Warning: Permanently added '[localhost]:48017' (ECDSA) to the list of known hosts. 2025/11/16 14:52:27 fuzzer started 2025/11/16 14:52:27 dialing manager at localhost:37161 syzkaller login: [ 51.539491] cgroup: Unknown subsys name 'net' [ 51.610219] cgroup: Unknown subsys name 'cpuset' [ 51.625140] cgroup: Unknown subsys name 'rlimit' 2025/11/16 14:52:39 syscalls: 200 2025/11/16 14:52:39 code coverage: enabled 2025/11/16 14:52:39 comparison tracing: enabled 2025/11/16 14:52:39 extra coverage: enabled 2025/11/16 14:52:39 setuid sandbox: enabled 2025/11/16 14:52:39 namespace sandbox: enabled 2025/11/16 14:52:39 Android sandbox: enabled 2025/11/16 14:52:39 fault injection: enabled 2025/11/16 14:52:39 leak checking: enabled 2025/11/16 14:52:39 net packet injection: enabled 2025/11/16 14:52:39 net device setup: enabled 2025/11/16 14:52:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/11/16 14:52:39 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/11/16 14:52:39 USB emulation: enabled 2025/11/16 14:52:39 hci packet injection: enabled 2025/11/16 14:52:39 wifi device emulation: enabled 2025/11/16 14:52:39 802.15.4 emulation: enabled 2025/11/16 14:52:39 fetching corpus: 0, signal 0/0 (executing program) 2025/11/16 14:52:40 starting 8 fuzzer processes 14:52:40 executing program 0: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) inotify_rm_watch(0xffffffffffffffff, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) faccessat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x30) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa4, r1, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x3, 0x8, 0x401]}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x80000000, 0x2d, 0xffffff7f, 0x1]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x1, 0x1, 0x6]}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x1d}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fffffff}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5b6d24de}]}, 0xa4}}, 0x4040080) statx(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x6000, 0x200, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() syz_mount_image$nfs4(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x8, 0x0, &(0x7f0000000440), 0x40000, &(0x7f0000000480)={[{'SEG6\x00'}, {'/\x14(\xff'}, {'/]*;*-^\xaa.\'\\'}, {' \x01\x00'}, {'\xcd'}, {' \x01\x00'}], [{@subj_type={'subj_type', 0x3d, ' \x01\x00'}}, {@pcr={'pcr', 0x3d, 0x3b}}, {@uid_eq={'uid', 0x3d, r2}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfshat={'smackfshat', 0x3d, '@'}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@euid_lt={'euid<', r3}}, {@seclabel}]}) r4 = syz_open_dev$vcsn(&(0x7f0000000580), 0xd6af, 0x600000) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000005c0)="e9545739a278feb1d72f7ea9c4231a13", 0x10) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000600)='.pending_reads\x00', 0x90000, 0x1a2) statx(r5, &(0x7f0000000640)='./file0\x00', 0x2000, 0x20, &(0x7f0000000680)) getsockopt$IP_SET_OP_GET_BYNAME(r4, 0x1, 0x53, &(0x7f0000000780)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000007c0)=0x28) r6 = io_uring_setup(0x256b, &(0x7f0000000800)={0x0, 0xc4f1, 0x1, 0x2, 0x2ac, 0x0, r5}) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001640)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001600)={&(0x7f0000000e40)={0x7ac, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xe09}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xe4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x6, 0x0, 0x24}, {0x5, 0x40, 0x4, 0x5b}, {0x54, 0x1f, 0x0, 0x1}, {0x8, 0x9, 0x0, 0x8001}, {0x8, 0x7, 0x9, 0x70}, {0xf1c4, 0x4, 0x26, 0x80}]}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5c8e, 0x8, 0x8, 0x4}, {0x8, 0x5, 0x6, 0x48}, {0x400, 0x0, 0x1}, {0x334b, 0x1, 0x7f, 0x7}, {0x3f, 0x80, 0x9}, {0x4e, 0x7, 0x20, 0x1}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3f8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x120, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x40, 0x4, 0x2, 0x401}, {0x4, 0x0, 0x8, 0x1}, {0x9, 0x0, 0x0, 0x7ff}, {0x4, 0x5c, 0x8, 0x2}, {0xfff, 0x1, 0x1, 0x5}, {0x5, 0xd8, 0x7f, 0x1}, {0xf, 0x1f, 0x8, 0x6}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x7ac}, 0x1, 0x0, 0x0, 0x10}, 0x40000001) 14:52:40 executing program 1: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, &(0x7f0000000080)=0x80) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0xe1}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x9}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x800}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x2d4}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x1}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x4}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x7fffffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x48000) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) r2 = accept(r0, &(0x7f0000000280)=@ethernet={0x0, @link_local}, &(0x7f0000000300)=0x80) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xa0000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x7]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x58}}, 0x24000880) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000480)=0x7, 0x4) socketpair(0xf, 0x5, 0x7fffffff, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$vcsn(&(0x7f0000000500), 0x6, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x693}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffff800}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}]}, 0x5c}}, 0x4000000) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x6c, r1, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f00000007c0)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000800)=0x28) execveat(r4, &(0x7f0000000840)='./file0\x00', &(0x7f0000000900)=[&(0x7f0000000880)='/+\x00', &(0x7f00000008c0)='{\x00'], &(0x7f0000000bc0)=[&(0x7f0000000940)='syz1\x00', &(0x7f0000000980)='\x00', &(0x7f00000009c0)='\\/[\x00', &(0x7f0000000a00)='\x00', &(0x7f0000000a40)='{[\\\x00', &(0x7f0000000a80)='wlan1\x00', &(0x7f0000000ac0)='#[+\x00', &(0x7f0000000b00)='+\x00', &(0x7f0000000b40)='+\x00', &(0x7f0000000b80)='/dev/vcs#\x00'], 0x1000) mknodat(r4, &(0x7f0000000c40)='./file0\x00', 0x100, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000c80), r4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000cc0)={"ffc6fc6ccb9cbf741a24359e27dfa291", 0x0, 0x0, {0x2, 0x120}, {0x6, 0x28000000}, 0x0, [0xd1, 0x401, 0x20, 0x9, 0x8, 0x7fffffff, 0x7045, 0xaa34, 0x7, 0x7, 0x11, 0x8e4f, 0x0, 0x576a, 0x500000000]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000dc0)={"a0332af205cd6babb768f24931d310db", 0x0, r5, {0xfffffffffffffffa, 0x7}, {0x9, 0xda}, 0x0, [0x2, 0x0, 0x7, 0x5, 0xfb09, 0x7f, 0x2, 0x80000000, 0x3f, 0x3, 0x6, 0x500000, 0x4, 0x2, 0x4, 0x9]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000f40)={'gretap0\x00', &(0x7f0000000ec0)={'tunl0\x00', 0x0, 0x8, 0x0, 0x1, 0xbe11, {{0x12, 0x4, 0x1, 0x9, 0x48, 0x5, 0x0, 0x81, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @private=0xa010101, {[@cipso={0x86, 0x31, 0x2, [{0x1, 0x3, "87"}, {0x7, 0x11, "b5af86b05d99bb0c1fd1d7170fd9ef"}, {0x5, 0x5, "559da6"}, {0x6, 0x12, "1bbc63a4e3aee1a2a4e8913f71dc12c1"}]}]}}}}}) clock_gettime(0x2, &(0x7f0000000f80)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) 14:52:40 executing program 2: sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2e26}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xfffffff7, 0x6f9, 0x6]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xca55}]}, 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x24000004) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x10, 0x8, 0xa5, 0x5, {{0x6, 0x4, 0x0, 0x4, 0x18, 0x65, 0x0, 0x8, 0x4, 0x0, @multicast2, @broadcast, {[@end, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'tunl0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x8, 0x8, 0x8001, 0x8, {{0xb, 0x4, 0x1, 0xd, 0x2c, 0x64, 0x0, 0x6, 0x4, 0x0, @multicast2, @local, {[@noop, @noop, @noop, @timestamp={0x44, 0x14, 0x25, 0x0, 0x2, [0x101, 0x7fffffff, 0x9, 0x1]}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'xfrm0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'erspan0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x7800, 0x10, 0x1000, 0x2e053ec, {{0x1b, 0x4, 0x2, 0x2, 0x6c, 0x65, 0x0, 0x32, 0x9543a2534ed3984a, 0x0, @loopback, @remote, {[@generic={0x82, 0x10, "f62c3cea4839e7dd6afeb3d07cca"}, @end, @rr={0x7, 0x7, 0x1, [@empty]}, @end, @timestamp_prespec={0x44, 0x2c, 0x36, 0x3, 0x7, [{@remote, 0x81}, {@private=0xa010102, 0x1}, {@empty, 0x2}, {@private=0xa010100, 0x80000000}, {@local, 0x40}]}, @lsrr={0x83, 0x13, 0xf1, [@multicast2, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000140), 0xc, &(0x7f0000000740)={&(0x7f0000000500)={0x22c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r0}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r2}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x800, 0x3f, 0x5, 0x4}, {0xab, 0xff, 0x3, 0x820}, {0xfff9, 0x3, 0x5, 0x795}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x22c}, 0x1, 0x0, 0x0, 0x4004041}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'gre0\x00', &(0x7f0000000800)={'gretap0\x00', r5, 0x7, 0x7, 0x1, 0x2, {{0x3e, 0x4, 0x1, 0x2, 0xf8, 0x67, 0x0, 0x6, 0x2, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0x24, 0xf4, 0x1, 0x9, [{@loopback, 0x1ff}, {@rand_addr=0x64010100, 0x3}, {@loopback, 0x80000000}, {@remote, 0x7fffffff}]}, @ssrr={0x89, 0x1b, 0x29, [@dev={0xac, 0x14, 0x14, 0xd}, @broadcast, @multicast2, @private=0xa010100, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0xc, 0x4a, 0x3, 0xc, [{@local, 0x7fa2}]}, @rr={0x7, 0x7, 0x61, [@multicast2]}, @lsrr={0x83, 0xb, 0xf3, [@private=0xa010101, @multicast2]}, @cipso={0x86, 0x6a, 0x0, [{0x6, 0x9, "4e7aa4dc3a93c0"}, {0x1, 0x8, "4e154ee8c7f3"}, {0x5, 0x6, "22660ef3"}, {0x0, 0xe, "e25a147136d03a77779d6b08"}, {0x4, 0xe, "c7880ef59a983a6a2fe560ae"}, {0x0, 0x2}, {0x7, 0x11, "2b53912e829b4c82a0e6be38b050a7"}, {0x5, 0xc, "7f78353b8e01a57ed960"}, {0x6, 0x12, "01863923d902cb78b11670b1ede3f3d7"}]}, @timestamp_addr={0x44, 0x1c, 0x3f, 0x1, 0x4, [{@private=0xa010101, 0x101}, {@multicast2, 0x3}, {@multicast1, 0x192a}]}]}}}}}) r7 = openat$incfs(0xffffffffffffffff, &(0x7f0000000980)='.pending_reads\x00', 0x109a00, 0x145) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000b00)={'syztnl1\x00', &(0x7f00000009c0)={'syztnl2\x00', r1, 0x7800, 0x0, 0x7, 0x4, {{0x40, 0x4, 0x0, 0x6, 0x100, 0x66, 0x0, 0x40, 0x29, 0x0, @rand_addr=0x64010102, @local, {[@cipso={0x86, 0x69, 0x2, [{0x1, 0x9, "ce60d4f72eb2db"}, {0x0, 0x9, "31af1161b4e1a7"}, {0x7, 0xd, "fb818e0bb1938b5f720cef"}, {0x2, 0xa, "28382941187f461d"}, {0x0, 0xd, "f983137d6beec9a623e11d"}, {0x6, 0xe, "5dfade2cb0ddc0438d24f4b2"}, {0x1, 0x2}, {0x6, 0x12, "3b18f662a71fc0612ad96aa187d81c2d"}, {0x5, 0x8, "dae2432c5469"}, {0x6, 0x3, "c4"}]}, @timestamp_prespec={0x44, 0x14, 0x59, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@private=0xa010102, 0x3f}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x54, 0x9f, 0x1, 0x6, [{@remote}, {@private=0xa010101, 0x6}, {@multicast2, 0x7ff}, {@remote}, {@private=0xa010100, 0x2}, {@rand_addr=0x64010102, 0x8}, {@empty, 0x3}, {@dev={0xac, 0x14, 0x14, 0x11}, 0xfffffff7}, {@remote, 0x3ff}, {@rand_addr=0x64010101, 0x200}]}, @timestamp_prespec={0x44, 0x14, 0x57, 0x3, 0x0, [{@broadcast, 0xe17}, {@remote}]}]}}}}}) socketpair(0x1d, 0xa, 0x8, &(0x7f0000000b40)={0xffffffffffffffff}) pipe(&(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000d40)={'syztnl1\x00', &(0x7f0000000c00)={'gre0\x00', r5, 0x0, 0x700, 0x18000000, 0x80000001, {{0x42, 0x4, 0x2, 0x0, 0x108, 0x64, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@timestamp_prespec={0x44, 0x34, 0x37, 0x3, 0x8, [{@local, 0xe207}, {@private=0xa010101, 0x9}, {@empty, 0x1}, {@loopback, 0x200}, {@rand_addr=0x64010101, 0x7}, {@rand_addr=0x64010102, 0x8}]}, @end, @generic={0x88, 0x7, "db0a1e8e83"}, @timestamp_prespec={0x44, 0x1c, 0x85, 0x3, 0x1, [{@private=0xa010101, 0x6}, {@loopback, 0x8}, {@broadcast, 0x80}]}, @ssrr={0x89, 0x2b, 0xc8, [@remote, @private=0xa010102, @remote, @multicast2, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2, @empty]}, @cipso={0x86, 0x61, 0x3, [{0x7, 0xb, "a70771ac5c781c113e"}, {0x0, 0xc, "8d6e4648c2596ec15e73"}, {0x5, 0xe, "82e19097d37043fd723360a3"}, {0x3, 0xb, "d44d1b9e6a9eac10f1"}, {0x1, 0xd, "60744e2cbb0a73ebebadb1"}, {0x6, 0x2}, {0x5, 0xc, "6a80d3a057fdfc76d768"}, {0x1, 0x5, "db7be1"}, {0x2, 0xb, "ecb76836beb6ab740b"}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x59, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0x1ff}]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r9, &(0x7f0000000e40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x6c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c085}, 0x4000) r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r11, &(0x7f00000014c0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001480)={&(0x7f0000000f40)={0x51c, r12, 0x202, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x32}}}}, [@NL80211_ATTR_NAN_FUNC={0x30, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x28, 0xe, 0x0, 0x1, [{0x22, 0x0, "197e852f209987b624cf956dcabc731188257941ce05a762c9b976e83ed1"}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x22, 0xb, "ac9d62abc8772a01728015dfae21d4251005c9009cffc0f7262b62739ab0"}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x8}, @NL80211_NAN_FUNC_SERVICE_INFO={0x59, 0xb, "68111915df17568eaf91b652a54bd6926212f66154c37d48695c92a75a525c4ab15d268b91a9664a0858af77e85df54c5de24d1bef576324790ab84f42a41cc3f8cbdfcc4c68bd9ce9131f279a45fda186790a1e52"}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x80}]}, @NL80211_ATTR_NAN_FUNC={0x14c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x5}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "ed264ffa7238"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x40}, @NL80211_NAN_FUNC_SRF={0x124, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}]}, @NL80211_ATTR_NAN_FUNC={0x74, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0x6c, 0xb, "f533b4f5ac41dc9f66f360783d9e77ce673bd5c60687da7a5675d064d9646120f7eabb787db8696f13cbd87291e1db29cd9e6ee2807cac0c59d71bbec36619a7592be618c63df298e05823b3ac38c3ac708f146b22aad8961390d9e23c9274d1d010b6b9f4397a73"}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x4}]}, @NL80211_ATTR_NAN_FUNC={0x25c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "1fb41303d582"}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "d4c3c51775c3"}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x3f}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x2}, @NL80211_NAN_FUNC_SRF={0x90, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x40}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x6}, @NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x81}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x20}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x184, 0xe, 0x0, 0x1, [{0x81, 0x0, "b4aacc5fca99426ea08637af13e8d3921a13eda3e7af4eb847051413bbeeac4a01a22f1f8d5db01f9235dfb7a36286b3ca66ce8690e934d8b80ad21db4ee8a0e72f2e8aa40341406ebfd88087ecdd70cd8826ebce91a0feea42ab983fda32079fb7a4437d3616b11df088ecd5c6187cae92b6fa360cb1af9a20393c107"}, {0xde, 0x0, "583aa638de7755bb46ed12d71cb72aff61a0af645620d5cbbec206d8acaa8e6d758898287aa2953260d8f470d51b9aadd4bb71da7b06b6f8302ac2e01c60990060f4d268723fad7f6f8cdf4d81f54f7631b091d093126e1459b7e254197cb6e4cbccac09ce9750db4f063ee00f8528c95449ee856fd24b94d1d417ab177de7ee4a7e1de68fd16e3209ab71e61db4814365e2fbf016916bde85bac40a9ab20755f9c793fb8697203d39c809682f89ea67958f98cbfc27eefa70b57daae9602d21db9eeb6a4e95f9b0f48e9632a6f37e86bdc11cd115f030b99bf6"}, {0x1c, 0x0, "32598a7aad802895fe559f9bc3e01212dbd267eb7f992fbe"}]}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x8}]}]}, 0x51c}, 0x1, 0x0, 0x0, 0x10000040}, 0x20040001) setsockopt$inet_udp_int(r8, 0x11, 0x65, &(0x7f0000001500)=0x9, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000001540)=0x3, 0x4) 14:52:40 executing program 3: ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x181200, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x3, 0xffff, 0x81, 0x80000001, 0x6]}, @SEG6_ATTR_DST={0x14, 0x1, @private0}]}, 0x88}, 0x1, 0x0, 0x0, 0x88000}, 0x80) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x48400, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) mmap$perf(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2000001, 0x1010, r3, 0x100000001) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xc, 0x0, 0x9, 0x3f, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xc3d3, 0x2, @perf_config_ext={0x0, 0x8}, 0x4000, 0x100000001, 0x2, 0x7, 0x3, 0x9, 0x2, 0x0, 0x2, 0x0, 0x25}, 0xffffffffffffffff, 0x5, r4, 0x0) mmap$perf(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1000008, 0x10, r5, 0xffff) r6 = socket(0x1f, 0xa, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getdents(r3, &(0x7f00000003c0)=""/199, 0xc7) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f00000004c0)=0x400) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500), 0x80000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r7, 0x3309) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000580), 0x4) 14:52:40 executing program 4: mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x6) r0 = syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x7ff, 0x2, &(0x7f0000000240)=[{&(0x7f00000000c0)="7368f1d297d4540cda3dc3562cd059b8ace9d0dfe261becff6dab0006c5a1d65ea748f405c2bbfd1fdb74c5e27889dcfd941ab48b6f849482c2f82d936959af28d4a96516c8bc813bcca39254370ffe5b547e7eb16c747f27a89ab636f71b3cc853db4", 0x63, 0x7}, {&(0x7f0000000140)="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", 0xfd, 0x6}], 0x40, &(0x7f0000000280)={[{'\xca'}, {'-'}, {}, {'/'}, {'$\xf7'}, {'&,'}, {'#'}], [{@obj_role={'obj_role', 0x3d, '7'}}, {@dont_measure}, {@euid_gt={'euid>', 0xee01}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@smackfsdef}, {@fsname={'fsname', 0x3d, '{\f}{'}}, {@obj_type={'obj_type', 0x3d, '+:%-/[\\/'}}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r1, &(0x7f0000000340)=@x25, &(0x7f00000003c0)=0x80) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f00000004c0)=0x15, 0x4) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000500)='./file1\x00', 0x40000020) r3 = socket$netlink(0x10, 0x3, 0x8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000540), 0x4) geteuid() socketpair(0x10, 0x80000, 0x8000, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f00000005c0)) faccessat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x62) syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r4) statx(r0, &(0x7f0000000e80)='./file0\x00', 0x0, 0x800, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$nfs4(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x400, 0x9, &(0x7f0000000d80)=[{&(0x7f0000000700)="18bad42b9d4a16b66e49260fb7409cb819d1f6cda3d01ac166a71a3a63e26a3a9806d1623c66547563e318044f5cfd2ccecca1ced78dc2ec23eafef6299adc917a16d0596abcacf0fb3b732fb6933b83297538b9ba848907bcd50a4c90f655614371049479750320107252cca1a8d60d628bbc633d627732b55e5a795868a40f1c82c4388ef47ce7e109c4a725e387006346", 0x92, 0x7ff}, {&(0x7f00000007c0)="ae68609d9a3f109d5ac8b7d11c8b6f12733602886e022d9d498fc48524aa80a30224d9a9d012ef360d0a69ad3befd8aa694b09ee0b18719c5faa9bc3c9a6d8203f36d478ec28384261aa04d7d59013e3ba399ebe47fc782bc0c0b11645083d5d889edc9818efaad3ea43dc6ca431df7189348344170d08ea7c5f04749781cc9ed4195f91637d1f71dbe2b4b81f7eebf9d0382c8315f59ed9f0e1d59b73deacbfb2b87d2f3248ad1f6a7b4e3e1b9dbf20a6c1c6d8e6643a59fd0b36b667d7aec7f4f971f5c11bd0916b05a3a985d83f40a46e9f5fd9586f19d1f7628d50e7a836e7", 0xe1, 0x8}, {&(0x7f00000008c0)="4a40753e7a4596c0ad636e590f7c067bcd17f9b2036634fc9d015f102da370b6d17ec441f3694b125dc683ab15895bb52a8b5258c36d199f7239644179bb29275524670201ea549e2d423b0c193cae8840a6a9db617da6871968373d9973ef01c73ef629db994820f88670d4df0cbbeb6d760c5e68a40bfc6d07aac0cfbbf70a843e45db06c18745ca03e1e229a78b2d31bb94a221d0f799aceb5b3c60702c5b8b04c09c1cdf6e861095820a61280e2464978fd3d325483e17d367753756510078e5c2e138841a8c70a078854029bcb8428de071d8442e3db90e5c59f1a13966f74722ec24b0febe7f35952a0f92119d353b20", 0xf3, 0xfffffffffffffffd}, {&(0x7f00000009c0)="daf8df2ad156384bd7f03400ad8543b53c7a3629bbcad803626164438dea4740ffd3254c60e689c4e9ad3eda63b2313de23aa2db29715507ccfdc87497a3531ce4ee878def2f9f8e726936c0e5411b1071a305778c65b89c9ab75f45cdf795e64a289b01e716352290bd6a424eadfdf037a0e0cb69dc0feebc94397af68959240a13f0aa15b3244729e9d8b77f326f9019c3fc58409948c36a8587648a69a3acb1f518dd98389b69d091fa7a60e4b5d96754d20d8b0627c78942f4ffaebce50e6e33996a6fce686f6463e7080277b692af72af8112c129fc08", 0xd9}, {&(0x7f0000000ac0)="9175eafda6fb1ffa84a3b8b5b8723d527366fa8cb5c5fcbbba6ef14fd3d7dfc7f9a72e04ed80eaf33fe3fa25c3b1d00aefcf96b81ab22bd3bf", 0x39, 0xe5}, {&(0x7f0000000b00)="2755943618161e002185ea4eb02026640e7f4a6c1c402bc15c06cf5d2426fffe0a34462e14fe8ca43d09180642b3f53d5da05ee6912cde5a126ca79d51c77afa90f8c2cddbf616df4d20f23165eef5c72f17ceff0fe726f7f167e0500c0d1ddb11979ce8a151e126df4cd8bd0c0439936ea6d4a1067d0b97037729b896b00ad4ec23ae6401", 0x85, 0x800}, {&(0x7f0000000bc0)="c5eea4a11e3fe176ca4e388194c91bf373db43d4d4cafd51a3238a15f8342cbaed7bef85d7e5dbc7d7096ee3760a2276616a69b90650060503c971bbaca50c2f623801182f6290c11b549a5161a3cd79b3e4935617b98598d899dc77606859e92821b65268840fbdc7642b393d961946414521973100750d0b43d1296353de88b41141e09722168aee622e5e3ef9ab0912c89d7477918f0965dcbf1a8504f34e359110a869824e790eb897b7ac9fdf1d", 0xb0, 0x8001}, {&(0x7f0000000c80)="125bbff2eb528e41b0234cc29ad03d587a23da0a397165c21b1490fd58", 0x1d, 0x101}, {&(0x7f0000000cc0)="ef47c0b63a08f2ef6d4eaa9a76ef2cd9f0f2c0205ed6732f79e74157e9b845c908540f4c798966009b02249aa71d27b2f0d961ef8bb7546172343590862f91b9539453a6adb0e4b8b9e5dc9d819e515936cdde250539fc2d05b1afc0ed15e69a3c3a5ec3a9534f14718a8a2efb255052be247b169a50cacc605315cffb35177d35cd85f11f5c3f810fdbcc998b", 0x8d, 0x6}], 0x3000048, &(0x7f0000000fc0)={[{'obj_role'}], [{@fowner_lt={'fowner<', r6}}, {@hash}, {@dont_measure}, {@smackfstransmute={'smackfstransmute', 0x3d, '}:)['}}, {@subj_user={'subj_user', 0x3d, 'ethtool\x00'}}, {@obj_user={'obj_user', 0x3d, '&,'}}]}) statx(r0, &(0x7f0000001040)='./file0\x00', 0x6000, 0x7ff, &(0x7f0000001080)) r7 = accept(r4, &(0x7f0000001180)=@phonet, &(0x7f0000001200)=0x80) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x4c, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x37}}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x9, 0x1ff, 0x7, 0xe4]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004004}, 0x4) 14:52:40 executing program 5: setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0x13, 0x4) r0 = socket(0x1, 0xa, 0x5) getpeername$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) socketpair(0x22, 0x3, 0x9, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$netlink(r2, 0x10e, 0x6, &(0x7f0000000100)=""/239, &(0x7f0000000200)=0xef) r3 = accept(r2, 0x0, &(0x7f0000000240)) connect$netlink(r1, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfe, 0x40000}, 0xc) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x240101, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x7821, 0x1, 0x62, 0x3, {{0x17, 0x4, 0x0, 0x4, 0x5c, 0x65, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@generic={0x44, 0xf, "501b3e29d753ee67b202425076"}, @end, @rr={0x7, 0xb, 0x46, [@empty, @rand_addr=0x64010102]}, @lsrr={0x83, 0xb, 0x20, [@private=0xa010102, @loopback]}, @lsrr={0x83, 0x1f, 0xb3, [@rand_addr=0x64010101, @multicast2, @remote, @broadcast, @private=0xa010102, @multicast1, @rand_addr=0x64010100]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x22c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_STRSET_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x154, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x22c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008080) r7 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$netlink(r7, &(0x7f0000000700), &(0x7f0000000740)=0xc) r8 = syz_genetlink_get_family_id$team(&(0x7f00000007c0), r0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'syztnl1\x00', &(0x7f0000000840)={'gretap0\x00', r5, 0x709, 0x10, 0x8, 0x80000001, {{0x34, 0x4, 0x1, 0x37, 0xd0, 0x68, 0x0, 0x3, 0x29, 0x0, @loopback, @broadcast, {[@ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x5a, 0x0, 0xa, [0x7, 0x58]}, @timestamp_prespec={0x44, 0x44, 0xd8, 0x3, 0x1, [{@multicast2, 0x8}, {@empty, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x892}, {@loopback, 0x2}, {@local, 0x4}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x1}, {@broadcast, 0xfffffeff}, {@local, 0xfffffffb}]}, @generic={0x94, 0x7, "cb9a9f5080"}, @cipso={0x86, 0x15, 0xffffffffffffffff, [{0x1, 0xa, "82360d90d667aed1"}, {0x7, 0x5, "68c98c"}]}, @ssrr={0x89, 0x1b, 0x35, [@local, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast2, @dev={0xac, 0x14, 0x14, 0x30}, @loopback, @local]}, @timestamp={0x44, 0x28, 0x9a, 0x0, 0xa, [0x800, 0x2, 0x9, 0x4, 0x29d39dc7, 0x9, 0x6, 0x286, 0x284]}, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000a40)={'wg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000a80)={'veth1_to_batadv\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000b80)={'syztnl0\x00', &(0x7f0000000ac0)={'syztnl1\x00', r6, 0x20, 0x10, 0xfffffff9, 0x7, {{0x20, 0x4, 0x0, 0x38, 0x80, 0x67, 0x0, 0x0, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0x6f, 0x3, 0x8, [{@local, 0x5}, {@private=0xa010102, 0x1}]}, @rr={0x7, 0x1f, 0xd4, [@local, @local, @remote, @private=0xa010100, @remote, @multicast2, @remote]}, @noop, @generic={0x82, 0x12, "83386fdd3eb20f95dca9ae9d442dfabb"}, @noop, @noop, @timestamp_prespec={0x44, 0x14, 0x9, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x2e}, 0x8000}, {@rand_addr=0x64010102, 0xd1}]}, @lsrr={0x83, 0xf, 0x14, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000ec0)={&(0x7f0000000780), 0xc, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x2b4, r8, 0x200, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9, 0x7, 0xe5, 0x80000000}]}}}]}}, {{0x8, 0x1, r10}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r6}, {0x88, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x72000000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xcd05}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r6}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}]}}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x40000}, 0x10) [ 63.143889] audit: type=1400 audit(1763304760.775:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:52:40 executing program 7: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$sg(&(0x7f0000000000), 0xfffffffffffffff9, 0x107080) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x700, 0x700, 0x0, 0x3f, {{0x9, 0x4, 0x3, 0x36, 0x24, 0x68, 0x0, 0x4, 0x2f, 0x0, @local, @empty, {[@noop, @timestamp={0x44, 0x8, 0xf7, 0x0, 0xe, [0x7]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x7800, 0x8, 0x9, 0x1, {{0x10, 0x4, 0x2, 0x4, 0x40, 0x67, 0x0, 0x7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @broadcast, {[@cipso={0x86, 0xd, 0x3, [{0x2, 0x7, "c9a49dddae"}]}, @timestamp_addr={0x44, 0x1c, 0x3d, 0x1, 0x0, [{@local}, {@rand_addr=0x64010101, 0x80000001}, {@broadcast}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)={0x244, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}}]}}]}, 0x244}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000580)={'erspan0\x00', &(0x7f0000000500)={'erspan0\x00', r2, 0x20, 0x80, 0xc2d, 0x6, {{0x14, 0x4, 0x0, 0x32, 0x50, 0x68, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, {[@ssrr={0x89, 0x1b, 0x74, [@remote, @local, @multicast1, @loopback, @rand_addr=0x64010100, @multicast2]}, @cipso={0x86, 0x1a, 0x3, [{0x5, 0x9, "dddf6aaaad7c4c"}, {0x0, 0xb, "469eccb52bed4708c8"}]}, @noop, @end, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000680)={'syztnl1\x00', &(0x7f00000005c0)={'ip_vti0\x00', r4, 0x80, 0x700, 0x8000, 0x9e68dac, {{0x21, 0x4, 0x2, 0x4, 0x84, 0x66, 0x0, 0x7, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @timestamp_prespec={0x44, 0x34, 0x43, 0x3, 0x5, [{@private=0xa010100, 0xed}, {@private=0xa010102, 0x1}, {@multicast2, 0x7f}, {@loopback, 0x1}, {@empty, 0x3}, {@private=0xa010101, 0x100}]}, @timestamp_prespec={0x44, 0x14, 0x8f, 0x3, 0x4, [{@multicast1, 0x3}, {@empty}]}, @end, @lsrr={0x83, 0x7, 0x83, [@dev={0xac, 0x14, 0x14, 0x23}]}, @ssrr={0x89, 0x13, 0xb3, [@private=0xa010100, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x22}]}, @rr={0x7, 0xb, 0x7a, [@remote, @rand_addr=0x64010102]}]}}}}}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f00000006c0)={{0x1, 0x2}, {0x1f, 0x2}, 0x800, 0x1}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000700)={0x2}) r5 = perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x3, 0x0, 0xd8, 0x2, 0x0, 0x800, 0x8040, 0x59d13cfd3ed9e96, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff8000, 0x2, @perf_bp={&(0x7f0000000740), 0x2}, 0x1450, 0x1f, 0xd7f, 0x2, 0x7f9, 0x6, 0x3ff, 0x0, 0x1000, 0x0, 0x7ff}, 0x0, 0x10, 0xffffffffffffffff, 0xa) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r5) getpeername(r0, &(0x7f0000000800)=@sco={0x1f, @fixed}, &(0x7f0000000880)=0x80) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000900)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000a00)={'gretap0\x00', r4, 0x40, 0x10, 0x3, 0x4, {{0x14, 0x4, 0x2, 0x0, 0x50, 0x67, 0x0, 0x4, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x1b, 0x36, [@remote, @rand_addr=0x64010101, @multicast1, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x1c, 0xb1, 0x1, 0x9, [{@rand_addr=0x64010100, 0x2}, {@loopback, 0x48cf}, {@multicast2, 0x7}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000000b80)={'tunl0\x00', r4, 0x10, 0x20, 0x6, 0x4, {{0xf, 0x4, 0x1, 0xa, 0x3c, 0x64, 0x0, 0x0, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x12, "ff5fbb7020e045a930c3dd11f2fd06de"}, @noop, @generic={0x94, 0x2}, @ssrr={0x89, 0x3, 0x35}, @rr={0x7, 0xf, 0xda, [@empty, @dev={0xac, 0x14, 0x14, 0x38}, @multicast2]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001000)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000d40)={0x25c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r4}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2647adcd}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc84}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x25c}, 0x1, 0x0, 0x0, 0x10}, 0x40040) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001040), 0x200, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f00000011c0)={'gretap0\x00', &(0x7f0000001080)={'ip_vti0\x00', r1, 0x7800, 0x80, 0x100, 0xffff47a3, {{0x48, 0x4, 0x0, 0x0, 0x120, 0x64, 0x0, 0x2, 0x0, 0x0, @rand_addr=0x64010102, @remote, {[@noop, @cipso={0x86, 0x61, 0x0, [{0x2, 0x8, "14baeaef5953"}, {0x7, 0xb, "81f405e7416a0750e1"}, {0x6, 0xe, "092110dc40ab8996790dd642"}, {0x1, 0x12, "571a6290c984f412a83c7f98d824630b"}, {0x5, 0xb, "97eaf0bf8350a0e88a"}, {0x5, 0x10, "b94b4ccbc8278a51d166283c36d8"}, {0x2, 0x5, "a27b65"}, {0x1, 0x8, "d6b1fd88b777"}]}, @lsrr={0x83, 0x27, 0x92, [@local, @multicast2, @private=0xa010100, @remote, @rand_addr=0x64010102, @empty, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0xf, 0x4f, [@remote, @multicast1, @remote]}, @timestamp_prespec={0x44, 0x44, 0xc6, 0x3, 0x0, [{@empty}, {@rand_addr=0x64010102, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x400}, {@broadcast, 0xdf0}, {@broadcast, 0xffff}, {@private=0xa010100, 0x6}, {@remote, 0xff}]}, @timestamp_prespec={0x44, 0x1c, 0x78, 0x3, 0x4, [{@multicast2, 0x7}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x45f}, {@local, 0x8001}]}, @timestamp_prespec={0x44, 0x14, 0x9a, 0x3, 0x3, [{@empty, 0x80000001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}]}}}}}) 14:52:40 executing program 6: socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@un=@abs, &(0x7f0000000140)=0x80) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/133, 0x85, 0x0, &(0x7f0000000240)=""/25, 0x19}, &(0x7f00000002c0)=0x40) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000340)='.log\x00', 0x8500, 0x4) syz_genetlink_get_family_id$team(&(0x7f0000000300), r1) ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f0000000380)={'\x00', 0x2, 0x1, 0x9}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2/custom0\x00', 0x802, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000440)) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000580)=r1, 0x1) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f00000005c0)) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000600), 0x50800, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000740)={0x8, 0x1, 0xce, &(0x7f0000000640)="2d521345d89eba5cc7b3e69c520d6c1a2a0d736c3d336e9dfb5e07a02224a6301a5c7a3bd19f3daaff6a0b0357cf2c94f0eb4465fed2cde0003ed3746643885dc02a8a27c6a8dd65b737c4ab1ed2b355f1a5ad8bcb39878f8532b11dc42fa2ceaf83df89676c1dd0de815ea958e3b708c077a09bc5d429f5bca8e9599f732943c60a9d47d5d9373a191d1ed4f9efb220b3cc20e9e340933e7a299a9cb0c4b303f228aeabe8d0130e1a2af3113364be415a54b4987f8baeab5542fccf9c5a5e2f4a5a1999ed28036be12f82d81603"}) unlinkat(0xffffffffffffffff, &(0x7f00000007c0)='./file0\x00', 0x0) [ 64.327633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.329668] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.332178] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.333991] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.336927] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.341780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.343708] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.345705] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.348090] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.351879] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.380985] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.388042] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.391400] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.399664] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.402155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.452162] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.468332] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.472780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.480676] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.484881] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.522904] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 64.528859] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 64.530899] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 64.546202] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.553920] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.556305] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 64.560783] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 64.562015] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 64.563337] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.572776] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 64.574610] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 64.579714] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 64.583995] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 64.585408] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.587054] ================================================================== [ 64.588128] BUG: KASAN: slab-use-after-free in hci_cmd_work+0x66d/0x6d0 [ 64.589130] Read of size 2 at addr ffff888009f19b78 by task kworker/u11:0/287 [ 64.590931] [ 64.591399] CPU: 1 UID: 0 PID: 287 Comm: kworker/u11:0 Not tainted 6.18.0-rc5-next-20251114 #1 PREEMPT(voluntary) [ 64.591439] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 64.591458] Workqueue: hci7 hci_cmd_work [ 64.591498] Call Trace: [ 64.591515] [ 64.591527] dump_stack_lvl+0xca/0x120 [ 64.591559] print_report+0xcb/0x610 [ 64.591587] ? __virt_addr_valid+0x100/0x5d0 [ 64.591611] ? hci_cmd_work+0x66d/0x6d0 [ 64.591638] ? hci_cmd_work+0x66d/0x6d0 [ 64.591664] kasan_report+0xca/0x100 [ 64.591690] ? hci_cmd_work+0x66d/0x6d0 [ 64.591719] hci_cmd_work+0x66d/0x6d0 [ 64.591747] process_one_work+0x8e1/0x19c0 [ 64.591783] ? __pfx_process_one_work+0x10/0x10 [ 64.591812] ? move_linked_works+0x172/0x270 [ 64.591836] ? assign_work+0x196/0x240 [ 64.591865] worker_thread+0x67e/0xe90 [ 64.591894] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 64.591920] ? __pfx_worker_thread+0x10/0x10 [ 64.591950] kthread+0x3c8/0x740 [ 64.591977] ? __pfx_kthread+0x10/0x10 [ 64.592003] ? ret_from_fork+0x79/0x7a0 [ 64.592024] ? lock_release+0xc8/0x290 [ 64.592056] ? __pfx_kthread+0x10/0x10 [ 64.592083] ret_from_fork+0x67a/0x7a0 [ 64.592103] ? __pfx_ret_from_fork+0x10/0x10 [ 64.592125] ? __switch_to+0x759/0x1060 [ 64.592154] ? __pfx_kthread+0x10/0x10 [ 64.592180] ret_from_fork_asm+0x1a/0x30 [ 64.592215] [ 64.592222] [ 64.614272] Allocated by task 289: [ 64.614791] kasan_save_stack+0x24/0x50 [ 64.615380] kasan_save_track+0x14/0x30 [ 64.615951] __kasan_slab_alloc+0x59/0x70 [ 64.616553] kmem_cache_alloc_node_noprof+0x228/0x6b0 [ 64.617291] __alloc_skb+0x2ab/0x370 [ 64.617846] hci_cmd_sync_alloc+0x34/0x300 [ 64.618484] __hci_cmd_sync_sk+0xf7/0x5c0 [ 64.619108] hci_read_bd_addr_sync+0x2c/0x170 [ 64.619761] hci_dev_open_sync+0x145c/0x1f60 [ 64.620388] hci_power_on+0xdb/0x5d0 [ 64.620934] process_one_work+0x8e1/0x19c0 [ 64.621543] worker_thread+0x67e/0xe90 [ 64.622114] kthread+0x3c8/0x740 [ 64.622627] ret_from_fork+0x67a/0x7a0 [ 64.623189] ret_from_fork_asm+0x1a/0x30 [ 64.623776] [ 64.624031] Freed by task 310: [ 64.624492] kasan_save_stack+0x24/0x50 [ 64.625075] kasan_save_track+0x14/0x30 [ 64.625642] kasan_save_free_info+0x3a/0x60 [ 64.626314] __kasan_slab_free+0x43/0x70 [ 64.626983] kmem_cache_free+0x26f/0x500 [ 64.627608] kfree_skbmem+0x18a/0x1f0 [ 64.628162] sk_skb_reason_drop+0x10e/0x1b0 [ 64.628778] vhci_read+0x3d5/0x5d0 [ 64.629301] vfs_read+0x1eb/0xc70 [ 64.629805] ksys_read+0x121/0x240 [ 64.630335] do_syscall_64+0xbf/0x430 [ 64.630892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.631704] [ 64.631990] The buggy address belongs to the object at ffff888009f19b40 [ 64.631990] which belongs to the cache skbuff_head_cache of size 232 [ 64.633836] The buggy address is located 56 bytes inside of [ 64.633836] freed 232-byte region [ffff888009f19b40, ffff888009f19c28) [ 64.635543] [ 64.635800] The buggy address belongs to the physical page: [ 64.636590] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x9f19 [ 64.637698] memcg:ffff88801edec981 [ 64.638207] flags: 0x100000000000000(node=0|zone=1) [ 64.638934] page_type: f5(slab) [ 64.639423] raw: 0100000000000000 ffff8880096c78c0 dead000000000122 0000000000000000 [ 64.640518] raw: 0000000000000000 00000000000c000c 00000000f5000000 ffff88801edec981 [ 64.641593] page dumped because: kasan: bad access detected [ 64.642382] [ 64.642630] Memory state around the buggy address: [ 64.643320] ffff888009f19a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 64.644337] ffff888009f19a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 64.645357] >ffff888009f19b00: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 64.646404] ^ [ 64.647438] ffff888009f19b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 64.648468] ffff888009f19c00: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 64.649498] ================================================================== [ 64.650672] Disabling lock debugging due to kernel taint [ 64.651555] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 64.658114] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 64.661640] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 64.673355] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 64.674957] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 64.688617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.416593] Bluetooth: hci1: command tx timeout [ 66.416612] Bluetooth: hci0: command tx timeout [ 66.480418] Bluetooth: hci2: command tx timeout [ 66.544463] Bluetooth: hci3: command tx timeout [ 66.673436] Bluetooth: hci5: command tx timeout [ 66.736460] Bluetooth: hci6: command tx timeout [ 66.738404] Bluetooth: hci7: command tx timeout [ 66.800434] Bluetooth: hci4: command tx timeout [ 68.464518] Bluetooth: hci0: command tx timeout [ 68.464564] Bluetooth: hci1: command tx timeout [ 68.528418] Bluetooth: hci2: command tx timeout [ 68.592556] Bluetooth: hci3: command tx timeout [ 68.721114] Bluetooth: hci5: command tx timeout [ 68.785180] Bluetooth: hci7: command tx timeout [ 68.785216] Bluetooth: hci6: command tx timeout [ 68.848455] Bluetooth: hci4: command tx timeout [ 70.512849] Bluetooth: hci0: command tx timeout [ 70.513482] Bluetooth: hci1: command tx timeout [ 70.577389] Bluetooth: hci2: command tx timeout [ 70.641460] Bluetooth: hci3: command tx timeout [ 70.768478] Bluetooth: hci5: command tx timeout [ 70.832427] Bluetooth: hci6: command tx timeout [ 70.833951] Bluetooth: hci7: command tx timeout [ 70.897466] Bluetooth: hci4: command tx timeout [ 72.560591] Bluetooth: hci1: command tx timeout [ 72.560737] Bluetooth: hci0: command tx timeout [ 72.625519] Bluetooth: hci2: command tx timeout [ 72.689454] Bluetooth: hci3: command tx timeout [ 72.816476] Bluetooth: hci5: command tx timeout [ 72.880442] Bluetooth: hci7: command tx timeout [ 72.880612] Bluetooth: hci6: command tx timeout [ 72.944472] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 14:52:42 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff8880165ad340 RCX=ffff888016dd7844 RDX=0000000000000000 RSI=ffffffff81b8e1df RDI=ffff8880165ad73c RBP=ffff8880165ad340 RSP=ffff888016dd7868 R8 =0000000000000001 R9 =ffff888016dd7930 R10=000000000003ca6e R11=0000000000027359 R12=0000000000000000 R13=ffff888016dd7938 R14=ffff8880165ad340 R15=ffff888016dd78f0 RIP=ffffffff815be575 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f062584b540 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe3d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f06259e64a1 CR3=000000001cfbf000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000ffff000000000000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8293dc70 RDI=ffffffff889747c0 RBP=ffffffff88974780 RSP=ffff888017e9f5c0 R8 =0000000000000000 R9 =ffffed10015f1046 R10=00000000000fe503 R11=000000003a555043 R12=0000000000000823 R13=0000000000000020 R14=fffffbfff112e94a R15=dffffc0000000000 RIP=ffffffff8293dcc5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e548f000 00000000 00000000 LDT=0000 fffffe6b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa3f39d78e0 CR3=000000000e6a9000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000000000000000000000000000ff XMM02=000000000000000000000000000000ff XMM03=7465756c42205d3830343538352e3436 XMM04=636f72703d7373616c63742030733a74 XMM05=3a755f6d65747379733d747865746e6f XMM06=5f6d65747379733a755f6d6574737973 XMM07=00000000000000000000000000000000 XMM08=6c6f72746e6f635f726565705f6b7200 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000