: 8400, signal 204790/284067 (executing program) 2025/11/16 12:41:00 fetching corpus: 8450, signal 204989/284067 (executing program) 2025/11/16 12:41:00 fetching corpus: 8500, signal 205286/284067 (executing program) 2025/11/16 12:41:00 fetching corpus: 8550, signal 205492/284067 (executing program) 2025/11/16 12:41:00 fetching corpus: 8600, signal 205769/284067 (executing program) 2025/11/16 12:41:00 fetching corpus: 8650, signal 206117/284067 (executing program) 2025/11/16 12:41:00 fetching corpus: 8700, signal 206586/284070 (executing program) 2025/11/16 12:41:00 fetching corpus: 8750, signal 206973/284070 (executing program) 2025/11/16 12:41:00 fetching corpus: 8800, signal 207392/284070 (executing program) 2025/11/16 12:41:00 fetching corpus: 8850, signal 207629/284070 (executing program) 2025/11/16 12:41:00 fetching corpus: 8900, signal 207954/284070 (executing program) 2025/11/16 12:41:00 fetching corpus: 8950, signal 208129/284070 (executing program) 2025/11/16 12:41:01 fetching corpus: 9000, signal 208456/284070 (executing program) 2025/11/16 12:41:01 fetching corpus: 9050, signal 208795/284070 (executing program) 2025/11/16 12:41:01 fetching corpus: 9100, signal 209063/284073 (executing program) 2025/11/16 12:41:01 fetching corpus: 9150, signal 209342/284073 (executing program) 2025/11/16 12:41:01 fetching corpus: 9200, signal 209623/284073 (executing program) 2025/11/16 12:41:01 fetching corpus: 9250, signal 209892/284073 (executing program) 2025/11/16 12:41:01 fetching corpus: 9300, signal 210120/284073 (executing program) 2025/11/16 12:41:01 fetching corpus: 9350, signal 210325/284073 (executing program) 2025/11/16 12:41:01 fetching corpus: 9400, signal 210535/284073 (executing program) 2025/11/16 12:41:01 fetching corpus: 9450, signal 210847/284073 (executing program) 2025/11/16 12:41:02 fetching corpus: 9500, signal 211070/284073 (executing program) 2025/11/16 12:41:02 fetching corpus: 9550, signal 211441/284073 (executing program) 2025/11/16 12:41:02 fetching corpus: 9600, signal 211624/284074 (executing program) 2025/11/16 12:41:02 fetching corpus: 9650, signal 211921/284074 (executing program) 2025/11/16 12:41:02 fetching corpus: 9700, signal 212148/284074 (executing program) 2025/11/16 12:41:02 fetching corpus: 9750, signal 212349/284074 (executing program) 2025/11/16 12:41:02 fetching corpus: 9800, signal 212605/284074 (executing program) 2025/11/16 12:41:02 fetching corpus: 9850, signal 212897/284074 (executing program) 2025/11/16 12:41:02 fetching corpus: 9900, signal 213064/284074 (executing program) 2025/11/16 12:41:02 fetching corpus: 9950, signal 213376/284074 (executing program) 2025/11/16 12:41:02 fetching corpus: 10000, signal 213674/284074 (executing program) 2025/11/16 12:41:03 fetching corpus: 10050, signal 213935/284077 (executing program) 2025/11/16 12:41:03 fetching corpus: 10100, signal 214213/284077 (executing program) 2025/11/16 12:41:03 fetching corpus: 10150, signal 214392/284078 (executing program) 2025/11/16 12:41:03 fetching corpus: 10200, signal 214661/284078 (executing program) 2025/11/16 12:41:03 fetching corpus: 10250, signal 214917/284078 (executing program) 2025/11/16 12:41:03 fetching corpus: 10300, signal 215208/284078 (executing program) 2025/11/16 12:41:03 fetching corpus: 10350, signal 215437/284078 (executing program) 2025/11/16 12:41:03 fetching corpus: 10400, signal 215692/284078 (executing program) 2025/11/16 12:41:03 fetching corpus: 10450, signal 215918/284078 (executing program) 2025/11/16 12:41:03 fetching corpus: 10500, signal 216175/284078 (executing program) 2025/11/16 12:41:04 fetching corpus: 10550, signal 216395/284078 (executing program) 2025/11/16 12:41:04 fetching corpus: 10600, signal 216606/284078 (executing program) 2025/11/16 12:41:04 fetching corpus: 10650, signal 216854/284078 (executing program) 2025/11/16 12:41:04 fetching corpus: 10700, signal 217086/284078 (executing program) 2025/11/16 12:41:04 fetching corpus: 10750, signal 217390/284078 (executing program) 2025/11/16 12:41:04 fetching corpus: 10800, signal 217709/284078 (executing program) 2025/11/16 12:41:04 fetching corpus: 10850, signal 218150/284078 (executing program) 2025/11/16 12:41:04 fetching corpus: 10900, signal 218382/284078 (executing program) 2025/11/16 12:41:04 fetching corpus: 10950, signal 218571/284078 (executing program) 2025/11/16 12:41:04 fetching corpus: 11000, signal 218813/284078 (executing program) 2025/11/16 12:41:04 fetching corpus: 11050, signal 219005/284078 (executing program) 2025/11/16 12:41:04 fetching corpus: 11100, signal 219224/284078 (executing program) 2025/11/16 12:41:05 fetching corpus: 11150, signal 219447/284078 (executing program) 2025/11/16 12:41:05 fetching corpus: 11200, signal 219690/284078 (executing program) 2025/11/16 12:41:05 fetching corpus: 11250, signal 219917/284078 (executing program) 2025/11/16 12:41:05 fetching corpus: 11300, signal 220228/284078 (executing program) 2025/11/16 12:41:05 fetching corpus: 11350, signal 220496/284078 (executing program) 2025/11/16 12:41:05 fetching corpus: 11400, signal 220710/284078 (executing program) 2025/11/16 12:41:05 fetching corpus: 11450, signal 220960/284078 (executing program) 2025/11/16 12:41:05 fetching corpus: 11500, signal 221154/284078 (executing program) 2025/11/16 12:41:05 fetching corpus: 11550, signal 221309/284078 (executing program) 2025/11/16 12:41:06 fetching corpus: 11600, signal 221482/284078 (executing program) 2025/11/16 12:41:06 fetching corpus: 11650, signal 221752/284078 (executing program) 2025/11/16 12:41:06 fetching corpus: 11700, signal 222043/284078 (executing program) 2025/11/16 12:41:06 fetching corpus: 11750, signal 222230/284078 (executing program) 2025/11/16 12:41:06 fetching corpus: 11800, signal 222593/284078 (executing program) 2025/11/16 12:41:06 fetching corpus: 11850, signal 222767/284078 (executing program) 2025/11/16 12:41:06 fetching corpus: 11900, signal 223091/284078 (executing program) 2025/11/16 12:41:06 fetching corpus: 11950, signal 223292/284078 (executing program) 2025/11/16 12:41:06 fetching corpus: 12000, signal 223477/284078 (executing program) 2025/11/16 12:41:06 fetching corpus: 12050, signal 223706/284078 (executing program) 2025/11/16 12:41:07 fetching corpus: 12100, signal 224096/284078 (executing program) 2025/11/16 12:41:07 fetching corpus: 12150, signal 224262/284078 (executing program) 2025/11/16 12:41:07 fetching corpus: 12200, signal 224495/284078 (executing program) 2025/11/16 12:41:07 fetching corpus: 12250, signal 224745/284078 (executing program) 2025/11/16 12:41:07 fetching corpus: 12300, signal 224921/284078 (executing program) 2025/11/16 12:41:07 fetching corpus: 12350, signal 225103/284078 (executing program) 2025/11/16 12:41:07 fetching corpus: 12400, signal 225310/284079 (executing program) 2025/11/16 12:41:07 fetching corpus: 12450, signal 225520/284079 (executing program) 2025/11/16 12:41:07 fetching corpus: 12500, signal 225750/284079 (executing program) 2025/11/16 12:41:07 fetching corpus: 12550, signal 225978/284079 (executing program) 2025/11/16 12:41:07 fetching corpus: 12600, signal 226166/284079 (executing program) 2025/11/16 12:41:08 fetching corpus: 12650, signal 226374/284079 (executing program) 2025/11/16 12:41:08 fetching corpus: 12700, signal 226557/284079 (executing program) 2025/11/16 12:41:08 fetching corpus: 12750, signal 226722/284079 (executing program) 2025/11/16 12:41:08 fetching corpus: 12800, signal 226878/284079 (executing program) 2025/11/16 12:41:08 fetching corpus: 12850, signal 227152/284079 (executing program) 2025/11/16 12:41:08 fetching corpus: 12900, signal 227382/284079 (executing program) 2025/11/16 12:41:08 fetching corpus: 12950, signal 227575/284079 (executing program) 2025/11/16 12:41:08 fetching corpus: 13000, signal 227677/284079 (executing program) 2025/11/16 12:41:08 fetching corpus: 13050, signal 227932/284079 (executing program) 2025/11/16 12:41:08 fetching corpus: 13100, signal 228121/284079 (executing program) 2025/11/16 12:41:08 fetching corpus: 13150, signal 228296/284079 (executing program) 2025/11/16 12:41:09 fetching corpus: 13200, signal 228469/284079 (executing program) 2025/11/16 12:41:09 fetching corpus: 13250, signal 228608/284079 (executing program) 2025/11/16 12:41:09 fetching corpus: 13300, signal 228788/284079 (executing program) 2025/11/16 12:41:09 fetching corpus: 13350, signal 228953/284079 (executing program) 2025/11/16 12:41:09 fetching corpus: 13400, signal 229174/284079 (executing program) 2025/11/16 12:41:09 fetching corpus: 13450, signal 229347/284086 (executing program) 2025/11/16 12:41:09 fetching corpus: 13500, signal 229547/284086 (executing program) 2025/11/16 12:41:09 fetching corpus: 13550, signal 229766/284086 (executing program) 2025/11/16 12:41:09 fetching corpus: 13600, signal 229972/284086 (executing program) 2025/11/16 12:41:09 fetching corpus: 13650, signal 230205/284086 (executing program) 2025/11/16 12:41:10 fetching corpus: 13700, signal 230369/284086 (executing program) 2025/11/16 12:41:10 fetching corpus: 13750, signal 230582/284086 (executing program) 2025/11/16 12:41:10 fetching corpus: 13800, signal 230771/284086 (executing program) 2025/11/16 12:41:10 fetching corpus: 13850, signal 231037/284086 (executing program) 2025/11/16 12:41:10 fetching corpus: 13900, signal 231308/284086 (executing program) 2025/11/16 12:41:10 fetching corpus: 13950, signal 231546/284086 (executing program) 2025/11/16 12:41:10 fetching corpus: 14000, signal 231727/284086 (executing program) 2025/11/16 12:41:10 fetching corpus: 14050, signal 231926/284086 (executing program) 2025/11/16 12:41:10 fetching corpus: 14100, signal 232143/284086 (executing program) 2025/11/16 12:41:10 fetching corpus: 14150, signal 232371/284086 (executing program) 2025/11/16 12:41:10 fetching corpus: 14200, signal 232522/284086 (executing program) 2025/11/16 12:41:10 fetching corpus: 14250, signal 232690/284086 (executing program) 2025/11/16 12:41:11 fetching corpus: 14300, signal 232864/284086 (executing program) 2025/11/16 12:41:11 fetching corpus: 14350, signal 233092/284086 (executing program) 2025/11/16 12:41:11 fetching corpus: 14400, signal 233263/284086 (executing program) 2025/11/16 12:41:11 fetching corpus: 14450, signal 233404/284086 (executing program) 2025/11/16 12:41:11 fetching corpus: 14500, signal 233632/284086 (executing program) 2025/11/16 12:41:11 fetching corpus: 14550, signal 233771/284086 (executing program) 2025/11/16 12:41:11 fetching corpus: 14600, signal 233940/284086 (executing program) 2025/11/16 12:41:11 fetching corpus: 14650, signal 234078/284086 (executing program) 2025/11/16 12:41:11 fetching corpus: 14700, signal 234236/284086 (executing program) 2025/11/16 12:41:11 fetching corpus: 14750, signal 234483/284086 (executing program) 2025/11/16 12:41:11 fetching corpus: 14800, signal 234637/284086 (executing program) 2025/11/16 12:41:12 fetching corpus: 14850, signal 234848/284086 (executing program) 2025/11/16 12:41:12 fetching corpus: 14900, signal 235005/284086 (executing program) 2025/11/16 12:41:12 fetching corpus: 14950, signal 235212/284086 (executing program) 2025/11/16 12:41:12 fetching corpus: 15000, signal 235346/284086 (executing program) 2025/11/16 12:41:12 fetching corpus: 15050, signal 235502/284086 (executing program) 2025/11/16 12:41:12 fetching corpus: 15100, signal 235728/284086 (executing program) 2025/11/16 12:41:12 fetching corpus: 15150, signal 235874/284086 (executing program) 2025/11/16 12:41:12 fetching corpus: 15200, signal 236036/284086 (executing program) 2025/11/16 12:41:12 fetching corpus: 15250, signal 236272/284086 (executing program) 2025/11/16 12:41:12 fetching corpus: 15300, signal 236449/284086 (executing program) 2025/11/16 12:41:12 fetching corpus: 15350, signal 236588/284086 (executing program) 2025/11/16 12:41:12 fetching corpus: 15400, signal 236793/284086 (executing program) 2025/11/16 12:41:13 fetching corpus: 15450, signal 237005/284086 (executing program) 2025/11/16 12:41:13 fetching corpus: 15500, signal 237140/284086 (executing program) 2025/11/16 12:41:13 fetching corpus: 15550, signal 237308/284086 (executing program) 2025/11/16 12:41:13 fetching corpus: 15600, signal 237453/284086 (executing program) 2025/11/16 12:41:13 fetching corpus: 15650, signal 237598/284086 (executing program) 2025/11/16 12:41:13 fetching corpus: 15700, signal 237782/284086 (executing program) 2025/11/16 12:41:13 fetching corpus: 15750, signal 238408/284086 (executing program) 2025/11/16 12:41:13 fetching corpus: 15800, signal 238629/284086 (executing program) 2025/11/16 12:41:13 fetching corpus: 15850, signal 238811/284086 (executing program) 2025/11/16 12:41:13 fetching corpus: 15900, signal 238969/284086 (executing program) 2025/11/16 12:41:13 fetching corpus: 15950, signal 239158/284086 (executing program) 2025/11/16 12:41:14 fetching corpus: 16000, signal 239369/284086 (executing program) 2025/11/16 12:41:14 fetching corpus: 16050, signal 239515/284086 (executing program) 2025/11/16 12:41:14 fetching corpus: 16100, signal 239659/284086 (executing program) 2025/11/16 12:41:14 fetching corpus: 16150, signal 239777/284086 (executing program) 2025/11/16 12:41:14 fetching corpus: 16200, signal 239921/284086 (executing program) 2025/11/16 12:41:14 fetching corpus: 16250, signal 240075/284086 (executing program) 2025/11/16 12:41:14 fetching corpus: 16300, signal 240262/284086 (executing program) 2025/11/16 12:41:14 fetching corpus: 16350, signal 240464/284086 (executing program) 2025/11/16 12:41:14 fetching corpus: 16400, signal 240623/284086 (executing program) 2025/11/16 12:41:14 fetching corpus: 16450, signal 240779/284086 (executing program) 2025/11/16 12:41:14 fetching corpus: 16500, signal 240947/284086 (executing program) 2025/11/16 12:41:15 fetching corpus: 16550, signal 241076/284086 (executing program) 2025/11/16 12:41:15 fetching corpus: 16600, signal 241219/284086 (executing program) 2025/11/16 12:41:15 fetching corpus: 16650, signal 241343/284086 (executing program) 2025/11/16 12:41:15 fetching corpus: 16700, signal 241527/284086 (executing program) 2025/11/16 12:41:15 fetching corpus: 16750, signal 241666/284086 (executing program) 2025/11/16 12:41:15 fetching corpus: 16800, signal 241835/284086 (executing program) 2025/11/16 12:41:15 fetching corpus: 16850, signal 241963/284087 (executing program) 2025/11/16 12:41:15 fetching corpus: 16859, signal 241980/284087 (executing program) 2025/11/16 12:41:15 fetching corpus: 16859, signal 241980/284087 (executing program) 2025/11/16 12:41:17 starting 8 fuzzer processes 12:41:17 executing program 0: r0 = syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x5, 0x4, &(0x7f0000000240)=[{&(0x7f00000000c0)="e3d33cb0dc0f0889f181c2d2824c29c2acf5f020b6e38b14d5d8f892460115f49e3bf96fe3cff7c00eccb054201fb763c450cf6045bfea5c6544283a9f0541", 0x3f, 0x9}, {&(0x7f0000000100)="dc4a63b211ca4648", 0x8, 0xfffffffffffffff7}, {&(0x7f0000000140)="1e14dccdcb5ca0", 0x7, 0x2}, {&(0x7f0000000180)="941f3b1b9455228b82103aa15cad272e2ebd8e21b65e347e0b9f573779851308c0c0f056fd2f7241e9072cb3377b4e87b656710a817b43124494f0c78d10b823344ce6ae83103d1fc0ea5f1ebc840217ea42f004749ab3423cb67486b717531b22b99c5272e82fd5b8daf697cef83dc79c3b5be25e51eab351da07a15790e8b5ef09a76edb6d7c55e45410393e7f92098b2ef2870d4e765d9d54bc0ae34f51c025e8aad1e206fc8f0abcb1", 0xab, 0x80000001}], 0x100000, &(0x7f00000002c0)={[{'/'}, {'.'}, {'*-$*\xc4['}, {'$@/\x1a.'}, {'%'}, {'$!%'}, {}, {'@@\\)#'}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@dont_hash}, {@appraise_type}, {@uid_lt={'uid<', 0xee01}}]}) renameat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000340)='./file0\x00') statx(r0, &(0x7f0000000400)='./file0\x00', 0x6000, 0x2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x3}, [{0x2, 0x5, r1}, {0x2, 0xd, 0xee01}, {0x2, 0x5, 0xffffffffffffffff}], {}, [{0x8, 0x0, 0xee00}, {0x8, 0x1, 0xee01}], {0x10, 0x4}}, 0x4c, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) statx(r0, &(0x7f00000007c0)='./file0\x00', 0x6000, 0x400, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000900)={0x0, 0x0, 0x0}, &(0x7f0000000940)=0xc) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/33, 0x21}, {&(0x7f0000000a40)=""/175, 0xaf}, {&(0x7f0000000b00)=""/243, 0xf3}], 0x3, &(0x7f0000000c40)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x160}, 0x0) setxattr$system_posix_acl(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='system.posix_acl_default\x00', &(0x7f0000000e00)={{}, {0x1, 0x6}, [{0x2, 0x0, r1}, {0x2, 0x2, r3}, {0x2, 0x0, r3}], {0x4, 0x1}, [{0x8, 0x6, r7}, {0x8, 0x0, 0xee00}, {0x8, 0x3, r8}, {0x8, 0x1}, {0x8, 0x3, r11}], {}, {0x20, 0x4}}, 0x64, 0x3) acct(&(0x7f0000000e80)='./file0\x00') ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000ec0)=0x200000) ioctl$TCGETS2(r15, 0x802c542a, &(0x7f0000000f00)) connect$unix(r14, &(0x7f0000000f40)=@file={0x0, './file0\x00'}, 0x6e) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r12, 0x40a85323, &(0x7f0000000fc0)={{0x2, 0x1}, 'port1\x00', 0xbc, 0x20020, 0x5, 0x80000000, 0x7, 0x10000, 0x55, 0x0, 0x6, 0xff}) readlinkat(r13, &(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)=""/224, 0xe0) ioctl$LOOP_CTL_ADD(r12, 0x4c80, 0x2) getgroups(0x4, &(0x7f0000001240)=[r8, r2, r2, r5]) lsetxattr$system_posix_acl(&(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)='system.posix_acl_default\x00', &(0x7f0000001280)={{}, {0x1, 0x4}, [{0x2, 0x1, r10}], {0x4, 0x7}, [{0x8, 0x1, r16}, {0x8, 0x6, r4}], {0x10, 0x4}, {0x20, 0x1}}, 0x3c, 0x3) lsetxattr$system_posix_acl(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='system.posix_acl_default\x00', &(0x7f0000001400)={{}, {}, [{0x2, 0x6, r6}, {0x2, 0x1}], {}, [{0x8, 0x6}, {0x8, 0x3}], {0x10, 0x1}, {0x20, 0x4}}, 0x44, 0x0) 12:41:17 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x440000, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r1 = eventfd2(0xff, 0x1800) r2 = dup2(r1, r0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f00000000c0)={0x4, 0x38, [0x8, 0x5, 0x7, 0x1], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x24000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r3, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0xffff) write$eventfd(0xffffffffffffffff, &(0x7f0000000140)=0xffffffffffffffc1, 0x8) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f00000001c0)=0x5, 0x4) r4 = dup3(r0, r3, 0x82c0922fd8e7f4a4) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000200)=0x1, 0x4) close_range(r1, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0000000}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000002c0)={'macvlan0\x00'}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)={0x68, 0x7d, 0x2, {{0x0, 0x49, 0x7fff, 0x3, {0x80, 0x1, 0x1}, 0x1000000, 0xba, 0x1ff8, 0x81, 0x1, '[', 0x9, 'macvlan0\x00', 0x6, '.\'\\-^+', 0x6, '\xc0-)#%,'}, 0xa, '/dev/hpet\x00', 0xee01, 0xee01}}, 0x68) 12:41:17 executing program 7: ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000000)={0x20, 0x7, 0x4c}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f0000000040)="14ea3d74d3a0e0045420ccf9f0ab413dd7d9fa26c5ec447962410d741cc5139d9a68707316ed50449c069a3442b2ffa74ff2411fcb0dfb217e4bf1ee4416f46d2d23be93de0d217e698847aed3008046a0e91ae412e29e39b1b88ace462de4fa1b16ac8c383deebf8e827d62851cf76239801df5e8ec7509cd8cd6b614469c4acc65ec7166794ebaa8496ed6b9e4b4e16acea9b82d282291f124ab9449694a71f5243ad33d37cd6c8651dc5746c913f89d24f27b8e7a5044332dd2e5f3a8215668615a8e8c4a5148f3acea72eaaa0d9d25", 0xd1}, {&(0x7f0000000140)="5e117a9da08d7520fa7c81a317fe75b57308760958e961195992f1f6401d4ae8c16acd613c65a4f7d5f727735c9ec743ee6b5fda21c5405c10395008ffc3c0d8fffc4d025d296921c756a6501857b0c677fb9ab7bb1372e2b75ae1da9c84d793884e94454bd8d4343de1910c4f41a7ad6d3316dca6585926aeec75773b3317936a563f546e1aa65168313073", 0x8c}, {&(0x7f0000000200)="da2ce0e527756a510418fd6db15b6b0dd4c7f5fcf258b2903e8f949d1ea0ec0f2c7c90bdc446c0d00a3b06121c499bcef29eb5ac1c88b4ff8b96b903faa2bceb9c0c0387b192469c66b45a2dffa7541b35f323ba104c2837fb62de9ace6f2b7a8dd5df55f3ddd4d0", 0x68}, {&(0x7f0000000280)="36fe31156ce9ea38ef29fc50ba4f12e5d73eb2cbefbc7f1ab60bc230280acec843fd46ffde9a67c51333e2c90e9f32fed65d51c3a30d0784f8162d9fb05f81729bf3c228c0eac28da280a9c7519323c1d92add044414b36db0d6e52346ffbbcd922f29df2e4f4a2caed2573c3350c91d51503fd5978012b592ad4bee1c702efaf603b6d02b3e0d2e3e23c77986b2688abd896278a8ea334b5a94753b1496fda96f084c55662ec77159486882df6eca2b9b071acbde23c2183a98f9f3e7d3f18f3c", 0xc1}], 0x4, 0x1, 0x728f, 0x20) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f00000003c0)={0xfffffc93, 0x3, 0x0, {0x3, 0x4}, 0x4, 0x1}) r1 = accept4$inet6(r0, 0x0, &(0x7f0000000440), 0x40800) r2 = dup2(r0, r1) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x2100, 0x1d, 0x2}, 0x18) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000540)={&(0x7f0000000500)=""/7, 0x7, 0x8, 0xfffffc3a}) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='net/netstat\x00') ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r4, 0xc0105303, &(0x7f00000005c0)={0x3f, 0x1}) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000600)={'nr0\x00', 0x200}) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000640), 0x4) r5 = fsmount(0xffffffffffffffff, 0x0, 0x75) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000680)=0x3, 0x4) bind$inet6(r1, &(0x7f00000006c0)={0xa, 0x4e20, 0xf1c, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000700)=0x1c) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000740)=0x20) io_submit(0x0, 0x2, &(0x7f0000000940)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x6, 0x7fff, r1, &(0x7f0000000780)="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", 0xfb, 0x6, 0x0, 0x0, r3}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x8, 0x100, r3, &(0x7f00000008c0)="669365dff75ed4d05dcddf10e4bb24fb4aaf4583d42bdba625a0f5763a5da4bd", 0x20, 0x7ff, 0x0, 0x0, r2}]) r6 = dup3(r0, r4, 0x80000) dup2(r6, r5) [ 101.944460] audit: type=1400 audit(1763296877.642:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:41:17 executing program 2: truncate(&(0x7f0000000000)='./file0\x00', 0x1000) truncate(&(0x7f0000000040)='./file0\x00', 0xa7) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x10) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x24) io_submit(0x0, 0x2, &(0x7f0000000280)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0xfffc, r1, &(0x7f0000000100)="f36d18bbcff4d5a5f4ca2608c9a335782ebc2d27577b7a355a6407f1cb717de58840b728bea7864bc803686a2c2b67f2c001dc2291d1b20fe1437287a558b5d2bfe3e29ffe6ee15ac72b843f7e50031b557c9b24a5b783a7168cbd77ec30e6071bb316a4e8b42942231319689d93955361d2eab0920aad13ca59c53d5e9ec3686d5aefb4b63acec85c97b1bcdde4428df733fea0de06dad329859e9f", 0x9c, 0x4, 0x0, 0x2, r1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000000200)="eaba8c14d883805fc70eeb9432ac475aef4ba9df1eff28e8c194ce97c81905190f0ec123454a204e9d1c255f60e6eeb531cdc2bf8207e19bbf3ca05e3fc1", 0x3e, 0x6, 0x0, 0x2, r1}]) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x401, 0x6}) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x9a26a9a99b0d0840, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), r0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xc0}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x20000884) bind(r0, &(0x7f0000000480)=@qipcrtr={0x2a, 0xffffffff, 0x2}, 0x80) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000500), 0x224600, 0x0) lseek(r3, 0x3, 0x2) setsockopt$sock_void(r1, 0x1, 0x3f, 0x0, 0x0) pwrite64(r1, &(0x7f0000000540)="48e4c18732adbaa48c384feac8e6387c3ec66ea3bbf5b9c2a13de29b09443ffcee59c83ea87f86897120f2d4b4a7f2707d1141987b162a1911901dc1831d70723795bc75a9d973af590c79ea178cbbaa5494878fee875050b74bf895388c58134cae1bc649d0f7495d47de8dcec3b0d8bb01207a607541662497727ce6cc73d06f0a5476b4fde7f69ead0de77588443f6672472c93f025bed3f29aafb52542d48545ad0a6c03b1d2d164759c12dd245d21e3e92a02cbfcb8f5a785de74f29e2ace7c12915635baf2068d1dc593a9f99d3b417cf617a3d558a27969eb690e6f1dfb5fcc0f6d7f0412032dafca7ef56956c414", 0xf2, 0x400) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x4b}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}}, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000740), 0x400000, 0x0) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048040}, 0x40040) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000880)='cpuacct.usage\x00', 0x2, 0x0) getpid() sendmsg$OSF_MSG_ADD(r4, &(0x7f0000001500)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000900)={0xbb8, 0x0, 0x5, 0x3, 0x0, 0x0, {0x4, 0x0, 0x8}, [{{0x254, 0x1, {{0x2, 0xc23ce9}, 0x7, 0x81, 0x4, 0x7ef8, 0x10, 'syz0\x00', "1875b72c65106c16602c5aef1ecaa06bde93942d77388a9a7de016074c74c50c", "91f1568b0420d9ec3d855187cdf393ebf868601db10b9ace0cffa7fdb5d1db5d", [{0x6, 0x100, {0x0, 0x3ff}}, {0x5, 0x1, {0x1, 0x8}}, {0x7, 0x9, {0x1, 0x4}}, {0x868b, 0x0, {0x3, 0x5}}, {0x4, 0x4, {0x1, 0x9}}, {0xfff9, 0x7, {0x1, 0xfffff000}}, {0x47be, 0x9, {0x2, 0x2}}, {0xc67, 0x6, {0x0, 0x7}}, {0x5, 0x5, {0x3, 0x2}}, {0xeef, 0x6, {0x0, 0x6}}, {0x3, 0x5, {0x1, 0x4}}, {0xff80, 0x100, {0x1, 0x3}}, {0x80, 0x99, {0x0, 0x3}}, {0x7ff, 0x4, {0x3, 0x1f}}, {0xfff, 0x2, {0x3, 0x3}}, {0x7, 0xfff8, {0x0, 0x400}}, {0x466, 0x4, {0x0, 0x9}}, {0xd0a4, 0x5, {0x0, 0xbfd}}, {0x1f, 0xfff, {0x2, 0x1000}}, {0x1, 0x0, {0x3, 0x5}}, {0x9, 0xb5, {0x2, 0x8}}, {0x2, 0x1, {0x3, 0x8000}}, {0x5e, 0xf2f2, {0x2, 0x5}}, {0x7fff, 0x1000, {0x0, 0x7}}, {0x3316, 0x7, {0x2, 0x5}}, {0xff80, 0xfffe, {0x0, 0x4}}, {0x9, 0xf44b, {0x3, 0x7fffffff}}, {0x56, 0x1000, {0x1, 0x1000}}, {0x7, 0x6, {0x0, 0x1000}}, {0x1, 0x7ff, {0x2, 0x5}}, {0xbec, 0x6, {0x2, 0x8}}, {0x3, 0x1, {0x0, 0x1}}, {0x4, 0x9, {0x1, 0x5}}, {0x4, 0x6, {0x0, 0xfffffff8}}, {0x3ff, 0x2, {0x3, 0x1}}, {0x1, 0x5, {0x2, 0x2}}, {0x95a0, 0x7, {0x1}}, {0x2, 0x7, {0x2, 0x7}}, {0xb366, 0x3, {0x0, 0x7f}}, {0x3f, 0x9, {0x2, 0x1}}]}}}, {{0x254, 0x1, {{0x0, 0x10001}, 0x28, 0xff, 0x1000, 0x3, 0x13, 'syz0\x00', "af56ff990c4b705bacea1dc12b5b75749dcbac3a5ae4d105188e495c47a42968", "f9c00f3eea4958c744cdd90010c0e70fc8179a76e03f1d5e75c74eb27bf53777", [{0x1, 0x1, {0x2}}, {0x3, 0x2b, {0x0, 0x9}}, {0x8001, 0x0, {0x2, 0x8}}, {0x1, 0x8}, {0x8}, {0xfeff, 0x7, {0x2, 0x9}}, {0x2, 0x4, {0x2, 0x2}}, {0x0, 0x0, {0x2, 0x7fff}}, {0x7, 0xe794, {0x2, 0x88}}, {0x8, 0xaf69, {0x0, 0xa3eb}}, {0x200, 0xfffb, {0x1, 0x2}}, {0xc0, 0x2, {0x2, 0xffffffff}}, {0xff, 0x3, {0x2, 0x9}}, {0x41, 0x1ff, {0x2, 0x1}}, {0x15, 0x1, {0x1, 0x200}}, {0x1ff, 0x80, {0x3, 0x8000}}, {0x3, 0x7ff, {0x2, 0xfffffffd}}, {0x7, 0xff, {0x2, 0x7f}}, {0x401, 0x7, {0x0, 0x81}}, {0x4, 0x7, {0x0, 0xa8}}, {0x1000, 0x401, {0x2, 0x1}}, {0x7ff, 0xff7f, {0x0, 0x7}}, {0x800, 0x6, {0x2, 0x8}}, {0x101, 0x4, {0x2, 0x1}}, {0x3, 0x2, {0x0, 0x7}}, {0x2, 0x3, {0x2, 0xb7}}, {0x2, 0x6, {0x0, 0x4}}, {0x2, 0x81, {0x1, 0x2}}, {0x9, 0x200, {0x2, 0x80000000}}, {0x4e0, 0x2, {0x0, 0x9}}, {0x80, 0x5, {0x0, 0x1}}, {0x3, 0x6, {0x3}}, {0x5, 0x200, {0x1, 0x20}}, {0x6, 0x9, {0x1, 0x8001}}, {0x61, 0x7, {0x2, 0x401}}, {0xfff, 0x3ff, {0x2, 0x3ff}}, {0x1, 0xfff7, {0x1, 0xd3}}, {0x800, 0x6, {0x2, 0x3}}, {0x222f, 0x9, {0x0, 0xa0}}, {0x8000, 0x1, {0x3, 0x3}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x1f, 0x49, 0x0, 0x0, 0x16, 'syz1\x00', "e040e7c76265972e132b725de7b2c8404d5fa7a77e69cb61b6c30c22eb9df4ff", "938866ab836b66eac1e7c797ede3162b0284cb69edcc36bee092de41ab03f114", [{0x0, 0xf5f, {0xa16a8e32949dfb26, 0x3ff}}, {0x8, 0x29, {0x0, 0x3}}, {0x20, 0x3, {0x0, 0x9}}, {0x0, 0x5, {0x0, 0x3ff}}, {0x5, 0x80, {0x3, 0xf8}}, {0xfffb, 0x7, {0x1, 0x6}}, {0x0, 0x9, {0x1, 0x5}}, {0x1f, 0x6, {0x3, 0x5}}, {0xb64, 0x1f, {0x0, 0x1000}}, {0x8, 0xfd, {0x3, 0x1f}}, {0x5, 0x2, {0x3, 0x6a70}}, {0x6, 0x5, {0x2, 0x3}}, {0x2, 0x69, {0x3}}, {0x3, 0x1, {0x1, 0x15}}, {0x3ff, 0x5, {0x2, 0x2}}, {0x0, 0x5, {0x0, 0x7ff}}, {0x5, 0x2, {0x3, 0x7}}, {0x7, 0x401, {0x2, 0x10001}}, {0x5, 0x7cf}, {0x6, 0x7, {0x0, 0x5}}, {0x7, 0x1000, {0x1, 0x3}}, {0xffff, 0x8, {0x3, 0x7aaa}}, {0x3f, 0x9, {0x3, 0x9}}, {0x8, 0x8, {0x2, 0x90}}, {0x8001, 0x8000, {0x0, 0x8001}}, {0x9, 0x3ff, {0x2, 0xffffffc1}}, {0x3, 0xa09, {0x2, 0x5}}, {0x81, 0x4, {0x2, 0x2}}, {0x682, 0x1000, {0x0, 0x10000}}, {0x7ff, 0x4, {0x1, 0x52}}, {0x9, 0x3, {0x3, 0x6}}, {0xfc00, 0x6, {0x3, 0x5}}, {0x9, 0x0, {0x0, 0xcb4}}, {0x5, 0x8, {0x2, 0x4}}, {0x9, 0x7f, {0x2, 0x2}}, {0xb61, 0x3, {0x2, 0x5}}, {0x1011, 0x8, {0x3, 0x3}}, {0x7ff, 0x3, {0x2, 0x8000}}, {0x0, 0x2, {0x2, 0x7}}, {0x7f, 0x5, {0x3, 0x1}}]}}}, {{0x254, 0x1, {{0x3, 0x10001}, 0x8, 0x0, 0x61a, 0x8, 0x11, 'syz0\x00', "c09e77b3c39f4e65cff17b7219abaa6a8974f5f5d1182ab75822ce58882e1cff", "03b726bab1dd02d009fdb1b6716c502eb7284d8397f365ff3fc4201fe41e7835", [{0x7238, 0x3, {0x3, 0x81}}, {0x9, 0x86, {0x3, 0x7}}, {0x7, 0x1, {0x1, 0x2}}, {0x9, 0x4, {0x2, 0x7}}, {0x8, 0x6b, {0x1, 0xe00000}}, {0xfffb, 0x9, {0x3, 0x8}}, {0x6, 0xeb00, {0x1, 0x101}}, {0x80, 0x20, {0x2, 0x7f}}, {0x400, 0x40, {0x2}}, {0x8, 0x5, {0x0, 0x7f}}, {0x9, 0x4, {0x0, 0x4}}, {0x5, 0x3ff, {0x3, 0x3}}, {0x9, 0x7, {0x3, 0x7ff}}, {0x6, 0x4, {0x2, 0x100}}, {0x8, 0x7ff, {0x3, 0xdbc}}, {0x1ff, 0x81, {0x0, 0x6}}, {0x6, 0x6, {0x2, 0x9}}, {0x9194, 0x56, {0x2, 0x2}}, {0x3, 0xde, {0x0, 0xcf}}, {0x94b8, 0x9, {0x0, 0x5}}, {0xca, 0x2, {0x3, 0xffffffff}}, {0x9, 0x20, {0x3, 0x7}}, {0xcac0, 0x101, {0x0, 0x4}}, {0x8000, 0x8001, {0x2, 0x80000000}}, {0x9, 0x95f, {0x3, 0x1}}, {0x101, 0x262, {0x1, 0x1}}, {0xfc01, 0x9, {0x2, 0x101}}, {0x1, 0x8, {0x3, 0x9}}, {0x6, 0xffff, {0x0, 0x8}}, {0x0, 0x3, {0x1, 0x9}}, {0x111, 0x8001, {0x1, 0x401}}, {0x6, 0x9, {0x2, 0x9c2}}, {0x9, 0x4, {0x1, 0x1}}, {0x4, 0x0, {0x2, 0x7ff}}, {0x3, 0x1, {0x2, 0x1}}, {0x2ac1, 0x1, {0x3, 0x9}}, {0x5, 0x6, {0x2, 0xfc8000}}, {0x9, 0x100, {0x1, 0x292c}}, {0x0, 0xa01, {0x1, 0x1}}, {0x3, 0x7fff, {0x1, 0x3ff}}]}}}, {{0x254, 0x1, {{0x1, 0x10000}, 0x81, 0x80, 0x4, 0x5, 0x9, 'syz1\x00', "caef0b458c84401099488fa7c51985606f5bb3f263379588490697fbfd1ebd02", "2b737ee19ce469268dadf90fb3c82fd0f0eb4d19537a2ce7a190da43029f095d", [{0x7, 0x9, {0x0, 0x9}}, {0x39c7, 0x0, {0x1, 0x4}}, {0x3, 0xef, {0x0, 0x10001}}, {0x8000, 0xbd07, {0x1, 0x8}}, {0x7, 0xff81, {0x3, 0x1ff}}, {0x5, 0xfff, {0x2, 0x278}}, {0x4, 0x7, {0x1, 0x4}}, {0x5, 0x2, {0x3, 0x4}}, {0x7, 0x200, {0x1, 0x97d}}, {0x80, 0x6, {0x0, 0xfffffff7}}, {0x71, 0xbd, {0x3, 0x1}}, {0x7f, 0x1, {0x1, 0xff}}, {0x3b2f, 0xffa9, {0x3, 0x7fffffff}}, {0x101, 0x8000, {0x0, 0x7cea}}, {0x7fff, 0x0, {0x2, 0x1de874d6}}, {0x1, 0x7, {0xe4d6d9476c57981, 0x9}}, {0x7aa, 0x0, {0x3, 0x1bb599b9}}, {0x9, 0xa8, {0x0, 0x8}}, {0x4, 0xbb, {0x3, 0x8}}, {0x5, 0x6, {0x3, 0x7ff}}, {0x14, 0xfffa, {0x0, 0x4}}, {0x3, 0x8, {0x2, 0x1ff}}, {0x7e28, 0x7, {0x2, 0xff}}, {0x5, 0x7, {0x1, 0x40}}, {0x3, 0x88a, {0x2, 0x8001}}, {0x3, 0x5, {0x1, 0x1cf}}, {0x2, 0x400, {0x3, 0x5}}, {0x5, 0xfff, {0x3}}, {0x3, 0x0, {0x0, 0x40}}, {0x3, 0x7, {0x1, 0xffffffff}}, {0x7, 0x4, {0xdf6b25882815e006, 0x9}}, {0x40, 0x1, {0x0, 0x2000000}}, {0x8000, 0x0, {0x1, 0x228a}}, {0x7f, 0x9e, {0x3, 0x2}}, {0x6, 0x12, {0x0, 0x401}}, {0x9, 0x7d3, {0x2, 0xffffffff}}, {0x492, 0x27ed, {0x2, 0x2}}, {0x200, 0x6, {0x0, 0x7}}, {0xb670, 0x3ff, {0x2, 0x7}}, {0x92, 0xd800, {0x1, 0xfffffffd}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 12:41:17 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x7) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r3 = perf_event_open$cgroup(&(0x7f0000000140)={0x2, 0x80, 0x77, 0x20, 0x7, 0x4, 0x0, 0xa7, 0x40000, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000100), 0x1}, 0x204, 0x1ff, 0x9, 0x7, 0x2777, 0x6, 0x2, 0x0, 0x1ff, 0x0, 0x7}, r0, 0x8, r0, 0x4) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f00000001c0)=0x3) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x1cb002) r5 = dup2(r1, r4) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$VT_WAITACTIVE(r6, 0x5607) r7 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000280)='.pending_reads\x00', 0x208202, 0x1) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ppoll(&(0x7f00000002c0)=[{r7, 0x1054}, {r0, 0x211}, {0xffffffffffffffff, 0x82}, {r8, 0x8002}], 0x4, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0x800]}, 0x8) accept4(r7, 0x0, &(0x7f0000000380), 0x0) r9 = dup3(r0, 0xffffffffffffffff, 0x80000) write$sndseq(r5, &(0x7f0000000500)=[{0x0, 0xff, 0x7f, 0x9, @tick=0xc56, {0x5, 0x80}, {0xf9}, @connect={{0xfe, 0x1}, {0x12, 0xf7}}}, {0x5c, 0x8, 0x20, 0x4, @time={0x6, 0x3}, {0x3, 0x3f}, {0x28, 0x8}, @queue={0xd4, {0x9, 0x800}}}, {0x6c, 0x7, 0x9, 0x7, @time={0x3, 0x3}, {0x31, 0x7f}, {0x34, 0xc7}, @ext={0x99, &(0x7f00000003c0)="f9f9e43adfb558846e5c726c97bba0cd389952d2334e81bdcfd72e3e93cb19f94bee9c7a10654912671ea595ca526923669de552cb1cbfb9c1a525940a086bb626213a9ef86457befcd1a02272d9d35e553a0988352928bfbb80e4d711ad8d5b261a3ea541d0084f4a1ca0691353e665942cf73132a7e11e5ef8c6de8d6817f745e9e8f5d6adf6aed0ed5b516e23aaaa9d3388511ca68d5c1b"}}, {0x0, 0x81, 0xc0, 0x8, @time={0x7, 0x6}, {0x86, 0x41}, {0x7f, 0x80}, @ext={0x23, &(0x7f0000000480)="8653b2e102ef56748d417312da1966c89ce7b5e3ff5ee638cffd2b48ae3dfd30415e95"}}, {0x0, 0x40, 0x1, 0x1f, @time={0x2, 0x2e3e}, {0x2, 0x5}, {0x8, 0x9}, @note={0x0, 0xfb, 0x2, 0x5, 0x8}}, {0x9, 0x0, 0x0, 0x5, @time={0x59c, 0xfa2}, {0x6, 0x1}, {0x5, 0x8}, @queue={0x80, {0x100, 0x4}}}, {0x13, 0x81, 0xff, 0xd, @time={0x4, 0x5}, {0x81, 0x81}, {0x3, 0x9}, @note={0x2, 0x5, 0x3f, 0x9, 0x1}}, {0x0, 0x3b, 0x9, 0x5, @tick=0x9, {0x40, 0x7}, {0x77, 0x1f}, @quote={{0x2}, 0x81, &(0x7f00000004c0)={0x2, 0x1f, 0x9, 0x0, @tick, {0x9, 0x7}, {0x5, 0x9}, @note={0x5, 0x9, 0x0, 0xa9, 0x9}}}}, {0x80, 0xfb, 0x2, 0x7e, @tick=0x6, {0xaf, 0xef}, {0x3, 0x1}, @raw8={"8b72a8ad078525cbf6e39b6a"}}, {0x6, 0x7f, 0x2, 0x0, @tick=0x2, {0x5c, 0x80}, {0xff, 0x8}, @connect={{0x8, 0x80}, {0x69, 0x3}}}], 0x118) openat$cgroup_int(r9, &(0x7f0000000640)='memory.min\x00', 0x2, 0x0) r10 = getpgid(r2) clone3(&(0x7f0000000940)={0x0, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700), {0x26}, &(0x7f0000000740)=""/148, 0x94, &(0x7f0000000800)=""/245, &(0x7f0000000900)=[r10, r2, r2], 0x3, {r7}}, 0x58) 12:41:17 executing program 4: ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pread64(r0, &(0x7f0000000040)=""/145, 0x91, 0x4f) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0', [{}, {}, {}, {0x20, ':&%]\xa8'}, {0x20, '!{\xb5\x83[('}, {0x20, ',-'}, {}, {}, {0x20, '})@.)^..\\('}, {0x20, '}'}], 0xa, "90d8b308a650e3b970c293a130bcb0fbd7df7f960c291d7c45e123fcb6751f20a6b294187c073104eeb2a28e704d289fe4b4bfafd729b652fd567c5ec5564b64b8cf1de8349f173f14a4b7fc2fb085812cd5fa56c043267ff58e08d3dcb54d5fbc8ae3436986683027083deea7d419685e9f287e7f88a5fa8fd45c7b9e5d"}, 0xab) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000000200)=0x401) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000300)={&(0x7f0000000240)=""/152, 0x98, 0x2, 0xe6}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x400, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000380)) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f00000003c0)) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x38000, 0x0) recvmmsg$unix(r3, &(0x7f0000000680)=[{{&(0x7f0000000440)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/233, 0xe9}], 0x1, &(0x7f0000000600)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}], 0x1, 0x40, &(0x7f00000006c0)) fcntl$dupfd(r4, 0x406, r5) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r7, 0xf503, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, 0xffffffffffffffff) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000700)=0x9, 0x4) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000740)=0x5, 0x4) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xc1, 0x6, 0x3d, 0x2, 0x0, 0x0, 0xb8c0c, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8}, 0x108, 0x9, 0x7, 0x9, 0x2, 0x400, 0x15b2, 0x0, 0x2, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0xa) 12:41:17 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x6800) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid}, {@loose}, {@fscache}, {@noextend}, {@noextend}, {@version_9p2000}], [{@permit_directio}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@obj_role={'obj_role', 0x3d, '*+(\'$^.{%&!\x11/@'}}, {@dont_hash}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@seclabel}, {@subj_user}, {@dont_hash}, {@euid_eq={'euid', 0x3d, 0xee00}}]}}) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x20}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1ff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8000}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10000}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x10}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xad}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x45}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xaadc}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x69}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x124}, 0x1, 0x0, 0x0, 0x4004}, 0xc804) r3 = socket$nl_generic(0x10, 0x3, 0x10) mount$9p_fd(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '^]'}}, {@appraise_type}]}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000700)={{{@in=@dev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000800)=0xe8) statx(r2, &(0x7f0000000840)='./file0\x00', 0x400, 0x400, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', &(0x7f00000006c0), 0x2008, &(0x7f0000000980)={'trans=unix,', {[{@version_u}], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x2e}}, {@fsmagic={'fsmagic', 0x3d, 0x101}}, {@obj_role={'obj_role', 0x3d, '^]'}}, {@uid_gt={'uid>', 0xee01}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@euid_gt={'euid>', r4}}, {@permit_directio}, {@euid_gt={'euid>', r5}}]}}) getsockname$packet(r2, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000ac0)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000b00)={@ipv4={'\x00', '\xff\xff', @empty}, 0x7a, r6}) r7 = fsmount(0xffffffffffffffff, 0x1, 0x76) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000001d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000000b80)={0x1128, 0x13, 0x100, 0x70bd25, 0x25dfdbfb, {0x2c, 0xf7, 0x1f, 0x20, {0x4e23, 0x4e22, [0x5, 0x8, 0x5, 0x6], [0x2a, 0x6, 0x2, 0x8], 0x0, [0x9, 0x9]}, 0x1000, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x2d, 0x1, "5df281801bb140b03b5e5f137d9a622bbf1b7def56b31b6eb4b710d67686130b8d638210e3b894d4ea"}, @INET_DIAG_REQ_BYTECODE={0x40, 0x1, "7ed4782b1c6f912557c7edf7b0a411e32e19d816334337de4fb0b48b01c578acaa8811b68959af5ba078e98975ac198d0ec60ee4c61d7a152bcafa84"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x3b, 0x1, "0eeb14cd935ead6e4628ef77a7b2ec906b1d2b684380ee8a9c162e735c0b2b5be2eec64b1be2d20784479e3decd80f5e8a87fa64dd2c2f"}, @INET_DIAG_REQ_BYTECODE={0x2a, 0x1, "f22d8b77df16f1b7a6c0745cd02013af0f327019543c3ae7dab11c1b1900f8e5228d9399817a"}]}, 0x1128}, 0x1, 0x0, 0x0, 0x41004}, 0x8000) mount$9p_unix(&(0x7f0000001d40)='./file0/file0\x00', &(0x7f0000001d80)='./file0\x00', &(0x7f0000001dc0), 0x20400c, &(0x7f0000001e00)={'trans=unix,', {[{@loose}, {@version_L}, {@uname={'uname', 0x3d, 'version=9p2000'}}, {@access_client}, {@cachetag={'cachetag', 0x3d, '^]'}}, {@uname={'uname', 0x3d, 'uid>'}}, {@cache_loose}], [{@appraise}, {@measure}, {@measure}, {@obj_user={'obj_user', 0x3d, 'wfdno'}}, {@dont_appraise}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001ec0)='/sys/module/hci_vhci', 0x490400, 0xc5) getsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000001f00), &(0x7f0000001f40)=0x4) bind$unix(r8, &(0x7f0000001f80)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f00000020c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x38, 0xe, 0x6, 0x304, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) mount$9p_unix(&(0x7f0000002100)='./file0/file0/file0\x00', &(0x7f0000002140)='./file0/file0\x00', &(0x7f0000002180), 0x10, &(0x7f0000002300)={'trans=unix,', {[{@access_client}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@euid_lt={'euid<', r4}}, {@uid_gt}]}}) 12:41:17 executing program 6: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x200, 0x8, @private1, @remote, 0x700, 0x8000, 0x5, 0x100}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x7f, 0x8, 0x0, 0x30, @local, @mcast1, 0x80, 0x7, 0x8, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x20, 0x8090, 0x10001, 0x6, {{0x3a, 0x4, 0x1, 0x6, 0xe8, 0x67, 0x0, 0xb6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @multicast1, {[@timestamp_prespec={0x44, 0x24, 0x70, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd}, {@private=0xa010101, 0x101}, {@loopback, 0xf6d}, {@rand_addr=0x64010102, 0xaf}]}, @timestamp={0x44, 0x2c, 0x7e, 0x0, 0x5, [0x0, 0x80000001, 0xb4a, 0x1f, 0x2, 0x3, 0x3ff, 0x3, 0x401, 0x10001]}, @cipso={0x86, 0x17, 0x0, [{0x0, 0xa, "3419bb4ec182c88f"}, {0x5, 0x7, "67c2e7af9a"}]}, @ssrr={0x89, 0x7, 0xf7, [@rand_addr=0x64010100]}, @timestamp={0x44, 0x28, 0x8a, 0x0, 0xb, [0x7, 0x8, 0x0, 0x7, 0x20, 0x0, 0x8, 0x0, 0xffffff00]}, @timestamp_addr={0x44, 0x14, 0x64, 0x1, 0x2, [{@multicast1, 0x3}, {@multicast2}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x23, 0x23, [@dev={0xac, 0x14, 0x14, 0x1b}, @private=0xa010102, @empty, @remote, @broadcast, @private=0xa010102, @broadcast, @local]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'gretap0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x8000, 0x40, 0x200, 0x8, {{0x3b, 0x4, 0x0, 0x7, 0xec, 0x67, 0x0, 0x7f, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x38}, {[@cipso={0x86, 0x62, 0x1, [{0x0, 0xd, "ba784f1a0995d01cc05a8e"}, {0x7, 0x11, "de242af352df5dbf838388dd3b566c"}, {0x7, 0xd, "576773d1cde1c8673ef6b8"}, {0x5, 0xe, "f827ab7c31cbc024ceb5d379"}, {0x0, 0xa, "c5c2987d19bf34e4"}, {0x1, 0xe, "41d5270b66990f9669014b50"}, {0x5, 0xb, "85cf27410b32cce174"}]}, @end, @ra={0x94, 0x4}, @noop, @timestamp_addr={0x44, 0x1c, 0x5f, 0x1, 0x6, [{@rand_addr=0x64010102, 0x101}, {@remote, 0x40}, {@multicast1, 0x6}]}, @cipso={0x86, 0x47, 0x1, [{0x2, 0x9, "8cc541f57adfe6"}, {0x6, 0x6, "58d42b01"}, {0x2, 0x5, "bf0605"}, {0x2, 0x12, "b9cfb9d8b081d9c37d37bef865835879"}, {0x5, 0x3, ']'}, {0x6, 0x12, "ec912c4b7ed2195e73aae3419795b14b"}, {0x6, 0x6, "e092d49c"}]}, @end, @ssrr={0x89, 0xb, 0xf4, [@private=0xa010101, @empty]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x14c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40090}, 0x48800) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xd8, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x213}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8917}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x4008004) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000980)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r4, {0xf05}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f0000000a80)={'ip6tnl0\x00', &(0x7f0000000a00)={'syztnl2\x00', r2, 0x4, 0x9, 0x8, 0x8001, 0x41, @rand_addr=' \x01\x00', @empty, 0x80, 0x7800, 0x91, 0xd73a}}) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r5) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x5c, r8, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x50}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x28}, @NL80211_ATTR_REG_RULES={0x30, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x689}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xf00b}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0x4000) r9 = fsopen(&(0x7f0000000c80)='befs\x00', 0x0) fsetxattr$security_ima(r9, &(0x7f0000000cc0), &(0x7f0000000d00)=@md5={0x1, "77b33f72ff58967a9a5c78e7a37ae3a4"}, 0x11, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000dc0), r5) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000e80)={'tunl0\x00', &(0x7f0000000e00)={'syztnl2\x00', r3, 0x7800, 0x8000, 0x1, 0x8, {{0xb, 0x4, 0x1, 0x0, 0x2c, 0x64, 0x0, 0x1f, 0x2f, 0x0, @multicast2, @multicast1, {[@timestamp={0x44, 0x18, 0x12, 0x0, 0x6, [0x9, 0x2, 0x7fff, 0x3f, 0x80000000]}]}}}}}) getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000ec0)={@remote, @broadcast, 0x0}, &(0x7f0000000f00)=0xc) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000f40)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000001040)=0xe8) sendmsg$ETHTOOL_MSG_DEBUG_GET(r10, &(0x7f0000001300)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001080)={0x214, r11, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb4e32f49f8856ecc}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) [ 103.088303] ================================================================== [ 103.089654] BUG: KASAN: slab-use-after-free in hci_cmd_work+0x66d/0x6d0 [ 103.090869] Read of size 2 at addr ffff88801e5bf3f8 by task kworker/u11:2/293 [ 103.097918] [ 103.098251] CPU: 0 UID: 0 PID: 293 Comm: kworker/u11:2 Not tainted 6.18.0-rc5-next-20251114 #1 PREEMPT(voluntary) [ 103.098286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 103.098302] Workqueue: hci1 hci_cmd_work [ 103.098337] Call Trace: [ 103.098346] [ 103.098356] dump_stack_lvl+0xca/0x120 [ 103.098388] print_report+0xcb/0x610 [ 103.098421] ? __virt_addr_valid+0x100/0x5d0 [ 103.098466] ? hci_cmd_work+0x66d/0x6d0 [ 103.098499] ? hci_cmd_work+0x66d/0x6d0 [ 103.098531] kasan_report+0xca/0x100 [ 103.098563] ? hci_cmd_work+0x66d/0x6d0 [ 103.098599] hci_cmd_work+0x66d/0x6d0 [ 103.098635] process_one_work+0x8e1/0x19c0 [ 103.098680] ? __pfx_process_one_work+0x10/0x10 [ 103.098716] ? rcuwait_wake_up+0x27/0x290 [ 103.098751] ? move_linked_works+0x172/0x270 [ 103.098779] ? assign_work+0x196/0x240 [ 103.098814] worker_thread+0x67e/0xe90 [ 103.098850] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 103.098881] ? __pfx_worker_thread+0x10/0x10 [ 103.098917] kthread+0x3c8/0x740 [ 103.098949] ? __pfx_kthread+0x10/0x10 [ 103.098980] ? ret_from_fork+0x79/0x7a0 [ 103.099005] ? lock_release+0xc8/0x290 [ 103.099044] ? __pfx_kthread+0x10/0x10 [ 103.099077] ret_from_fork+0x67a/0x7a0 [ 103.099101] ? __pfx_ret_from_fork+0x10/0x10 [ 103.099128] ? __switch_to+0x759/0x1060 [ 103.099162] ? __pfx_kthread+0x10/0x10 [ 103.099195] ret_from_fork_asm+0x1a/0x30 [ 103.099237] [ 103.099245] [ 103.123015] Allocated by task 290: [ 103.123650] kasan_save_stack+0x24/0x50 [ 103.124372] kasan_save_track+0x14/0x30 [ 103.125090] __kasan_slab_alloc+0x59/0x70 [ 103.125834] kmem_cache_alloc_node_noprof+0x228/0x6b0 [ 103.126776] __alloc_skb+0x2ab/0x370 [ 103.127460] hci_cmd_sync_alloc+0x34/0x300 [ 103.128227] __hci_cmd_sync_sk+0xf7/0x5c0 [ 103.128979] __hci_cmd_sync_status_sk+0x4d/0x1a0 [ 103.129838] hci_dev_open_sync+0x10ef/0x1f60 [ 103.130643] hci_power_on+0xdb/0x5d0 [ 103.131330] process_one_work+0x8e1/0x19c0 [ 103.132093] worker_thread+0x67e/0xe90 [ 103.132803] kthread+0x3c8/0x740 [ 103.133427] ret_from_fork+0x67a/0x7a0 [ 103.134129] ret_from_fork_asm+0x1a/0x30 [ 103.134879] [ 103.135196] Freed by task 291: [ 103.135774] kasan_save_stack+0x24/0x50 [ 103.136492] kasan_save_track+0x14/0x30 [ 103.137205] kasan_save_free_info+0x3a/0x60 [ 103.137989] __kasan_slab_free+0x43/0x70 [ 103.138732] kmem_cache_free+0x26f/0x500 [ 103.139473] kfree_skbmem+0x18a/0x1f0 [ 103.140164] sk_skb_reason_drop+0x10e/0x1b0 [ 103.140931] vhci_read+0x3d5/0x5d0 [ 103.141579] vfs_read+0x1eb/0xc70 [ 103.142209] ksys_read+0x121/0x240 [ 103.142862] do_syscall_64+0xbf/0x430 [ 103.143547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.144455] [ 103.144761] The buggy address belongs to the object at ffff88801e5bf3c0 [ 103.144761] which belongs to the cache skbuff_head_cache of size 232 [ 103.146980] The buggy address is located 56 bytes inside of [ 103.146980] freed 232-byte region [ffff88801e5bf3c0, ffff88801e5bf4a8) [ 103.149048] [ 103.149353] The buggy address belongs to the physical page: [ 103.150327] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1e5bf [ 103.151707] anon flags: 0x100000000000000(node=0|zone=1) [ 103.152646] page_type: f5(slab) [ 103.153239] raw: 0100000000000000 ffff8880096c78c0 ffffea00007971c0 0000000000000005 [ 103.154592] raw: 0000000000000000 00000000800c000c 00000000f5000000 0000000000000000 [ 103.155986] page dumped because: kasan: bad access detected [ 103.156997] [ 103.157312] Memory state around the buggy address: [ 103.158200] ffff88801e5bf280: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 103.159371] ffff88801e5bf300: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 103.160442] >ffff88801e5bf380: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 103.161513] ^ [ 103.162581] ffff88801e5bf400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 103.163653] ffff88801e5bf480: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 103.164726] ================================================================== [ 103.165908] Disabling lock debugging due to kernel taint [ 103.167630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.186292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.187391] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.190562] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.191901] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.194483] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.202723] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 103.204247] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.204454] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.210789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.211409] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 103.215375] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.228333] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.239493] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.241495] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.269277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 103.272640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.280209] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.285298] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 103.286910] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 103.288324] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 103.291684] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 103.293328] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 103.297867] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.303280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.306783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 103.315627] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 103.316756] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 103.322100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 103.323981] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 103.325884] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 103.328246] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 103.339269] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 103.341821] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 103.345882] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 103.346328] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 103.361258] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 103.367943] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 103.373488] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 103.376291] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 105.250603] Bluetooth: hci1: command tx timeout [ 105.251340] Bluetooth: hci0: command tx timeout [ 105.312086] Bluetooth: hci2: command tx timeout [ 105.376457] Bluetooth: hci6: command tx timeout [ 105.377030] Bluetooth: hci3: command tx timeout [ 105.377177] Bluetooth: hci4: command tx timeout [ 105.377586] Bluetooth: hci5: command tx timeout [ 105.440891] Bluetooth: hci7: command tx timeout [ 107.297105] Bluetooth: hci1: command tx timeout [ 107.297553] Bluetooth: hci0: command tx timeout [ 107.361135] Bluetooth: hci2: command tx timeout [ 107.424166] Bluetooth: hci5: command tx timeout [ 107.424592] Bluetooth: hci6: command tx timeout [ 107.424990] Bluetooth: hci4: command tx timeout [ 107.425505] Bluetooth: hci3: command tx timeout [ 107.489119] Bluetooth: hci7: command tx timeout [ 109.346203] Bluetooth: hci0: command tx timeout [ 109.346700] Bluetooth: hci1: command tx timeout [ 109.409079] Bluetooth: hci2: command tx timeout [ 109.473136] Bluetooth: hci3: command tx timeout [ 109.473581] Bluetooth: hci4: command tx timeout [ 109.473961] Bluetooth: hci6: command tx timeout [ 109.474727] Bluetooth: hci5: command tx timeout [ 109.537085] Bluetooth: hci7: command tx timeout [ 111.392125] Bluetooth: hci1: command tx timeout [ 111.392149] Bluetooth: hci0: command tx timeout [ 111.457127] Bluetooth: hci2: command tx timeout [ 111.520106] Bluetooth: hci5: command tx timeout [ 111.520262] Bluetooth: hci6: command tx timeout [ 111.520568] Bluetooth: hci4: command tx timeout [ 111.521404] Bluetooth: hci3: command tx timeout [ 111.584199] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 12:41:19 Registers: info registers vcpu 0 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8293dd05 RDI=ffffffff889747c0 RBP=ffffffff88974780 RSP=ffff888009f27618 R8 =0000000000000000 R9 =ffffed1001657046 R10=0000000000000032 R11=6531303838386652 R12=0000000000000032 R13=0000000000000010 R14=ffffffff88974780 R15=ffffffff8293dcf0 RIP=ffffffff8293dd5d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005555937486e8 CR3=000000000bcde000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f888b6b07c000007f888b6b07c8 XMM02=00007f888b6b07e000007f888b6b07c0 XMM03=00007f888b6b07c800007f888b6b07c0 XMM04=ffffffffffffffffffffffffffffff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff81b2ba10 RBX=ffffffff86725020 RCX=ffffffff81b2ba33 RDX=0000000000000000 RSI=ffffffff86ab71a2 RDI=ffffffff86725018 RBP=ffffffff86725024 RSP=ffff8880172e74b0 R8 =ffffffff86ab71a2 R9 =0000000000000000 R10=000000000003ca6e R11=0000000000025583 R12=ffffffff8672502c R13=ffffffff86725018 R14=ffffffff86725018 R15=dffffc0000000000 RIP=ffffffff8135ea5f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6e933698c0 00000000 00000000 GS =0000 ffff8880e548f000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3fbf944070 CR3=000000000c739000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000bfe62e42fefa39ef XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000