last executing test programs: 1.240104893s ago: executing program 2 (id=250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00000010000100002500"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000b0c3e7ee3a49fb0c0072696467704875d9af217f20ed0fa9ca655f736c6176"], 0x4c}}, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="d2da42", 0x3) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r5, 0x80080400) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/65, 0x41}], 0x1, &(0x7f0000000300)=""/137, 0x89}, 0x9}], 0x1, 0x20, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f00000000c0), 0x0, 0x1015, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r6, 0x10d, 0xf, &(0x7f0000000000), &(0x7f0000000200)=0x4) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x13, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x44) 597.583748ms ago: executing program 3 (id=268): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c77616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000080)) stat(&(0x7f0000000180)='./bus/file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="240000002d000100fcffffff0000010008000000", @ANYRES32=r1, @ANYBLOB="0b000080976b640868603000"], 0x24}], 0x1, 0x0, 0x0, 0x4}, 0x0) mount$nfs(&(0x7f0000000440)='GPL\x00', &(0x7f0000000500)='./file1\x00', &(0x7f0000000540), 0x10, &(0x7f0000000580)={[{'^}'}, {'&)(#$]*'}, {}, {'9p\x00'}, {'workdir'}, {'\''}, {'/)-.#'}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_lt}, {@euid_gt={'euid>', 0xee00}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@dont_measure}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x34, 0x65, 0x34, 0x63, 0x34, 0x36, 0x31], 0x2d, [0x32, 0x63, 0x36, 0x30], 0x2d, [0x30, 0x36, 0x39, 0x32], 0x2d, [0x64, 0x61, 0x34, 0x39], 0x2d, [0x65, 0x32, 0x31, 0x62, 0x62, 0x31, 0x34, 0x33]}}}, {@subj_user={'subj_user', 0x3d, 'io_uring_register\x00'}}]}) chdir(&(0x7f0000000100)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = io_uring_setup(0x5bec, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) flock(0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000300)={0x0, 0x10, 0xf145dc76803bae57}, 0x0) fsync(r3) r4 = syz_open_dev$vcsu(&(0x7f0000000400), 0x5, 0x80000) ftruncate(r4, 0x9) io_uring_register$IORING_REGISTER_FILES(r2, 0x12, 0x0, 0x0) 469.831037ms ago: executing program 3 (id=271): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) readlink(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="10000000191407"], 0x10}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x4, 0x70bd25, 0x3ff, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x40080) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd00, &(0x7f00000000c0)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800140000000401a80009000800024004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x8080) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f0000003000)=@abs={0x1}, 0x4f) r12 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/unix\x00') preadv(r12, &(0x7f0000001400)=[{&(0x7f0000001ac0)=""/209, 0xd1}], 0x1, 0xc1, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r13], 0x64}}, 0x0) 399.380948ms ago: executing program 1 (id=273): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r2, &(0x7f0000000040)={'#! ', './file0', [{0x20, '-]^\\{-!)/'}]}, 0x15) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0) ioctl$SG_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0xfe0, 0x83, 0x400, 0x4010002, 0xfffeffdffffb0c0f}) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x8}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3549100dc5226c896b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xeebc7af0614cea2}}}, 0x24}}, 0x0) recvmmsg(r5, &(0x7f0000006bc0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000880)=""/147, 0x93}], 0x1}, 0xfffffffe}], 0x1, 0x10002, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r7, 0x11, 0x65, &(0x7f0000000340), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x12, 0x9, &(0x7f0000001180)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000ba000000a7000000000000001800000000000000000000000000000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe7b, @void, @value}, 0x94) socket$unix(0x1, 0x2, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r8, 0x402c5342, &(0x7f0000000540)={0x0, 0x7a120, 0x40000060}) 398.797324ms ago: executing program 0 (id=274): syz_open_dev$dri(&(0x7f0000000180), 0x8003, 0x1e9c00) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a320000000014000780080013400000000008001240600020000500050002000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000001580)='asymmetric\x00', 0x0, &(0x7f0000000300)="303e30000000000002d190c937dc6914243b0402d6dcb7154fe6727ae888746b024ee670a5882a0ad79716bb4e5704b7f62edac751478af9c62f000000000000", 0x40, r2) keyctl$set_timeout(0xf, r2, 0x7) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="58daad35d400000427bd7000fddbdf2502102005150000070c000000080001006401010208000200ac1214aa08000200ac1414aa08000100ac000100000800e00000020c000c400000fb24000000000000000000000000002fb77e7ac8426f214652f0d15a159687d587c4f4bd8292d6a42a07fc3ffc37444448e8b49081122cf5148020650363e58287628436b6ac2656ff68e0a52f13041b3f8c7f6a5504b2e16369cb612544f0fabb39148b132b603ca735c0966aff7a8a5939"], 0x58}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006300e0ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000028c0)={'syz', 0x3}, &(0x7f0000000000)='/', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r5, r5}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f00000001c0)={&(0x7f0000000080)={'poly1305-generic\x00'}}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0x0, 0xd, 0x8}, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000600)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e00000004000000040000000008000004000000ef8e6d376a78be923da82f53a985e1176fddac7ade684cfa939e54eb025ae21543066190f1ce4141b7d7ae5230cb0d092a7a1e4478f50a2b9baced1be2a416a237", @ANYRES32=r7, @ANYBLOB='\x00'/20, @ANYRES32=r8, @ANYRES32, @ANYBLOB="0000000002000000040000000700"/28], 0x50) r9 = accept4(r6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r11, 0x5, &(0x7f00000000c0)='fd', 0x0, r10) syz_io_uring_setup(0x2647, &(0x7f0000000340)={0x0, 0x1b09, 0x10, 0x1, 0x147, 0x0, r10}, &(0x7f0000000240), &(0x7f0000000580)) sendto$inet6(r9, &(0x7f0000001040)="03a6", 0x2, 0x20008000, 0x0, 0x0) r12 = fsmount(r0, 0x0, 0x0) openat$cgroup_procs(r12, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) ioctl$DRM_IOCTL_GET_CAP(r12, 0xc010640c, &(0x7f0000000080)={0x7}) 398.533658ms ago: executing program 2 (id=275): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r8, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r6, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r9, 0x0, 0x8, 0x5, &(0x7f0000000700)="85653f4534", 0x4}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@flat=@weak_handle={0x77682a85, 0xe649d322843a6889, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x13}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1400}], 0x0, 0x0, 0x0}) 327.101298ms ago: executing program 1 (id=276): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sysfs$1(0x1, 0x0) (async) io_uring_setup(0x696a, &(0x7f0000000340)={0x0, 0x7828, 0x2, 0x3}) 326.75881ms ago: executing program 0 (id=277): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000a80)="93378e62cf9b48cb59638401fcd1730172853a9fa8952a996042ab60ae29f1c19f0f227be6bf0066438c82304f54d5f8", 0x30) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000680)=""/200, 0xc8}], 0x1}}], 0x1, 0x40010040, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10) getrandom(0xfffffffffffffffc, 0x15, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x7, 0x402, 0x258}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='2\x00', 0x2) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x94, r6, 0x5, 0x2, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x39, 0x7a}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5b, 0xe, {{{}, {}, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x1, [{0x5}]}, @val={0x3, 0x1}, @val={0x4, 0x6, {0xf3, 0x8, 0x3ff, 0x3}}, @val={0x6, 0x2, 0x84}, @val={0x5, 0x3}, @void, @val={0x2a, 0x1}, @void, @void, @void, @val={0x71, 0x7, {0x0, 0xfc}}, @val={0x76, 0x6, {0x0, 0x0, 0x40}}}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x94}}, 0x0) 325.806477ms ago: executing program 2 (id=278): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0xfffffffffffffcff, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x8, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc04}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x58, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x58}}, 0x20040054) sendmsg$nl_xfrm(r1, 0x0, 0x8081) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000002280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010120, @broadcast}, "3297e3ba627aa2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88769ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c93148aa8d2934a15d29cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d5661f68658bcce84"}}, 0xfce) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0xfffffffffffffcff, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x8, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc04}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x58, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x58}}, 0x20040054) (async) sendmsg$nl_xfrm(r1, 0x0, 0x8081) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r0, &(0x7f0000002280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010120, @broadcast}, "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"}}, 0xfce) (async) 325.365978ms ago: executing program 3 (id=279): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x88, 0x30, 0x871a15abc695fb3d, 0x4c, 0x0, {}, [{0x74, 0x1, [@m_tunnel_key={0x70, 0x1, 0x0, 0x0, {{0xf}, {0x40, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x7}}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050400aeff0f608e222b6933d100", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0x63, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x80, 0xbe}, [@NDA_LLADDR={0xa, 0x2, @random="63ccc7696324"}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_delneigh={0x38, 0x1d, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x0, 0x3, 0x7}, [@NDA_LINK_NETNSID={0x8, 0xa, 0x3}, @NDA_CACHEINFO={0x14, 0x3, {0x6, 0x6, 0x3f, 0x7f}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40081}, 0x4) 324.809934ms ago: executing program 0 (id=280): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x6, 0x4) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0xfffffffffffffffe, 0x20000100, 0x20000130, 0x20000280], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r0]}, 0x80) 228.393656ms ago: executing program 0 (id=281): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x8000000000000000}, {0x0, 0x0, 0x7, 0x0, 0xf, 0x4}, {0x0, 0x0, 0x8}], 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x7}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e21, @rand_addr=0x64010101}}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000006, 0x42031, 0xffffffffffffffff, 0x180000000) 228.120603ms ago: executing program 3 (id=282): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000200), 0x4) listen(r0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={r0, 0xba3, 0x3, 0x3}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000002480)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 226.912952ms ago: executing program 1 (id=283): r0 = io_uring_setup(0xbdb, &(0x7f0000000140)={0x0, 0x4a01, 0x400, 0xff000001, 0xac}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$cgroup_int(r1, &(0x7f00000001c0)=0x80, 0x12) write$char_usb(r1, &(0x7f00000000c0)="3892eed9ca42fb6721b48af9874a9c6849214ae50f51b38836f8119832975e0a303c57cb4500143540b0271f2c20fd6b5f8f70b344d4b971f5fc129565dd6cb74b11af60aafa90ba71cd4fd2fdc47fb35a137315328284e3a925304486fcaa4b4ae2ae53e7c7c6604db8d33b3cd5d9e2bb205cc6e46f43c44a0a55ec831626df70087a7f6d2da09d36c8817dd8d9", 0x8e) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x80000) ioctl$BLKSECTGET(r4, 0x1267, &(0x7f0000000080)) r5 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x0, 0x80002) ioctl$SNDRV_PCM_IOCTL_DROP(r5, 0x4143, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 226.778385ms ago: executing program 3 (id=284): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000080)={0x9, 0x3, 0x0, {0x4, 0x0, 0x1, 0x40d8}}) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 222.587443ms ago: executing program 1 (id=285): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {}, [{0x94, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)='./file1\x00') r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x80803) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f00000004c0)={0x8, 'vlan0\x00', {'veth1_to_bridge\x00'}, 0x3}) dup(r3) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') write$UHID_DESTROY(r5, &(0x7f0000000040), 0x4) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r2, 0x0, 0x0) r7 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1c5}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r7, 0x2d7e, 0x0, 0x0, 0x0, 0x0) r10 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000030200010004"], 0x408100) r11 = syz_open_dev$loop(&(0x7f0000000140), 0x9a600000, 0x2000) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f00000001c0)={r0, 0x8, {0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x12, 0x11, 0x1, "60bb88ce7fb3b9b7d869884369a6de521af12bcf768bbe08fa54cdb2cc843e336d6f97d4424afb6b1d8e23c62971eb6700178a152ae677bbd30bcc809e76abf3", "0c73d25c927ec1c31ee98bbeb7266dd2da18ab1f2f070b5fbb260ad36f06dec46e84b44b1172a9e52a9d8a0cad2cde4d1705b938e609f8b67e8455110b0e79d5", "f748a5b1637afeaddc19dfa8358a98b9318e998896eca31e7a9f9bbddbd4afb8", [0x6ef54d06, 0x9]}}) 220.126002ms ago: executing program 3 (id=286): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000140)="907f52f25a0c5763c38dcf7d79efcd2320bf17565b12aced3e42183d84931fe557c816ba5241d14b8b84229ccf487154425d4ef93de6682ae341ed98f13c207e9f448c66f6047e") r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = dup(r2) fadvise64(r3, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x0, 0x3}) (async) close_range(r0, r0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) mincore(&(0x7f0000247000/0x1000)=nil, 0x1000, &(0x7f0000000040)=""/242) 149.794018ms ago: executing program 1 (id=287): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b40), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x30, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) pread64(r0, 0x0, 0x0, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{}], 0x8, 0x6b, &(0x7f0000002e00), &(0x7f0000000000), 0x8, 0x0, 0x8, 0x3f, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r4, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x84, 0x8, 0x0, 0x0}}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="180400002cd861a900ae4d2155fe1531aa19855fe56d000100000000d70c0000000400008004e889bd"], 0x18}], 0x1}, 0x0) 149.414064ms ago: executing program 2 (id=288): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xbb}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000200)='./bus\x00', 0x80) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@verity_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_off}]}) 149.1447ms ago: executing program 2 (id=289): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x1a0) sendfile(r0, r0, &(0x7f0000000000)=0x1, 0x7f) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7f}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x810c52, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=virtio,dfltgid=', @ANYRESHEX=0xee00, @ANYBLOB="830f4651c27d24a60f8a28ad5ee7385e870c3b7a52798d24cf10f029c15511da5bd39a0817736dccf8b4e0ff12288324baaeb9ca7303aa2bb104f7d300325247494a46b437026e8df09da8390d4f48e5633cf7d9049c5765913a31f829569dd0703c8aab3e5f68bf00665fe2188b00000000"]) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x1a0) (async) sendfile(r0, r0, &(0x7f0000000000)=0x1, 0x7f) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7f}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x810c52, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=virtio,dfltgid=', @ANYRESHEX=0xee00, @ANYBLOB="830f4651c27d24a60f8a28ad5ee7385e870c3b7a52798d24cf10f029c15511da5bd39a0817736dccf8b4e0ff12288324baaeb9ca7303aa2bb104f7d300325247494a46b437026e8df09da8390d4f48e5633cf7d9049c5765913a31f829569dd0703c8aab3e5f68bf00665fe2188b00000000"]) (async) 80.206677ms ago: executing program 2 (id=290): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x48, 0x0, 0x5}]}) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000014000000000000000000000000a20000000000a01020000000000000000fbffffff0800010073797a300000000054000000090a010400000000000000000700000008000a400000000009000200f1cbd6cc7be39f4d652b36a44e2905ac73797a31000000000900010073797a3000000000080005400000001708000640ffffff00080003400000003808000c400000002c31000000"], 0x9c}}, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28011, r1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f0000000080)={&(0x7f0000000000)=[r6], 0x2, 0x1, 0xb}) 80.009635ms ago: executing program 0 (id=291): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000132ae57f60014001a80100004800c000580"], 0x34}}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff05000500", 0x2c}, {&(0x7f00000019c0)="06bb", 0x2}], 0x2}, 0x0) 168.742µs ago: executing program 1 (id=292): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}}) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2a442, 0x0) (async) umount2(&(0x7f00000002c0)='./file0\x00', 0xc) (async, rerun: 32) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x200) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) (async) ioctl$KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fbdbdf25050000003886e1650d0001007564703a73797a31000000000c000380080001"], 0x34}, 0x1, 0x0, 0x0, 0x20000841}, 0x100) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) (async) syz_usb_disconnect(r6) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"69890100660000000000000200", 0x0, 0x0, {0x4, 0xc}, {0x7, 0xc00000}, 0x5, [0x3, 0x6, 0x9, 0x4, 0x8000000000, 0x10000400, 0x8, 0x2, 0x8, 0x6, 0xfffe, 0x8000084, 0x10, 0x8de, 0x7]}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000000200)={0x7, 0x6, 0x6, 0x0, 'syz0\x00', 0x1}) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a0000040502"], 0x528}}, 0xc000) (async) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 0s ago: executing program 0 (id=293): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) (async, rerun: 64) r1 = socket$kcm(0x10, 0x3, 0x10) (rerun: 64) r2 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000180)={0x2, 0x1000}, 0x4) (async, rerun: 64) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c03000b000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) (rerun: 64) kernel console output (not intermixed with test programs): [ 38.275008][ T39] audit: type=1400 audit(1737693667.191:80): avc: denied { write } for pid=5913 comm="sh" path="pipe:[2728]" dev="pipefs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 38.284297][ T39] audit: type=1400 audit(1737693667.191:81): avc: denied { rlimitinh } for pid=5913 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.292338][ T39] audit: type=1400 audit(1737693667.191:82): avc: denied { siginh } for pid=5913 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 40.004601][ T39] audit: type=1400 audit(1737693668.931:83): avc: denied { read } for pid=5330 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 40.013209][ T39] audit: type=1400 audit(1737693668.931:84): avc: denied { append } for pid=5330 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.023044][ T39] audit: type=1400 audit(1737693668.931:85): avc: denied { open } for pid=5330 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.032316][ T39] audit: type=1400 audit(1737693668.931:86): avc: denied { getattr } for pid=5330 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:23803' (ED25519) to the list of known hosts. [ 40.161427][ T39] audit: type=1400 audit(1737693669.091:87): avc: denied { name_bind } for pid=5918 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.768976][ T5920] cgroup: Unknown subsys name 'net' [ 41.941234][ T5920] cgroup: Unknown subsys name 'cpuset' [ 41.944441][ T5920] cgroup: Unknown subsys name 'rlimit' [ 42.144573][ T5925] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.771752][ T5920] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.223450][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 44.223482][ T39] audit: type=1400 audit(1737693673.151:105): avc: denied { execmem } for pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.411869][ T39] audit: type=1400 audit(1737693673.341:106): avc: denied { create } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.420119][ T39] audit: type=1400 audit(1737693673.341:107): avc: denied { read write } for pid=5931 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.430018][ T39] audit: type=1400 audit(1737693673.341:108): avc: denied { open } for pid=5931 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.439865][ T39] audit: type=1400 audit(1737693673.351:109): avc: denied { ioctl } for pid=5931 comm="syz-executor" path="socket:[3747]" dev="sockfs" ino=3747 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.459335][ T5287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.462344][ T5287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.465415][ T5287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.468293][ T5287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.470586][ T5287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.473177][ T5287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.475743][ T5287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.476372][ T5942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.478184][ T5287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.481164][ T5942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.482594][ T5287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 44.482714][ T5943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.483329][ T5943] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.485059][ T5942] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 44.485548][ T5943] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.485705][ T5946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.486587][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.487100][ T5287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.487356][ T5287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 44.487506][ T5287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.488423][ T5942] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.495013][ T39] audit: type=1400 audit(1737693673.421:110): avc: denied { read } for pid=5931 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.501932][ T5943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.502077][ T39] audit: type=1400 audit(1737693673.421:111): avc: denied { open } for pid=5931 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.506550][ T5940] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 44.512261][ T39] audit: type=1400 audit(1737693673.421:112): avc: denied { mounton } for pid=5931 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 44.515676][ T5940] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.607288][ T39] audit: type=1400 audit(1737693673.531:113): avc: denied { module_request } for pid=5933 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 44.627649][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 44.655482][ T5931] chnl_net:caif_netlink_parms(): no params data found [ 44.727969][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.730359][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.732645][ T5933] bridge_slave_0: entered allmulticast mode [ 44.735189][ T5933] bridge_slave_0: entered promiscuous mode [ 44.784014][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.786018][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.788175][ T5933] bridge_slave_1: entered allmulticast mode [ 44.790494][ T5933] bridge_slave_1: entered promiscuous mode [ 44.820769][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.823861][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 44.827384][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.829576][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.831670][ T5931] bridge_slave_0: entered allmulticast mode [ 44.833819][ T5931] bridge_slave_0: entered promiscuous mode [ 44.837560][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.839749][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.841800][ T5931] bridge_slave_1: entered allmulticast mode [ 44.844032][ T5931] bridge_slave_1: entered promiscuous mode [ 44.846974][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.861723][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 44.910461][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.914786][ T5933] team0: Port device team_slave_0 added [ 44.923889][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.929317][ T5933] team0: Port device team_slave_1 added [ 44.980842][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.982910][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.985037][ T5936] bridge_slave_0: entered allmulticast mode [ 44.987211][ T5936] bridge_slave_0: entered promiscuous mode [ 45.001315][ T5931] team0: Port device team_slave_0 added [ 45.010936][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.013504][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.015768][ T5941] bridge_slave_0: entered allmulticast mode [ 45.018648][ T5941] bridge_slave_0: entered promiscuous mode [ 45.021737][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.023819][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.025912][ T5936] bridge_slave_1: entered allmulticast mode [ 45.028120][ T5936] bridge_slave_1: entered promiscuous mode [ 45.031956][ T5931] team0: Port device team_slave_1 added [ 45.034146][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.036289][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.043821][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.047405][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.049560][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.051700][ T5941] bridge_slave_1: entered allmulticast mode [ 45.053906][ T5941] bridge_slave_1: entered promiscuous mode [ 45.085016][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.087177][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.094800][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.106175][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.116911][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.120051][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.127394][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.131306][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.133333][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.140728][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.150123][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.154068][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.159182][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.206665][ T5941] team0: Port device team_slave_0 added [ 45.231186][ T5931] hsr_slave_0: entered promiscuous mode [ 45.233261][ T5931] hsr_slave_1: entered promiscuous mode [ 45.253477][ T5941] team0: Port device team_slave_1 added [ 45.256452][ T5936] team0: Port device team_slave_0 added [ 45.278635][ T5933] hsr_slave_0: entered promiscuous mode [ 45.280904][ T5933] hsr_slave_1: entered promiscuous mode [ 45.282776][ T5933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.285539][ T5933] Cannot create hsr debugfs directory [ 45.289022][ T5936] team0: Port device team_slave_1 added [ 45.299478][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.301559][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.309547][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.313779][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.315867][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.323757][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.357591][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.359969][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.368524][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.373097][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.375130][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.382988][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.464448][ T5941] hsr_slave_0: entered promiscuous mode [ 45.467258][ T5941] hsr_slave_1: entered promiscuous mode [ 45.470962][ T5941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.474102][ T5941] Cannot create hsr debugfs directory [ 45.490058][ T5936] hsr_slave_0: entered promiscuous mode [ 45.492088][ T5936] hsr_slave_1: entered promiscuous mode [ 45.493962][ T5936] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.496233][ T5936] Cannot create hsr debugfs directory [ 45.575954][ T5931] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.581625][ T5931] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.587624][ T5931] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.591066][ T5931] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.670917][ T5933] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.676293][ T5933] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.680262][ T5933] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.684657][ T5933] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.709168][ T5941] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.712684][ T5941] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.716093][ T5941] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.725704][ T5941] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.753896][ T5936] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.757804][ T5936] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.761878][ T5936] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.766744][ T5936] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.780216][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.791573][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.806840][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.809135][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.819984][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.822100][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.840409][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.855548][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.863657][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.875384][ T39] audit: type=1400 audit(1737693674.801:114): avc: denied { sys_module } for pid=5931 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 45.876834][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.884617][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.888188][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.890377][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.895718][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.912519][ T101] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.914654][ T101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.917474][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.919572][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.926065][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.943476][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.950948][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.956168][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.959134][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.971331][ T5941] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.974465][ T5941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.980744][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.982940][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.010803][ T5931] veth0_vlan: entered promiscuous mode [ 46.016306][ T5931] veth1_vlan: entered promiscuous mode [ 46.032623][ T5931] veth0_macvtap: entered promiscuous mode [ 46.036366][ T5931] veth1_macvtap: entered promiscuous mode [ 46.040927][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.048497][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.053487][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.062498][ T5931] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.065133][ T5931] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.067589][ T5931] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.070571][ T5931] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.087722][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.094943][ T5933] veth0_vlan: entered promiscuous mode [ 46.100807][ T5933] veth1_vlan: entered promiscuous mode [ 46.110885][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.124750][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.127712][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.142584][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.144979][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.154645][ T5933] veth0_macvtap: entered promiscuous mode [ 46.157742][ T5933] veth1_macvtap: entered promiscuous mode [ 46.161284][ T5941] veth0_vlan: entered promiscuous mode [ 46.169295][ T5936] veth0_vlan: entered promiscuous mode [ 46.171721][ T5941] veth1_vlan: entered promiscuous mode [ 46.178135][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.180777][ T5931] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 46.181694][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.188996][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.192321][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.195349][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.199067][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.206738][ T5936] veth1_vlan: entered promiscuous mode [ 46.211372][ T5933] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.214034][ T5933] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.216687][ T5933] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.219618][ T5933] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.233659][ T5941] veth0_macvtap: entered promiscuous mode [ 46.243505][ T5941] veth1_macvtap: entered promiscuous mode [ 46.255781][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.259218][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.262182][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.265261][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.269006][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.279952][ T5936] veth0_macvtap: entered promiscuous mode [ 46.282852][ T5936] veth1_macvtap: entered promiscuous mode [ 46.290567][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.290757][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.293736][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.296119][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.299239][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.304815][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.308364][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.322146][ T5941] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.324824][ T5941] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.327415][ T5941] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.331338][ T5941] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.336429][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.340014][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.342935][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.346050][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.349069][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.352221][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.355932][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.359737][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.362989][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.365754][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.368970][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.371889][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.374981][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.378674][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.381777][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.381850][ T6000] autofs4:pid:6000:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 46.384118][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.391319][ T5936] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.393976][ T5936] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.396591][ T5936] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.399361][ T5936] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.450951][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.453373][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.461241][ T101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.463622][ T101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.470406][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.472767][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.483392][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.486468][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.518760][ T5938] Bluetooth: hci3: command tx timeout [ 46.521186][ T5940] Bluetooth: hci0: command tx timeout [ 46.523365][ T5940] Bluetooth: hci1: command tx timeout [ 46.599059][ T5940] Bluetooth: hci2: command tx timeout [ 46.618607][ T5995] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 46.629971][ T6023] netlink: 'syz.2.8': attribute type 1 has an invalid length. [ 46.722681][ T6030] overlay: ./file0 is not a directory [ 46.790576][ T5995] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 46.793813][ T5995] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 46.797142][ T5995] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 46.800919][ T5995] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 46.804968][ T5995] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 46.810602][ T5995] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 46.813155][ T5995] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 46.816236][ T5995] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 46.820027][ T5995] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 46.823316][ T5995] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 46.827396][ T5995] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 46.831002][ T5995] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 46.834076][ T5995] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 46.837081][ T5995] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 46.841645][ T5995] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 46.846753][ T6034] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10'. [ 46.850580][ T5995] usb 5-1: string descriptor 0 read error: -22 [ 46.853164][ T5995] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 46.857156][ T5995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.867968][ T5995] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 47.067059][ T5977] usb 5-1: USB disconnect, device number 2 [ 47.071997][ T6052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17'. [ 47.167691][ T6064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 47.177507][ T6061] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19'. [ 47.181864][ T6061] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.333053][ T6075] syz.2.23 uses obsolete (PF_INET,SOCK_PACKET) [ 47.347915][ T6079] netlink: 24 bytes leftover after parsing attributes in process `syz.3.24'. [ 47.399154][ T6081] trusted_key: syz.3.25 sent an empty control message without MSG_MORE. [ 47.435349][ T6087] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.490464][ T6089] mmap: syz.2.27 (6089): VmData 37523456 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 47.500626][ T6087] hfsplus: unable to find HFS+ superblock [ 47.507197][ T6091] hfsplus: unable to find HFS+ superblock [ 47.665969][ T6093] Zero length message leads to an empty skb [ 47.694856][ T6100] netlink: 20 bytes leftover after parsing attributes in process `syz.0.30'. [ 47.809528][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34'. [ 47.837332][ T5940] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 47.841499][ T5940] CPU: 0 UID: 0 PID: 5940 Comm: kworker/u33:4 Not tainted 6.13.0-syzkaller-05154-g8883957b3c9d #0 [ 47.841514][ T5940] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 47.841521][ T5940] Workqueue: hci0 hci_rx_work [ 47.841540][ T5940] Call Trace: [ 47.841544][ T5940] [ 47.841548][ T5940] dump_stack_lvl+0x16c/0x1f0 [ 47.841562][ T5940] sysfs_warn_dup+0x7f/0xa0 [ 47.841574][ T5940] sysfs_create_dir_ns+0x24d/0x2b0 [ 47.841584][ T5940] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 47.841595][ T5940] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 47.841611][ T5940] ? kobject_add_internal+0x12d/0x990 [ 47.841624][ T5940] ? do_raw_spin_unlock+0x172/0x230 [ 47.841639][ T5940] kobject_add_internal+0x2c8/0x990 [ 47.841654][ T5940] kobject_add+0x16f/0x240 [ 47.841667][ T5940] ? __pfx_kobject_add+0x10/0x10 [ 47.841679][ T5940] ? class_to_subsys+0x3e/0x160 [ 47.841694][ T5940] ? do_raw_spin_unlock+0x172/0x230 [ 47.841706][ T5940] ? kobject_put+0xab/0x5a0 [ 47.841721][ T5940] device_add+0x289/0x1a70 [ 47.841734][ T5940] ? __pfx_dev_set_name+0x10/0x10 [ 47.841743][ T5940] ? __pfx_device_add+0x10/0x10 [ 47.841757][ T5940] ? mgmt_send_event_skb+0x2f2/0x460 [ 47.841772][ T5940] hci_conn_add_sysfs+0x17e/0x230 [ 47.841786][ T5940] le_conn_complete_evt+0x107f/0x1da0 [ 47.841801][ T5940] ? __pfx_lock_release+0x10/0x10 [ 47.841812][ T5940] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 47.841824][ T5940] ? __mutex_lock+0x1cc/0xb10 [ 47.841839][ T5940] hci_le_conn_complete_evt+0x23c/0x370 [ 47.841854][ T5940] hci_le_meta_evt+0x2e2/0x5d0 [ 47.841866][ T5940] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 47.841880][ T5940] hci_event_packet+0x666/0x1180 [ 47.841892][ T5940] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 47.841905][ T5940] ? __pfx_hci_event_packet+0x10/0x10 [ 47.841916][ T5940] ? mark_held_locks+0x9f/0xe0 [ 47.841926][ T5940] ? kcov_remote_start+0x3cf/0x6e0 [ 47.841938][ T5940] ? lockdep_hardirqs_on+0x7c/0x110 [ 47.841951][ T5940] hci_rx_work+0x2c5/0x16b0 [ 47.841964][ T5940] ? process_one_work+0x921/0x1ba0 [ 47.841976][ T5940] process_one_work+0x9c5/0x1ba0 [ 47.841989][ T5940] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 47.842000][ T5940] ? __pfx_process_one_work+0x10/0x10 [ 47.842009][ T5940] ? rcu_is_watching+0x12/0xc0 [ 47.842025][ T5940] ? assign_work+0x1a0/0x250 [ 47.842036][ T5940] worker_thread+0x6c8/0xf00 [ 47.842050][ T5940] ? __pfx_worker_thread+0x10/0x10 [ 47.842060][ T5940] kthread+0x3af/0x750 [ 47.842069][ T5940] ? __pfx_kthread+0x10/0x10 [ 47.842078][ T5940] ? lock_acquire+0x2f/0xb0 [ 47.842090][ T5940] ? __pfx_kthread+0x10/0x10 [ 47.842109][ T5940] ret_from_fork+0x45/0x80 [ 47.842119][ T5940] ? __pfx_kthread+0x10/0x10 [ 47.842129][ T5940] ret_from_fork_asm+0x1a/0x30 [ 47.842150][ T5940] [ 47.842161][ T5940] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 47.849957][ T6124] netlink: 20 bytes leftover after parsing attributes in process `syz.2.36'. [ 47.850631][ T5940] Bluetooth: hci0: failed to register connection device [ 48.111001][ T6139] netlink: 28 bytes leftover after parsing attributes in process `syz.1.40'. [ 48.111323][ T6140] bond0: entered allmulticast mode [ 48.111466][ T6141] netlink: 'syz.1.40': attribute type 10 has an invalid length. [ 48.118662][ T6140] bond_slave_0: entered allmulticast mode [ 48.120413][ T6140] bond_slave_1: entered allmulticast mode [ 48.125517][ T6141] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 48.128082][ T6141] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 48.262948][ T6155] syz.1.44: attempt to access beyond end of device [ 48.262948][ T6155] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 48.266850][ T6155] efs: cannot read volume header [ 48.283774][ T6155] hpfs: hpfs_map_sector(): read error [ 48.471121][ T6175] bridge1: entered promiscuous mode [ 48.598353][ T5940] Bluetooth: hci3: command tx timeout [ 48.599781][ T5943] Bluetooth: hci1: command tx timeout [ 48.600722][ T5940] Bluetooth: hci0: command tx timeout [ 48.650461][ T6162] syz.3.46 (6162): drop_caches: 1 [ 48.673653][ T6162] syz.3.46 (6162): drop_caches: 1 [ 48.678358][ T5940] Bluetooth: hci2: command tx timeout [ 49.243043][ T39] kauditd_printk_skb: 139 callbacks suppressed [ 49.243053][ T39] audit: type=1326 audit(1737693678.171:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.3.53" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4964f8cd29 code=0x0 [ 49.296303][ T39] audit: type=1400 audit(1737693678.221:255): avc: denied { create } for pid=6196 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 49.814684][ T6209] can0: slcan on ttyS3. [ 49.822974][ T39] audit: type=1400 audit(1737693678.751:256): avc: denied { read } for pid=5648 comm="dhcpcd" name="n104" dev="tmpfs" ino=2128 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.826458][ T6211] netlink: 20 bytes leftover after parsing attributes in process `syz.1.57'. [ 49.831117][ T39] audit: type=1400 audit(1737693678.751:257): avc: denied { open } for pid=5648 comm="dhcpcd" path="/run/udev/data/n104" dev="tmpfs" ino=2128 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.844651][ T39] audit: type=1400 audit(1737693678.751:258): avc: denied { getattr } for pid=5648 comm="dhcpcd" path="/run/udev/data/n104" dev="tmpfs" ino=2128 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.883968][ T39] audit: type=1400 audit(1737693678.811:259): avc: denied { create } for pid=6213 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.891397][ T39] audit: type=1400 audit(1737693678.811:260): avc: denied { write } for pid=6213 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=2133 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.900494][ T39] audit: type=1400 audit(1737693678.811:261): avc: denied { append } for pid=6213 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=2133 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.927590][ T39] audit: type=1400 audit(1737693678.851:262): avc: denied { unlink } for pid=6223 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=2133 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.935152][ T39] audit: type=1400 audit(1737693678.861:263): avc: denied { create } for pid=6225 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 49.970166][ T6209] can0 (unregistered): slcan off ttyS3. [ 50.111101][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.63'. [ 50.688336][ T5940] Bluetooth: hci1: command tx timeout [ 50.688455][ T5938] Bluetooth: hci3: command tx timeout [ 50.758407][ T5940] Bluetooth: hci2: command tx timeout [ 50.842519][ T6256] netlink: 'syz.1.68': attribute type 10 has an invalid length. [ 50.857416][ T6256] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 50.860063][ T6256] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 50.887999][ T1464] hid (null): invalid report_size 48347 [ 50.892805][ T1464] hid-generic 0209:0007:0007.0002: invalid report_size 48347 [ 50.895124][ T1464] hid-generic 0209:0007:0007.0002: item 0 2 1 7 parsing failed [ 50.897601][ T1464] hid-generic 0209:0007:0007.0002: probe with driver hid-generic failed with error -22 [ 50.928085][ T6260] netlink: 'syz.1.70': attribute type 3 has an invalid length. [ 50.936479][ T6262] SET target dimension over the limit! [ 51.001990][ T6273] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 51.013433][ T6274] overlay: ./file0 is not a directory [ 51.143988][ T6295] pim6reg: entered allmulticast mode [ 51.186008][ T6303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 51.193992][ T6303] Unknown options in mask 5 [ 51.249063][ T6315] overlay: ./file0 is not a directory [ 51.350720][ T6335] openvswitch: netlink: Actions may not be safe on all matching packets [ 51.480084][ T6353] overlay: Bad value for 'xino' [ 51.529632][ T6360] overlay: ./file0 is not a directory [ 51.535061][ T6365] input: syz1 as /devices/virtual/input/input6 [ 51.605023][ T6370] ptrace attach of "/syz-executor exec"[5933] was attempted by "/syz-executor exec"[6370] [ 51.672726][ T6379] pimreg: entered allmulticast mode [ 51.697576][ T6384] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 51.701117][ T6384] netlink: 'syz.0.111': attribute type 16 has an invalid length. [ 51.773177][ T6400] mmap: syz.3.115 (6400) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 51.797078][ T6401] openvswitch: netlink: IPv4 tun info is not correct [ 51.843968][ T6418] syz.3.120: attempt to access beyond end of device [ 51.843968][ T6418] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 51.848042][ T6418] syz.3.120: attempt to access beyond end of device [ 51.848042][ T6418] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 51.853749][ T6418] Mount JFS Failure: -5 [ 51.855122][ T6418] jfs_mount failed w/return code = -5 [ 51.918971][ T6432] overlay: ./file0 is not a directory [ 52.037732][ T6441] program syz.2.129 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.037734][ T6440] program syz.2.129 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.169135][ T6458] overlay: ./file0 is not a directory [ 52.170053][ T6462] 9pnet_virtio: no channels available for device syz [ 52.179444][ T6462] FAULT_INJECTION: forcing a failure. [ 52.179444][ T6462] name failslab, interval 1, probability 0, space 0, times 1 [ 52.185197][ T6462] CPU: 0 UID: 0 PID: 6462 Comm: syz.1.136 Not tainted 6.13.0-syzkaller-05154-g8883957b3c9d #0 [ 52.185217][ T6462] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.185227][ T6462] Call Trace: [ 52.185232][ T6462] [ 52.185238][ T6462] dump_stack_lvl+0x16c/0x1f0 [ 52.185264][ T6462] should_fail_ex+0x497/0x5b0 [ 52.185281][ T6462] ? fs_reclaim_acquire+0xae/0x150 [ 52.185304][ T6462] should_failslab+0xc2/0x120 [ 52.185328][ T6462] __kmalloc_noprof+0xcb/0x510 [ 52.185351][ T6462] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 52.185376][ T6462] tomoyo_realpath_from_path+0xb9/0x720 [ 52.185402][ T6462] ? tomoyo_path_number_perm+0x235/0x590 [ 52.185426][ T6462] ? tomoyo_path_number_perm+0x235/0x590 [ 52.185451][ T6462] tomoyo_path_number_perm+0x248/0x590 [ 52.185472][ T6462] ? tomoyo_path_number_perm+0x235/0x590 [ 52.185495][ T6462] ? __pfx___lock_acquire+0x1/0x10 [ 52.185514][ T6462] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 52.185560][ T6462] ? do_raw_spin_unlock+0x172/0x230 [ 52.185584][ T6462] ? _raw_spin_unlock+0x28/0x50 [ 52.185600][ T6462] ? d_add+0x43c/0x730 [ 52.185625][ T6462] ? do_raw_spin_unlock+0x172/0x230 [ 52.185651][ T6462] ? simple_lookup+0x12c/0x180 [ 52.185669][ T6462] ? get_current_fs_domain+0x184/0x1f0 [ 52.185692][ T6462] tomoyo_path_mkdir+0x9c/0xe0 [ 52.185711][ T6462] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 52.185737][ T6462] security_path_mkdir+0x154/0x2f0 [ 52.185763][ T6462] do_mkdirat+0x176/0x3a0 [ 52.185784][ T6462] ? __pfx_do_mkdirat+0x10/0x10 [ 52.185808][ T6462] ? getname_flags.part.0+0x1c5/0x550 [ 52.185837][ T6462] __x64_sys_mkdir+0xef/0x140 [ 52.185859][ T6462] do_syscall_64+0xcd/0x250 [ 52.185881][ T6462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.185904][ T6462] RIP: 0033:0x7fad2e18cd29 [ 52.185918][ T6462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.185932][ T6462] RSP: 002b:00007fad2ef9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 52.185948][ T6462] RAX: ffffffffffffffda RBX: 00007fad2e3a5fa0 RCX: 00007fad2e18cd29 [ 52.185958][ T6462] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200004c0 [ 52.185968][ T6462] RBP: 00007fad2ef9e090 R08: 0000000000000000 R09: 0000000000000000 [ 52.185977][ T6462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.185987][ T6462] R13: 0000000000000000 R14: 00007fad2e3a5fa0 R15: 00007fffc996aa48 [ 52.186010][ T6462] [ 52.186016][ T6462] ERROR: Out of memory at tomoyo_realpath_from_path. [ 52.300850][ T6470] netlink: 'syz.1.140': attribute type 10 has an invalid length. [ 52.303525][ T6470] syz_tun: entered promiscuous mode [ 52.307264][ T6470] syz_tun: entered allmulticast mode [ 52.310196][ T6470] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 52.341838][ T6473] Cannot find set identified by id 0 to match [ 52.344279][ T6473] netlink: 'syz.3.139': attribute type 2 has an invalid length. [ 52.346680][ T6473] __nla_validate_parse: 10 callbacks suppressed [ 52.346687][ T6473] netlink: 16138 bytes leftover after parsing attributes in process `syz.3.139'. [ 52.445691][ T6494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 52.462622][ T6496] overlay: ./file0 is not a directory [ 52.505792][ T6497] netlink: 'syz.1.146': attribute type 6 has an invalid length. [ 52.538050][ T6500] FAULT_INJECTION: forcing a failure. [ 52.538050][ T6500] name failslab, interval 1, probability 0, space 0, times 0 [ 52.544070][ T6500] CPU: 3 UID: 0 PID: 6500 Comm: syz.3.148 Not tainted 6.13.0-syzkaller-05154-g8883957b3c9d #0 [ 52.544087][ T6500] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.544093][ T6500] Call Trace: [ 52.544100][ T6500] [ 52.544104][ T6500] dump_stack_lvl+0x16c/0x1f0 [ 52.544128][ T6500] should_fail_ex+0x497/0x5b0 [ 52.544142][ T6500] ? fs_reclaim_acquire+0xae/0x150 [ 52.544155][ T6500] should_failslab+0xc2/0x120 [ 52.544168][ T6500] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 52.544181][ T6500] ? p9_tag_alloc+0x9c/0x660 [ 52.544193][ T6500] p9_tag_alloc+0x9c/0x660 [ 52.544203][ T6500] ? __pfx_p9_tag_alloc+0x10/0x10 [ 52.544212][ T6500] ? hlock_class+0x4e/0x130 [ 52.544226][ T6500] ? __lock_acquire+0x15a9/0x3c40 [ 52.544239][ T6500] p9_client_prepare_req+0x19f/0x4d0 [ 52.544250][ T6500] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 52.544261][ T6500] ? hlock_class+0x4e/0x130 [ 52.544274][ T6500] ? mark_lock+0xb5/0xc60 [ 52.544286][ T6500] p9_client_rpc+0x1c3/0xc10 [ 52.544296][ T6500] ? __pfx_p9_client_rpc+0x10/0x10 [ 52.544307][ T6500] ? idr_preload_end+0xc2/0x230 [ 52.544316][ T6500] ? __pfx_lock_release+0x10/0x10 [ 52.544331][ T6500] ? __pfx_lock_release+0x10/0x10 [ 52.544343][ T6500] ? mark_held_locks+0x9f/0xe0 [ 52.544359][ T6500] ? rcu_is_watching+0x12/0xc0 [ 52.544375][ T6500] p9_client_walk+0x1ac/0x530 [ 52.544387][ T6500] ? __pfx_p9_client_walk+0x10/0x10 [ 52.544399][ T6500] ? v9fs_fid_lookup+0xe9/0xec0 [ 52.544416][ T6500] v9fs_vfs_lookup+0x208/0x5c0 [ 52.544430][ T6500] ? __pfx_v9fs_vfs_lookup+0x10/0x10 [ 52.544442][ T6500] ? lock_acquire+0x2f/0xb0 [ 52.544453][ T6500] ? do_raw_spin_unlock+0x172/0x230 [ 52.544467][ T6500] ? _raw_spin_unlock+0x28/0x50 [ 52.544478][ T6500] lookup_one_qstr_excl+0x11d/0x190 [ 52.544492][ T6500] ? mnt_want_write+0x161/0x450 [ 52.544503][ T6500] filename_create+0x1ed/0x530 [ 52.544514][ T6500] ? __pfx_filename_create+0x10/0x10 [ 52.544523][ T6500] ? lock_acquire+0x2f/0xb0 [ 52.544533][ T6500] ? __virt_addr_valid+0x1a4/0x590 [ 52.544548][ T6500] ? __virt_addr_valid+0x5e/0x590 [ 52.544563][ T6500] do_mkdirat+0xab/0x3a0 [ 52.544575][ T6500] ? __pfx_do_mkdirat+0x10/0x10 [ 52.544587][ T6500] ? getname_flags.part.0+0x1c5/0x550 [ 52.544603][ T6500] __x64_sys_mkdir+0xef/0x140 [ 52.544621][ T6500] do_syscall_64+0xcd/0x250 [ 52.544640][ T6500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.544662][ T6500] RIP: 0033:0x7f4964f8cd29 [ 52.544675][ T6500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.544689][ T6500] RSP: 002b:00007f4965d99038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 52.544705][ T6500] RAX: ffffffffffffffda RBX: 00007f49651a5fa0 RCX: 00007f4964f8cd29 [ 52.544715][ T6500] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200004c0 [ 52.544724][ T6500] RBP: 00007f4965d99090 R08: 0000000000000000 R09: 0000000000000000 [ 52.544732][ T6500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.544741][ T6500] R13: 0000000000000000 R14: 00007f49651a5fa0 R15: 00007ffe12ef0ac8 [ 52.544756][ T6500] [ 52.547947][ T6500] overlay: ./file0 is not a directory [ 52.687116][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.758486][ T5940] Bluetooth: hci1: command tx timeout [ 52.768388][ T5940] Bluetooth: hci3: command tx timeout [ 52.838617][ T5940] Bluetooth: hci2: command tx timeout [ 52.862750][ T6519] netlink: 56 bytes leftover after parsing attributes in process `syz.3.156'. [ 52.863363][ T6520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.155'. [ 52.880850][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.155'. [ 52.910783][ T6528] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 52.927489][ T6530] netlink: 16 bytes leftover after parsing attributes in process `syz.0.159'. [ 52.961820][ T6532] bridge0: port 3(syz_tun) entered blocking state [ 52.964213][ T6532] bridge0: port 3(syz_tun) entered disabled state [ 52.966291][ T6532] syz_tun: entered allmulticast mode [ 52.968985][ T6532] syz_tun: entered promiscuous mode [ 52.971235][ T6532] bridge0: port 3(syz_tun) entered blocking state [ 52.973332][ T6532] bridge0: port 3(syz_tun) entered forwarding state [ 53.029299][ T6538] process 'syz.0.161' launched '/dev/fd/3' with NULL argv: empty string added [ 53.091639][ T6557] Illegal XDP return value 4294967294 on prog (id 44) dev N/A, expect packet loss! [ 53.093472][ T6552] overlay: Unknown parameter 'func' [ 53.133160][ T6560] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 53.203607][ T6570] netlink: 16 bytes leftover after parsing attributes in process `syz.2.170'. [ 53.231256][ T6572] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 53.240173][ T6576] netlink: 28 bytes leftover after parsing attributes in process `syz.3.169'. [ 53.255010][ T6576] Bluetooth: MGMT ver 1.23 [ 53.264122][ T6578] input: syz0 as /devices/virtual/input/input7 [ 53.314649][ T6585] (unnamed net_device) (uninitialized): peer notification delay (10) is not a multiple of miimon (100), value rounded to 0 ms [ 53.327769][ T6585] bond1: entered promiscuous mode [ 53.329603][ T6585] bond1: entered allmulticast mode [ 53.331368][ T6585] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.399001][ T5938] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 53.401677][ T5938] Bluetooth: hci0: Injecting HCI hardware error event [ 53.405092][ T5943] Bluetooth: hci0: hardware error 0x00 [ 53.448746][ T6593] xt_hashlimit: size too large, truncated to 1048576 [ 53.537891][ T6591] program syz.2.176 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.570306][ T6003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.730257][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.898310][ T1464] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 54.048656][ T1464] usb 5-1: Using ep0 maxpacket: 8 [ 54.051472][ T1464] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 54.054254][ T1464] usb 5-1: config 0 has no interface number 0 [ 54.056046][ T1464] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 54.059753][ T1464] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 54.063157][ T1464] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 54.066131][ T6604] VFS: unable to find oldfs superblock on device nullb0 [ 54.066402][ T1464] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 54.072878][ T1464] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 54.075691][ T1464] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.079866][ T1464] usb 5-1: config 0 descriptor?? [ 54.084180][ T1464] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 54.251748][ T39] kauditd_printk_skb: 105 callbacks suppressed [ 54.251758][ T39] audit: type=1400 audit(1737693683.181:369): avc: denied { setopt } for pid=6615 comm="syz.2.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 54.252325][ T6616] netlink: 148 bytes leftover after parsing attributes in process `syz.2.185'. [ 54.261612][ T6619] openvswitch: netlink: Message has 8 unknown bytes. [ 54.294336][ T6597] ldusb 5-1:0.55: Write buffer overflow, 2147479232 bytes dropped [ 54.300065][ T1464] usb 5-1: USB disconnect, device number 3 [ 54.309008][ T1464] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 54.358054][ T39] audit: type=1400 audit(1737693683.281:370): avc: denied { sys_module } for pid=6624 comm="syz.3.188" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.492629][ T39] audit: type=1400 audit(1737693683.421:371): avc: denied { ioctl } for pid=6630 comm="syz.3.189" path="socket:[13349]" dev="sockfs" ino=13349 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 54.493322][ T6631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.189'. [ 54.527231][ T39] audit: type=1400 audit(1737693683.451:372): avc: denied { ioctl } for pid=6634 comm="syz.2.190" path="socket:[13352]" dev="sockfs" ino=13352 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.539607][ T6635] vlan2: entered allmulticast mode [ 54.592699][ T6637] overlay: ./file0 is not a directory [ 54.676800][ T6639] sctp: [Deprecated]: syz.2.193 (pid 6639) Use of struct sctp_assoc_value in delayed_ack socket option. [ 54.676800][ T6639] Use struct sctp_sack_info instead [ 54.676860][ T39] audit: type=1400 audit(1737693683.601:373): avc: denied { mounton } for pid=6638 comm="syz.2.193" path="mnt:[4026533298]" dev="nsfs" ino=4026533298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 54.692089][ T39] audit: type=1400 audit(1737693683.611:374): avc: denied { create } for pid=6643 comm="syz.3.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 54.700150][ T39] audit: type=1400 audit(1737693683.611:375): avc: denied { ioctl } for pid=6643 comm="syz.3.192" path="socket:[14471]" dev="sockfs" ino=14471 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 54.711135][ T39] audit: type=1400 audit(1737693683.611:376): avc: denied { bind } for pid=6638 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.719200][ T39] audit: type=1400 audit(1737693683.611:377): avc: denied { listen } for pid=6638 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.727139][ T39] audit: type=1400 audit(1737693683.641:378): avc: denied { write } for pid=6638 comm="syz.2.193" path="socket:[11660]" dev="sockfs" ino=11660 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.738082][ T6645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.758542][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.779281][ T6645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.875829][ T6654] netlink: 52 bytes leftover after parsing attributes in process `syz.0.197'. [ 54.892872][ T6657] loop2: detected capacity change from 0 to 524287999 [ 54.979513][ T6663] overlay: ./file0 is not a directory [ 55.000226][ T5938] Bluetooth: hci4: command 0x1003 tx timeout [ 55.002902][ T5940] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 55.062119][ T6668] overlay: ./file0 is not a directory [ 55.137044][ T6671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.151919][ T6674] $Hÿ: renamed from bond0 (while UP) [ 55.156111][ T6674] $Hÿ: entered promiscuous mode [ 55.157797][ T6674] bond_slave_0: entered promiscuous mode [ 55.157898][ T6674] bond_slave_1: entered promiscuous mode [ 55.240076][ T6681] ======================================================= [ 55.240076][ T6681] WARNING: The mand mount option has been deprecated and [ 55.240076][ T6681] and is ignored by this kernel. Remove the mand [ 55.240076][ T6681] option from the mount to silence this warning. [ 55.240076][ T6681] ======================================================= [ 55.282101][ T6687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.288972][ T6687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.303531][ T6689] can0: slcan on ttyS3. [ 55.449453][ T6689] can0 (unregistered): slcan off ttyS3. [ 55.478508][ T5943] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 55.562313][ T6712] overlay: ./file0 is not a directory [ 55.807046][ T6727] geneve2: entered promiscuous mode [ 55.809278][ T6727] geneve2: entered allmulticast mode [ 56.158938][ T6755] xt_hashlimit: size too large, truncated to 1048576 [ 56.159526][ T6756] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 56.162394][ T6755] syz.2.226: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 56.169442][ T6755] CPU: 2 UID: 0 PID: 6755 Comm: syz.2.226 Not tainted 6.13.0-syzkaller-05154-g8883957b3c9d #0 [ 56.169454][ T6755] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.169460][ T6755] Call Trace: [ 56.169463][ T6755] [ 56.169466][ T6755] dump_stack_lvl+0x16c/0x1f0 [ 56.169492][ T6755] warn_alloc+0x24d/0x3a0 [ 56.169507][ T6755] ? __pfx_warn_alloc+0x10/0x10 [ 56.169524][ T6755] ? __get_vm_area_node+0x1b0/0x2f0 [ 56.169535][ T6755] ? __get_vm_area_node+0x1dc/0x2f0 [ 56.169548][ T6755] __vmalloc_node_range_noprof+0x1105/0x1530 [ 56.169560][ T6755] ? __pfx___lock_acquire+0x10/0x10 [ 56.169575][ T6755] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 56.169591][ T6755] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 56.169603][ T6755] ? __pfx_lock_release+0x10/0x10 [ 56.169613][ T6755] ? trace_lock_acquire+0x14e/0x1f0 [ 56.169630][ T6755] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 56.169643][ T6755] vmalloc_noprof+0x6b/0x90 [ 56.169655][ T6755] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 56.169667][ T6755] hashlimit_mt_check_common+0x8b0/0x1450 [ 56.169683][ T6755] hashlimit_mt_check+0x71/0x90 [ 56.169695][ T6755] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 56.169708][ T6755] xt_check_match+0x284/0xa50 [ 56.169719][ T6755] ? _cpu_down+0x592/0xf20 [ 56.169734][ T6755] ? __pfx_xt_check_match+0x10/0x10 [ 56.169747][ T6755] ? xt_find_target+0x1ee/0x290 [ 56.169760][ T6755] ? xt_find_match+0x1f2/0x290 [ 56.169774][ T6755] find_check_entry.constprop.0+0x34d/0xa20 [ 56.169789][ T6755] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 56.169807][ T6755] ? kvfree+0x47/0x50 [ 56.169820][ T6755] translate_table+0xd06/0x17b0 [ 56.169836][ T6755] ? __pfx_translate_table+0x10/0x10 [ 56.169856][ T6755] ? __might_fault+0xe3/0x190 [ 56.169873][ T6755] do_ip6t_set_ctl+0x926/0xbf0 [ 56.169883][ T6755] ? trace_contention_end+0xee/0x140 [ 56.169895][ T6755] ? __mutex_lock+0x1cc/0xb10 [ 56.169907][ T6755] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 56.169918][ T6755] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 56.169931][ T6755] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 56.169948][ T6755] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 56.169961][ T6755] nf_setsockopt+0x8a/0xf0 [ 56.169973][ T6755] ipv6_setsockopt+0x135/0x170 [ 56.169985][ T6755] rawv6_setsockopt+0xd7/0x680 [ 56.169994][ T6755] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 56.170005][ T6755] ? selinux_socket_setsockopt+0x6a/0x80 [ 56.170022][ T6755] ? sock_common_setsockopt+0x2e/0xf0 [ 56.170037][ T6755] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 56.170052][ T6755] do_sock_setsockopt+0x222/0x480 [ 56.170066][ T6755] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 56.170081][ T6755] ? lock_acquire+0x2f/0xb0 [ 56.170097][ T6755] __sys_setsockopt+0x1a0/0x230 [ 56.170110][ T6755] __x64_sys_setsockopt+0xbd/0x160 [ 56.170122][ T6755] ? do_syscall_64+0x91/0x250 [ 56.170132][ T6755] ? lockdep_hardirqs_on+0x7c/0x110 [ 56.170143][ T6755] do_syscall_64+0xcd/0x250 [ 56.170154][ T6755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.170167][ T6755] RIP: 0033:0x7effb438cd29 [ 56.170175][ T6755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.170184][ T6755] RSP: 002b:00007effb51a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 56.170192][ T6755] RAX: ffffffffffffffda RBX: 00007effb45a5fa0 RCX: 00007effb438cd29 [ 56.170198][ T6755] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000085 [ 56.170203][ T6755] RBP: 00007effb440e2a0 R08: 0000000000000588 R09: 0000000000000000 [ 56.170208][ T6755] R10: 00000000200014c0 R11: 0000000000000246 R12: 0000000000000000 [ 56.170214][ T6755] R13: 0000000000000000 R14: 00007effb45a5fa0 R15: 00007ffcbb173d38 [ 56.170225][ T6755] [ 56.170228][ T6755] Mem-Info: [ 56.190529][ T6760] binder: Unknown parameter '00000000000000000000000' [ 56.192284][ T6755] active_anon:5228 inactive_anon:0 isolated_anon:0 [ 56.192284][ T6755] active_file:1687 inactive_file:2492 isolated_file:0 [ 56.192284][ T6755] unevictable:1768 dirty:1239 writeback:0 [ 56.192284][ T6755] slab_reclaimable:11143 slab_unreclaimable:70310 [ 56.192284][ T6755] mapped:24923 shmem:2449 pagetables:681 [ 56.192284][ T6755] sec_pagetables:299 bounce:0 [ 56.192284][ T6755] kernel_misc_reclaimable:0 [ 56.192284][ T6755] free:520534 free_pcp:4644 free_cma:0 [ 56.300417][ T6755] Node 0 active_anon:20912kB inactive_anon:0kB active_file:6716kB inactive_file:9964kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:99692kB dirty:4924kB writeback:0kB shmem:6260kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11952kB pagetables:2724kB sec_pagetables:1196kB all_unreclaimable? no [ 56.311003][ T6755] Node 1 active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:4kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:32kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 56.320937][ T6755] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 56.332471][ T6755] lowmem_reserve[]: 0 1240 0 0 0 [ 56.334540][ T6755] Node 0 DMA32 free:496172kB boost:0kB min:27608kB low:34508kB high:41408kB reserved_highatomic:0KB active_anon:20788kB inactive_anon:0kB active_file:6716kB inactive_file:9964kB unevictable:3536kB writepending:4924kB present:2080628kB managed:1269808kB mlocked:0kB bounce:0kB free_pcp:5192kB local_pcp:964kB free_cma:0kB [ 56.346453][ T6755] lowmem_reserve[]: 0 0 0 0 0 [ 56.348704][ T6755] Node 1 Normal free:1570364kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:4kB unevictable:3536kB writepending:32kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:14332kB local_pcp:3868kB free_cma:0kB [ 56.353233][ T6763] overlay: ./file0 is not a directory [ 56.359647][ T6755] lowmem_reserve[]: 0 0 0 0 0 [ 56.359672][ T6755] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 56.368731][ T6755] Node 0 DMA32: 185*4kB (UME) 239*8kB (UME) 223*16kB (UME) 143*32kB (UME) 139*64kB (UME) 87*128kB (UME) 44*256kB (UME) 29*512kB (UM) 12*1024kB (UM) 9*2048kB (UM) 99*4096kB (UM) = 493164kB [ 56.374696][ T6755] Node 1 Normal: 61*4kB (UM) 17*8kB (UME) 14*16kB (UME) 11*32kB (UME) 12*64kB (UME) 11*128kB (UME) 4*256kB (UE) 7*512kB (UME) 4*1024kB (UE) 1*2048kB (M) 380*4096kB (UM) = 1570364kB [ 56.382124][ T6755] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 56.386617][ T6755] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 56.390159][ T6755] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 56.393840][ T6755] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 56.397577][ T6755] 6632 total pagecache pages [ 56.399542][ T6755] 0 pages in swap cache [ 56.401219][ T6755] Free swap = 124436kB [ 56.402918][ T6755] Total swap = 124996kB [ 56.404577][ T6755] 1048443 pages RAM [ 56.406132][ T6755] 0 pages HighMem/MovableOnly [ 56.408042][ T6755] 281670 pages reserved [ 56.409867][ T6755] 0 pages cma reserved [ 56.492457][ T6784] syz.2.234: attempt to access beyond end of device [ 56.492457][ T6784] nbd2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 56.496734][ T6784] EXT4-fs (nbd2): unable to read superblock [ 56.532751][ T6784] netlink: 'syz.2.234': attribute type 4 has an invalid length. [ 56.568743][ T6798] overlay: ./file0 is not a directory [ 56.649304][ T6814] UHID_CREATE from different security context by process 186 (syz.3.240), this is not allowed. [ 56.754567][ T6832] netlink: 'syz.3.247': attribute type 15 has an invalid length. [ 56.822827][ T6839] overlay: ./file0 is not a directory [ 57.055687][ T6860] can0: slcan on ttyS3. [ 57.190220][ T6860] can0 (unregistered): slcan off ttyS3. [ 57.371994][ T6898] __nla_validate_parse: 3 callbacks suppressed [ 57.372002][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.263'. [ 57.459777][ T6908] overlay: ./file0 is not a directory [ 57.474230][ T6910] can0: slcan on ttyS3. [ 57.536573][ T6915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.269'. [ 57.539949][ T6915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.269'. [ 57.566565][ T6918] overlay: ./file0 is not a directory [ 57.581487][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'. [ 57.585192][ T6922] netlink: 20 bytes leftover after parsing attributes in process `syz.1.270'. [ 57.628728][ T6910] can0 (unregistered): slcan off ttyS3. [ 57.660628][ T6933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6933 comm=syz.3.271 [ 57.665126][ T6933] netlink: 'syz.3.271': attribute type 21 has an invalid length. [ 57.674474][ T6933] netlink: 'syz.3.271': attribute type 20 has an invalid length. [ 57.676807][ T6933] IPv6: NLM_F_CREATE should be specified when creating new route [ 57.719476][ T6940] binder: 6938:6940 ioctl 3b87 20000000 returned -22 [ 57.734394][ T6943] netlink: 20 bytes leftover after parsing attributes in process `syz.3.271'. [ 57.784638][ T6949] syzkaller1: entered promiscuous mode [ 57.786257][ T6949] syzkaller1: entered allmulticast mode [ 57.797254][ T6956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.279'. [ 57.846722][ T6969] kernel profiling enabled (shift: 63) [ 57.850571][ T6969] profiling shift: 63 too large [ 57.852351][ T6969] kernel profiling enabled (shift: 8) [ 57.891153][ T6978] support for cryptoloop has been removed. Use dm-crypt instead. [ 57.925859][ T6986] overlayfs: failed to resolve './file1': -2 [ 58.056878][ T6995] netlink: 'syz.0.291': attribute type 10 has an invalid length. [ 58.063005][ T6995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.066992][ T6995] batadv0: entered promiscuous mode [ 58.069812][ T6995] $Hÿ: (slave batadv0): Enslaving as an active interface with an up link [ 58.111791][ T7004] netlink: 'syz.0.293': attribute type 3 has an invalid length. [ 58.114233][ T7004] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.293'. [ 58.114235][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.290'. [ 58.117737][ T7004] netlink: 'syz.0.293': attribute type 3 has an invalid length. [ 58.120149][ T7002] netlink: 44 bytes leftover after parsing attributes in process `syz.2.290'. [ 58.122403][ T7004] netlink: 'syz.0.293': attribute type 3 has an invalid length. [ 58.129675][ T7004] netlink: 'syz.0.293': attribute type 3 has an invalid length. [ 58.132214][ T7004] netlink: 'syz.0.293': attribute type 3 has an invalid length. [ 58.135202][ T7004] netlink: 'syz.0.293': attribute type 3 has an invalid length. [ 58.202388][ T7002] ------------[ cut here ]------------ [ 58.204092][ T7002] WARNING: CPU: 1 PID: 7002 at mm/page_alloc.c:4729 __alloc_pages_noprof+0x1f66/0x2470 [ 58.207185][ T7002] Modules linked in: [ 58.208781][ T7002] CPU: 1 UID: 0 PID: 7002 Comm: syz.2.290 Not tainted 6.13.0-syzkaller-05154-g8883957b3c9d #0 [ 58.213799][ T7002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.217228][ T7002] RIP: 0010:__alloc_pages_noprof+0x1f66/0x2470 [ 58.219796][ T7002] Code: 24 38 41 89 c6 0f b6 c0 44 8b ac 24 84 00 00 00 89 44 24 18 e9 a8 f7 ff ff 90 0f 0b 90 e9 b6 f7 ff ff c6 05 fd a0 5a 0e 01 90 <0f> 0b 90 e9 d9 e4 ff ff 90 0f 0b 90 e9 4e fb ff ff 83 bc 24 80 00 [ 58.227228][ T7002] RSP: 0018:ffffc900046bf898 EFLAGS: 00010246 [ 58.229409][ T7002] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 58.231921][ T7002] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0 [ 58.234360][ T7002] RBP: 0000000080000000 R08: 0000000000000005 R09: 0000000000000000 [ 58.236864][ T7002] R10: 0000000020000000 R11: 0000000000000000 R12: 0000000000000013 [ 58.239453][ T7002] R13: 1ffff920008d7f27 R14: 0000000080000000 R15: ffffffff853f5a67 [ 58.241880][ T7002] FS: 00007effb51a66c0(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000 [ 58.244608][ T7002] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.246635][ T7002] CR2: 000000002000009c CR3: 000000002d494000 CR4: 0000000000352ef0 [ 58.249434][ T7002] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.252045][ T7002] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.254473][ T7002] Call Trace: [ 58.255653][ T7002] [ 58.256580][ T7002] ? __warn+0xea/0x3c0 [ 58.257853][ T7002] ? __alloc_pages_noprof+0x1f66/0x2470 [ 58.259785][ T7002] ? report_bug+0x3c0/0x580 [ 58.261239][ T7002] ? handle_bug+0x54/0xa0 [ 58.262575][ T7002] ? exc_invalid_op+0x17/0x50 [ 58.264030][ T7002] ? asm_exc_invalid_op+0x1a/0x20 [ 58.265588][ T7002] ? drm_syncobj_array_find+0x37/0x3b0 [ 58.267297][ T7002] ? __alloc_pages_noprof+0x1f66/0x2470 [ 58.269423][ T7002] ? hlock_class+0x4e/0x130 [ 58.270850][ T7002] ? __lock_acquire+0xcc5/0x3c40 [ 58.272413][ T7002] ? hlock_class+0x4e/0x130 [ 58.273825][ T7002] ? mark_lock+0xb5/0xc60 [ 58.275179][ T7002] ? stack_depot_save_flags+0x28/0x9c0 [ 58.276862][ T7002] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 58.278803][ T7002] ? mark_lock+0xb5/0xc60 [ 58.280283][ T7002] ? hlock_class+0x4e/0x130 [ 58.281692][ T7002] ? find_held_lock+0x2d/0x110 [ 58.283173][ T7002] ? __pfx_mark_lock+0x10/0x10 [ 58.284660][ T7002] ? hlock_class+0x4e/0x130 [ 58.286061][ T7002] ? __lock_acquire+0x15a9/0x3c40 [ 58.287624][ T7002] ? drm_syncobj_array_find+0x37/0x3b0 [ 58.289385][ T7002] ___kmalloc_large_node+0x84/0x1b0 [ 58.290995][ T7002] __kmalloc_large_node_noprof+0x1c/0x70 [ 58.292727][ T7002] ? __pfx___lock_acquire+0x10/0x10 [ 58.294338][ T7002] __kmalloc_noprof.cold+0xc/0x61 [ 58.295898][ T7002] drm_syncobj_array_find+0x37/0x3b0 [ 58.297532][ T7002] ? find_held_lock+0x2d/0x110 [ 58.299170][ T7002] drm_syncobj_wait_ioctl+0x23a/0x390 [ 58.300854][ T7002] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 58.302682][ T7002] ? drm_dev_enter+0x4c/0x170 [ 58.304142][ T7002] drm_ioctl_kernel+0x1e6/0x3d0 [ 58.305643][ T7002] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 58.307607][ T7002] ? __might_fault+0xe3/0x190 [ 58.308365][ T1464] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 58.309131][ T7002] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 58.313336][ T7002] ? __might_fault+0xe3/0x190 [ 58.314809][ T7002] drm_ioctl+0x5d6/0xc00 [ 58.316137][ T7002] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 58.317940][ T7002] ? __pfx_drm_ioctl+0x10/0x10 [ 58.319485][ T7002] ? __pfx_lock_release+0x10/0x10 [ 58.321038][ T7002] ? selinux_file_ioctl+0x180/0x270 [ 58.322636][ T7002] ? selinux_file_ioctl+0xb4/0x270 [ 58.324244][ T7002] ? __pfx_drm_ioctl+0x10/0x10 [ 58.325733][ T7002] __x64_sys_ioctl+0x190/0x200 [ 58.327213][ T7002] do_syscall_64+0xcd/0x250 [ 58.328664][ T7002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.330489][ T7002] RIP: 0033:0x7effb438cd29 [ 58.331889][ T7002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.337805][ T7002] RSP: 002b:00007effb51a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.340434][ T7002] RAX: ffffffffffffffda RBX: 00007effb45a5fa0 RCX: 00007effb438cd29 [ 58.342853][ T7002] RDX: 0000000020000080 RSI: 00000000c02864c3 RDI: 0000000000000003 [ 58.345268][ T7002] RBP: 00007effb440e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 58.347678][ T7002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.350132][ T7002] R13: 0000000000000000 R14: 00007effb45a5fa0 R15: 00007ffcbb173d38 [ 58.352551][ T7002] [ 58.353514][ T7002] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 58.355740][ T7002] CPU: 1 UID: 0 PID: 7002 Comm: syz.2.290 Not tainted 6.13.0-syzkaller-05154-g8883957b3c9d #0 [ 58.358857][ T7002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.362138][ T7002] Call Trace: [ 58.363176][ T7002] [ 58.364152][ T7002] dump_stack_lvl+0x3d/0x1f0 [ 58.365653][ T7002] panic+0x71d/0x800 [ 58.366865][ T7002] ? __pfx_panic+0x10/0x10 [ 58.368253][ T7002] ? show_trace_log_lvl+0x29d/0x3d0 [ 58.369888][ T7002] ? __alloc_pages_noprof+0x1f66/0x2470 [ 58.371587][ T7002] check_panic_on_warn+0xab/0xb0 [ 58.373114][ T7002] __warn+0xf6/0x3c0 [ 58.374314][ T7002] ? __alloc_pages_noprof+0x1f66/0x2470 [ 58.376021][ T7002] report_bug+0x3c0/0x580 [ 58.377354][ T7002] handle_bug+0x54/0xa0 [ 58.378652][ T7002] exc_invalid_op+0x17/0x50 [ 58.380057][ T7002] asm_exc_invalid_op+0x1a/0x20 [ 58.381548][ T7002] RIP: 0010:__alloc_pages_noprof+0x1f66/0x2470 [ 58.383440][ T7002] Code: 24 38 41 89 c6 0f b6 c0 44 8b ac 24 84 00 00 00 89 44 24 18 e9 a8 f7 ff ff 90 0f 0b 90 e9 b6 f7 ff ff c6 05 fd a0 5a 0e 01 90 <0f> 0b 90 e9 d9 e4 ff ff 90 0f 0b 90 e9 4e fb ff ff 83 bc 24 80 00 [ 58.389266][ T7002] RSP: 0018:ffffc900046bf898 EFLAGS: 00010246 [ 58.391236][ T7002] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 58.393679][ T7002] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0 [ 58.396101][ T7002] RBP: 0000000080000000 R08: 0000000000000005 R09: 0000000000000000 [ 58.398510][ T7002] R10: 0000000020000000 R11: 0000000000000000 R12: 0000000000000013 [ 58.400926][ T7002] R13: 1ffff920008d7f27 R14: 0000000080000000 R15: ffffffff853f5a67 [ 58.403347][ T7002] ? drm_syncobj_array_find+0x37/0x3b0 [ 58.405024][ T7002] ? hlock_class+0x4e/0x130 [ 58.406424][ T7002] ? __lock_acquire+0xcc5/0x3c40 [ 58.407964][ T7002] ? hlock_class+0x4e/0x130 [ 58.409370][ T7002] ? mark_lock+0xb5/0xc60 [ 58.410716][ T7002] ? stack_depot_save_flags+0x28/0x9c0 [ 58.412534][ T7002] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 58.414084][ T7002] ? mark_lock+0xb5/0xc60 [ 58.415512][ T7002] ? hlock_class+0x4e/0x130 [ 58.416910][ T7002] ? find_held_lock+0x2d/0x110 [ 58.418496][ T7002] ? __pfx_mark_lock+0x10/0x10 [ 58.419981][ T7002] ? hlock_class+0x4e/0x130 [ 58.421483][ T7002] ? __lock_acquire+0x15a9/0x3c40 [ 58.423028][ T7002] ? drm_syncobj_array_find+0x37/0x3b0 [ 58.424715][ T7002] ___kmalloc_large_node+0x84/0x1b0 [ 58.426413][ T7002] __kmalloc_large_node_noprof+0x1c/0x70 [ 58.428217][ T7002] ? __pfx___lock_acquire+0x10/0x10 [ 58.429848][ T7002] __kmalloc_noprof.cold+0xc/0x61 [ 58.431471][ T7002] drm_syncobj_array_find+0x37/0x3b0 [ 58.433176][ T7002] ? find_held_lock+0x2d/0x110 [ 58.434649][ T7002] drm_syncobj_wait_ioctl+0x23a/0x390 [ 58.436301][ T7002] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 58.438105][ T7002] ? drm_dev_enter+0x4c/0x170 [ 58.439580][ T7002] drm_ioctl_kernel+0x1e6/0x3d0 [ 58.441157][ T7002] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 58.442954][ T7002] ? __might_fault+0xe3/0x190 [ 58.444410][ T7002] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 58.446050][ T7002] ? __might_fault+0xe3/0x190 [ 58.447515][ T7002] drm_ioctl+0x5d6/0xc00 [ 58.448817][ T7002] ? __pfx_drm_syncobj_wait_ioctl+0x10/0x10 [ 58.450626][ T7002] ? __pfx_drm_ioctl+0x10/0x10 [ 58.452105][ T7002] ? __pfx_lock_release+0x10/0x10 [ 58.453609][ T7002] ? selinux_file_ioctl+0x180/0x270 [ 58.455215][ T7002] ? selinux_file_ioctl+0xb4/0x270 [ 58.456788][ T7002] ? __pfx_drm_ioctl+0x10/0x10 [ 58.458257][ T7002] __x64_sys_ioctl+0x190/0x200 [ 58.459750][ T7002] do_syscall_64+0xcd/0x250 [ 58.461149][ T7002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.462905][ T7002] RIP: 0033:0x7effb438cd29 [ 58.464277][ T7002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.470215][ T7002] RSP: 002b:00007effb51a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.472760][ T7002] RAX: ffffffffffffffda RBX: 00007effb45a5fa0 RCX: 00007effb438cd29 [ 58.475186][ T7002] RDX: 0000000020000080 RSI: 00000000c02864c3 RDI: 0000000000000003 [ 58.477595][ T7002] RBP: 00007effb440e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 58.480024][ T7002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.482424][ T7002] R13: 0000000000000000 R14: 00007effb45a5fa0 R15: 00007ffcbb173d38 [ 58.484833][ T7002] [ 58.486452][ T7002] Kernel Offset: disabled [ 58.487796][ T7002] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:41:27 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000008 RBX=0000000000000000 RCX=ffffffff84aa705c RDX=0000000000000000 RSI=ffffffff8bd383e0 RDI=0000000000000000 RBP=ffffffff8bd383e0 RSP=ffffc9000443e9e0 R8 =0000000000000005 R9 =0000000000000004 R10=0000000000000003 R11=ffff88802a140030 R12=0000000000000000 R13=0000000000000001 R14=0000000000000004 R15=0000000000000008 RIP=ffffffff8199dfdb RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4965d786c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2e91fffc CR3=0000000051fb4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000ffffefff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9e58717036e9fe44 660c2c8fef9843ae ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d4b61ae6cd6e4ba2 90c3ad55dd031682 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a8993e6de5bd17fd bd10a9a18cd0d024 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 58af06160c85fdbe 670c70183671f1e9 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000095c0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 574a519a00000000 5cab3a5e00800100 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0080010000000024 0000002400800100 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000024022ece61 59aef7a400000024 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000245d17cfee 5cb3864e00800100 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f6ca71a1504ada85 d191e76f2dcc8517 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 654347c8b621096d c6e18ac7939977f8 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6574796220363338 393931203a6b6e69 6c74656e205d3430 303754205b5d3300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6574736220363332 3333312030616463 6674656420573430 3037542051573300 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2029552820426b34 3230310000383320 29310000426b3434 30302a3120203d20 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020322020202331 2a30200000323220 2020000020232a34 2022203120203620 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3c3f38203e2a234f 475f222a48613238 3b203b3b2a234f47 5f222a48613e3c20 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 23475f222a48613c 333a3e203a32392a 2347222a4861323e 3a38203b2a234f5f ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85200025 RDI=ffffffff9ab75e60 RBP=ffffffff9ab75e20 RSP=ffffc900046bf218 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000004 R12=0000000000000000 R13=0000000000000031 R14=ffffffff851fffc0 R15=0000000000000000 RIP=ffffffff8520004f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007effb51a66c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002000009c CR3=000000002d494000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffc000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007effb440f232 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007effb440f23f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007effb440f239 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007effb440f24d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007effb440f2d3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007effb440f3b1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000032647261632f 6972642f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000011475142400c 4a51470c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000005cb03 RBX=0000000000000002 RCX=ffffffff8b35b239 RDX=0000000000000000 RSI=ffffffff8b6cd6c0 RDI=ffffffff8bd2e660 RBP=ffffed1003a5f000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d506f7d R10=ffff88806a837beb R11=0000000000000000 R12=0000000000000002 R13=ffff88801d2f8000 R14=ffffffff90624e90 R15=0000000000000000 RIP=ffffffff8b35c61f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c318f55 CR3=000000002d494000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000040 RCX=ffffffff84a2c101 RDX=1ffff920009c7fd0 RSI=ffffffff84a2c10f RDI=0000000000000007 RBP=0000000000000000 RSP=ffffc90004e3fbd0 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000040 R11=0000000000000000 R12=000000007f024980 R13=ffffc90004e3fd98 R14=ffffc90004e3fe80 R15=000000007f024980 RIP=ffffffff84a2c125 RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4965d996c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020fda000 CR3=0000000051fb4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f496500f232 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f496500f23f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f496500f239 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f496500f24d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f496500f2d3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f496500f3b1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f496517c488 00007f496517c480 00007f496517c478 00007f496517c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4965cdd100 00007f496517c440 00007f496517c458 0000000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f496517c498 00007f496517c490 00007f496517c488 00007f496517c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000