last executing test programs: 1m31.335495583s ago: executing program 3 (id=403): syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_emit_ethernet(0x7c, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000042000086dd6076db4000462f00fe800000000000000a6a000000000021ff020000000000000000000000000001042065580000000000000800d80000000100000000000000080022eb0000000020008010000008006558000000"], 0x0) 1m31.327436756s ago: executing program 3 (id=404): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x40000000000000, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id']) 1m31.272058227s ago: executing program 3 (id=406): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r2, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a320000000014000780080013400000000008001240000020000500050002000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) 1m31.22051608s ago: executing program 3 (id=409): r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mincore(&(0x7f0000bde000/0x4000)=nil, 0x4000, &(0x7f0000000380)=""/255) r1 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) r6 = syz_clone(0x208100, &(0x7f00000004c0)="d93252fae14d6d9bf06ced32fcde83f6b29f24cf245d147fb9e24eda0300266b0326b8869c4deb3dd392b5d103993b9aea947dc87a6b5b564765548b21828d347d175f4d383c3fb5598a8e2720b77cd8e76ae5c4024137551936d62ca915bd6ea369a6134917b2e4237d3dd2babc0ae59e650a9f480cefb6584a", 0x7a, &(0x7f0000000540), &(0x7f0000000700), &(0x7f00000005c0)="aae3d577ceb3062dbcb1cbcb0b77a314f8f792f1b3179b487bb45fe198d7a0b3a80f5908fc4e6a4e1f") sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000007040)=@deltfilter={0x51a0, 0x2d, 0x300, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff3}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x954, 0x2, [@TCA_ROUTE4_ACT={0x564, 0x6, [@m_simple={0x17c, 0x9, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0xc12a, 0x3, 0x1, 0xc}}, @TCA_DEF_DATA={0x7, 0x3, ']+\x00'}, @TCA_DEF_DATA={0xc, 0x3, 'usrquota'}, @TCA_DEF_DATA={0xb, 0x3, '-*)-\'*\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x7fffffff, 0xffffffffffffffff, 0x0, 0x4}}, @TCA_DEF_PARMS={0x18, 0x2, {0x81, 0x800, 0x8, 0x0, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x49, 0x0, 0x5, 0x9, 0x3}}, @TCA_DEF_DATA={0x7, 0x3, '%$\x00'}]}, {0xc7, 0x6, "22a9ff7231a8da83c1feb5159fd07b5095491de215184d0bf21c7c510f8bd504cf75b6de12a3f6c10b245ed16a1d5994964e8cc596125e6bc6fbc0f2a87cb59f2d4bc51f86658ba029e2c7834d93decc18ae463afdf86e19889f3643cc969e7ac99a13d0214a94f7c31d948c55175adf398e96626818e6ec12bb762b7d64b58f2ad5341a95cb00d7defa80b353cac95c3ff23bce1d28254e4b55f9cb1ba7c647c002bebd18b38339155f953992d7ac1ffb0e68e099a719cbb2bb69226ce42e749be112"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_csum={0xfc, 0x3, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0x800, 0x4, 0x8125, 0x3}, 0x26}}]}, {0xb4, 0x6, "68522e301ac1b30f35967e15f684dd8e4fb57a2cf8326c44a49c35fc39fc83ac98a92c2601ccedd61804a141b565aa1e9850a8bb4360cf3178c4968d64fc45efd76618d0c4e572da5e951a113231623254260125d78d561fe4c5796a605dbf54c7e086b77f7dc468b6dfc66906738442065763cedf6d2e2ea084c1ccc39d02745c11a7092fd564ab00c178845c20cc0afb71eb1ac566a0f74aac400329c28c594aebd2a60b68d283536d976e7f51384d"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_bpf={0x4c, 0xf, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file1\x00'}]}, {0x17, 0x6, "fe4b97a1cc4131b910107b4e933b94ca4bf296"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x188, 0x1f, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x200, 0xe, 0x4, 0x1, 0x3}, 0x19}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x6, 0x10000000, 0x4, 0x3}, 0x35}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x57, 0x10000000, 0x7, 0xfff}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb4, 0x9, 0xffffffffffffffff, 0xe6b, 0x7}, 0x6d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x1, 0x0, 0x8, 0x9}, 0x23}}]}, {0xce, 0x6, "6b77bbe4d9f95f79434e2c3efbf3787d0c681125b6ae141668e057dbd43430128d8872bf3025f62f0eecbf5541957f930dd1c134f75dd38f53e9f9464a7fcf3830aa5360c08d568f69b620286bafc37d00a540c5a3066e36b7284366c596983042b69b303e97a2214e41a17849d176ec43797b0a10f48d6565de58edf7b57a65fae23aea96f2d2df0c25d4c49b2ac4c54f8d626031d889dd3d17b3b3699247a18cb70db4786403c15cc4caeb3da8cac43a20b0e1222929b10fd48cb23651f07e8e17d368d384ea23bc99"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0xcc, 0x19, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x9, 0x3, 0x8001, 0x25e}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1, 0x8, 0x8, 0x80000000}}]}, {0x70, 0x6, "7e656de3174c8f4442e38f593709b4088f669eb0ef44467e402cfe0a493054e88836fccfc98723700e8215da6781edadc3af8bb4d40e07b3e46b271949233c420e44400232d20bd9d3db5e511cc7dd0c0bb78e6c1274fa45db217084297f2a581f1bf39dcc6716118c08115b"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x48, 0x19, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file1\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6}]}, {0xa, 0x6, "57aa2c3f5172"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x42}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x3, 0x6}}, @TCA_ROUTE4_TO={0x8, 0x2, 0x4}, @TCA_ROUTE4_ACT={0x3d4, 0x6, [@m_mirred={0x114, 0x4, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x80000001, 0xffffffffffffffff, 0x0, 0x903b}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3ff, 0x6208, 0x3, 0xf5, 0xa}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x83ad, 0x9, 0x8, 0x4, 0xfea3}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x7, 0xffffffffffffffff, 0x4, 0x8}, 0x1, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x0, 0x4, 0x0, 0x5}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7ff, 0x9, 0x2, 0x5, 0x8000}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x6, 0x2, 0x9, 0xffff1c45}, 0x2, r5}}]}, {0x8, 0x6, "bb88f13c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0xb4, 0x1e, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x63d6}]}, {0x70, 0x6, "d100919a4008e58c7afb91b4b8397e0563d1c099f3e56db797e327cd82467d7e5ff5a2a88085cc034992adeee9def13e923a0c004f22b81cd7f1096e91185032629f1995fd7387c464948e6f7d6df5f3849d3d95ddbc0b9b408e82e2ab47d90fd0094656df3ba714a67359db"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x108, 0x15, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfffffffa, 0x5, 0x9, 0x839}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x5, 0x0, 0x7b32, 0x58d4}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}]}, {0x9b, 0x6, "add92e7374f4c7545086d4c668e00b36d4a48bd729c257bd8b1edb265feb58e68329b5b4c284fa14a3a18efb5b33cd24e66ad2faf4d9ba19a1639fb94690ed38e55b280398d68d8d538a9ce1ec03049ed38f0c6122b3a4e2f6b3f895c910ee80dd2713956e5d6f3afde0475796da2ebd58a2a7b9abb030a47ebd5cd6f3bad660447e696ca607aea343a32253876d678e052ee15e11b330"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x100, 0xf, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x2, 0x0, 0xfffffffd}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x4a, 0x4, 0x8, 0x99}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0xd463f4ce8b0d2ab8, 0xfff, 0x3}, 0xc}}]}, {0x7b, 0x6, "2305209a79eba2ec59e6c10e80368042ceb5f33c4bf4e5a35605cca43c6a847c0c36e8578e0da5993ee40ef3e9256a7cb5f94ec8b389300918d40c5723a5492696ee3f61b207f189bf9b75f085cf872ef6ae22deb3ff7e743fa2648e11175b90e59fe2d5dd2f53d78f20aadc1feacca2cc81ff6d5c0ec1"}, {0xc}, {0xc}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x47c4, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_ACT={0x127c, 0x2, [@m_skbedit={0x128, 0x8, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x80000001}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2bda, 0x5, 0x1, 0x91, 0x7}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0x5}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0xb4, 0x6, "5f4bd05dbdbc1df7edb0cf138899cb13e8c13a41172aef127588f09cfdc10ce629443b3a8fce5c0d3abeaea50547eb7aa941479711c297fa8f6bac24fe8d92aaeee81d392a7fb7ca32577563afb63e419e7084c334f703251eb040c89174be10716b2f09011e7a9789c116728676c7cb3beb3b38b269770ac8b25e9c791103aa04ce4dd0b3c0f4ecbda6edf3c0eb3e73ea79cb0d78516f3855461d686c77eb76c1900b87f655a0349578154ca02952a5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_xt={0x1150, 0x8, 0x0, 0x0, {{0x7}, {0x128, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x123, 0x6, {0x1, 'mangle\x00', 0x1c, 0x0, "a8ec85db31cb8ab0f2d4d0df0bc19be107329752e6bf44eadaf127d2fb496c0ee8fc66d0f8ec09bc42bb80fc898b613cef8f52cf3ef1f42aad00b045087c5e4d495cd509bafff993a56fb3867d6bbd77f73ad45db67c9de57178c93bf71626fb1e0690b98c5c63713b835699dca8be5469d38be881342f37844d20b41a0737075a6f6ab4256b20495d8b620c454ef932995e166568f67e0755c22b8a295e3ae96e30a691ef47c34dc797d0e0d60a16b6fbcb7bd45f31f840b07e920e8be76bcdb1e2a9f704338cae5de359c0b40d3c1536d94a64e55f24a050ce778a7510f2ef737543d68ab2d8a29d2e809c0852d7af11e1d458aaffc0d0ed"}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_MATCHALL_ACT={0xe0, 0x2, [@m_mpls={0xdc, 0x0, 0x0, 0x0, {{0x9}, {0x8c, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x31e, 0x4, 0x3, 0x3}, 0x2}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x2, 0x10000000, 0x6, 0x8001}, 0x3}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x8, 0x10000000, 0x650b, 0x8}, 0x4}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xa56, 0x10000, 0x8, 0x3, 0x7ff}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88e5}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x8}]}, {0x27, 0x6, "bb201bfea91f9e217b739f9171ada4c6580506db4c85624ccb60c4a120d7ab73353812"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_MATCHALL_ACT={0x3448, 0x2, [@m_connmark={0x150, 0x17, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x40, 0x3, 0x2, 0xc0, 0x40}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x60000000, 0x20000000, 0x7fffffff, 0x3}, 0x7f}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x1, 0x3b37, 0x8000}, 0x2000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x0, 0x2}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x1, 0x87, 0x4}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10000, 0x4, 0x0, 0x4}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x4, 0x6, 0x8000, 0x8}, 0xf51}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x20000000, 0x0, 0x3}, 0x6}}]}, {0x3d, 0x6, "5f73ddc413e6977546e7f8bfa90b0fbee7f0de7500edcf27a1204256d059539b33795a94278a74492ff1d5421f6599ef60f3b46c0aceef5640"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_pedit={0x1f94, 0x3, 0x0, 0x0, {{0xa}, {0x1f28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x5, 0x0, 0x3, 0x318}, 0x0, 0x5}, [{0x7d7e, 0x2, 0x3b04eb9, 0x3, 0xfffffffe, 0x5}, {0x7, 0x10, 0x80000001, 0x3, 0x4, 0x4}, {0x4, 0x5, 0x2, 0x200, 0x7, 0x9}, {0xfffff5fb, 0x3, 0x3bfd, 0x80000000, 0x48, 0x7}, {0x5, 0x7, 0x2, 0x0, 0x1ff, 0x5}, {0x8, 0xa564, 0xbd0b, 0x200, 0x4, 0x2}, {0x0, 0x9, 0x9, 0x5, 0x99b00000, 0x3}, {0x1000, 0x8, 0x344, 0x9, 0x3, 0x8000}, {0x0, 0x4800, 0xfffffff7, 0x1, 0x2c0, 0x6}, {0x3ff, 0xa, 0x3, 0xd, 0xff, 0x7fffffff}, {0x0, 0x4, 0x4, 0x4, 0xfffffff0, 0x3e22}, {0x2ec, 0x0, 0x7, 0x96, 0x2, 0x7}, {0xe, 0xfffffffa, 0xc6ed, 0x75, 0x9, 0x3281cc7b}, {0x7ff, 0xc, 0xb, 0x0, 0xba5, 0x8000}, {0xcd, 0x0, 0x8, 0x8, 0x3, 0x8b5}, {0xea, 0xfffffff9, 0x8001, 0x7, 0x800000, 0xe3e}, {0x6, 0x400, 0x4, 0x8000}, {0x2, 0x6, 0x5, 0x4, 0x8, 0x4}, {0x2, 0x8, 0x2, 0x4, 0x3ff, 0x3d4e3dff}, {0x6, 0xfc000000, 0x6, 0x7, 0x8, 0xc23c}, {0x8, 0x4, 0x5b2f7804, 0xff, 0x2}, {0xb, 0x2, 0x1, 0x10000, 0x7, 0x5}, {0x80000001, 0x0, 0xfffffffe, 0xfffeffff, 0x6, 0x4000000}, {0x3, 0xfff, 0xfc, 0x39db, 0x7, 0xb}, {0x6, 0x40, 0x4, 0x64b, 0x6, 0x5}, {0xfffffffc, 0xd, 0x74d1, 0x1, 0x2078, 0x80}, {0x7, 0x3, 0x5, 0x5, 0x9, 0x3}, {0x3, 0x81, 0xcd9, 0x4, 0x1, 0x8}, {0xfffffff9, 0xc92, 0x1, 0x8, 0xc, 0x81}, {0xfffff449, 0xc2e, 0xfffffffc, 0x0, 0xffffffff, 0x3}, {0x1, 0x0, 0x8, 0x7, 0x3, 0xa829}, {0x8, 0x0, 0x80, 0x7, 0x7, 0xf}, {0x7, 0x8, 0xf, 0x9, 0x200, 0x340921a1}, {0x400, 0x81, 0xcdd, 0xff, 0x80000000, 0x8}, {0xf5, 0x2, 0x2, 0x80000001, 0x5, 0x37d}, {0x0, 0x0, 0x8, 0xd56, 0x4, 0x8}, {0xe, 0x5, 0x6, 0x3, 0x0, 0x800}, {0x0, 0x16a64, 0x3, 0x9, 0xfffffff2, 0x40}, {0x6, 0x9, 0x4, 0x1, 0x2, 0x1}, {0x3, 0xf27c, 0x2, 0x81, 0x8, 0x6d6b}, {0xfd3, 0x8000, 0x6, 0x4, 0x8, 0xfff}, {0x7fff, 0x5, 0x1ff, 0x0, 0x8, 0x6}, {0x0, 0x3, 0xfff, 0x0, 0x5}, {0x123, 0x2, 0x10000, 0x5c0, 0xffffffff, 0x10}, {0x5, 0x10, 0x401, 0xa, 0x7ff, 0x57}, {0x6, 0xaa, 0x1, 0x10001, 0x4, 0x83}, {0x800, 0x5, 0xb26, 0x7f, 0x0, 0x1}, {0x5, 0x8, 0x100, 0x9, 0x5775, 0xeb70}, {0xffffffff, 0x3, 0x5, 0x0, 0x1, 0x8}, {0x200, 0x9, 0xffff, 0x75, 0x97d, 0x98}, {0x3e34, 0x7, 0x3, 0xfffffffa, 0x200, 0x3}, {0x1ff, 0x4b3, 0x4891, 0x6, 0xb, 0xffff8001}, {0x4e0, 0x6, 0x0, 0x8, 0x3, 0x20000000}, {0x80, 0x6, 0x5b, 0x5, 0x400, 0xd}, {0x0, 0x35c, 0x2, 0x6, 0x9, 0x3}, {0x4, 0xfd7d, 0x0, 0xc2, 0x8212, 0x861}, {0xc8, 0xff, 0xa, 0x6, 0xa93b, 0xffffffe3}, {0x0, 0xffffffff, 0x1, 0x7, 0xfff, 0x8}, {0x6, 0x3, 0xfb, 0xfffff541, 0x8, 0xfffffffe}, {0x4f1, 0x6, 0x5, 0x3c000000, 0x9, 0x8000}, {0xcb4, 0xd4d, 0x7ff, 0xfffffff8, 0xf9, 0x8}, {0x892, 0x844c, 0x5, 0x9, 0x1, 0x2}, {0x9, 0x34, 0x1, 0x8, 0x3, 0x6}, {0x666, 0x7, 0x15ac, 0xfffffff1, 0xc8f3, 0xb}, {0x7, 0xfffffff7, 0x7, 0xfff, 0x10, 0x1000}, {0x4, 0x5, 0x5a, 0x1, 0x76b, 0xa}, {0x5, 0x9, 0x40, 0x4, 0x7, 0x6}, {0x10, 0x7f, 0x0, 0xe, 0xd7c, 0x4}, {0x5, 0x469, 0x4, 0x8, 0x7c, 0x3}, {0x40, 0x9, 0x0, 0x6, 0x800, 0x8c}, {0x65, 0x3, 0x80, 0x3, 0x8, 0x3}, {0x498f, 0x5, 0x1, 0x5, 0x1ff, 0x25}, {0x1, 0x8, 0x5, 0x5, 0xfffff306, 0x6}, {0x7fffffff, 0xffffff81, 0x0, 0xa3dd, 0x9, 0x1ff}, {0x9e, 0x2f4, 0x20e, 0x2, 0x8cc, 0x1}, {0x81, 0x80000000, 0x3, 0x40, 0x3ff, 0x9}, {0x8, 0xfffffff8, 0x6, 0x80000000, 0x5, 0x1}, {0x8, 0xb, 0x5, 0x4, 0x3b5, 0x5}, {0x6, 0x3, 0x800, 0x1, 0x7, 0x100}, {0x5582, 0x7232, 0x8b4d, 0x1, 0x0, 0x7}, {0x10000, 0x4, 0x5, 0x6, 0xffffffff, 0xfffffff9}, {0xa85, 0x1a35, 0x8, 0x5, 0x7, 0xe00}, {0x10000, 0x9, 0xfffffff6, 0x7f, 0x100, 0x4}, {0x9e38000, 0xacb2, 0x7, 0x2, 0x200, 0x80000000}, {0x0, 0xd, 0xf, 0x1000, 0x6}, {0x10000, 0x6, 0x0, 0xa, 0x1, 0x401}, {0x8, 0x1, 0x1, 0xaf, 0x3}, {0x9, 0xf, 0xfffffffc, 0x461, 0x400, 0x2}, {0x1, 0x6, 0xf, 0x4, 0x1}, {0x0, 0x400, 0x6, 0x24, 0xffffffff, 0x55}, {0x8, 0x29f, 0xfffffff8, 0x5, 0xf, 0x2}, {0x1, 0x2, 0x2, 0x7f, 0x5, 0x3}, {0x8, 0xc821, 0x40, 0x5, 0x4, 0x8000}, {0x3c2, 0x6, 0x6bd, 0x7, 0x9, 0x3}, {0x0, 0x1, 0x0, 0x200, 0xfffffffe, 0x4}, {0x7, 0x0, 0x9, 0x9, 0xb2, 0x80}, {0xbfd9, 0x8, 0xb, 0x4e, 0x6, 0x10001}, {0x8, 0x3, 0xffffffff, 0x4, 0x6, 0x7}, {0x9, 0x2, 0xf, 0xfff, 0x4, 0x3ff}, {0x5, 0xffffff82, 0xffff60d1, 0x1, 0x7, 0x2fa}, {0x91a, 0x7, 0xf8, 0x4, 0x6, 0x100}, {0x6, 0x72, 0x7, 0xb7f, 0x7, 0x7fffffff}, {0x2, 0x9, 0x200, 0x200, 0x7}, {0x4, 0xba66, 0xffff, 0x5, 0x2, 0x5}, {0xfff, 0x1, 0x8, 0xfffffff9, 0x2, 0x1}, {0xa, 0x80, 0x401, 0xffff, 0x40, 0xd6}, {0x6, 0x2206, 0xffffffff, 0x8001, 0xfffffff5, 0x5}, {0x3, 0x4, 0x4, 0x8001, 0x8, 0x3436}, {0x6, 0x6, 0x9, 0x5, 0x5, 0xc}, {0x4, 0x5, 0x8, 0x6, 0xfffffff8, 0x13a0}, {0x80000001, 0x1ff, 0x32e022d5, 0x1, 0x7fd, 0x8}, {0x1cd, 0x6, 0xec, 0x1, 0xb1e, 0x6}, {0x225, 0x10000, 0x1000, 0xfffffff7, 0x0, 0x7f}, {0x8, 0xc2, 0x1, 0x1, 0x5}, {0x200, 0x44421c76, 0x4, 0x200, 0xffff, 0x1}, {0x8, 0x6, 0x7, 0x2, 0x94f, 0x7fffffff}, {0xa, 0x7, 0xc, 0x3, 0x6, 0xffff}, {0xec, 0x51e3, 0x5, 0xa, 0xfff, 0x4}, {0x9, 0x2, 0x1, 0xff, 0x1, 0xfffffffd}, {0x81, 0x1, 0x3, 0x1, 0x6, 0x81}, {0x80000001, 0x6, 0x3, 0x5, 0x80000000, 0x20000}, {0xa629, 0x8000, 0x7fffffff, 0x0, 0x400, 0x3}, {0x3, 0x3, 0x7fffffff, 0x8, 0x10, 0x2}, {0xfffffffb, 0x8, 0x2, 0x385ace1d, 0x5, 0x6}, {0x7, 0x6, 0x1, 0x1, 0x4, 0x3}, {0x1ff, 0x4, 0x3, 0x1, 0x7, 0x4}, {0x8, 0x7, 0x7fffffff, 0x3, 0x1, 0xff}, {0x0, 0x7f, 0x0, 0x4, 0x2fd005c8, 0x1}], [{0x2, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x853a288ac8d4bf9a}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {}, {}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x2}, {}, {0x2}, {0x1}, {0x5}, {0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x2}, {0x6f11194a3d0c5c43, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x2}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x52f2978ee8d6453a, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x3}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x12c, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0xd6324e8edfab678f}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xef8, 0x4, {{{0x7, 0x32, 0x7, 0x9, 0xfffeffff}, 0x59, 0xa5, [{0x236, 0x9, 0x9, 0x7, 0x8, 0x9208}, {0x8, 0xc, 0x3, 0x100, 0x5, 0xef0}, {0xffff, 0x0, 0x6, 0x2, 0xb6df, 0x1}, {0x9, 0x7, 0x6, 0x1ffe0000, 0x8, 0x9}, {0x0, 0x5, 0xff, 0x7, 0xfff, 0xa7}, {0x0, 0xef, 0xf95b, 0x10, 0x1ff, 0x9dc0}, {0x0, 0x8000, 0x3, 0x7fffffff, 0x101, 0x29c0}, {0xc3a0, 0xf67, 0x6, 0x1, 0x3, 0x4}, {0x8, 0x7, 0x6, 0xffffffdb, 0x4, 0x19}]}, [{0x4, 0x101, 0x2, 0x8001, 0x0, 0x6ddf}, {0x0, 0xfffffffc, 0x3e, 0x5bcb, 0x6, 0x8}, {0x3ff, 0x6, 0x7, 0x3, 0xfffffffe, 0xfffeffff}, {0x80, 0x2, 0x1, 0x3ff, 0x4, 0x7}, {0x400, 0x0, 0xae45, 0x9, 0x6, 0x2}, {0x0, 0x26, 0x8001, 0x7, 0x3, 0xfb5f}, {0x3, 0xfffffffb, 0x4, 0x1, 0x1, 0x2}, {0x8, 0xfffffffa, 0xffffff62, 0x2e, 0x1ff, 0x9}, {0x0, 0x1, 0x2, 0x3, 0x4}, {0x80000000, 0x10, 0x10000, 0xb, 0xf, 0x7}, {0x5, 0xb27, 0x9, 0x4, 0x1, 0xe3}, {0x6, 0xc, 0x10000, 0x81, 0x6, 0x7}, {0x50, 0x80, 0x7, 0x5, 0x4, 0xffff}, {0x6, 0x0, 0x8, 0xffff7fff, 0x3, 0x2}, {0x1, 0x7f, 0x4, 0x6, 0xd27, 0x6}, {0xbe, 0x39cb, 0xa, 0x2, 0x4}, {0x2b, 0x7, 0x5, 0x2, 0xff7, 0x1ff}, {0x7ff, 0x1cc, 0x401, 0xf1, 0x9e3, 0x400}, {0x7, 0x0, 0x9, 0x400, 0x1, 0x100}, {0xd87, 0xffffff7f, 0x6, 0xf0, 0xa, 0x70}, {0x259, 0x7ff, 0x2, 0xff, 0x7, 0x4}, {0x3, 0x6, 0x7a07, 0x8, 0x6, 0x9}, {0x4, 0x1, 0x2, 0x4, 0x2, 0xdc9}, {0xe, 0x80000001, 0x400, 0x5, 0x0, 0x5}, {0x5, 0x3, 0xfffffffe, 0x9, 0x7fff, 0x1}, {0x1, 0x23c, 0x2, 0x1, 0x7ff, 0x4}, {0x10001, 0x1000, 0x10, 0x5, 0x0, 0xffff}, {0x0, 0x0, 0x200, 0x1, 0x1000, 0x5}, {0x2de, 0x4, 0xf, 0x6, 0xf01f, 0x80}, {0x7, 0x4, 0x527, 0xe, 0x80, 0x1a}, {0x1, 0x1, 0xffffffff, 0x4, 0x800, 0xfffffff7}, {0x2, 0x7, 0x1, 0x8000, 0x3, 0xfffffffb}, {0x7, 0xf2a, 0x2, 0x9, 0x7ff, 0xf399}, {0x3, 0x3, 0x80, 0x8001, 0x8, 0x154}, {0x9, 0x5, 0x4, 0x3, 0x8, 0xfffffff8}, {0x8, 0x7, 0xfff, 0x9, 0x9, 0x8}, {0xf63c, 0x8, 0x9, 0x9, 0x6, 0x2}, {0x7f, 0x5, 0x7, 0x4dfaab9d, 0x4, 0xe85b}, {0x4, 0x40, 0x4, 0x2, 0xa5}, {0xc4, 0x8, 0x0, 0x4, 0x5, 0x9}, {0xffff, 0xc7, 0x80000000, 0xa, 0x9, 0x7}, {0x3b, 0x6, 0x2, 0x7, 0x0, 0x3}, {0x1, 0x2, 0x5, 0x10001, 0xebe8, 0x6}, {0x34, 0x196bb696, 0x6, 0x69b0, 0xc39, 0x101}, {0x0, 0x8, 0x7f, 0x10, 0x5, 0x1}, {0x3, 0x5, 0x8000, 0x1, 0x7, 0x101}, {0x7f, 0xe51, 0x5, 0x8, 0x3ff, 0x2e}, {0x8, 0x5, 0x101, 0x3, 0x3712458, 0x6}, {0x0, 0x3, 0x5, 0x67, 0x6, 0x2}, {0x1, 0xfffffffc, 0x2, 0xbcb, 0xba, 0xfffffffc}, {0x8, 0x9, 0x29, 0x4, 0x556, 0xc}, {0x9, 0x5, 0x4, 0x8, 0xa, 0x4c1ad750}, {0x46e, 0x9, 0x100, 0xdca, 0x204, 0x1}, {0x4, 0x4, 0xfffffc01, 0xe, 0x0, 0xa}, {0x5, 0x80000000, 0xfffffffe, 0x2, 0xc8, 0x7}, {0x5, 0x7, 0xf, 0x1, 0x1, 0x7389}, {0x5, 0x9, 0x400, 0x53, 0x9, 0x7}, {0x5, 0xffff, 0x8, 0x2, 0xb37c, 0xfffffffe}, {0x10000000, 0x0, 0xc4ad, 0x44e, 0x3}, {0x40, 0x5ac, 0x1d6, 0x0, 0xb, 0x101}, {0x0, 0x78, 0x0, 0x7, 0x200, 0xd}, {0x1, 0x40, 0x8, 0x6, 0x0, 0x80000001}, {0xc8d2, 0x3, 0x3, 0x8, 0x7, 0x2}, {0x9, 0x35, 0x0, 0xffff3aeb, 0xfffff800, 0x6}, {0x8, 0xe3, 0x7, 0x5, 0x4, 0xfffffffc}, {0x1530, 0x1, 0x0, 0xf8d, 0x1, 0xffffff80}, {0x2, 0xfffffd9d, 0x6, 0x2, 0x10001, 0x1}, {0x2, 0x0, 0xc6, 0xd8, 0x3, 0x3}, {0x6e, 0xffff321d, 0x1, 0x10001, 0x80, 0x3}, {0x4, 0x7, 0x6, 0x4, 0x8000, 0x4}, {0x1, 0x4, 0x8, 0x7, 0x5, 0xb}, {0xffff8001, 0x1, 0xfffffffb, 0x1, 0x1, 0x401}, {0x9e59, 0xfffffff7, 0xa211, 0x3, 0x7e, 0xa}, {0x7, 0x9, 0xc5, 0x8000, 0xfffffff9, 0x10001}, {0x4, 0x6, 0x29e, 0x5, 0x3, 0x1}, {0xc3fe, 0x4, 0x5, 0x4, 0x0, 0x5}, {0x7, 0x91, 0x85, 0x6, 0xfffffffa, 0xda1a}, {0x5, 0x5e0, 0x8, 0x27, 0x4, 0x5ba}, {0x8, 0xa, 0x1, 0x10000, 0xa, 0x4}, {0x1, 0x3, 0xaf, 0xef2, 0x6, 0xfb}, {0x3, 0x2, 0x2a3, 0x5115563b, 0x4, 0x58b5}, {0x6, 0x8, 0x5, 0x7ff, 0x1000, 0x7}, {0x15cbcb2e, 0x10000, 0x7, 0x3, 0x3, 0xdf5}, {0x6, 0x7, 0x0, 0x9, 0x4, 0x6}, {0x400, 0xb9, 0xe, 0x4, 0x6, 0x8}, {0x1, 0x200, 0x8000, 0x7, 0xf, 0x5}, {0xe, 0x1, 0x9, 0x80000001, 0x5, 0xa}, {0x7f, 0x8, 0x3, 0x6, 0xc00000, 0x78a}, {0xffffffff, 0x4, 0x4, 0x595, 0x0, 0x8}, {0x80000001, 0x8, 0xffffffff, 0x4, 0x40, 0x6}, {0xe, 0x9, 0x3ff, 0x10000, 0xfff, 0x1}, {0xfffff1c5, 0x100, 0x10000, 0x4, 0x1, 0xff}, {0x1, 0x8001, 0xca5, 0xd0, 0x9, 0x10}, {0xd, 0x5, 0x1ff, 0x88c8, 0xffff7fff, 0x81}, {0x9, 0x2, 0x7fff, 0x4, 0x200, 0x2}, {0xac0, 0x9, 0x6, 0x6, 0xb8, 0x5}, {0x7094b386, 0xfffffff2, 0x5ef, 0x8, 0x10000, 0x99d7}, {0x54872520, 0x4, 0x101, 0x8, 0x2, 0x1}, {0x3, 0x5, 0xc95, 0x0, 0x3, 0x6}, {0x92c, 0x3, 0x26b, 0xe, 0x0, 0x9}, {0x400, 0x27, 0x4, 0x5, 0x3, 0xc77}, {0xea5, 0xd, 0xfffffffb, 0x3, 0x7, 0xff}, {0xe, 0x0, 0xffffff96, 0x9, 0x4bdb, 0x5}, {0x9, 0xfffffff9, 0x0, 0x6, 0x3, 0x3}, {0x400, 0x3, 0x4, 0x10, 0x9, 0x32}, {0x7, 0x4, 0x403, 0x2, 0x7f, 0x3}, {0x80000000, 0x3f5, 0x10000, 0xffffffff, 0x7ff, 0x4}, {0x4, 0x8, 0xfc8, 0x2, 0x5, 0x4}, {0x5ec1, 0x16b, 0x4822, 0xbb0, 0x0, 0x7fffffff}, {0x8000, 0x0, 0x2, 0x6, 0x5, 0x3}, {0xffff, 0x5, 0x5, 0x5, 0x82, 0x4}, {0x2, 0x37, 0x3, 0x1, 0xe176, 0x729}, {0x3, 0xfff, 0x80, 0x8f, 0xe629, 0x4}, {0x401, 0x5, 0x400, 0x606, 0x1e, 0xf06}, {0x4, 0x4, 0x9, 0x43, 0x7, 0x40}, {0xd82f, 0x80000000, 0x9, 0xffffffff, 0x3, 0x100}, {0x101, 0x8, 0x1, 0x70e3, 0x9, 0x1}, {0x5, 0x200, 0x7, 0x3, 0x3ff, 0xfffffff8}, {0x6, 0xc55, 0x80000001, 0x8, 0x4, 0x261e1b9c}, {0x8, 0xbe21, 0x101, 0x8, 0x2, 0x8}, {0x7, 0x9a33, 0x95, 0x5, 0x8, 0x9}, {0x0, 0xd, 0x4, 0x0, 0x200, 0x59}, {0x3ff, 0x100, 0x2, 0x2, 0xfffffffb, 0x819}, {0x2, 0x5, 0xfffffe01, 0x9, 0xa, 0x1}, {0x9, 0x6, 0x6, 0x0, 0x3, 0x9}, {0x1, 0x400, 0x1, 0x9, 0xf89, 0x5}, {0x8, 0x8, 0x1000, 0xffffff6e, 0xfd, 0x5}, {0x3, 0x9, 0x3, 0x10, 0x6}], [{0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {}, {0x5}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x5}, {0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x3}, {}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5}, {0x3}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x2}, {0x2}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0xe0, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}]}, {0x41, 0x6, "5b99ad58f4f903e37ff32d4a55e75667606cf5f2abd3d4da6b15b635978114c12970e1fce9b5b82c90f281f9c7b2778688ff297211f8c0cc3a4bebcf50"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x154, 0x19, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x7ff, 0x4, 0x2, 0x2}, @multicast1, @multicast1, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffd79, 0x2, 0x6, 0x8, 0x5}, @private=0xa010102, @loopback, 0x100000100, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffe, 0x9, 0x0, 0x5, 0x3}, @remote, @private=0xa010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8001, 0x100, 0x2, 0x4, 0xbf}, @remote, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x39d, 0x20080000, 0x4, 0x84, 0x4}, @empty, @rand_addr=0x64010101, 0xffffff00, 0x1}}]}, {0x64, 0x6, "d9feba76d2b2322226355866a95ac04c32ea4e92578c700c1cce909c26f47fa64c51451227bf3632b1150fd71cc1cedf22b6e9d0ac3dba6a2ed3a1a54de5a5402b15ea0a78c3a45de3a6a01a732bd9dc0da678db2bf8ff828b68f0a2d38b9f40"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mpls={0x108, 0xa, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x3}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x6}]}, {0xc2, 0x6, "e1b4663afa3b43fc128a58daab11d763f4385445de197aed4a01c1e032bc0c7e459898327aaf074e0ee9247fb32759d0790c172581525c198961abfdea5d17f1b9f644e4118abd2c6835d81f46dddd76afe2e06b4ee85391948de35c842baacc20f0b94cd5fa92a6de735ec40766a60fa67ac9cee7246490a3d35eaad0948c25bb74b2ac846a2ee2f05a19d1717ebec30475c4ae8370dcd153d5e8b46663d2439e5e0dc8f367868df1fbe24e3502cbf79f67a35acf8abe5e3ffddb3a5d9c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0x1030, 0x1b, 0x0, 0x0, {{0xb}, {0x4}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0xd4, 0x4, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0xfffffffb, 0x20000000, 0x3, 0x2}, 0x4}}]}, {0x8b, 0x6, "fc6f970db7a73130ee0d4c45c42fbcb3cef950f35c6a41f40c8308646ff2ba0c35059e917c6a31cd897eb760df2fe5426e64b320bc07779e268c6e4721c7872835e20d489faaee8f92d3b472bdc09565db377a75bc97739173f24c9a76a305ebca110b642d79fcd1665495cfa5f088d566db6e405ce9118707222cf0c25fc175777b2d9b2d3d95"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff1}}]}}, @filter_kind_options=@f_flow={{0x9}, {0x3c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x771b}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x656a}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e538}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x6, 0x8}}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x3}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1c460}]}}]}, 0x51a0}, 0x1, 0x0, 0x0, 0x20008883}, 0x3000c81c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000600)='syz_tun\x00', 0x10) r8 = getpid() getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000980)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000009c0)={0x1, 0x1c5cf99c, {r6}, {0x0}, 0x9, 0xcca}) setresuid(0x0, r9, r10) r11 = syz_pidfd_open(r8, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r12, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r12, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r12, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r12, &(0x7f0000000880)="a6e2976b5c4383036d32dadd2e144d8645ca00000000000000050038da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a4e0d311efee1637e85a0125b38f961918f99bf9c2c946e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853fb42fd8ac8e1e8448986d12a87b961ccccf4017f5e412331d88929175bdbb5491c894504e0f5b0426bc76475024e66c251eccbcb0d6ab73f9ad9c4afb22c02c572c241b02fa951f018c923", 0xf4, 0x0, 0x0, 0x0) close_range(r11, r12, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000640)='./file1\x00', &(0x7f0000000680), &(0x7f00000006c0)=ANY=[@ANYBLOB="00fb1504fba40a8dcda98e297dc1e143380d3a46a1"], 0x15, 0x0) syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) 1m31.160704584s ago: executing program 3 (id=413): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000740)="ef75ed25e030e26d8d83a379b8d0a7a76841b4fb54d76d6e93ec1e5b311ab072187ac187bf199b468ba8cf1f236e343a7607aeea9a6de4dbccf0a8e1e79e52dd66cdeacb52ad4f71b172fa73044a1929babf72713d", 0x55}, {&(0x7f00000007c0)="4c6d966c343423", 0x7}], 0x2}}], 0x1, 0x24048844) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000140)="0000d7b0edb3f1a34ca89929f5d700ab", 0x10, r2) r3 = socket(0x2, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f00000010c0), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f00000002c0)={r5, r5, 0x6, 0x1, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r4, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000100)=[r5], 0x0, 0x1}) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) ioctl$NBD_DO_IT(r6, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x200000a) mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) 1m30.842134932s ago: executing program 3 (id=427): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x22, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x3000000}, 0xc004) 1m30.812568911s ago: executing program 32 (id=427): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x22, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x3000000}, 0xc004) 1m2.50098804s ago: executing program 0 (id=805): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x2, 0x9, 0x9}}}}]}, 0x48}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0xffe2}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}, 0x1, 0x1f000000}, 0x0) 1m2.331820284s ago: executing program 0 (id=806): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="010065bd7000fcdb"], 0x12c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000014001a80100005800c000280080001"], 0x34}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x1b, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @remote}, 0x1c) 1m2.231916537s ago: executing program 0 (id=808): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {&(0x7f0000000000)=""/96, 0x60}, {&(0x7f00000000c0)=""/216, 0xd8}, {&(0x7f00000001c0)=""/94, 0x5e}], 0x4, 0x0, 0x8) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000300)="66b93c03000066b80000000066ba008000000f30baf80c66b80ef4018066efbafc0cedbaf80c66b8bc28e38d66efbafc0cb80070ef0fc7597e66b97a0200000f3266b9800000c00f326635002000000f30660f60a2aa00170f01ca818c00000600", 0x61}], 0x1, 0x8, &(0x7f0000000380)=[@cstype0={0x4, 0x5}, @vmwrite={0x8, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x0, 0x401}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x46280, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae01, 0x1) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m1.991615652s ago: executing program 0 (id=815): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c006000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x48010, &(0x7f0000000040)={0x11, 0xd, r2, 0x1, 0x7, 0x6, @remote}, 0x14) 1m1.976893885s ago: executing program 0 (id=817): r0 = socket$alg(0x26, 0x5, 0x0) mkdir(&(0x7f0000000500)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) sendto$unix(0xffffffffffffffff, &(0x7f0000000440)="68f71b16d1ce7e53ed278a67d57d907c63f9643dcbabae9144d82fc1b426199fb1ab412ab8b2519dae5fe2160ac6024e8f7fdba87ea25bc014a03dce964c71f5c3776529debc77da0ecb966be7648e64b0ee554adc574d8ae71d4d5f3a6c9e5eb2de700638354ca89073e99573c5fe13c5468cfa97451dcb693f183b213269cd8ad3acfe0c0e0c6d34c27dcb3c2aed7f6e0a0722a7c3ed1d01b25b51682e96740b559682c50532", 0xa7, 0x4000, &(0x7f0000000540)=@abs={0x1, 0x0, 0x4e20}, 0x6e) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x800008, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}]}) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) epoll_create1(0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbfc, {0x10}}, 0x14}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x10000000) r4 = accept$alg(r0, 0x0, 0x0) getsockopt$sock_int(r4, 0x1, 0x48, 0x0, &(0x7f0000000080)) socket$alg(0x26, 0x5, 0x0) (async) mkdir(&(0x7f0000000500)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000440)="68f71b16d1ce7e53ed278a67d57d907c63f9643dcbabae9144d82fc1b426199fb1ab412ab8b2519dae5fe2160ac6024e8f7fdba87ea25bc014a03dce964c71f5c3776529debc77da0ecb966be7648e64b0ee554adc574d8ae71d4d5f3a6c9e5eb2de700638354ca89073e99573c5fe13c5468cfa97451dcb693f183b213269cd8ad3acfe0c0e0c6d34c27dcb3c2aed7f6e0a0722a7c3ed1d01b25b51682e96740b559682c50532", 0xa7, 0x4000, &(0x7f0000000540)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x800008, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}]}) (async) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) (async) epoll_create1(0x0) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbfc, {0x10}}, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x10000000) (async) accept$alg(r0, 0x0, 0x0) (async) getsockopt$sock_int(r4, 0x1, 0x48, 0x0, &(0x7f0000000080)) (async) 1m1.922029177s ago: executing program 0 (id=819): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x100000000000000, 0x0, 0x10000000000000, 0x800000000000, 0x0, 0x0, 0x0, 0x5, "2401010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200", [0x5]}}) 46.897564888s ago: executing program 33 (id=819): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x100000000000000, 0x0, 0x10000000000000, 0x800000000000, 0x0, 0x0, 0x0, 0x5, "2401010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200", [0x5]}}) 41.377823322s ago: executing program 1 (id=1026): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002240)=[{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000800)="9155b3d4f022a4f30ea025738658207bd67f91fe21b084bd192fcdfeca3519ef09e37fe42fb8fc92", 0x28}], 0x1, 0x0, 0x0, 0x40010}], 0x1, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000002c0)=0xa0000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r1, &(0x7f0000002280)=[{{&(0x7f0000000180)=@nfc_llcp, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000300)=""/250, 0xfa}, {&(0x7f0000000240)=""/83, 0x53}, {&(0x7f0000000400)=""/138, 0x8a}, {&(0x7f00000004c0)=""/93, 0x5d}, {&(0x7f0000000040)=""/19, 0x13}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000000540)=""/58, 0x3a}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000b80)=""/237, 0xed}, {&(0x7f0000000600)=""/113, 0x71}], 0xa}, 0x9}, {{&(0x7f00000006c0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000d40), 0x0, &(0x7f0000001e40)=""/196, 0xc4}, 0x4c63b9bc}, {{&(0x7f0000000d80)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000001f40)=""/246, 0xf6}, {&(0x7f0000002040)=""/80, 0x50}, {&(0x7f00000020c0)=""/217, 0xd9}], 0x3, &(0x7f0000002200)=""/57, 0x39}, 0xb3}], 0x3, 0x2, &(0x7f0000002340)={0x0, 0x989680}) r2 = dup(r0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x100580) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r3, 0xc0305302, &(0x7f0000000200)={0x80000000, 0x9, 0x80000001, 0xfff, 0x10000, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000002400)={0x9, 0xffffff5f, 0x2}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000000c0)={@host, 0x1}) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = syz_usbip_server_init(0x1) r6 = socket$can_bcm(0x1d, 0x2, 0x2) r7 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x40, 0x1}, 0x3}}, 0x10) connect$can_bcm(r6, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x48}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d1051120000901020301090212f4146245806900"], 0x0) write$usbip_server(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001009838422a377dd05a7f0000000000000100000080000000"], 0x30) getsockopt$inet6_tcp_buf(r4, 0x6, 0xd, &(0x7f0000000000)=""/69, &(0x7f0000000080)=0x45) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x10000}], 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000080)={&(0x7f0000000740)={{@host}, {@hyper}, 0x400, "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"}, 0x418, 0x10}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000d40)={0x0, 0xf5fb, 0x30}, &(0x7f0000002380)=0xc) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000023c0)=@sack_info={r8, 0x354, 0x2}, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080001400000000008000240000000002c0003801400010076657468305f746f5f627269646765001400010067656e6576653000000000000000000048000000180a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c0003801800038014000100"], 0xfc}}, 0x0) 40.409991914s ago: executing program 1 (id=1049): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f0000000000)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340), 0x40402, 0x0) write(r2, &(0x7f0000000000)="caf03bf83a", 0x5) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="0100adbd7000fddbdf252800000008000200", @ANYRES32=r4, @ANYBLOB="05002b00000000000600060003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x10) r5 = semget$private(0x0, 0x4000000009, 0x208) semop(r5, &(0x7f00000002c0)=[{0x1, 0x8698, 0x1000}], 0x1) semtimedop(r5, 0x0, 0x0, 0x0) semtimedop(r5, &(0x7f0000000180)=[{0x2, 0x0, 0x1000}, {0x1, 0xffff}], 0x2, &(0x7f00000001c0)) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00042cbd7000fcdbdf250d00000008000300", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0c00060000000000020000000c00060000000000000000000c000600020000000200000008000d000100000008000300", @ANYRES32=r7, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x40081}, 0x1) 39.501733216s ago: executing program 1 (id=1065): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x48, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x5000000}, 0x1c) 38.646738225s ago: executing program 1 (id=1079): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f000051f000/0x4000)=nil, 0x1000, 0x1, 0xfe}) syz_io_uring_setup(0x2c0e, &(0x7f0000000400)={0x0, 0x4, 0xc002}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) r1 = socket$pppoe(0x18, 0x1, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1, {[@noop, @noop, @noop]}}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x0, 0x95000000}}}}}, 0x0) connect$pppoe(r1, &(0x7f0000003740)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'lo\x00'}}, 0x1e) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]}) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000003700)={0x18, 0x0, {0xc, @broadcast, 'bond_slave_1\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff033}]}, 0x10) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) connect$pppoe(r1, &(0x7f0000000240)={0x18, 0x0, {0x0, @broadcast, 'tunl0\x00'}}, 0x1e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x0, 0xffffff80, 0x178, 0x3b8, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000100", @ANYRES32], 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003c00), r0) sendmsg$NL80211_CMD_SET_MPATH(r6, &(0x7f0000003d00)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003c40)={0x5c, r7, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}}, 0x50) socket$pptp(0x18, 0x1, 0x2) 38.57875585s ago: executing program 1 (id=1081): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x7, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001600010000001800950000"], &(0x7f00000001c0)='GPL\x00', 0x1e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ffff00f4ff00"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000001bc0)='4', &(0x7f0000000000)=""/10, 0x2}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x200401, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361"]) umount2(&(0x7f0000000040)='./file0\x00', 0xb) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000700)={0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, '\x00', 0x16}, 0x80}, 0x400) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x90}, 0x1c) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000a00), 0x80000, 0x0) ioctl$CDROMREADTOCHDR(r3, 0x5305, &(0x7f0000000a40)={0x9, 0x40}) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000200), &(0x7f0000000640), 0x2, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c000000030a030000000000000000000200"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x4, 0x7ba, 0x9, 0xc07b}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67100000000000560602000fff00006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffbd35010000000000840400000000000014000000100000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b848b00ea6553f304000000815dcf00c3ee7b042d1937ba52037fdedb2150e506849fa3220dc2618876ad2e9c360a0ee1918c30b6d71f0212feb0cff9fc67357d81b2cc1a9e37d7b75c020b070000003eb22062bafaca036d9ec7db6671573e202e0a92ee4ba12b064981cc32d1ac0b9ecc8f604dca20563e1c1e7624cc3b88b330ad416c4c1d8c60589b6445a4ffff50df4d34bc5847bebb943a84cb569569317c81ed6cb53fed8d882f733ccf663a66d78cfd30dd2440b7572990a075762af9653b52bb8b00f511e5082a9a3e1ae99135a85acd77069fc5c3cbb7cbf368b574d444cb43e44d16000000000000c28a9b1c5ede82c2056ba9675b39b31cb18503085c573988ddff334ebe6a3acf5508bdebf87745ef259cd6c6ec63a2c8157fa459832e0a96276cbb7e7065f04d31a5c539e0139e5eb97885f89d290e2413"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @flow_dissector=0x11, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000000)={0x5}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000680)={'ip_vti0\x00', 0x0, 0x10, 0x7800, 0x7, 0x8, {{0x12, 0x4, 0x1, 0x38, 0x48, 0x66, 0x0, 0x5, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x13}, {[@timestamp_addr={0x44, 0x24, 0xef, 0x1, 0x5, [{@private=0xa010102, 0x3}, {@remote, 0x7}, {@empty, 0x8}, {@rand_addr=0x64010100, 0xa}]}, @generic={0x86, 0x4, "c887"}, @ra={0x94, 0x4}, @lsrr={0x83, 0x3, 0x4c}, @timestamp_addr={0x44, 0x4, 0x29, 0x1, 0x4}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x16, 0x12, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000009dffffff18490000ffffffff0000000000000000850000005700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000057039afbd0850000008600000018120000", @ANYRES32], &(0x7f00000002c0)='GPL\x00', 0x4, 0xbe, &(0x7f0000000880)=""/190, 0x41000, 0x68, '\x00', r7, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x8, 0x7fff, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xf, @void, @value}, 0x94) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) 38.401344156s ago: executing program 1 (id=1090): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x100) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000080)={0x1, @capture={0x0, 0x0, {0x0, 0x1000000}}}) 38.358053437s ago: executing program 34 (id=1090): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x100) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000080)={0x1, @capture={0x0, 0x0, {0x0, 0x1000000}}}) 3.981166284s ago: executing program 5 (id=1657): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) r2 = io_uring_setup(0x30d7, &(0x7f00000003c0)={0x0, 0x0, 0x800, 0x800}) clock_gettime(0x0, &(0x7f0000002600)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002480)=[{{&(0x7f0000000080)=@ieee802154, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/121, 0x79}, {&(0x7f0000000440)=""/79, 0x4f}, {&(0x7f00000004c0)=""/188, 0xbc}], 0x3}, 0x7}, {{&(0x7f0000000580)=@x25={0x9, @remote}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/1, 0x1}, {&(0x7f0000000640)=""/90, 0x5a}, {&(0x7f00000006c0)=""/233, 0xe9}], 0x3, &(0x7f0000000800)=""/117, 0x75}, 0x770}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)=""/217, 0xd9}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/106, 0x6a}], 0x3, &(0x7f0000000a80)=""/132, 0x84}, 0x8cc3}, {{&(0x7f0000000b40)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000bc0)=""/109, 0x6d}, {&(0x7f0000000c40)=""/252, 0xfc}, {&(0x7f0000000d40)=""/221, 0xdd}, {&(0x7f0000000e40)=""/39, 0x27}, {&(0x7f0000000e80)=""/234, 0xea}], 0x5, &(0x7f0000001000)=""/61, 0x3d}, 0xc7}, {{&(0x7f0000001040)=@nfc_llcp, 0x80, &(0x7f0000002280)=[{&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/184, 0xb8}, {&(0x7f0000002180)=""/233, 0xe9}], 0x3, &(0x7f00000022c0)=""/112, 0x70}, 0x4}, {{&(0x7f0000002340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000002440)=[{&(0x7f00000023c0)=""/104, 0x68}], 0x1}, 0x3}], 0x6, 0x61, &(0x7f0000002640)={r3, r4+60000000}) r5 = socket(0x40000000015, 0x5, 0x0) recvmsg(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10000) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000001c0)=""/65) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x48, r7, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}]}, 0x48}}, 0x0) getpid() 3.751723856s ago: executing program 5 (id=1658): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000440)={{0x0, 0x0, 0x80}}) 3.751310273s ago: executing program 5 (id=1659): r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) dup(r3) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x9, 0x1, 0x6, '\x00', 0x7}) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000), 0x2, 0x0) 3.571663448s ago: executing program 6 (id=1660): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210027bd700001dcdf25100000001800018014000200776c616e30000000000000000000000008000f"], 0x34}}, 0x4000040) 3.570193609s ago: executing program 6 (id=1661): sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000140)="08001ebbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0xc800) 3.491714214s ago: executing program 6 (id=1662): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x3f, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) 3.491566869s ago: executing program 5 (id=1663): mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000440)={'ipvlan0\x00', &(0x7f0000000600)=@ethtool_dump={0x3e, 0x8cc, 0x4}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000a80)="93378e62cf9b48cb59638401fcd1730172853a9fa8952a996042ab60ae29f1c19f0f227be6bf0066438c82304f54d5f8", 0x30) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x7ee}}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffb, 0x3, 0xffffffffffffffff, 0x80800000, 0x8001}, 0x81}}]}, {}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x60) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000990000/0x1000)=nil) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) setpgid(r4, 0x0) getpgid(r4) setpgid(0x0, r4) open$dir(&(0x7f0000000100)='./file1\x00', 0x400, 0xa0) recvmmsg$unix(r3, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000680)=""/200, 0xc8}], 0x1, 0x0, 0xffffffffffffffef}}], 0x1, 0x21, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000100)='pstore\x00', 0x0, 0x0) 3.491234527s ago: executing program 6 (id=1664): unshare(0x68040200) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000000c0)={'raw\x00', 0x0, [0xffff0e5c, 0xfffffffa, 0xff, 0x1ff, 0x8], '\x00', 0x1d000000}, &(0x7f0000000000)=0x54) 3.420528249s ago: executing program 5 (id=1665): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000340)='xfrm0\x00', 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000140)="08001ebbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0xc800) 3.410577836s ago: executing program 6 (id=1666): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route_sched(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001600)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0xd, 0xffe0}, {0xffe0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000814}, 0x8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/275], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, {0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000d00)={@local, @multicast2, 0x0}, &(0x7f0000000140)=0x4f) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xfff1, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x29, 0x6, 0xc, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x7800, 0x8, 0xd, 0x80000001}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r9, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x44010) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000014002101000000000100000002009100", @ANYRES32=r12, @ANYBLOB="08000200ac"], 0x20}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r12}}, 0x18}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r1, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x2c, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000600), &(0x7f0000000780), 0x8, 0xbf, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000009c0)={r1, 0x58, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000cc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="64020000", @ANYRES16=0x0, @ANYBLOB="040028bd7000ffdbdf25150000005c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d6163766c616e300000000000000000697036746e6c3000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="14000180080003000300000008000100", @ANYRES32=r5, @ANYBLOB="2000018008000100", @ANYRES32=r6, @ANYBLOB="14000200626f6e645f736c6176655f3000000000500001801400020073797a6b616c6c6572310000000000001400020076657468315f746f5f62617461647600080003000000000008000300000000001400020076657468315f746f5f7465616d00000044000180080003000100000014000200687372300000000000000000000000001400020076657468315f746f5f6873720000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1800018014000200776c616e3000000000000000000000006000018008000300040000000800030002000000080003000000000008000300020000001400020076657468315f766972745f776966690008000300030000000800030000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000005c000180080003000200000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="14000200626f6e645f736c6176655f300000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d726567300000000000000000004400018008000300030000001400020076657468305f766972745f776966690008000300000000001400020069703667726574617030000000000000080003000000000014000180080003000100000008000100", @ANYRES32=r14, @ANYBLOB], 0x264}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 3.191302768s ago: executing program 5 (id=1668): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x200100, 0x0) preadv(r1, &(0x7f0000000e80)=[{&(0x7f0000000b80)=""/70, 0x46}], 0x1, 0x1, 0x5) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0xfffffffffffffe4e) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000000)=0xf, 0x4) recvmmsg(r4, &(0x7f0000008880), 0x483, 0x44000102, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) mremap(&(0x7f00001ae000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 3.113416664s ago: executing program 35 (id=1668): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x200100, 0x0) preadv(r1, &(0x7f0000000e80)=[{&(0x7f0000000b80)=""/70, 0x46}], 0x1, 0x1, 0x5) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0xfffffffffffffe4e) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000000)=0xf, 0x4) recvmmsg(r4, &(0x7f0000008880), 0x483, 0x44000102, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) mremap(&(0x7f00001ae000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 2.411164284s ago: executing program 2 (id=1677): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020}, 0x2020) creat(&(0x7f00000001c0)='./file0\x00', 0x16c) openat$nmem0(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xfffffffd, 0x4000, 0x1, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x20, 0x7}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a3c0)="61ddaf21c1282a5a6352f350c2f614ede5b0c406f5488574ed6fcb609ce20f648ee274c8dfeaa625b1fd332f70f776ae0b6e3f959c24f3876756c20e05c82079387520764f2446820d53242898a90e51c5b68297e39b7fcf558b450e9608326c3dc6704a054216a8c6f0d689e5eb6b8564854376910eff147682d2378b9c5b95a626493ce628b1bb6b524ed7e90ebe6eb0246399eac6d624dcf4e824be2de9c1d5d06eab13f2770577304eb676106fd9868a030192067ac009482e03a817f1abd909a94702479fe30b2594ca60b4acc37148cf04e8c0e76dd69e29d243596f8174129ac6ab9dbb79ace8f0fae14234845725102a027d4163f97f3971d207500defeaa2c7318f7e82e591701f9d3f78592ea7ec28806a53278a35a20251eeb2735fa9f37bf0045b5e6faf5f751c7ad31d8426be7b09027b2092f49247159a33b580d2691ebf00797962168bdc368f57282ce5b8526eacb80952ffba771626c0016b8a010546f0b4daf470814cee0ea418b76331c34616cea0459dbd1f196364c99e4a47bcdd64b518ef51833e6f8041fbbbe86e808bdbade7009985f2c4d7ffd76a0e7dc7d542bdee1d136d2096dfa997f98ac83c6341b306a3a8cf81642566d7777480d4dc61b0182f0d418ce95d74c9aadb182326d6671412a1f0c62c93a0ba873ff5daa4ece4b2fc73ed5b02b608903702cc0cd25cbf1707016a542fafd6af098f9737304c726712c8243dcd5eb15c0996e9e03dd741d519cb3e86ea214e20408c2cc5ea607585f1bfd268ba3084ffa69425512571d263fd1ae49b488b2964bd3e78943122006489cc22191dec2900a7fdf798c9f683461f2a7b940f4112b805dc077a7b99071b5b454f7c6d2b13a6b23091f74ecc65a24ac0d11e2ffd7332fb2b2b11aeec3c809d78cc2e168f126f38dddfe3e1d0ec1c6fb25f880690f97a70dc5fbea5d25dba3b24c01d9bd228c58deca660625511127a62220429c94be65d6ad4ce7e79e97af67931b46ccfabca5dbaea11e2dc76279b0244cc2845f31beff418fe4bd892d3676079d9d4eb0251dfead9e0a07a11c0a7e597ac89ec77de60a5f6e0ff4a62374856b8e1659e885d3a0d90293daa0c7bb041cbcd54bf098b66b2ddec28dcba4cfbad969e3b97e4bf680f901485d1cd4b231a9115c22ab2f911415ad0efe0eb7f4bee15c6de7d0f818acd687a117286f9e3c33df5206df918ea4ac52927487968d88f4a18d4889a4060f20487e4cec19250fe48a16b1f9f7250a6ab81fbaa2ad451a936ee98021bf859b9a635132a0dcf7530c0e2c84a459241a1fc9fe45b4a4f32fa8e95185db92660292ece6b5ddbb0b9f69bd7435cd4944f8ff2ed51172f0683fbae1013cde202498f2e1be54d1a2e17b3984b17d1994915a477c87697f465781e41b44c6a40ae035e75a4d9f9c0926bec533dae225e692ed315062e8c3283716929e25a22b25105e018d81c07cb7600d1bae16d8beec33c88f1cdb52ac988b4677ed604c28ff1cdeeeb74c332dc526cff5ee935016984cabf117694cccabae944de4d2d2daff8f281b6434475b52c1910210598c684da99c108000a53d2ca03afd42b0200691d92341616353a22a8dacd8cb7eee85953b251236603d2ef1e450675f8d0f3cd0e28ef36457f79c267d836d14ed758148e979b9749ddcef14aec903939c69567a1697aae8f9ed72a16be0267a3a967727937f609720802570287c4e08641b9b7b979c6541add0e8600dd2d75a1dc0822ceb7a7e4e1afda2940d127f488589963b46417d7a7474545e5b08a621c1a7637b3fcb62b0aee10d999505907bd14033370e391f6192ff7d718e1db3ef861d30b2d477f11cd45ecb296d4babcccc34901165e3fcdbef6fa1ee478a97f7d21dc5562582d67c448ae352d3157d83e8ab0122a2bb056bdff8043a91b8f3abe4d788fe741483997a8e3fe126626a14b4243d3ff8ada8dd555c95d5e30b68cc053dfbbb61940cbb552cc1fe211ea5ea13cbfb6a577cde339282d84e92f866145e7b1de4d5a1705fc24fc8843f1a69f4c604adf0d715ad88c6a4ac80a35375662610e0ed07af9c4c76326716a77b106ef87782804ca353eaade28a1ca522d706282ebe48c0b23fd42b2e0297f5997d3aab40615f143e868c6aaf920bc827224946db3e3b3e65ea66dbfa5fe6c45dab930877852e86df251024e4ae46edde04cf40f2b3239f4df40062cfddada61700959deaeed3a44fb185ce51685fcab793184435b3e668e7d80820a613acde8d61e24571b9de7ce4581a4751d70a28e8d098660e81941fe40b6844a3204b512457194e100c995c75921569f735afee321080ed6310610887ca842001f5112c5af8c9083e3d088a404b48ee82e1e8be16fd493a2a643816488447706f3e86d2d0ed48f7397aad0cf105a4a71d928a15413ab3813e42478cf7a5be2e03d15ccb90a625863cb2ca1059110f90186cf4c370469f4d7e1ccda56ed9c427cce46e7d1c82641554ffa0c7c42697cbc754702b62be5ab03c995ac8cda3145959c440c4d6ead7d6398faf189de77645a05a54d6c33c9678daec6e5ac0048f91e15b2fdb808d712e662007da5e228ddc7370f575723a0018a1da70fa27e6624c8c75047eb584bf3399a8fce999df94f6fb54fb6c1fc954b1d899459fcd2f459e57c214ae590513ed268ed2d1114d8276642510a2eb99feecb58d8476550553a9f3d1f04c9bb442dae6dd84628b60cc9fd3c1e5c4fe3b9ad5f43b5d06e31ba4644f7499c03fd68cd2207027eeb1908a8022d70eb8fc8f55fee7be7e3af525d4fb1ab3e9b458246cbb5371e8145e1d04762c62068e03795a5a6b48d8643a83927c47000b7766e320e0ef2339d5423813e8d7845b939a9567745f6e2d6070764669c905ea77943a31f0df838a5d046f25d516bb654336f759c05dcc0febbbf1d214382a76fa09aa32be9799252f1d0fd8bacfe3f32574fdc82c6ed77f1c08d4aef88c157cbdac947346e3e015af60125d3e36ec6bd8dc5127c7ab1ed773c8beffc9dba99bd9fa1498a5a49bcce4ddb13fb85e256fcac569aab1c815527710d2c350c7cc84db5a7eb243227973fd5e2d1d8450077ececa0d96884c90ac0146d37b13f1aacc1eaddec3f0d475df6ceafe73f9076fcfeaf496efcae22d09745453a5e4776876ecfb1d004361f82f76b2bfba050d0fd5060f50fd74f9908a62649955e2f90e4ac4a4f0b29484cf80eebcbecb12db8586ee58443c181a59c046c657ecbb067a1e70d4c548e8b291a5aa681624747d9a52a6184a5fc82d824d9ab6156ec5fd73a038b38d86974e7a89b55a95b609e12c98f4168c0e48139749fce33397948224641e9823588858f82247d9abf8f84250564189676325e43944e888cef6918cd2b842b3a42751475a37656b3f04a02430705f16908d638212f69cf96d5311038e00e048468810d1cfefb0a9aeaf46d1bd31f7156a97542d9373abd3c069aa096486244389312031398a35e0ebca6668ed06dbe80290ac9a2a15ac9c208cdbcb2c1e18f008741649b4fe2ac1e6ca0a19980b6276fa09c5c0e67e748c1669add6fd4c70ba522be4428df305c3313929a4eec348f03fc6a6dfd1d6740a61230a977555b6b4d5165c98323871d750e80f9205231af03ab430a720dcaad03d113f38574ebada74f5b34a05a6abb7ba9b8b280401a3a21dd7e1e026deb438ed020d09fc93ffd7376ced7b5d6c9c35072c7f28ddb7fea3ffa7b7e6766892be2015c20e2cc7fa8bcb5832b97e964947ae940d5ce215ff3a0d74851d5735f3573d533cca9b3a89f9494f150cb732139cc2282304f6a375ee1062f6f850ebf89548973b6c5e7aee8b98b18b443332d3be20fea086653d52756b40ec4f08ad52f4d0a5a61004c700f070b83548670ef36dcbd8daf13ae6d382aaba3c3bac3c1efd953781d69e7365e1393d2c3f34d3dc91999ab9a545bc167e50ea6874fe8f49e93e452ad4710d7127c430ab2caf3ec1627e6a2a6a57604a5da490087991b68cd58d456f6818f22e38007e1628c6a78f6a8a321e3f0d5d5e1bc7f9ef53c4780b451dad949962c8a6a464b25cb161159b72f40fed8280daec34135f77373b9432f411b232e9374e9cb3fcd85a599c20d0b8e294835c60c2e034eb8385c507095c6eb6748180fd1ad97cb0a4b2ffa70c90891d373459538f4106078162bc46b425572466aa4769153b994698bbff1a98b5948e40d98bb2900445eebe95c4892bcb92b4c28b734ea7e106accc9836767e0881f970c9d69063dd918de44a484ef3f860b0dcec58f22b3f1a0abb9c0c2b6cd5bdacdc194f188588c0888d6abfa2d0b79d0b33a41c040db818d404ad120f346025b3a4be17eb5ce583b860cad5424bcaf1ef4a255678706052c1cae9cd77cc78639f975f07737b791831c64f0c974b23a5c428091b8b8e17a037ac3c6d56da4b4c7e4752736cbbc8d67b1b823e87d51ffc95fe9752e8479fc15a6fe7b96fbd7b93dc2144381c424ec7782d7f8b2637010dca11ccdaab1bad652a9ecd8b6ba2c116fa419c8582a0ccf754a294d9de5b457d9b1a4120fd53667862e50cb028e2f92c73a38f77ff57c93b410e7f3257bd56e5aa504f0643bd2bcfae2168046ad2737a36b21f6d993de1fe7b31e9ef7c79d545e5364b65011a6d26e0a2f1018a5280ca88d3d1e30c68195f8cf1a3ece813f22e44d83867c9f711218203d1adf2869ed89babca094b8def7ae0abd0245f522930db59c4b2eeec4d564bfdb931d435a986daba4b604d5bf30b1cfdf6960986ba0dab216dfd7ad95ca2555e0573d073dccd407ddd5ed7920c788aa0213aec90b38981a91bc370ede38d171648316d59478e66c068eec33295345162e9896ffc82f8d94b995d3a3a7a4f459e564632b5918b4fd850da380937655f19e2820376e7deb48edb0f5e295521a9a153f5ef69de397d88acc20be99779d7ea2c38445bd70aeeb68cc6c68c1bc603ab580b632866497a3dbcbfd933e2074323f66f1db73129eec8331c8872aa92a33e2180fc0cf2e28d198faef4421064b8435f37b5bfb9b531332b3b0838015fe848f0ce859db8706f2e53fb07ce4d0fd017d85ac9ce2943ab172f08b13c948c3778d2469257d412b1a5305526cc8dcb4a8645f825cca66a63b7134d8b7c760db6a8fa21f2df3456e9b460867303a9d53fb01db8548800d800e49c08c8d731bbf9a642206f4cc6673e4fc0f7106661abfde1eb8a8d384b26d88c16d15f238556ff4b205145d860228038430cd8a342bc15849afd81666b55b358e3ec584fa96f119b77495c4ec36616070237bb170fc04d3befebdaff66643814eb8519abaaf1e9bf939bf5bfefa33c32fe9909055393e383268e426436305b370867db76991ca600bf6211dece3b6b7b4dc5cd4569ff4538080fec318a9e0cce4a8cf26aca8359b503781aaedc2d58b0bb1a82c163425e678b488bdc7362d0be24a7a8238deb31482c332d4d385005ca84c836933b0fce21685ec067adb9490d1a416f83e36e6e3b87d05ab6973f4e359a1fb5a4dbf2ff6a85d235e50d893f222c2a7d84252be9015e104ee3609c83cafdd796a8422257c9ca9172888d91c0f2f2afe36dccada9a713cfc026cf25e113fc543d522e9254f5e129d7ffd61b43ee25bdd63545a81a2b086b616e23abd380a7bb8e54b8341f42c663da1fc8451f21da7315aea416e6856d4d45128dcd34a0f3aeb7aed00c54c348f38888b8c8fec59028d38344a92249c95943d3ff8608bc11406102ebe8269892b2e909bd82ba467aabef127713a0993df779ba7b0816a990566699e4926d75fd47c3f1b9cae3e58771a6ae8776fdb672ee70f215fd908d6dfddb8a2ad10f27b749fa6e67171848d70d3ae135ee3defb2546bb35a3ad2d8ac0e838ff8abb1cd733d80047bc8626960a257b704b43bf0390b7fee656ca7831d23e8ba940533c16c17de68270bb3b2d3bf142b34899b3a106cf9569b4f46f148297c61390733ff9f399c669122dd045187d0a35fe54b4f17e4090c56cfcfa47498b1701a855827d35cf3624624906f997092b010b1da616325a090770694d028fae9874a91f8d21fea85804956594b8252c24d05df5775148ecbf8ab38f131c268cc263f6a2dcd375acfbf39a2defc9869801a720d83add1ff01ac7fc389bc7e35c2eee2b44f808508e6e02ea31cf23ea9f2118bce520101e307b394e5fdd28e90870a327b0a1444b552b7227134a8e5397474a6c0e1ce89d918c899d292660ea44294e07b1645ff9e85f65156f92d55ae795e134250b5359dec6c31d4892d83f363cb09632bb738c4e7f351361adc3ab54776a5c55d6ff4895516c82cc6387b1a424f3af2bb0398d0d4a71fe44c5132b7ad5fdfa732bbcff9f02395df587714072caca65f5fc1215dc9068585e1fbcee22cd69c0386a6482230540ec9ff8e373018e4e2788b9502e5be3e3247f997800c68a634e4490c91d01144a63a7a55afbfa4f0ef5ad538aeec8ea203ef2716ff989e11ce4985263898b8e36b0d3386b816ce484e81404a01ac0ed9f18ef5643f93d46705c949acddca2b74ad53441090f658d22dd081aaf49a7bb07c93ab8dfb5213cba354b4d37d9899423d3b3d45e9463c506ccd69747162d2d64b54291d11fdc6c9b89114543d6948f10e68008973cc485df080b84e0d098f962715ba009f2aa1fb41f7199ea5b9b70df0e1c378da164f7257b4ed04a9fee7cc2de065ad35a60b882d78e26d5804942ed1f2bcf85fc63795fb9164a5f94ffe6bfbf838c9197bce2160d24f88dca14c3e733d18ff1fb7acb0ebdfc4e2ce268a676fb27cc34d4b6b5d7e8db29c020c4c498d793931b0fc7d91ad68d3d8463e36a267833edbdd7062f4d62aa9fd1cb7f8e561d3939bbfa118b897167168832c0aff17fb6cdcf75ad6ef0a18e2b37fb24c85d0866f2e5f191b2ef8fe9b5997635a74cb06aec67363435eb175559629c09316f96dc56de6c7785335d121fc2e4d47c2f50c37c5bf7950ae5de07b3b73830f4299d5009742d4eca98df821a95d244967a42b5a4f3375edc41c5281ca3104bd247c14e838912634d4764c1b6e440860d98f258aa8a24e8af643497366edc2b781aec0567451884aec0343ced1fbddfae585db1012a6d9245ad85c56aa33d5bc30307515bccc8d36d7848c99884db4a49d748e1953b4673e4286393fc97c233d529435faf7ed9f9aa64029814b7cd6a36c3dd9ca7be95e5c4d48e024a3d23651cc81c00a52e2fa2d094435ebdb4ae5be8e6b53cf628ddc87a4bc2dccc98ac38019c91789a40d103fb95785bde5992de08ecdca1dff2ab7cf5013420b3d29b8a7f0af455c4e86285422b986bdf482b87297061084b50684e936acbb075a84e720a2d03892efec7dc1af2fae2a7ce7725cf0d19f39403b273be262c7a4ff638898f6caf84bfb358c580ba4adfd8664bcc539b82792e39ab4f1d8393b1f98f6dd5aae14bc6b73feeeaef7c3accde4d9b098f2d5c7ed68621851f37d27980c4b44df095d865493eeef2724db90aa53a3c37bd345ea75b4e76e8878deae1b4f3204c2957f3806e36a03e995f7633de9b863ff6b3309d330ade917c82f3286d9500105755efac22a4220f457debd861df3c0925dc4ba8913cea12b8deb93cec87c972421bb8442ef2a2a9d638471108ae0152aefdc45eac6ff786dae370a21bfe1e5777df8070bcefba8596cb8f71a516b505b1f83de1129cee91d3a4d6383daac7b9de46a99bc34661f3d805d2e138a769fd6489e4d058a3ab35ccbc81251aa2f23f83d7740bd8869465634e10e114c62bdfd640d69cebf6e78eb0970fa442746f7c3bea77d8589ab131827a95b274dd63ea04fba4c822aed4f8d0cd83ed83177d90332c7e66f103d4eb1dffb9ec0f52094bc7324a7c59819dca343776d6adb6850e7e7e83e2316db1c32feb4ea1c6f47a2ee41bb09d0a931f4fa3cdf7ada2bac7fe5ae2b997e24b8f8c52b0bee1482b74af68b407f0d78f3767bdcb42557c9f3aff0c2c2ea7745a0f588b00a751c1c8d2124a8bfd4d7f756587d239cc43a8cae1d67cf15c73dc8569a1ebdd7b8559e969541a547c272e52d57e5924ced9afc87cd2cdcdf8e30f423ebe26170393ecec06afa093839fc3a10fdc3f9ae19e79e4df6a9af6027e1129a7a6cb4517607eac80fa2b5f7853fe84028a66976ec4b4af50abe9ca959b844d7b2ab94903efec6dfc99ed9df2c329c0e8449b4d2a0a5bc2506d170884d2c6ea8aefebcaaf2abbfa3c4d9e4d201369a47792124a7909e247dc98b777b60a30b1461d857f164e3df983d9a900f8b11bddbdcf47c29d483033c9250f30e268ddf97e0ecbdd99d6fb3dc4562bb75f8f1e03d1aec424293fa5fc786444411a512fc582a9b577d5e88fb9d6f7346bd489f6eb4296e576e25c45e114fb6a3d0b6b831fb4ffe7486daadf2f0ad78aad8f8f7eba17e524de06e81a5a97d0a90b019fcc51611afc45fd30b8ecd2a2ae19758a1ffa55f79cdf53ef1bb55e49cb58d8b291664be61586ace94c7b378d685e54aeee09af828a3ce7335f9d03f8daabcf3543b8099956f60913db6ab401a427aca83772df4fce9081409ab426dae09739b50a8ab4c04a6d2e63b2c4c0b5f7fbd9dc76722057ab6cefc9ccae3abf251259f999fe09dbe1232b8ecf0e26b3d88d13a1001840f6b5942359c3ac75bfc321d9504bcc0e3f4add741125941ece20b4f90416b1f14edb4ecb1ced79cef883aa1d5193f3efeeae7e103891ae4840978fbe74d2cc90b7e02b4d839f15c75576b74e05f7a8af71823317a851bf0ff9171bdb16ffa36f57ccdef61065a62d64ba434571db0d476995e2bf4f148f0a6276b2fad82f03b91fe53f9a7acff3ecdfcedcc1eae42e52e1f7443114b8edc8a9d5c8a55727f7ee1d20e1ca55b42e51b47fc4d2313458ab9a5f05c1411dc8f11e4c57d3fe87183763bd24cfb8dc583c82ce9c0abbeb76310666d2236e2ca164c66e6336fd571967f35b2b0ba847922f5aabf97aea061d19eb9cc3cd6e764da9651f9e66577d9c8870734fe8e03d20ba107e6e2997ef7c42f940b88410c6bf46635cb5e402113411a98c75e8cfd3760235d7a486bfeea1a1dc188b7886172ac66d45a4bd87f60b8502382888f3806e47ffb74d9aef2519e91536f7798b7c22ee70566e686ae2b577f6341f7c47dc1ae41f2af983b80f7db23a3466b4f14e2afd591b19d36375acbc0c8ebf21654c8cf44ea49103299eb1ac6e96bb282a33a6ea204aa266b7d627c53757daa176f6cde932e7e0342977dbf7d5668e8ba984bf05dc610e5450eb4c3dcf7965eedc9b168a9c274ef6a050e93234a9bb5488a5aefaea9c442729b5416dcee6bac23f238bea2f1f4615c863a3ff7c7a081558237f2097b9ffa869f4b69fa32784f62c0b7a458411efd3a9108735de667c63c34af2225e382a17600acecc118ac1f81ec5ed9a26fa966bee8dc6f55c17bbd89a94932bf930b081fd310ef94c490855453551e9eb809e9d568500e6662564b65701a721208dcbef9a07650f9faa5a503d37f2e1b1912fbfb437f1f4c2d4a830a2dcfae905d323fe9a6a01cc8d88ff82a26a1c228103396b6756659b6a8a9ff8b31494cd8bde6205d6f62e698d9ae43ec740fafc60d798a85e5f8598486b6e82f23506c6004ec2f733cde633c3b45d9ef14fb223c020a67f305e33b5d3b239b5026ca679004e212725a4090818734435247b918dc9c65d2f0c580722651217ce7a2dec34c0f8c49e3dc051c01f5d445dca8675339f5c8b30ddc19f51ffa9e9c513f5fc9892dbe5ee5bc148ebf3033635401c8675f0fb43e503d73cd432e3ae2f25bf29b4088a3193c208f5ba51882364202dc3eed6f3ab9a871b4afa960f1776cc92deb7098ae6f61af30e715ab60d44f378bbb79f8fb663de164a5f4f582e6a17fd7e553e677632d1e8489a8138bc780418de30c0a95ae3ec3b0cdee51901869acc318a6725c0c06273dc67d393129278225b9384d978512befdf449f85146fbbe92e6b52cf40028b13d77ccc68e7b65e0c1a25f1f9d17b06b17f216729684fec1b4c0c3fdaf40af5dd1a3f4492d49e018f60f41d91524bc5d750789fd39b6e69cb66b1d86b2c1405331e3e793fb38dc447161f1ba02cee1519b72727aee9ede2898c5195adb0dc1c29fe6eca6598c5612a7f98bfe0d1853e44f47c94ae57bfdaee16711135226c9b44440abbeca5ed53b0aa58d34fa0faf766087135599d7b88a04d5ba7d69c148f3ebaee211a06438146d762c9f85d9007a228edd7d71ad18fe69a1af0caa6176eade25bea11504c2f0498a450d4d265bf97dea5b23c10560c9844d761702a5814fb355827ed6f46bcebb61d0a06c21746625a438c38496a941f447c2150c9125990ff7feef9d551a7adcbe0fd828ef4397c0799507599899259f61ff914f76be6077d0daa67ac0ab9093ecd0f78455b605a7885cae38a88b2955cecd37f972841f440de12831263ae64c7c78970138a738bcc66aae8c1a5c3ca0e166dde9860bbfc4c7bdb854cdb3d94ad4c723b2de03a50dfd120041a9b3107a480e7e108f729484d0df0d8e47c3a6b7ce0376e642ec5a267a91dd2bb1f1b3fe56a5097edddba482627cf79b66801fdd4ecb733067ad52e8fb9970be01a397ede6a3eaee6b8524f8e1cf00e0c5aed165b8b1533afaaeeaa82153f9840760b58b8a12e8168956db4522f2dd5a13183cf861acb0c0bb2735ff5cb683f633bd99ba2bfa7f1fcdd0a54d3b4fa9a7d3de250d7e40bd7b3a829a4f04fd71c64ed4f2503094773b45fdd821688d10ced9da17089b7c954f7e4a7f3e56226abee46d7eb93a6f3d039a7cf3dc14c18dd7502aa0e29e1c54bd1c2182138e06326f3cd4cddcf1997c9739f9e4a0899ce919f20b2def0ff103e5a9e123a1db4a544d438f789a0ed26664523bd55902364f4a21b2a92fcc111392dcdcf7ac0ece18c474d47a11d544b64836a62e3e1e0e9d15f8066315f000b7d8603f772704ed5b96798f28e4f699a671023a4d49c5a0000d14145b9179e4b0f3424fdffff22ca48cde74904876cc037a04aee32b53d02e4869427b6b18bf0ce7b5ffb75268788ca5029d2d12b2df068219af12d4e17e56f83e581b0fd6cb7048204803342ab8b146b0c237d6ac7aeb2ee21550c00da60286994f1e7ca53de19d874f7bb27c8c5e263fa350448ea28f4ac0cdfdc4c0d5096f2ab328d089dacb5e87f0a29814e8461470a22ee8a4a318f5e2b5317a027da39789b7b17bdcc9b26bdad1ba5e4580f671a3179a9fde91408aa41a68f47c71c524f8e413557b0656cc2a67e36da5a07ee7c55b0877ecf41a8616ec20f59d370f3eff6b10e68a6c55feff6f52f498bc9ab77224a7548ccdfa3de41ff44ee4bd32295a42d9fdac1a4c8484a7383a6bd5e39cb0249e939fe7f53075d6d4a54bcfbaec50853c5e4bfda256665ed56dcd20fbd04a1d40c200223ddac36a7229df6003f335227a6bde261f7e2f7c980e7e522c68abc63601b3b1a9ebdd4530e4f33b9986f582300", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8000, 0x8001, 0x0, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000005c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000140)={r2, 0x1, r1, 0x4}) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e06006220"], 0x9) 1.821489383s ago: executing program 4 (id=1681): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x80000000}}, 0x18) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x1) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x74, &(0x7f0000000180)=""/116}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000880)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.761534397s ago: executing program 4 (id=1682): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000140)="08001ebbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0xc800) 1.691241388s ago: executing program 4 (id=1683): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x7, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001600010000001800950000"], &(0x7f00000001c0)='GPL\x00', 0x1e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ffff00f4ff00"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000001bc0)='4', &(0x7f0000000000)=""/10, 0x2}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x200401, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361"]) umount2(&(0x7f0000000040)='./file0\x00', 0xb) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000700)={0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, '\x00', 0x16}, 0x80}, 0x400) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x90}, 0x1c) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000a00), 0x80000, 0x0) ioctl$CDROMREADTOCHDR(r3, 0x5305, &(0x7f0000000a40)={0x9, 0x40}) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000200), &(0x7f0000000640), 0x2, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c000000030a030000000000000000000200"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x4, 0x7ba, 0x9, 0xc07b}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @flow_dissector=0x11, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000000)={0x5}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000680)={'ip_vti0\x00', 0x0, 0x10, 0x7800, 0x7, 0x8, {{0x12, 0x4, 0x1, 0x38, 0x48, 0x66, 0x0, 0x5, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x13}, {[@timestamp_addr={0x44, 0x24, 0xef, 0x1, 0x5, [{@private=0xa010102, 0x3}, {@remote, 0x7}, {@empty, 0x8}, {@rand_addr=0x64010100, 0xa}]}, @generic={0x86, 0x4, "c887"}, @ra={0x94, 0x4}, @lsrr={0x83, 0x3, 0x4c}, @timestamp_addr={0x44, 0x4, 0x29, 0x1, 0x4}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x16, 0x12, &(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70200000000000057039afbd0850000008600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018430000feffffff000000000000000055a4f8ff000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x4, 0xbe, &(0x7f0000000880)=""/190, 0x41000, 0x68, '\x00', r7, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x8, 0x7fff, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xf, @void, @value}, 0x94) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) 1.475467629s ago: executing program 4 (id=1684): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x43}, 0x3, 0x1, 0x0, 0x3, 0x2, 0xa}, 0x1d) 1.475306525s ago: executing program 2 (id=1685): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xff03) 1.387705655s ago: executing program 4 (id=1686): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000740)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x0, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x8ae, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff767, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x0, 0x4, 0x8000, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ff9, 0x1, 0x6, 0x5, 0x1], [0x8, 0x80000003, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x80007, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e8, 0x3, 0xb, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x6, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x7ff, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xb, 0x100, 0xf0, 0xf1, 0x6, 0x10, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0xffffffff, 0x9a, 0x7, 0xa8a, 0x3, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x5, 0x5d3a, 0x7, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x0, 0x4, 0x200, 0x0, 0x7, 0x4e6, 0xd, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x8000, 0x10, 0x8, 0x5396, 0xe, 0x9, 0x100, 0x1ff, 0x8, 0x433, 0x6, 0x5, 0x9, 0x7b, 0x7fc, 0x9]}, 0x45c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYRES8=r0], 0xe4}}, 0x20004090) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r4 = dup(r3) socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r2], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000222803001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00?'], 0xe4}}, 0x0) syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x70bd28, 0x25dfdbfd, {0x7, r9}, [@MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x2, 0x4, {@ip4=@multicast1, 0x800}}}]}, 0x38}, 0x1, 0x2}, 0x4050) r10 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0x51) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x2000000000000, 0x9}) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r11}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, &(0x7f00000000c0), &(0x7f0000000300)=[0x5, 0x3, 0xf1], &(0x7f0000000200), &(0x7f00000002c0)}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r4, 0x0) 1.387396583s ago: executing program 2 (id=1687): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) futex_waitv(&(0x7f0000001380)=[{0x6, &(0x7f0000000000)=0x7, 0x2}, {0x9, &(0x7f0000000040)=0x401, 0x82}, {0x9, &(0x7f0000000080)=0x8, 0x82}, {0x3, &(0x7f00000000c0)=0x3, 0x2}, {0x0, &(0x7f0000000180)=0x8000000000000001, 0x2}, {0x38f8, &(0x7f00000001c0)=0x1, 0x82}, {0xfff, &(0x7f0000000200)=0x8000000000000000, 0x2}, {0x4d, &(0x7f0000000240)=0xe, 0x2}, {0x4, &(0x7f0000000280)=0x74, 0x82}, {0x10000, &(0x7f00000002c0)=0x80, 0x2}, {0xffffffffffffff01, &(0x7f0000000380)=0x4, 0x82}, {0x0, &(0x7f00000003c0)=0x4, 0x2}, {0xd46, &(0x7f0000000440), 0x82}, {0x6, &(0x7f0000000480)=0x1dc, 0x82}, {0x5, &(0x7f00000004c0)=0x8, 0x82}, {0xb4a, &(0x7f0000000500)=0x1, 0x2}, {0x6, &(0x7f0000000540)=0x4, 0x82}, {0x3ff, &(0x7f0000000580)=0xb44, 0x2}, {0xc, &(0x7f00000005c0)=0x9, 0x2}, {0x9, &(0x7f0000000600)=0x9, 0x2}, {0x8000000000000000, &(0x7f0000000640)=0x3, 0x2}, {0x2a747cc9, &(0x7f0000000680)=0x2, 0x2}, {0x4a87, &(0x7f00000006c0)=0xd798, 0x2}, {0x8f, &(0x7f0000000700)=0x5, 0x2}, {0x8, &(0x7f0000000740)=0x4, 0x82}, {0x7, &(0x7f0000000780)=0x1, 0x2}, {0xf, &(0x7f00000007c0), 0x82}, {0x9d, &(0x7f0000000800)=0x3, 0x82}, {0x9, &(0x7f0000000840)=0x800, 0x82}, {0x9, &(0x7f0000000880)=0x677}, {0xfffffffffffffffd, &(0x7f00000008c0)=0x100000001, 0x2}, {0x1, &(0x7f0000000900)=0x3, 0x2}, {0x45c, &(0x7f0000000940)=0x80, 0x82}, {0x1, &(0x7f0000000980)=0x3}, {0x9, &(0x7f00000009c0)=0x7, 0x2}, {0x0, &(0x7f0000000a00)=0xe0, 0x2}, {0xdc5, &(0x7f0000000a40)=0x1, 0x82}, {0x79, &(0x7f0000000a80)=0x100000000, 0x2}, {0x42f2, &(0x7f0000000ac0)=0xfffffffffffffff8, 0x82}, {0x5, &(0x7f0000000b00)=0x1, 0x82}, {0x7, &(0x7f0000000b40)=0xff, 0x82}, {0x5, &(0x7f0000000b80)=0x40, 0x2}, {0x2, &(0x7f0000000bc0)=0x3, 0x82}, {0x6, &(0x7f0000000c00)=0x1, 0x82}, {0x5, &(0x7f0000000c40)=0x7a, 0x82}, {0x80000001, &(0x7f0000000c80)=0x100000000, 0x82}, {0x3, &(0x7f0000000cc0)=0x8, 0x82}, {0xfffffffffffffff9, &(0x7f0000000d00)=0xfffffffffffffffb, 0x2}, {0x6, &(0x7f0000000d40)=0xffffffffffffff83, 0x82}, {0x3, &(0x7f0000000d80)=0x1, 0x82}, {0x4, &(0x7f0000000dc0)=0x81, 0x82}, {0x9, &(0x7f0000000e00)=0x7ff, 0x82}, {0x9b, &(0x7f0000000e40)=0x3ff, 0x2}, {0x2, &(0x7f0000000e80), 0x82}, {0x3, &(0x7f0000000ec0)=0x7, 0x2}, {0x281a, &(0x7f0000000f00)=0x7, 0x80}, {0xe3, &(0x7f0000000f40)=0x1, 0x82}, {0x8, &(0x7f0000000f80)=0x3, 0x82}, {0x4, &(0x7f0000000fc0)=0x1ef, 0x2}, {0x6, &(0x7f0000001000)=0x4, 0x82}, {0x80000000, &(0x7f0000001040)=0x2}, {0x6, &(0x7f0000001080)=0xe0, 0x82}, {0x0, &(0x7f00000010c0)=0xa, 0x2}, {0x2, &(0x7f0000001100)=0x4, 0x2}, {0x2, &(0x7f0000001140)=0x8, 0x82}, {0x0, &(0x7f0000001180)=0xfffffffffffffff7, 0x82}, {0xb9a, &(0x7f00000011c0)=0x4, 0x2}, {0x6, &(0x7f0000001200)=0x5, 0x82}, {0x8d, &(0x7f0000001240)=0x6, 0x2}, {0x0, &(0x7f0000001280)=0x7, 0x82}, {0x8, &(0x7f00000012c0)=0x3, 0x82}, {0x4, &(0x7f0000001300)=0x4, 0x82}, {0x0, &(0x7f0000001340)=0x6, 0x82}], 0x49, 0x0, &(0x7f0000001a80), 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f00000bc000/0x4000)=nil, 0x4000, 0x279a2cdb1db22b8d, 0x8031, r1, 0x981bf000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000018c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000001900)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001940)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 87.555444ms ago: executing program 2 (id=1688): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000ff", @ANYRES16=r1, @ANYBLOB="210027bd700001dcdf25100000001800018014000200776c616e30000000000000000000000008000f"], 0x34}}, 0x4000040) 87.156657ms ago: executing program 2 (id=1689): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x80000000}}, 0x18) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x1) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x74, &(0x7f0000000180)=""/116}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000880)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 477.148µs ago: executing program 6 (id=1690): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_cache\x00') (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6d932bbd700000000000010000000800030003000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) 280.447µs ago: executing program 4 (id=1691): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x2, 0x9, 0x9}}}}]}, 0x48}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0xffe2}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81000000}, 0x0) 0s ago: executing program 2 (id=1692): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x9, 0x1, 0x1000000, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x2, 0xfffffc00}, 0x3}}, @TCA_MPLS_TC={0x5, 0x6, 0x2}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000800}, 0xc0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x409, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1}, 0x6e) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r6, r7, 0x25, 0x2, @val=@perf_event={0xff}}, 0x18) syz_emit_ethernet(0xfd5c, &(0x7f0000000440)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3a, 0x28, 0x64, 0x0, 0x8, 0x6, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x27}}, {{0x4e20, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x1, 0x0, 0x4d}}}}}}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r9 = accept4(r8, 0x0, 0x0, 0x0) sendto$rose(r9, 0x0, 0x0, 0x20040041, 0x0, 0x0) recvmmsg$unix(r9, &(0x7f0000008a80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003900)=""/4096, 0x1000}], 0x1}}], 0x1, 0x12021, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r9, 0x0, 0x4005) r10 = landlock_create_ruleset(&(0x7f0000000000)={0x7171, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r10, 0x0) connect$unix(r3, &(0x7f0000000640)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES64=r11, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x772d42}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) syz_fuse_handle_req(r1, &(0x7f0000008ac0)="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", 0x2000, &(0x7f0000000540)={&(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x40000, 0x4, 0x7bf, 0x1702, 0x0, 0x0, 0x0, 0x80, 0x9db}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): unknown, defaulting to 1000 [ 96.075908][ T8264] netlink: 'syz.4.765': attribute type 1 has an invalid length. [ 96.078416][ T8264] __nla_validate_parse: 4 callbacks suppressed [ 96.078428][ T8264] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.765'. [ 96.114868][ T8266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.766'. [ 96.287245][ T8269] netlink: 24 bytes leftover after parsing attributes in process `syz.4.767'. [ 96.328693][ T8271] netlink: 28 bytes leftover after parsing attributes in process `syz.4.768'. [ 96.852569][ T39] audit: type=1400 audit(1740659830.649:452): avc: denied { ioctl } for pid=8285 comm="syz.0.773" path="socket:[28047]" dev="sockfs" ino=28047 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 97.466783][ T8324] netlink: 'syz.4.779': attribute type 58 has an invalid length. [ 97.469341][ T8324] netlink: 20 bytes leftover after parsing attributes in process `syz.4.779'. [ 97.550912][ T39] audit: type=1400 audit(1740659831.349:453): avc: denied { setopt } for pid=8327 comm="syz.0.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 97.624895][ T39] audit: type=1400 audit(1740659831.429:454): avc: denied { ioctl } for pid=8333 comm="syz.4.782" path="socket:[27089]" dev="sockfs" ino=27089 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 97.683432][ T8342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49939 sclass=netlink_route_socket pid=8342 comm=syz.4.784 [ 97.713997][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.785'. [ 97.755710][ T8347] netlink: 'syz.0.788': attribute type 1 has an invalid length. [ 97.764764][ T8347] 8021q: adding VLAN 0 to HW filter on device bond3 [ 97.887315][ T8364] netlink: 14 bytes leftover after parsing attributes in process `syz.0.793'. [ 97.985822][ T8364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.990868][ T8364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.997335][ T8364] bond0 (unregistering): Released all slaves [ 98.142166][ T8371] 9p: Unknown Cache mode or invalid value fsca [ 98.195415][ T8370] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 98.218533][ T8373] lo speed is unknown, defaulting to 1000 [ 98.298504][ T39] audit: type=1400 audit(1740659832.099:455): avc: denied { execute } for pid=8377 comm="syz.0.798" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 98.399006][ T8389] 9pnet_virtio: no channels available for device syz [ 98.503405][ T8393] netlink: 'syz.1.803': attribute type 1 has an invalid length. [ 98.506366][ T8393] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.803'. [ 98.705994][ T8401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.805'. [ 98.709629][ T8401] team_slave_1: entered promiscuous mode [ 98.711960][ T8401] team_slave_1: entered allmulticast mode [ 98.762206][ T25] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 98.827312][ T8405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61459 sclass=netlink_route_socket pid=8405 comm=syz.4.807 [ 98.902865][ T5938] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 98.916857][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.920262][ T25] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 98.923581][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.932436][ T25] usb 7-1: config 0 descriptor?? [ 98.937676][ T8414] netlink: 'syz.4.811': attribute type 1 has an invalid length. [ 98.954133][ T8414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.963923][ T8414] bond1: (slave ip6erspan0): making interface the new active one [ 98.966682][ T8414] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 99.021353][ T39] audit: type=1400 audit(1740659832.819:456): avc: denied { connect } for pid=8420 comm="syz.4.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 99.075319][ T39] audit: type=1400 audit(1740659832.879:457): avc: denied { write } for pid=8420 comm="syz.4.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 99.124157][ T8428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.816'. [ 99.140323][ T25] usbhid 7-1:0.0: can't add hid device: -71 [ 99.142439][ T25] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 99.152667][ T25] usb 7-1: USB disconnect, device number 5 [ 99.158536][ T8430] overlay: filesystem on ./bus not supported [ 99.158595][ T39] audit: type=1400 audit(1740659832.959:458): avc: denied { mount } for pid=8429 comm="syz.0.817" name="/" dev="autofs" ino=27216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 99.169287][ T39] audit: type=1400 audit(1740659832.959:459): avc: denied { mounton } for pid=8429 comm="syz.0.817" path="/229/file1/bus" dev="autofs" ino=27217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 99.178900][ T39] audit: type=1400 audit(1740659832.979:460): avc: denied { getopt } for pid=8429 comm="syz.0.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 99.418751][ T8442] netlink: 'syz.4.822': attribute type 1 has an invalid length. [ 99.477514][ T8444] tipc: Invalid UDP bearer configuration [ 99.477535][ T8444] tipc: Enabling of bearer rejected, failed to enable media [ 99.733115][ T8451] netlink: 'syz.2.825': attribute type 9 has an invalid length. [ 99.850049][ T8455] vivid-000: ================= START STATUS ================= [ 99.852453][ T8455] vivid-000: Test Pattern: 75% Colorbar [ 99.854115][ T8455] vivid-000: Fill Percentage of Frame: 100 [ 99.855807][ T8455] vivid-000: Horizontal Movement: No Movement [ 99.857581][ T8455] vivid-000: Vertical Movement: No Movement [ 99.859308][ T8455] vivid-000: OSD Text Mode: All [ 99.860812][ T8455] vivid-000: Show Border: false [ 99.862337][ T8455] vivid-000: Show Square: false [ 99.863767][ T8455] vivid-000: Sensor Flipped Horizontally: false [ 99.865597][ T8455] vivid-000: Sensor Flipped Vertically: false [ 99.867358][ T8455] vivid-000: Insert SAV Code in Image: false [ 99.869096][ T8455] vivid-000: Insert EAV Code in Image: false [ 99.870849][ T8455] vivid-000: Insert Video Guard Band: false [ 99.872719][ T8455] vivid-000: Reduced Framerate: false [ 99.874297][ T8455] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 99.876478][ T8455] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 99.878716][ T8455] vivid-000: Enable Capture Cropping: true [ 99.880371][ T8455] vivid-000: Enable Capture Composing: true [ 99.882551][ T8455] vivid-000: Enable Capture Scaler: true [ 99.884142][ T8455] vivid-000: Timestamp Source: End of Frame [ 99.885910][ T8455] vivid-000: Colorspace: sRGB [ 99.887245][ T8455] vivid-000: Transfer Function: Default [ 99.888764][ T8455] vivid-000: Y'CbCr Encoding: Default [ 99.890254][ T8455] vivid-000: HSV Encoding: Hue 0-179 [ 99.891709][ T8455] vivid-000: Quantization: Default [ 99.893250][ T8455] vivid-000: Apply Alpha To Red Only: false [ 99.894986][ T8455] vivid-000: Standard Aspect Ratio: 4x3 [ 99.896583][ T8455] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 99.898809][ T8455] vivid-000: DV Timings: 640x480p59 inactive [ 99.900557][ T8455] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 99.902736][ T8455] vivid-000: Maximum EDID Blocks: 2 [ 99.904290][ T8455] vivid-000: Limited RGB Range (16-235): false [ 99.906105][ T8455] vivid-000: Rx RGB Quantization Range: Automatic [ 99.907960][ T8455] vivid-000: Power Present: 0x00000001 [ 99.909558][ T8455] tpg source WxH: 320x180 (Y'CbCr) [ 99.911033][ T8455] tpg field: 1 [ 99.912115][ T8455] tpg crop: 320x180@0x0 [ 99.913332][ T8455] tpg compose: 320x180@0x0 [ 99.914682][ T8455] tpg colorspace: 8 [ 99.915798][ T8455] tpg transfer function: 0/0 [ 99.917131][ T8455] tpg Y'CbCr encoding: 0/0 [ 99.918449][ T8455] tpg quantization: 0/0 [ 99.919659][ T8455] tpg RGB range: 0/2 [ 99.920802][ T8455] vivid-000: ================== END STATUS ================== [ 99.998799][ T8460] 9pnet_fd: Insufficient options for proto=fd [ 100.050501][ T8464] netlink: 'syz.1.831': attribute type 1 has an invalid length. [ 100.358589][ T8482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64531 sclass=netlink_route_socket pid=8482 comm=syz.4.838 [ 100.976134][ T5938] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 101.120901][ T8498] __nla_validate_parse: 6 callbacks suppressed [ 101.120917][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.842'. [ 101.122202][ T5938] Bluetooth: hci3: command tx timeout [ 101.123229][ T8498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.842'. [ 101.130897][ T8498] netlink: 'syz.4.842': attribute type 12 has an invalid length. [ 101.167017][ T8501] netlink: 'syz.4.843': attribute type 1 has an invalid length. [ 101.170007][ T8501] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.843'. [ 101.537219][ T8516] netlink: 68 bytes leftover after parsing attributes in process `syz.4.848'. [ 101.582116][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 101.582126][ T39] audit: type=1326 audit(1740659835.379:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.2.841" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3398d169 code=0x7fc00000 [ 101.590712][ T39] audit: type=1326 audit(1740659835.379:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.2.841" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f3398d169 code=0x7fc00000 [ 101.599299][ T39] audit: type=1326 audit(1740659835.379:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.2.841" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3398d169 code=0x7fc00000 [ 101.606179][ T39] audit: type=1326 audit(1740659835.379:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.2.841" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3398d169 code=0x7fc00000 [ 101.613954][ T39] audit: type=1326 audit(1740659835.379:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.2.841" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3398d169 code=0x7fc00000 [ 101.620394][ T39] audit: type=1326 audit(1740659835.379:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.2.841" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3398d169 code=0x7fc00000 [ 101.627236][ T39] audit: type=1326 audit(1740659835.379:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.2.841" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3398d169 code=0x7fc00000 [ 101.634475][ T39] audit: type=1326 audit(1740659835.379:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.2.841" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3398d169 code=0x7fc00000 [ 101.641252][ T39] audit: type=1326 audit(1740659835.379:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.2.841" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3398d169 code=0x7fc00000 [ 101.648803][ T39] audit: type=1326 audit(1740659835.379:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.2.841" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3398d169 code=0x7fc00000 [ 101.666786][ T8525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.852'. [ 101.713336][ T5938] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 101.718045][ T8530] netlink: 'syz.2.854': attribute type 1 has an invalid length. [ 101.720313][ T8530] netlink: 'syz.2.854': attribute type 3 has an invalid length. [ 101.722838][ T8530] netlink: 228 bytes leftover after parsing attributes in process `syz.2.854'. [ 102.606132][ T8555] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 102.611725][ T8555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.864'. [ 102.615797][ T8555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.864'. [ 102.789281][ T5938] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 102.842850][ T8562] netlink: 'syz.2.865': attribute type 9 has an invalid length. [ 102.883324][ T8564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.866'. [ 104.505480][ T8596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.876'. [ 104.751320][ T8612] 9p: Unknown Cache mode or invalid value fsca [ 104.802793][ T8613] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 105.052437][ T5938] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 105.055227][ T5938] Bluetooth: hci2: Injecting HCI hardware error event [ 105.058198][ T5938] Bluetooth: hci2: hardware error 0x00 [ 105.097918][ T8615] netlink: 'syz.4.883': attribute type 1 has an invalid length. [ 106.369331][ T8630] __nla_validate_parse: 1 callbacks suppressed [ 106.369342][ T8630] netlink: 64 bytes leftover after parsing attributes in process `syz.1.888'. [ 106.802177][ T5292] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 106.804943][ T5292] Bluetooth: hci3: Injecting HCI hardware error event [ 106.807693][ T5292] Bluetooth: hci3: hardware error 0x00 [ 106.842205][ T9] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 106.993578][ T9] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 106.996507][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 107.000041][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 107.003368][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 107.006521][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 107.010084][ T9] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 107.012355][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 107.015204][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 107.018085][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 107.021457][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 107.026471][ T9] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 107.028615][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 107.031576][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 107.034698][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 107.037857][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 107.044297][ T9] usb 7-1: string descriptor 0 read error: -22 [ 107.046304][ T9] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 107.048951][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.054525][ T9] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 107.122597][ T5938] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 107.261817][ T9] usb 7-1: USB disconnect, device number 6 [ 107.803697][ T39] kauditd_printk_skb: 665 callbacks suppressed [ 107.803726][ T39] audit: type=1400 audit(1740659841.609:1137): avc: denied { getattr } for pid=8651 comm="syz.2.897" path="socket:[30983]" dev="sockfs" ino=30983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 107.812971][ T39] audit: type=1400 audit(1740659841.609:1138): avc: denied { ioctl } for pid=8651 comm="syz.2.897" path="socket:[30983]" dev="sockfs" ino=30983 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 107.912229][ T8658] tipc: Enabling of bearer rejected, failed to enable media [ 107.971679][ T8658] openvswitch: netlink: Message has 1275 unknown bytes. [ 107.974359][ T8658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.052826][ T8662] 9p: Unknown Cache mode or invalid value fsca [ 108.099510][ T8663] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 108.167261][ T39] audit: type=1400 audit(1740659841.969:1139): avc: denied { setopt } for pid=8664 comm="syz.2.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 108.260074][ T39] audit: type=1400 audit(1740659842.059:1140): avc: denied { read } for pid=8667 comm="syz.2.903" path="socket:[31988]" dev="sockfs" ino=31988 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.274035][ T8671] netlink: 'syz.4.904': attribute type 9 has an invalid length. [ 108.842309][ T5938] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 108.845296][ T5938] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 108.892526][ T5292] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 109.243659][ T8693] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 109.452301][ T39] audit: type=1326 audit(1740659843.249:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.4.910" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524778d169 code=0x7fc00000 [ 109.458852][ T39] audit: type=1326 audit(1740659843.249:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.4.910" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f524778d169 code=0x7fc00000 [ 109.466531][ T39] audit: type=1326 audit(1740659843.249:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.4.910" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524778d169 code=0x7fc00000 [ 109.473537][ T39] audit: type=1326 audit(1740659843.249:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.4.910" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524778d169 code=0x7fc00000 [ 109.480614][ T39] audit: type=1326 audit(1740659843.249:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.4.910" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524778d169 code=0x7fc00000 [ 109.487870][ T39] audit: type=1326 audit(1740659843.249:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.4.910" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524778d169 code=0x7fc00000 [ 109.668367][ T8709] lo speed is unknown, defaulting to 1000 [ 109.719087][ T8709] pim6reg1: entered promiscuous mode [ 109.720907][ T8709] pim6reg1: entered allmulticast mode [ 109.815476][ T8712] ipvlan0: entered promiscuous mode [ 109.817941][ T8712] ipvlan0: entered allmulticast mode [ 109.819584][ T8712] veth0_vlan: entered allmulticast mode [ 109.864981][ T8714] loop2: detected capacity change from 0 to 7 [ 109.869263][ T8714] Dev loop2: unable to read RDB block 7 [ 109.871036][ T8714] loop2: AHDI p1 [ 109.873413][ T8714] loop2: partition table partially beyond EOD, truncated [ 109.877123][ T8714] macvlan0: entered allmulticast mode [ 109.879974][ T8714] veth1_vlan: entered allmulticast mode [ 109.883621][ T8714] veth1_vlan: left allmulticast mode [ 109.897040][ T8714] macvlan0 (unregistering): left allmulticast mode [ 110.111676][ T8722] lo speed is unknown, defaulting to 1000 [ 110.140261][ T8722] 9pnet_fd: Insufficient options for proto=fd [ 110.165614][ T8725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.923'. [ 110.266084][ T8725] : (slave bond_slave_0): Releasing backup interface [ 111.308161][ T8753] lo speed is unknown, defaulting to 1000 [ 111.416197][ T8760] netlink: 'syz.2.936': attribute type 9 has an invalid length. [ 111.788259][ T8774] input: syz0 as /devices/virtual/input/input5 [ 113.085031][ T8804] 9p: Unknown Cache mode or invalid value fsca [ 113.145147][ T8809] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 113.926017][ T8808] 9pnet_fd: p9_fd_create_tcp (8808): problem connecting socket to 127.0.0.1 [ 114.179685][ T8836] lo speed is unknown, defaulting to 1000 [ 114.211273][ T8839] xt_CONNSECMARK: invalid mode: 0 [ 114.217362][ T39] kauditd_printk_skb: 3986 callbacks suppressed [ 114.217371][ T39] audit: type=1400 audit(1740659848.019:5133): avc: denied { execute } for pid=8841 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 114.228260][ T39] audit: type=1400 audit(1740659848.029:5134): avc: denied { execute_no_trans } for pid=8841 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 114.353334][ T5938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.359255][ T5938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.361801][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.368217][ T5938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.371469][ T5938] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 114.373792][ T5938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 114.389650][ T8303] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.407755][ T8845] lo speed is unknown, defaulting to 1000 [ 114.467065][ T39] audit: type=1400 audit(1740659848.269:5135): avc: denied { write } for pid=8857 comm="syz.1.964" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 114.485732][ T39] audit: type=1400 audit(1740659848.269:5136): avc: denied { ioctl } for pid=8857 comm="syz.1.964" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 114.495196][ T8303] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.506389][ T8845] chnl_net:caif_netlink_parms(): no params data found [ 114.512977][ T8860] netlink: 40 bytes leftover after parsing attributes in process `syz.1.965'. [ 114.564254][ T8303] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.569156][ T8845] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.571319][ T8845] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.574727][ T8845] bridge_slave_0: entered allmulticast mode [ 114.577058][ T8845] bridge_slave_0: entered promiscuous mode [ 114.580769][ T8845] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.583267][ T8845] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.585389][ T8845] bridge_slave_1: entered allmulticast mode [ 114.587708][ T8845] bridge_slave_1: entered promiscuous mode [ 114.612982][ T8845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.633384][ T8303] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.638596][ T8845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.662857][ T8845] team0: Port device team_slave_0 added [ 114.665807][ T8845] team0: Port device team_slave_1 added [ 114.687899][ T8845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.690323][ T8845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.697988][ T8845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.701687][ T8845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.703646][ T8845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.711436][ T8845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.748177][ T8845] hsr_slave_0: entered promiscuous mode [ 114.750358][ T8845] hsr_slave_1: entered promiscuous mode [ 114.752487][ T8845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.755384][ T8845] Cannot create hsr debugfs directory [ 114.866235][ T8303] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 114.931778][ T39] audit: type=1400 audit(1740659848.729:5137): avc: denied { create } for pid=8882 comm="syz.2.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 114.973977][ T8878] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 114.977437][ T8878] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 115.504674][ T8303] bond1 (unregistering): Released all slaves [ 115.607132][ T8303] bond2 (unregistering): Released all slaves [ 115.693016][ T8303] bond3 (unregistering): Released all slaves [ 115.797215][ T39] audit: type=1400 audit(1740659849.599:5138): avc: denied { ioctl } for pid=8913 comm="syz.2.985" path="socket:[33912]" dev="sockfs" ino=33912 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 115.807116][ T39] audit: type=1400 audit(1740659849.599:5139): avc: denied { write } for pid=8913 comm="syz.2.985" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 115.816054][ T39] audit: type=1400 audit(1740659849.599:5140): avc: denied { write } for pid=8913 comm="syz.2.985" name="kcm" dev="proc" ino=4026533134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 115.830303][ T8303] tipc: Disabling bearer [ 115.834903][ T8303] tipc: Left network mode [ 115.840008][ T8916] netlink: 'syz.4.986': attribute type 1 has an invalid length. [ 115.843707][ T8916] netlink: 'syz.4.986': attribute type 2 has an invalid length. [ 115.851133][ T8916] netlink: 11990 bytes leftover after parsing attributes in process `syz.4.986'. [ 115.944735][ T8845] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 115.965020][ T8845] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 115.978807][ T8845] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 115.983057][ T8845] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 116.026409][ T8845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.036083][ T8303] hsr_slave_0: left promiscuous mode [ 116.038085][ T8303] hsr_slave_1: left promiscuous mode [ 116.042423][ T8303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.046382][ T8303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.049611][ T8303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.053139][ T8303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.085440][ T8303] veth1_macvtap: left promiscuous mode [ 116.087563][ T8303] veth0_macvtap: left promiscuous mode [ 116.089691][ T8303] veth1_vlan: left promiscuous mode [ 116.091711][ T8303] veth0_vlan: left promiscuous mode [ 116.416329][ T5292] Bluetooth: hci1: command tx timeout [ 116.714159][ T8303] team0 (unregistering): Port device team_slave_1 removed [ 116.798912][ T8303] team0 (unregistering): Port device team_slave_0 removed [ 117.259988][ T8948] netlink: 'syz.2.991': attribute type 15 has an invalid length. [ 117.263166][ T8948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.991'. [ 117.279395][ T8845] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.288580][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.290685][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.302404][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.304594][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.377300][ T8960] netlink: 64 bytes leftover after parsing attributes in process `syz.2.994'. [ 117.496589][ T8845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.704793][ T8845] veth0_vlan: entered promiscuous mode [ 117.708716][ T8845] veth1_vlan: entered promiscuous mode [ 117.725532][ T8845] veth0_macvtap: entered promiscuous mode [ 117.728995][ T8845] veth1_macvtap: entered promiscuous mode [ 117.758613][ T8845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.763764][ T8845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.766820][ T8845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.769895][ T8845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.774163][ T8845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.779522][ T8845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.783642][ T8845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.786587][ T8845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.789740][ T8845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.796459][ T8845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.800728][ T8845] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.803478][ T8845] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.806098][ T8845] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.808750][ T8845] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.893539][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.895856][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.907508][ T8302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.910052][ T8302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.154446][ T9022] netlink: 'syz.5.1004': attribute type 15 has an invalid length. [ 118.162198][ T9022] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1004'. [ 118.252692][ T9035] netlink: 'syz.2.1008': attribute type 9 has an invalid length. [ 118.383466][ T9046] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1009'. [ 118.387534][ T39] audit: type=1326 audit(1740659852.189:5141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8981 comm="syz.4.998" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524778d169 code=0x7fc00000 [ 118.492293][ T5292] Bluetooth: hci1: command tx timeout [ 118.579331][ T9038] netlink: 'syz.1.1007': attribute type 64 has an invalid length. [ 118.583300][ T9038] netlink: 'syz.1.1007': attribute type 4 has an invalid length. [ 118.586320][ T9038] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1007'. [ 118.755802][ T9064] random: crng reseeded on system resumption [ 118.988826][ T39] audit: type=1400 audit(1740659852.789:5142): avc: denied { sys_chroot } for pid=9066 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 119.524769][ T9078] syz.1.1017: attempt to access beyond end of device [ 119.524769][ T9078] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 119.530005][ T9078] (syz.1.1017,9078,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 119.533715][ T9078] (syz.1.1017,9078,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 119.536447][ T9078] (syz.1.1017,9078,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 119.539099][ T9078] (syz.1.1017,9078,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 119.586367][ T9082] 9p: Unknown Cache mode or invalid value fsca [ 119.638749][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 119.638765][ T39] audit: type=1400 audit(1740659853.439:5144): avc: denied { create } for pid=9080 comm="syz.2.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.642320][ T9082] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 119.649004][ T39] audit: type=1400 audit(1740659853.439:5145): avc: denied { bind } for pid=9080 comm="syz.2.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.718705][ T39] audit: type=1326 audit(1740659853.519:5146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9084 comm="syz.4.1020" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524778d169 code=0x7fc00000 [ 119.766961][ T9099] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 119.769313][ T9099] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 119.775553][ T9099] vhci_hcd vhci_hcd.0: Device attached [ 119.863899][ T9108] lo speed is unknown, defaulting to 1000 [ 119.944324][ T9114] could not open pipe file descriptor [ 119.947382][ T39] audit: type=1400 audit(1740659853.749:5147): avc: denied { ioctl } for pid=9113 comm="syz.4.1030" path="socket:[33599]" dev="sockfs" ino=33599 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 119.979809][ T9116] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1031'. [ 119.984441][ T9118] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1032'. [ 119.989489][ T9118] gretap0: entered promiscuous mode [ 120.032166][ T833] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 120.037298][ T8] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 120.182209][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 120.189740][ T8] usb 6-1: config index 0 descriptor too short (expected 62482, got 18) [ 120.198561][ T8] usb 6-1: config 98 has an invalid descriptor of length 0, skipping remainder of the config [ 120.208669][ T8] usb 6-1: config 98 has 0 interfaces, different from the descriptor's value: 20 [ 120.213662][ T8] usb 6-1: New USB device found, idVendor=05d1, idProduct=2011, bcdDevice= 9.00 [ 120.216716][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.222319][ T8] usb 6-1: Product: syz [ 120.223509][ T8] usb 6-1: Manufacturer: syz [ 120.224905][ T8] usb 6-1: SerialNumber: syz [ 120.432989][ T9100] usb 39-1: recv xbuf, 0 [ 120.438451][ T8303] vhci_hcd: stop threads [ 120.440077][ T8303] vhci_hcd: release socket [ 120.445170][ T8303] vhci_hcd: disconnect device [ 120.492267][ T39] audit: type=1400 audit(1740659854.279:5148): avc: denied { ioctl } for pid=9140 comm="syz.5.1041" path="socket:[35316]" dev="sockfs" ino=35316 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 120.502227][ T833] vhci_hcd: vhci_device speed not set [ 120.572280][ T5292] Bluetooth: hci1: command tx timeout [ 120.641522][ T8] usb 6-1: USB disconnect, device number 4 [ 120.673474][ T9156] bridge_slave_0: left allmulticast mode [ 120.675188][ T9156] bridge_slave_0: left promiscuous mode [ 120.677574][ T9156] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.681270][ T9156] bridge_slave_1: left allmulticast mode [ 120.683356][ T9156] bridge_slave_1: left promiscuous mode [ 120.685779][ T9156] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.693189][ T9156] bond0: (slave bond_slave_0): Releasing backup interface [ 120.697599][ T9156] bond0: (slave bond_slave_1): Releasing backup interface [ 120.706041][ T9156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.713598][ T9156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.716969][ T9156] bond0: (slave wlan1): Releasing backup interface [ 120.731658][ T9156] bond1: (slave ip6erspan0): Releasing active interface [ 120.737693][ T35] lo speed is unknown, defaulting to 1000 [ 120.827297][ T9182] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1053'. [ 120.864867][ T9184] lo speed is unknown, defaulting to 1000 [ 120.906404][ T9184] usb usb8: usbfs: process 9184 (syz.5.1054) did not claim interface 0 before use [ 120.950551][ T9190] FAULT_INJECTION: forcing a failure. [ 120.950551][ T9190] name failslab, interval 1, probability 0, space 0, times 0 [ 120.955942][ T9190] CPU: 1 UID: 0 PID: 9190 Comm: syz.5.1056 Not tainted 6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0 [ 120.955958][ T9190] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 120.955964][ T9190] Call Trace: [ 120.955968][ T9190] [ 120.955972][ T9190] dump_stack_lvl+0x16c/0x1f0 [ 120.956001][ T9190] should_fail_ex+0x50a/0x650 [ 120.956022][ T9190] ? fs_reclaim_acquire+0xae/0x150 [ 120.956039][ T9190] ? tomoyo_realpath_from_path+0xb9/0x720 [ 120.956054][ T9190] should_failslab+0xc2/0x120 [ 120.956065][ T9190] __kmalloc_noprof+0xcb/0x510 [ 120.956076][ T9190] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 120.956094][ T9190] tomoyo_realpath_from_path+0xb9/0x720 [ 120.956109][ T9190] ? tomoyo_path_number_perm+0x235/0x590 [ 120.956122][ T9190] ? tomoyo_path_number_perm+0x235/0x590 [ 120.956136][ T9190] tomoyo_path_number_perm+0x248/0x590 [ 120.956147][ T9190] ? tomoyo_path_number_perm+0x235/0x590 [ 120.956161][ T9190] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 120.956185][ T9190] ? __pfx_lock_release+0x10/0x10 [ 120.956198][ T9190] ? trace_lock_acquire+0x14e/0x1f0 [ 120.956211][ T9190] ? lock_acquire+0x2f/0xb0 [ 120.956224][ T9190] ? __fget_files+0x40/0x3a0 [ 120.956235][ T9190] ? __fget_files+0x206/0x3a0 [ 120.956247][ T9190] security_file_ioctl+0x9b/0x240 [ 120.956262][ T9190] __x64_sys_ioctl+0xb7/0x200 [ 120.956277][ T9190] do_syscall_64+0xcd/0x250 [ 120.956291][ T9190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.956305][ T9190] RIP: 0033:0x7f1ca658d169 [ 120.956313][ T9190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.956323][ T9190] RSP: 002b:00007f1ca74d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.956333][ T9190] RAX: ffffffffffffffda RBX: 00007f1ca67a5fa0 RCX: 00007f1ca658d169 [ 120.956339][ T9190] RDX: 0000400000000080 RSI: 00000000c0cc5616 RDI: 0000000000000003 [ 120.956345][ T9190] RBP: 00007f1ca74d0090 R08: 0000000000000000 R09: 0000000000000000 [ 120.956351][ T9190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.956356][ T9190] R13: 0000000000000000 R14: 00007f1ca67a5fa0 R15: 00007ffc3d879ab8 [ 120.956368][ T9190] [ 120.956661][ T9190] ERROR: Out of memory at tomoyo_realpath_from_path. [ 120.958099][ T39] audit: type=1400 audit(1740659854.759:5149): avc: denied { recv } for pid=16 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=37614 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 120.973880][ T9191] 9p: Unknown Cache mode or invalid value fsca [ 120.976344][ T39] audit: type=1400 audit(1740659854.759:5150): avc: denied { recv } for pid=16 comm="ksoftirqd/0" saddr=127.0.0.1 src=37614 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 121.024570][ T9188] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 121.056098][ T9196] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1058'. [ 121.114460][ T9203] netlink: 'syz.5.1060': attribute type 9 has an invalid length. [ 121.155609][ T39] audit: type=1400 audit(1740659854.959:5151): avc: denied { ioctl } for pid=9204 comm="syz.5.1061" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 122.099049][ T9223] 9p: Unknown Cache mode or invalid value fsca [ 122.149615][ T9222] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 122.153936][ T9227] veth1_to_bond: mtu less than device minimum [ 122.303217][ T9248] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1077'. [ 122.305909][ T9248] netem: invalid attributes len -9 [ 122.307432][ T9248] netem: change failed [ 122.343516][ T9255] FAULT_INJECTION: forcing a failure. [ 122.343516][ T9255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.347369][ T9255] CPU: 3 UID: 0 PID: 9255 Comm: syz.5.1078 Not tainted 6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0 [ 122.347387][ T9255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 122.347396][ T9255] Call Trace: [ 122.347402][ T9255] [ 122.347408][ T9255] dump_stack_lvl+0x16c/0x1f0 [ 122.347426][ T9255] should_fail_ex+0x50a/0x650 [ 122.347444][ T9255] _copy_from_user+0x2e/0xd0 [ 122.347455][ T9255] copy_msghdr_from_user+0x99/0x160 [ 122.347470][ T9255] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 122.347490][ T9255] ___sys_sendmsg+0xff/0x1e0 [ 122.347504][ T9255] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.347523][ T9255] ? __pfx_lock_release+0x10/0x10 [ 122.347538][ T9255] ? trace_lock_acquire+0x14e/0x1f0 [ 122.347553][ T9255] ? __fget_files+0x206/0x3a0 [ 122.347566][ T9255] __sys_sendmsg+0x16e/0x220 [ 122.347580][ T9255] ? __pfx___sys_sendmsg+0x10/0x10 [ 122.347602][ T9255] do_syscall_64+0xcd/0x250 [ 122.347615][ T9255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.347629][ T9255] RIP: 0033:0x7f1ca658d169 [ 122.347637][ T9255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.347647][ T9255] RSP: 002b:00007f1ca74d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.347657][ T9255] RAX: ffffffffffffffda RBX: 00007f1ca67a5fa0 RCX: 00007f1ca658d169 [ 122.347663][ T9255] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000007 [ 122.347669][ T9255] RBP: 00007f1ca74d0090 R08: 0000000000000000 R09: 0000000000000000 [ 122.347675][ T9255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.347680][ T9255] R13: 0000000000000000 R14: 00007f1ca67a5fa0 R15: 00007ffc3d879ab8 [ 122.347692][ T9255] [ 122.452286][ T39] audit: type=1400 audit(1740659856.249:5152): avc: denied { sqpoll } for pid=9258 comm="syz.1.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 122.458324][ T39] audit: type=1400 audit(1740659856.249:5153): avc: denied { map } for pid=9258 comm="syz.1.1079" path="pipe:[7309]" dev="pipefs" ino=7309 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 122.484064][ T9262] netlink: 'syz.5.1080': attribute type 1 has an invalid length. [ 122.486654][ T9262] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.1080'. [ 122.614876][ T9273] lo speed is unknown, defaulting to 1000 [ 122.652992][ T5292] Bluetooth: hci1: command tx timeout [ 122.887912][ T5938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 122.891121][ T5938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 122.894167][ T5938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 122.897492][ T5938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 122.899899][ T5938] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 122.902047][ T5938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 122.926007][ T9304] lo speed is unknown, defaulting to 1000 [ 122.959339][ T9313] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1097'. [ 123.015480][ T8300] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.032189][ T9304] chnl_net:caif_netlink_parms(): no params data found [ 123.075273][ T9304] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.078276][ T9304] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.081207][ T9304] bridge_slave_0: entered allmulticast mode [ 123.081802][ T9324] 9p: Unknown Cache mode or invalid value fsca [ 123.090687][ T9304] bridge_slave_0: entered promiscuous mode [ 123.108530][ T8300] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.113150][ T9304] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.115260][ T9304] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.117856][ T9304] bridge_slave_1: entered allmulticast mode [ 123.120148][ T9304] bridge_slave_1: entered promiscuous mode [ 123.133142][ T9320] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 123.153945][ T9304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.158809][ T9304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.196488][ T9304] team0: Port device team_slave_0 added [ 123.236056][ T8300] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.248066][ T9304] team0: Port device team_slave_1 added [ 123.284113][ T9304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.285992][ T9304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.294164][ T9304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.306440][ T8300] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.314618][ T9304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.316651][ T9304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.324969][ T9304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.360415][ T9304] hsr_slave_0: entered promiscuous mode [ 123.362612][ T9304] hsr_slave_1: entered promiscuous mode [ 123.364457][ T9304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.366694][ T9304] Cannot create hsr debugfs directory [ 123.466248][ T8300] bridge_slave_1: left allmulticast mode [ 123.468430][ T8300] bridge_slave_1: left promiscuous mode [ 123.470632][ T8300] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.476147][ T8300] bridge_slave_0: left allmulticast mode [ 123.478354][ T8300] bridge_slave_0: left promiscuous mode [ 123.480589][ T8300] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.489119][ T9349] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1106'. [ 123.543193][ T948] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 123.551560][ T8300] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 123.563604][ T9349] openvswitch: netlink: Missing valid actions attribute. [ 123.565762][ T9349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.572777][ T9352] 9p: Unknown Cache mode or invalid value fsca [ 123.623315][ T9351] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 123.717726][ T948] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 123.719717][ T948] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 123.723441][ T948] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 123.726217][ T948] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 123.729057][ T948] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 123.732553][ T948] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 123.734584][ T948] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 123.737190][ T948] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 123.739757][ T948] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 123.742945][ T948] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 123.746255][ T948] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 123.748198][ T948] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 123.750985][ T948] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 123.754037][ T948] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 123.756956][ T948] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 123.761618][ T948] usb 10-1: string descriptor 0 read error: -22 [ 123.763965][ T948] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 123.766420][ T948] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.775495][ T948] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 123.942962][ T8300]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.946365][ T8300]  (unregistering): Released all slaves [ 123.977171][ T35] usb 10-1: USB disconnect, device number 2 [ 124.034767][ T8300] bond1 (unregistering): Released all slaves [ 124.119891][ T8300] bond2 (unregistering): Released all slaves [ 124.211674][ T8300] bond3 (unregistering): Released all slaves [ 124.281418][ T8300] bond0 (unregistering): Released all slaves [ 124.335926][ T9304] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 124.346721][ T9304] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 124.351422][ T9304] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 124.374484][ T9304] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 124.437257][ T9372] syzkaller0: entered promiscuous mode [ 124.438977][ T9372] syzkaller0: entered allmulticast mode [ 124.452428][ T9372] netlink: 'syz.4.1113': attribute type 12 has an invalid length. [ 124.572102][ T9387] 9p: Unknown Cache mode or invalid value fsca [ 124.603753][ T9389] netlink: 'syz.5.1117': attribute type 1 has an invalid length. [ 124.606238][ T9389] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.1117'. [ 124.619403][ T9384] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 124.724914][ T5292] Bluetooth: hci1: command tx timeout [ 124.972198][ T5292] Bluetooth: hci0: command tx timeout [ 124.984634][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 124.984644][ T39] audit: type=1400 audit(1740659858.789:5159): avc: denied { setopt } for pid=9404 comm="syz.5.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 124.992428][ T39] audit: type=1400 audit(1740659858.789:5160): avc: denied { connect } for pid=9404 comm="syz.5.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 125.352159][ T948] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 125.506287][ T948] usb 10-1: config 8 has an invalid interface number: 239 but max is 0 [ 125.509493][ T948] usb 10-1: config 8 has an invalid interface association descriptor of length 3, skipping [ 125.513022][ T948] usb 10-1: config 8 has an invalid interface number: 109 but max is 0 [ 125.516099][ T948] usb 10-1: config 8 has 2 interfaces, different from the descriptor's value: 1 [ 125.519526][ T948] usb 10-1: config 8 has no interface number 0 [ 125.521260][ T948] usb 10-1: config 8 has no interface number 1 [ 125.524246][ T948] usb 10-1: config 8 interface 239 altsetting 118 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 125.528016][ T948] usb 10-1: config 8 interface 239 altsetting 118 has a duplicate endpoint with address 0xA, skipping [ 125.531677][ T948] usb 10-1: config 8 interface 239 altsetting 118 has a duplicate endpoint with address 0xA, skipping [ 125.535998][ T948] usb 10-1: config 8 interface 239 altsetting 118 has an invalid descriptor for endpoint zero, skipping [ 125.540443][ T948] usb 10-1: too many endpoints for config 8 interface 109 altsetting 181: 171, using maximum allowed: 30 [ 125.545161][ T948] usb 10-1: config 8 interface 109 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 171 [ 125.550310][ T948] usb 10-1: config 8 interface 239 has no altsetting 0 [ 125.553200][ T948] usb 10-1: config 8 interface 109 has no altsetting 0 [ 125.557651][ T948] usb 10-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice=d7.22 [ 125.561378][ T948] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.564764][ T948] usb 10-1: Product: 쇭䃫枢ᐊ閥챣뾥簢ꭓ薺魝볇ⴈ⾒Ⳙ߸쎻ᬿꁬꅷ诶接횗ꈢဘ⬵⻴ዥ턡㬣䈬⊶⣬瀫⩷뱳잤䠽땭롭䊶잜〝谎윆鎡₩쩶ꭨ牅啄䥭꣍醶膧㲓穅썗ꆜ륁覑꧄愬쩸䗪躥阕級溟 [ 125.573699][ T948] usb 10-1: Manufacturer: 榳彉峧꧃⋅遥첁빪ﭲ챈쟆⡙ﴯ했ꋚ澘嶧ꄹ෧屢ྟ할ǒ䪋먋Ⴢ㩐㷍嘀椽荩ㆣ㐗歁鼺㯻헕䐡빼ዕ亳㠜蹯魱˄솉﷣栺銐⩦蚧顣畸퓆쏴 [ 125.582025][ T948] usb 10-1: SerialNumber: 庉짷菰잘鍷蟇銑⬽Ԋ拆퐿穾쎁≝呪恞껊ꣻἶ腓᷍鄉ᚔ篝黚 [ 125.590518][ T9406] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 125.595222][ T9406] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 125.738326][ T9405] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 125.792718][ T9304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.811276][ T9304] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.831561][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.833790][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.840732][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.842909][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.847148][ T948] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:8.239/input/input7 [ 125.863950][ T5336] bcm5974 10-1:8.239: could not read from device [ 125.882802][ T5336] bcm5974 10-1:8.239: could not read from device [ 125.885304][ T948] usb 10-1: USB disconnect, device number 3 [ 125.888480][ T5336] bcm5974 10-1:8.239: could not read from device [ 125.891336][ T8300] hsr_slave_0: left promiscuous mode [ 125.891478][ T5336] bcm5974 10-1:8.239: could not read from device [ 125.903875][ T8300] hsr_slave_1: left promiscuous mode [ 125.912501][ T8300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.915586][ T8300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.930685][ T8300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.933049][ T8300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.958965][ T8300] veth1_macvtap: left promiscuous mode [ 125.960675][ T8300] veth0_macvtap: left promiscuous mode [ 125.962869][ T8300] veth1_vlan: left promiscuous mode [ 125.964468][ T8300] veth0_vlan: left promiscuous mode [ 126.212813][ T39] audit: type=1400 audit(1740659860.019:5161): avc: denied { create } for pid=9428 comm="syz.2.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 126.316568][ T9433] 9p: Unknown Cache mode or invalid value fsca [ 126.366670][ T9434] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 126.584893][ T8300] team0 (unregistering): Port device team_slave_1 removed [ 126.660785][ T8300] team0 (unregistering): Port device team_slave_0 removed [ 126.676580][ T39] audit: type=1326 audit(1740659860.479:5162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9414 comm="syz.4.1126" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524778d169 code=0x7fc00000 [ 126.775384][ T9448] fuse: Unknown parameter 'rootmod' [ 126.812155][ T5292] Bluetooth: hci1: command tx timeout [ 127.042678][ T5292] Bluetooth: hci0: command tx timeout [ 127.183713][ T9304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.186210][ T9471] 9p: Unknown Cache mode or invalid value fsca [ 127.236679][ T9466] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 127.306188][ T9304] veth0_vlan: entered promiscuous mode [ 127.318200][ T9304] veth1_vlan: entered promiscuous mode [ 127.333011][ T9304] veth0_macvtap: entered promiscuous mode [ 127.336560][ T9304] veth1_macvtap: entered promiscuous mode [ 127.342383][ T9304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.345887][ T9304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.348944][ T9304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.352785][ T9304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.356797][ T9304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.360153][ T9304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.363664][ T9304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.367298][ T9304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.371019][ T9304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.376318][ T9304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.386118][ T9304] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.389383][ T9304] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.392966][ T9304] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.395957][ T9304] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.448953][ T8303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.452144][ T8303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.473664][ T8298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.476696][ T8298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.540959][ T9502] netlink: 9 bytes leftover after parsing attributes in process `syz.6.1092'. [ 127.546247][ T9502] gretap0: entered promiscuous mode [ 127.580240][ T9507] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 127.583436][ T9507] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 127.630066][ T39] audit: type=1400 audit(1740659861.429:5163): avc: denied { read } for pid=9511 comm="syz.6.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 127.677454][ T9516] lo speed is unknown, defaulting to 1000 [ 127.981622][ T9543] sit0: entered promiscuous mode [ 127.994484][ T9543] netlink: 'syz.2.1152': attribute type 1 has an invalid length. [ 127.997109][ T9543] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1152'. [ 128.043138][ T9547] netlink: 'syz.2.1153': attribute type 1 has an invalid length. [ 128.051945][ T9547] 8021q: adding VLAN 0 to HW filter on device bond4 [ 128.166488][ T9560] netlink: 'syz.2.1156': attribute type 1 has an invalid length. [ 128.168838][ T9560] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1156'. [ 128.179195][ T39] audit: type=1326 audit(1740659861.979:5164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9486 comm="syz.4.1142" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524778d169 code=0x7fc00000 [ 128.391898][ T39] audit: type=1800 audit(1740659862.189:5165): pid=9583 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.4.1163" name="/newroot/198/file0" dev="tmpfs" ino=1087 res=0 errno=0 [ 129.122181][ T5292] Bluetooth: hci0: command tx timeout [ 129.277675][ T9608] fuse: Unknown parameter 'rootmod/' [ 129.648833][ T9534] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 129.703705][ T9627] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1173'. [ 129.706359][ T9627] netlink: 'syz.4.1173': attribute type 7 has an invalid length. [ 129.708583][ T9627] netlink: 'syz.4.1173': attribute type 8 has an invalid length. [ 129.710821][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1173'. [ 129.715536][ T9627] erspan0: entered promiscuous mode [ 129.717550][ T9627] batadv_slave_1: entered promiscuous mode [ 129.720274][ T9627] erspan0: left promiscuous mode [ 129.723634][ T9627] batadv_slave_1: left promiscuous mode [ 129.833881][ T9635] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1176'. [ 129.837866][ T9635] gretap0: entered promiscuous mode [ 130.157265][ T39] audit: type=1326 audit(1740659863.959:5166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9609 comm="syz.2.1168" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3398d169 code=0x7fc00000 [ 130.413898][ T9665] input: syz0 as /devices/virtual/input/input8 [ 131.202748][ T5292] Bluetooth: hci0: command tx timeout [ 131.755162][ T9729] netlink: 'syz.4.1195': attribute type 1 has an invalid length. [ 131.778825][ T9729] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.803302][ T9640] input: syz0 as /devices/virtual/input/input9 [ 131.835037][ T39] audit: type=1326 audit(1740659865.639:5167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9710 comm="syz.2.1189" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3398d169 code=0x7fc00000 [ 131.892528][ T9733] 9p: Unknown Cache mode or invalid value fsca [ 131.940632][ T9732] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 132.189779][ T9753] lo speed is unknown, defaulting to 1000 [ 132.347154][ T9760] loop6: detected capacity change from 0 to 524287999 [ 132.360061][ T8302] loop: Write error at byte offset 1, length 4096. [ 132.369931][ T8302] loop: Write error at byte offset 1, length 4096. [ 132.373093][ C3] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 2 prio class 0 [ 132.376314][ C3] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 132.379168][ C3] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 132.385412][ T8302] loop: Write error at byte offset 1, length 4096. [ 132.388663][ C3] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 132.391847][ C3] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 132.395426][ T39] audit: type=1400 audit(1740659866.199:5168): avc: denied { setopt } for pid=9759 comm="syz.2.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 132.521144][ T39] audit: type=1400 audit(1740659866.319:5169): avc: denied { write } for pid=9767 comm="syz.5.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.532123][ T39] audit: type=1400 audit(1740659866.329:5170): avc: denied { setattr } for pid=9767 comm="syz.5.1205" name="NETLINK" dev="sockfs" ino=39424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 132.565106][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.570041][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.647715][ T9778] 9p: Unknown Cache mode or invalid value fsca [ 132.684779][ T9778] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 132.872727][ T39] audit: type=1400 audit(1740659866.679:5171): avc: denied { accept } for pid=9793 comm="syz.5.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 132.919260][ T9794] "syz.5.1214" (9794) uses obsolete ecb(arc4) skcipher [ 132.964757][ T9804] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1216'. [ 133.000923][ T9807] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1217'. [ 133.306089][ T39] audit: type=1400 audit(1740659867.109:5172): avc: denied { mount } for pid=9824 comm="syz.4.1225" name="/" dev="ramfs" ino=38308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 133.306669][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1225'. [ 133.315477][ T39] audit: type=1326 audit(1740659867.119:5173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9765 comm="syz.2.1206" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3398d169 code=0x7fc00000 [ 134.380547][ T9869] 9pnet_fd: Insufficient options for proto=fd [ 134.424084][ T9871] lo speed is unknown, defaulting to 1000 [ 134.506510][ T9878] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1241'. [ 134.954535][ T9901] FAULT_INJECTION: forcing a failure. [ 134.954535][ T9901] name failslab, interval 1, probability 0, space 0, times 0 [ 134.958232][ T9901] CPU: 3 UID: 0 PID: 9901 Comm: syz.4.1249 Not tainted 6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0 [ 134.958245][ T9901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 134.958252][ T9901] Call Trace: [ 134.958255][ T9901] [ 134.958259][ T9901] dump_stack_lvl+0x16c/0x1f0 [ 134.958276][ T9901] should_fail_ex+0x50a/0x650 [ 134.958292][ T9901] ? fs_reclaim_acquire+0xae/0x150 [ 134.958308][ T9901] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 134.958324][ T9901] should_failslab+0xc2/0x120 [ 134.958336][ T9901] __kmalloc_noprof+0xcb/0x510 [ 134.958349][ T9901] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 134.958368][ T9901] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 134.958387][ T9901] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 134.958406][ T9901] ? bpf_lsm_capable+0x9/0x10 [ 134.958418][ T9901] ? security_capable+0x7e/0x260 [ 134.958431][ T9901] ? ns_capable+0xd7/0x110 [ 134.958446][ T9901] genl_rcv_msg+0x565/0x800 [ 134.958463][ T9901] ? __pfx_genl_rcv_msg+0x10/0x10 [ 134.958477][ T9901] ? __pfx_ovs_meter_cmd_set+0x10/0x10 [ 134.958493][ T9901] netlink_rcv_skb+0x16b/0x440 [ 134.958506][ T9901] ? __pfx_genl_rcv_msg+0x10/0x10 [ 134.958522][ T9901] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 134.958540][ T9901] ? down_read+0xc9/0x330 [ 134.958553][ T9901] ? __pfx_down_read+0x10/0x10 [ 134.958566][ T9901] ? netlink_deliver_tap+0x1ae/0xd30 [ 134.958581][ T9901] genl_rcv+0x28/0x40 [ 134.958593][ T9901] netlink_unicast+0x53c/0x7f0 [ 134.958608][ T9901] ? __pfx_netlink_unicast+0x10/0x10 [ 134.958620][ T9901] ? __phys_addr+0xc6/0x150 [ 134.958633][ T9901] netlink_sendmsg+0x8b8/0xd70 [ 134.958648][ T9901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.958666][ T9901] ____sys_sendmsg+0xaaf/0xc90 [ 134.958677][ T9901] ? copy_msghdr_from_user+0x10b/0x160 [ 134.958691][ T9901] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.958707][ T9901] ___sys_sendmsg+0x135/0x1e0 [ 134.958721][ T9901] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.958741][ T9901] ? __pfx_lock_release+0x10/0x10 [ 134.958755][ T9901] ? trace_lock_acquire+0x14e/0x1f0 [ 134.958771][ T9901] ? __fget_files+0x206/0x3a0 [ 134.958784][ T9901] __sys_sendmsg+0x16e/0x220 [ 134.958798][ T9901] ? __pfx___sys_sendmsg+0x10/0x10 [ 134.958820][ T9901] do_syscall_64+0xcd/0x250 [ 134.958834][ T9901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.958848][ T9901] RIP: 0033:0x7f524778d169 [ 134.958857][ T9901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.958866][ T9901] RSP: 002b:00007f5248580038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.958876][ T9901] RAX: ffffffffffffffda RBX: 00007f52479a5fa0 RCX: 00007f524778d169 [ 134.958882][ T9901] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000007 [ 134.958888][ T9901] RBP: 00007f5248580090 R08: 0000000000000000 R09: 0000000000000000 [ 134.958893][ T9901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.958899][ T9901] R13: 0000000000000000 R14: 00007f52479a5fa0 R15: 00007ffe42dbed58 [ 134.958911][ T9901] [ 135.089491][ T9904] netlink: 'syz.4.1250': attribute type 1 has an invalid length. [ 135.091946][ T9904] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1250'. [ 135.320495][ T39] audit: type=1326 audit(1740659869.119:5174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.4.1253" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524778d169 code=0x7fc00000 [ 135.433193][ T39] audit: type=1400 audit(1740659869.239:5175): avc: denied { write } for pid=9918 comm="syz.4.1255" laddr=172.20.20.10 lport=3 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 135.443338][ T9919] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 135.945941][ T9936] 9p: Unknown Cache mode or invalid value fsca [ 135.999193][ T9945] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 136.097911][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1267'. [ 136.169528][ T9961] wg0: entered promiscuous mode [ 136.174899][ T39] audit: type=1400 audit(1740659869.979:5176): avc: denied { getopt } for pid=9954 comm="syz.6.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 137.014115][ T9978] 9p: Unknown Cache mode or invalid value fsca [ 137.067537][ T9986] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 137.138892][ T9998] netlink: 'syz.4.1283': attribute type 1 has an invalid length. [ 137.141154][ T9998] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1283'. [ 137.149567][T10001] netlink: 'syz.6.1284': attribute type 5 has an invalid length. [ 137.168653][T10004] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1285'. [ 137.351695][ T39] audit: type=1400 audit(1740659871.149:5177): avc: denied { write } for pid=10020 comm="syz.6.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 137.505505][T10028] 9p: Unknown Cache mode or invalid value fsca [ 137.555427][T10027] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 137.708465][T10038] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1294'. [ 137.829824][T10044] fuse: Bad value for 'rootmode' [ 137.833993][ T39] audit: type=1326 audit(1740659871.639:5178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9979 comm="syz.2.1275" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3398d169 code=0x7fc00000 [ 137.856209][ T39] audit: type=1326 audit(1740659871.659:5179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10045 comm="syz.6.1298" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11c698d169 code=0x0 [ 137.995110][T10054] 9p: Unknown Cache mode or invalid value fsca [ 138.024788][T10058] netlink: 204988 bytes leftover after parsing attributes in process `syz.6.1302'. [ 138.045828][T10059] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 138.057844][T10061] netlink: 'syz.6.1303': attribute type 1 has an invalid length. [ 138.067225][T10061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.085072][T10061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.087994][T10061] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 138.093895][T10061] bond1: (slave vti0): Error -95 calling set_mac_address [ 138.126243][T10065] xt_TPROXY: Can be used only with -p tcp or -p udp [ 138.129468][T10065] tipc: Enabling not permitted [ 138.131238][T10065] tipc: Enabling of bearer rejected, failed to enable media [ 138.174967][T10074] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 138.177524][T10074] overlayfs: missing 'lowerdir' [ 138.324437][T10089] netlink: 'syz.2.1311': attribute type 1 has an invalid length. [ 138.326703][T10090] 9p: Unknown Cache mode or invalid value fsca [ 138.327714][T10089] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1311'. [ 138.340306][ T39] audit: type=1326 audit(1740659872.139:5180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.5.1307" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca658d169 code=0x7fc00000 [ 138.376597][T10087] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 138.465695][T10101] netlink: 'syz.5.1314': attribute type 1 has an invalid length. [ 138.473923][T10101] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.481131][T10101] bond1: (slave ip6erspan0): making interface the new active one [ 138.484723][T10101] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 138.523996][ T56] libceph: connect (1)[c::]:6789 error -101 [ 138.526269][ T56] libceph: mon0 (1)[c::]:6789 connect error [ 138.578063][ T948] libceph: connect (1)[c::]:6789 error -101 [ 138.579982][ T948] libceph: mon0 (1)[c::]:6789 connect error [ 138.615210][T10119] kvm: user requested TSC rate below hardware speed [ 138.667253][T10123] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1321'. [ 138.764906][T10130] 9p: Unknown Cache mode or invalid value fsca [ 138.785214][ T56] libceph: connect (1)[c::]:6789 error -101 [ 138.787626][ T56] libceph: mon0 (1)[c::]:6789 connect error [ 138.816976][T10135] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 138.843895][ T5996] libceph: connect (1)[c::]:6789 error -101 [ 138.846409][ T5996] libceph: mon0 (1)[c::]:6789 connect error [ 138.937000][T10151] netlink: 'syz.4.1329': attribute type 2 has an invalid length. [ 138.951648][T10150] lo speed is unknown, defaulting to 1000 [ 138.952110][T10151] netlink: 'syz.4.1329': attribute type 11 has an invalid length. [ 138.956288][T10151] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1329'. [ 139.152861][T10157] lo speed is unknown, defaulting to 1000 [ 139.231008][ T39] audit: type=1400 audit(1740659873.029:5181): avc: denied { setopt } for pid=10162 comm="syz.5.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 139.232187][T10162] delete_channel: no stack [ 139.304894][ T56] libceph: connect (1)[c::]:6789 error -101 [ 139.307167][ T56] libceph: mon0 (1)[c::]:6789 connect error [ 139.353587][ T5996] libceph: connect (1)[c::]:6789 error -101 [ 139.355511][ T5996] libceph: mon0 (1)[c::]:6789 connect error [ 139.656962][ T39] audit: type=1400 audit(1740659873.459:5182): avc: denied { write } for pid=10192 comm="syz.5.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 139.663548][T10100] ceph: No mds server is up or the cluster is laggy [ 139.666803][T10116] ceph: No mds server is up or the cluster is laggy [ 139.744108][T10202] FAULT_INJECTION: forcing a failure. [ 139.744108][T10202] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 139.755371][T10202] CPU: 3 UID: 0 PID: 10202 Comm: syz.6.1342 Not tainted 6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0 [ 139.755393][T10202] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 139.755403][T10202] Call Trace: [ 139.755407][T10202] [ 139.755413][T10202] dump_stack_lvl+0x16c/0x1f0 [ 139.755436][T10202] should_fail_ex+0x50a/0x650 [ 139.755459][T10202] ? __pfx___might_resched+0x10/0x10 [ 139.755486][T10202] should_fail_alloc_page+0xe7/0x130 [ 139.755505][T10202] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 139.755529][T10202] ? ip6_finish_output2+0xb65/0x20a0 [ 139.755550][T10202] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 139.755570][T10202] ? find_held_lock+0x2d/0x110 [ 139.755589][T10202] ? ip6_send_skb+0x225/0x460 [ 139.755607][T10202] ? __pfx_lock_release+0x10/0x10 [ 139.755630][T10202] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 139.755648][T10202] ? mark_lock+0xb5/0xc60 [ 139.755672][T10202] ? mark_lock+0xb5/0xc60 [ 139.755693][T10202] ? hlock_class+0x4e/0x130 [ 139.755709][T10202] ? __pfx_mark_lock+0x10/0x10 [ 139.755728][T10202] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 139.755754][T10202] ? policy_nodemask+0xea/0x4e0 [ 139.755773][T10202] alloc_pages_mpol+0x1fc/0x540 [ 139.755791][T10202] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 139.755810][T10202] ? find_held_lock+0x2d/0x110 [ 139.755829][T10202] folio_alloc_mpol_noprof+0x36/0x2f0 [ 139.755850][T10202] vma_alloc_folio_noprof+0xee/0x1b0 [ 139.755870][T10202] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 139.755891][T10202] ? __pfx___lock_acquire+0x10/0x10 [ 139.755916][T10202] do_wp_page+0x105a/0x4670 [ 139.755943][T10202] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 139.755965][T10202] ? __pfx_do_wp_page+0x10/0x10 [ 139.755986][T10202] ? rcu_is_watching+0x12/0xc0 [ 139.756004][T10202] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 139.756024][T10202] ? lock_acquire+0x2f/0xb0 [ 139.756043][T10202] ? __handle_mm_fault+0xf22/0x2c60 [ 139.756062][T10202] __handle_mm_fault+0x1c7c/0x2c60 [ 139.756083][T10202] ? __pfx___handle_mm_fault+0x10/0x10 [ 139.756110][T10202] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 139.756146][T10202] ? find_vma+0xc0/0x140 [ 139.756167][T10202] ? __pfx_find_vma+0x10/0x10 [ 139.756190][T10202] handle_mm_fault+0x3fa/0xaa0 [ 139.756210][T10202] do_user_addr_fault+0x7a3/0x13f0 [ 139.756236][T10202] exc_page_fault+0x5c/0xc0 [ 139.756254][T10202] asm_exc_page_fault+0x26/0x30 [ 139.756273][T10202] RIP: 0010:__put_user_4+0x11/0x20 [ 139.756291][T10202] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 139.756306][T10202] RSP: 0018:ffffc9000651fcf0 EFLAGS: 00050202 [ 139.756318][T10202] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00004000000092f8 [ 139.756327][T10202] RDX: ffff888050872440 RSI: ffffffff8928d86a RDI: ffffffff8bd35740 [ 139.756337][T10202] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff20c4aa2 [ 139.756346][T10202] R10: ffffffff90625517 R11: 0000000000000000 R12: 0000000000040000 [ 139.756355][T10202] R13: 00004000000092c0 R14: 00000000000003ff R15: 0000000000000400 [ 139.756371][T10202] ? __sys_sendmmsg+0x22a/0x420 [ 139.756396][T10202] __sys_sendmmsg+0x235/0x420 [ 139.756419][T10202] ? __pfx___sys_sendmmsg+0x10/0x10 [ 139.756448][T10202] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 139.756475][T10202] ? fput+0x67/0x440 [ 139.756494][T10202] ? ksys_write+0x1ba/0x250 [ 139.756517][T10202] ? __pfx_ksys_write+0x10/0x10 [ 139.756544][T10202] __x64_sys_sendmmsg+0x9c/0x100 [ 139.756564][T10202] ? lockdep_hardirqs_on+0x7c/0x110 [ 139.756581][T10202] do_syscall_64+0xcd/0x250 [ 139.756601][T10202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.756622][T10202] RIP: 0033:0x7f11c698d169 [ 139.756633][T10202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.756646][T10202] RSP: 002b:00007f11c784c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 139.756659][T10202] RAX: ffffffffffffffda RBX: 00007f11c6ba5fa0 RCX: 00007f11c698d169 [ 139.756669][T10202] RDX: 00000000000004ff RSI: 00004000000092c0 RDI: 0000000000000003 [ 139.756678][T10202] RBP: 00007f11c784c090 R08: 0000000000000000 R09: 0000000000000000 [ 139.756686][T10202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.756695][T10202] R13: 0000000000000000 R14: 00007f11c6ba5fa0 R15: 00007ffcfb0f0148 [ 139.756715][T10202] [ 139.915371][T10199] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1341'. [ 139.942021][T10205] netlink: 'syz.6.1344': attribute type 1 has an invalid length. [ 139.945044][T10205] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.1344'. [ 140.002269][T10222] netlink: 'syz.6.1348': attribute type 1 has an invalid length. [ 140.019689][T10222] 8021q: adding VLAN 0 to HW filter on device bond2 [ 140.043344][T10222] bond2: (slave ip6erspan0): making interface the new active one [ 140.051852][T10222] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 140.058145][T10233] 9p: Unknown Cache mode or invalid value fsca [ 140.084271][T10239] random: crng reseeded on system resumption [ 140.087194][T10238] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 140.088567][T10240] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1354'. [ 140.090437][T10238] nvme_fabrics: unknown parameter or missing value '#! ./file0 syz0' in ctrl creation request [ 140.091450][ T39] audit: type=1400 audit(1740659873.889:5183): avc: denied { setattr } for pid=10236 comm="syz.6.1353" name="nvme-fabrics" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 140.112314][T10223] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 140.119130][T10242] netlink: 'syz.4.1355': attribute type 9 has an invalid length. [ 140.765701][T10281] lo speed is unknown, defaulting to 1000 [ 140.815266][T10287] batadv_slave_1: entered promiscuous mode [ 140.825294][T10287] geneve2: entered promiscuous mode [ 140.827603][T10287] geneve2: entered allmulticast mode [ 140.903121][T10286] batadv_slave_1: left promiscuous mode [ 141.006376][T10306] 9p: Unknown Cache mode or invalid value fsca [ 141.066800][T10299] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 141.100398][T10313] FAULT_INJECTION: forcing a failure. [ 141.100398][T10313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.106187][T10313] CPU: 1 UID: 0 PID: 10313 Comm: syz.5.1376 Not tainted 6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0 [ 141.106201][T10313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 141.106218][T10313] Call Trace: [ 141.106222][T10313] [ 141.106226][T10313] dump_stack_lvl+0x16c/0x1f0 [ 141.106254][T10313] should_fail_ex+0x50a/0x650 [ 141.106277][T10313] _copy_from_user+0x2e/0xd0 [ 141.106288][T10313] copy_msghdr_from_user+0x99/0x160 [ 141.106303][T10313] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 141.106320][T10313] ? __pfx_lock_release+0x10/0x10 [ 141.106334][T10313] ? find_held_lock+0x2d/0x110 [ 141.106347][T10313] ___sys_sendmsg+0xff/0x1e0 [ 141.106359][T10313] ? __up_read+0x1fb/0x760 [ 141.106375][T10313] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.106388][T10313] ? handle_mm_fault+0x497/0xaa0 [ 141.106409][T10313] ? __pfx___might_resched+0x10/0x10 [ 141.106425][T10313] ? __sys_sendmmsg+0x22a/0x420 [ 141.106440][T10313] __sys_sendmmsg+0x201/0x420 [ 141.106455][T10313] ? __pfx___sys_sendmmsg+0x10/0x10 [ 141.106472][T10313] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 141.106490][T10313] ? fput+0x67/0x440 [ 141.106502][T10313] ? ksys_write+0x1ba/0x250 [ 141.106517][T10313] ? __pfx_ksys_write+0x10/0x10 [ 141.106535][T10313] __x64_sys_sendmmsg+0x9c/0x100 [ 141.106548][T10313] ? lockdep_hardirqs_on+0x7c/0x110 [ 141.106560][T10313] do_syscall_64+0xcd/0x250 [ 141.106573][T10313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.106587][T10313] RIP: 0033:0x7f1ca658d169 [ 141.106595][T10313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.106604][T10313] RSP: 002b:00007f1ca74d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 141.106614][T10313] RAX: ffffffffffffffda RBX: 00007f1ca67a5fa0 RCX: 00007f1ca658d169 [ 141.106620][T10313] RDX: 00000000000004ff RSI: 00004000000092c0 RDI: 0000000000000003 [ 141.106626][T10313] RBP: 00007f1ca74d0090 R08: 0000000000000000 R09: 0000000000000000 [ 141.106631][T10313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.106637][T10313] R13: 0000000000000000 R14: 00007f1ca67a5fa0 R15: 00007ffc3d879ab8 [ 141.106648][T10313] [ 141.295454][T10326] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1379'. [ 141.436265][T10339] netlink: 'syz.2.1384': attribute type 1 has an invalid length. [ 141.462603][T10339] 8021q: adding VLAN 0 to HW filter on device bond5 [ 141.557100][T10345] 9p: Unknown Cache mode or invalid value fsca [ 141.607426][T10343] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 141.749440][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 141.749449][ T39] audit: type=1400 audit(1740659875.549:5187): avc: denied { write } for pid=10355 comm="syz.2.1388" path="socket:[42420]" dev="sockfs" ino=42420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 141.764663][ T39] audit: type=1400 audit(1740659875.569:5188): avc: denied { mount } for pid=10355 comm="syz.2.1388" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 141.766446][T10356] overlayfs: missing 'lowerdir' [ 141.780870][ T39] audit: type=1400 audit(1740659875.579:5189): avc: denied { module_request } for pid=10355 comm="syz.2.1388" kmod="crypto-echainiv(aegis128)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 141.910834][ T39] audit: type=1400 audit(1740659875.709:5190): avc: denied { listen } for pid=10364 comm="syz.6.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 141.918657][ T39] audit: type=1400 audit(1740659875.719:5191): avc: denied { accept } for pid=10364 comm="syz.6.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 142.044690][ T39] audit: type=1400 audit(1740659875.849:5192): avc: denied { unmount } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 142.078191][T10382] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1390'. [ 142.402252][ T5292] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 142.406162][ T5292] Bluetooth: hci1: Injecting HCI hardware error event [ 142.410898][ T5292] Bluetooth: hci1: hardware error 0x00 [ 142.834340][T10403] 9pnet: Limiting 'msize' to 512000 as this is the maximum supported by transport virtio [ 142.949264][T10418] 9pnet_virtio: no channels available for device syz [ 142.952704][T10418] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 142.977019][T10307] siw: device registration error -23 [ 143.034357][ T39] audit: type=1400 audit(1740659876.839:5193): avc: denied { wake_alarm } for pid=10422 comm="syz.6.1406" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 143.430292][T10440] netlink: 'syz.4.1411': attribute type 6 has an invalid length. [ 143.434684][ T39] audit: type=1400 audit(1740659877.239:5194): avc: denied { name_connect } for pid=10439 comm="syz.4.1411" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 143.735948][T10455] random: crng reseeded on system resumption [ 144.133880][T10470] 9p: Unknown Cache mode or invalid value fsca [ 144.187660][T10473] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 144.483242][ T5292] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 144.608109][T10492] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 144.611280][T10492] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 144.627841][T10492] lo speed is unknown, defaulting to 1000 [ 144.699091][T10498] 9p: Unknown Cache mode or invalid value fsca [ 144.715543][T10501] FAULT_INJECTION: forcing a failure. [ 144.715543][T10501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.721171][T10501] CPU: 0 UID: 0 PID: 10501 Comm: syz.6.1433 Not tainted 6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0 [ 144.721191][T10501] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.721200][T10501] Call Trace: [ 144.721205][T10501] [ 144.721218][T10501] dump_stack_lvl+0x16c/0x1f0 [ 144.721242][T10501] should_fail_ex+0x50a/0x650 [ 144.721268][T10501] _copy_to_user+0x32/0xd0 [ 144.721285][T10501] simple_read_from_buffer+0xd0/0x160 [ 144.721308][T10501] proc_fail_nth_read+0x198/0x270 [ 144.721329][T10501] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.721349][T10501] ? rw_verify_area+0xcf/0x680 [ 144.721369][T10501] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.721389][T10501] vfs_read+0x1df/0xbf0 [ 144.721411][T10501] ? __fget_files+0x1fc/0x3a0 [ 144.721427][T10501] ? __pfx___mutex_lock+0x10/0x10 [ 144.721446][T10501] ? __pfx_vfs_read+0x10/0x10 [ 144.721477][T10501] ? __fget_files+0x206/0x3a0 [ 144.721497][T10501] ksys_read+0x12b/0x250 [ 144.721519][T10501] ? __pfx_ksys_read+0x10/0x10 [ 144.721549][T10501] do_syscall_64+0xcd/0x250 [ 144.721568][T10501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.721588][T10501] RIP: 0033:0x7f11c698bb7c [ 144.721601][T10501] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 144.721614][T10501] RSP: 002b:00007f11c784c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.721629][T10501] RAX: ffffffffffffffda RBX: 00007f11c6ba5fa0 RCX: 00007f11c698bb7c [ 144.721639][T10501] RDX: 000000000000000f RSI: 00007f11c784c0a0 RDI: 0000000000000004 [ 144.721649][T10501] RBP: 00007f11c784c090 R08: 0000000000000000 R09: 0000000000000000 [ 144.721657][T10501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.721666][T10501] R13: 0000000000000000 R14: 00007f11c6ba5fa0 R15: 00007ffcfb0f0148 [ 144.721686][T10501] [ 144.750064][T10496] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 144.794656][T10505] random: crng reseeded on system resumption [ 144.865879][T10508] netlink: 'syz.2.1436': attribute type 1 has an invalid length. [ 144.876288][T10508] 8021q: adding VLAN 0 to HW filter on device bond6 [ 145.151076][T10532] 9p: Unknown Cache mode or invalid value fsca [ 145.203147][T10530] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 145.759846][ T39] audit: type=1326 audit(1740659879.559:5195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10510 comm="syz.2.1437" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3398d169 code=0x7fc00000 [ 145.774131][ T39] audit: type=1326 audit(1740659879.559:5196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10510 comm="syz.2.1437" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f3398d169 code=0x7fc00000 [ 145.798592][T10549] netlink: 'syz.4.1450': attribute type 5 has an invalid length. [ 145.883516][T10559] netlink: 'syz.2.1455': attribute type 1 has an invalid length. [ 145.885974][T10559] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1455'. [ 145.903094][T10561] FAULT_INJECTION: forcing a failure. [ 145.903094][T10561] name failslab, interval 1, probability 0, space 0, times 0 [ 145.910374][T10561] CPU: 0 UID: 0 PID: 10561 Comm: syz.5.1454 Not tainted 6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0 [ 145.910390][T10561] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 145.910397][T10561] Call Trace: [ 145.910407][T10561] [ 145.910411][T10561] dump_stack_lvl+0x16c/0x1f0 [ 145.910439][T10561] should_fail_ex+0x50a/0x650 [ 145.910463][T10561] should_failslab+0xc2/0x120 [ 145.910476][T10561] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 145.910487][T10561] ? rcu_is_watching+0x12/0xc0 [ 145.910498][T10561] ? __alloc_skb+0x2b1/0x380 [ 145.910514][T10561] __alloc_skb+0x2b1/0x380 [ 145.910527][T10561] ? __pfx___alloc_skb+0x10/0x10 [ 145.910542][T10561] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 145.910561][T10561] __netdev_alloc_skb+0x213/0x920 [ 145.910576][T10561] ? __pfx_tty_audit_tiocsti+0x10/0x10 [ 145.910589][T10561] ldisc_receive+0x11c/0x5e0 [ 145.910606][T10561] ? __pfx_ldisc_receive+0x10/0x10 [ 145.910623][T10561] tty_ioctl+0x575/0x15d0 [ 145.910636][T10561] ? __pfx_tty_ioctl+0x10/0x10 [ 145.910649][T10561] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 145.910669][T10561] ? __pfx_lock_release+0x10/0x10 [ 145.910689][T10561] ? selinux_file_ioctl+0x180/0x270 [ 145.910705][T10561] ? selinux_file_ioctl+0xb4/0x270 [ 145.910722][T10561] ? __pfx_tty_ioctl+0x10/0x10 [ 145.910735][T10561] __x64_sys_ioctl+0x190/0x200 [ 145.910751][T10561] do_syscall_64+0xcd/0x250 [ 145.910765][T10561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.910781][T10561] RIP: 0033:0x7f1ca658d169 [ 145.910790][T10561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.910799][T10561] RSP: 002b:00007f1ca74d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.910810][T10561] RAX: ffffffffffffffda RBX: 00007f1ca67a5fa0 RCX: 00007f1ca658d169 [ 145.910816][T10561] RDX: 0000400000000040 RSI: 0000000000005412 RDI: 0000000000000003 [ 145.910822][T10561] RBP: 00007f1ca74d0090 R08: 0000000000000000 R09: 0000000000000000 [ 145.910828][T10561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.910833][T10561] R13: 0000000000000000 R14: 00007f1ca67a5fa0 R15: 00007ffc3d879ab8 [ 145.910847][T10561] [ 145.994893][T10557] 9p: Unknown Cache mode or invalid value fsca [ 146.037157][T10570] FAULT_INJECTION: forcing a failure. [ 146.037157][T10570] name failslab, interval 1, probability 0, space 0, times 0 [ 146.041028][T10570] CPU: 2 UID: 0 PID: 10570 Comm: syz.2.1459 Not tainted 6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0 [ 146.041041][T10570] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.041047][T10570] Call Trace: [ 146.041051][T10570] [ 146.041055][T10570] dump_stack_lvl+0x16c/0x1f0 [ 146.041073][T10570] should_fail_ex+0x50a/0x650 [ 146.041089][T10570] ? fs_reclaim_acquire+0xae/0x150 [ 146.041109][T10570] ? tomoyo_realpath_from_path+0xb9/0x720 [ 146.041172][T10570] should_failslab+0xc2/0x120 [ 146.041191][T10570] __kmalloc_noprof+0xcb/0x510 [ 146.041205][T10570] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 146.041232][T10570] tomoyo_realpath_from_path+0xb9/0x720 [ 146.041253][T10570] ? tomoyo_path_number_perm+0x235/0x590 [ 146.041272][T10570] ? tomoyo_path_number_perm+0x235/0x590 [ 146.041292][T10570] tomoyo_path_number_perm+0x248/0x590 [ 146.041309][T10570] ? tomoyo_path_number_perm+0x235/0x590 [ 146.041392][T10570] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 146.041424][T10570] ? __pfx_lock_release+0x10/0x10 [ 146.041438][T10570] ? trace_lock_acquire+0x14e/0x1f0 [ 146.041456][T10570] ? lock_acquire+0x2f/0xb0 [ 146.041469][T10570] ? __fget_files+0x40/0x3a0 [ 146.041481][T10570] ? __fget_files+0x206/0x3a0 [ 146.041492][T10570] security_file_ioctl+0x9b/0x240 [ 146.041507][T10570] __x64_sys_ioctl+0xb7/0x200 [ 146.041522][T10570] do_syscall_64+0xcd/0x250 [ 146.041536][T10570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.041550][T10570] RIP: 0033:0x7f1f3398d169 [ 146.041558][T10570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.041568][T10570] RSP: 002b:00007f1f348a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.041578][T10570] RAX: ffffffffffffffda RBX: 00007f1f33ba5fa0 RCX: 00007f1f3398d169 [ 146.041584][T10570] RDX: 0000400000000440 RSI: 00000000c080aebe RDI: 0000000000000005 [ 146.041590][T10570] RBP: 00007f1f348a9090 R08: 0000000000000000 R09: 0000000000000000 [ 146.041596][T10570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.041601][T10570] R13: 0000000000000000 R14: 00007f1f33ba5fa0 R15: 00007fff452cdf78 [ 146.041613][T10570] [ 146.041617][T10570] ERROR: Out of memory at tomoyo_realpath_from_path. [ 146.048846][T10572] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 146.050256][T10571] FAULT_INJECTION: forcing a failure. [ 146.050256][T10571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.124876][T10571] CPU: 3 UID: 0 PID: 10571 Comm: syz.6.1451 Not tainted 6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0 [ 146.124889][T10571] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.124896][T10571] Call Trace: [ 146.124899][T10571] [ 146.124904][T10571] dump_stack_lvl+0x16c/0x1f0 [ 146.124921][T10571] should_fail_ex+0x50a/0x650 [ 146.124938][T10571] __kvm_write_guest_page+0x187/0x260 [ 146.124953][T10571] kvm_vcpu_write_guest+0x8c/0x130 [ 146.124975][T10571] nested_vmx_vmexit+0x2477/0x3f30 [ 146.124995][T10571] ? __pfx_nested_vmx_vmexit+0x10/0x10 [ 146.125017][T10571] ? nested_vmx_reflect_vmexit+0x1a96/0x3f90 [ 146.125032][T10571] nested_vmx_reflect_vmexit+0x1a96/0x3f90 [ 146.125051][T10571] ? __pfx_nested_vmx_reflect_vmexit+0x10/0x10 [ 146.125072][T10571] vmx_handle_exit+0x1b2/0x1a30 [ 146.125084][T10571] vcpu_run+0x3032/0x4f50 [ 146.125095][T10571] ? __pfx___schedule+0x10/0x10 [ 146.125111][T10571] ? __pfx_vcpu_run+0x10/0x10 [ 146.125121][T10571] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 146.125154][T10571] ? rcu_is_watching+0x12/0xc0 [ 146.125164][T10571] ? trace_lock_acquire+0x14e/0x1f0 [ 146.125175][T10571] ? __local_bh_enable_ip+0xa4/0x120 [ 146.125191][T10571] ? lockdep_hardirqs_on+0x7c/0x110 [ 146.125202][T10571] ? kvm_arch_vcpu_ioctl_run+0x1a8/0x17f0 [ 146.125217][T10571] ? kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 146.125228][T10571] kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 146.125243][T10571] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 146.125257][T10571] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 146.125272][T10571] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 146.125290][T10571] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 146.125308][T10571] ? __pfx_lock_release+0x10/0x10 [ 146.125327][T10571] ? selinux_file_ioctl+0x180/0x270 [ 146.125342][T10571] ? selinux_file_ioctl+0xb4/0x270 [ 146.125358][T10571] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 146.125370][T10571] __x64_sys_ioctl+0x190/0x200 [ 146.125386][T10571] do_syscall_64+0xcd/0x250 [ 146.125400][T10571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.125414][T10571] RIP: 0033:0x7f11c698d169 [ 146.125422][T10571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.125431][T10571] RSP: 002b:00007f11c782b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.125441][T10571] RAX: ffffffffffffffda RBX: 00007f11c6ba6080 RCX: 00007f11c698d169 [ 146.125447][T10571] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 146.125453][T10571] RBP: 00007f11c782b090 R08: 0000000000000000 R09: 0000000000000000 [ 146.125459][T10571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.125464][T10571] R13: 0000000000000001 R14: 00007f11c6ba6080 R15: 00007ffcfb0f0148 [ 146.125476][T10571] [ 146.362535][T10584] netlink: 'syz.6.1462': attribute type 1 has an invalid length. [ 146.395800][T10584] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.712460][T10610] Context (ID=0x0) not attached to queue pair (handle=0x2:0x3) [ 147.214404][ T39] kauditd_printk_skb: 697 callbacks suppressed [ 147.214420][ T39] audit: type=1326 audit(1740659881.019:5894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10588 comm="syz.2.1464" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3398d169 code=0x7fc00000 [ 147.227841][ T39] audit: type=1326 audit(1740659881.019:5895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10588 comm="syz.2.1464" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f3398d169 code=0x7fc00000 [ 147.237605][ T39] audit: type=1326 audit(1740659881.019:5896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10588 comm="syz.2.1464" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3398d169 code=0x7fc00000 [ 147.246644][ T39] audit: type=1326 audit(1740659881.019:5897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10588 comm="syz.2.1464" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3398d169 code=0x7fc00000 [ 147.255273][ T39] audit: type=1326 audit(1740659881.019:5898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10588 comm="syz.2.1464" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3398d169 code=0x7fc00000 [ 147.264042][ T39] audit: type=1326 audit(1740659881.019:5899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10588 comm="syz.2.1464" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3398d169 code=0x7fc00000 [ 147.272843][ T39] audit: type=1326 audit(1740659881.019:5900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10588 comm="syz.2.1464" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3398d169 code=0x7fc00000 [ 147.281381][ T39] audit: type=1326 audit(1740659881.019:5901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10588 comm="syz.2.1464" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3398d169 code=0x7fc00000 [ 147.290722][ T39] audit: type=1326 audit(1740659881.019:5902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10588 comm="syz.2.1464" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3398d169 code=0x7fc00000 [ 147.299486][ T39] audit: type=1326 audit(1740659881.019:5903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10588 comm="syz.2.1464" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3398d169 code=0x7fc00000 [ 147.495444][T10621] JFS: discard option not supported on device [ 147.497971][T10621] syz.2.1476: attempt to access beyond end of device [ 147.497971][T10621] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 147.501804][T10621] syz.2.1476: attempt to access beyond end of device [ 147.501804][T10621] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 147.505859][T10621] Mount JFS Failure: -5 [ 147.608593][T10630] fuse: Bad value for 'rootmode' [ 147.695764][T10640] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1483'. [ 147.725037][T10642] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 148.136211][T10657] FAULT_INJECTION: forcing a failure. [ 148.136211][T10657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.140359][T10657] CPU: 1 UID: 0 PID: 10657 Comm: syz.6.1489 Not tainted 6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0 [ 148.140372][T10657] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 148.140378][T10657] Call Trace: [ 148.140387][T10657] [ 148.140392][T10657] dump_stack_lvl+0x16c/0x1f0 [ 148.140418][T10657] should_fail_ex+0x50a/0x650 [ 148.140441][T10657] __kvm_write_guest_page+0x187/0x260 [ 148.140456][T10657] kvm_vcpu_write_guest+0x8c/0x130 [ 148.140472][T10657] nested_vmx_vmexit+0x2477/0x3f30 [ 148.140493][T10657] ? __pfx_nested_vmx_vmexit+0x10/0x10 [ 148.140514][T10657] ? nested_vmx_reflect_vmexit+0x1a96/0x3f90 [ 148.140530][T10657] nested_vmx_reflect_vmexit+0x1a96/0x3f90 [ 148.140548][T10657] ? __pfx_nested_vmx_reflect_vmexit+0x10/0x10 [ 148.140570][T10657] vmx_handle_exit+0x1b2/0x1a30 [ 148.140582][T10657] vcpu_run+0x3032/0x4f50 [ 148.140598][T10657] ? __pfx_vcpu_run+0x10/0x10 [ 148.140608][T10657] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 148.140624][T10657] ? rcu_is_watching+0x12/0xc0 [ 148.140635][T10657] ? trace_lock_acquire+0x14e/0x1f0 [ 148.140646][T10657] ? __local_bh_enable_ip+0xa4/0x120 [ 148.140661][T10657] ? lockdep_hardirqs_on+0x7c/0x110 [ 148.140671][T10657] ? kvm_arch_vcpu_ioctl_run+0x1a8/0x17f0 [ 148.140686][T10657] ? kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 148.140698][T10657] kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 148.140713][T10657] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 148.140726][T10657] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 148.140741][T10657] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 148.140759][T10657] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 148.140777][T10657] ? __pfx_lock_release+0x10/0x10 [ 148.140796][T10657] ? selinux_file_ioctl+0x180/0x270 [ 148.140811][T10657] ? selinux_file_ioctl+0xb4/0x270 [ 148.140827][T10657] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 148.140840][T10657] __x64_sys_ioctl+0x190/0x200 [ 148.140855][T10657] do_syscall_64+0xcd/0x250 [ 148.140868][T10657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.140887][T10657] RIP: 0033:0x7f11c698d169 [ 148.140895][T10657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.140904][T10657] RSP: 002b:00007f11c782b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.140914][T10657] RAX: ffffffffffffffda RBX: 00007f11c6ba6080 RCX: 00007f11c698d169 [ 148.140920][T10657] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 148.140926][T10657] RBP: 00007f11c782b090 R08: 0000000000000000 R09: 0000000000000000 [ 148.140932][T10657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.140937][T10657] R13: 0000000000000001 R14: 00007f11c6ba6080 R15: 00007ffcfb0f0148 [ 148.140949][T10657] [ 148.229080][ C1] vkms_vblank_simulate: vblank timer overrun [ 148.238048][T10659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10659 comm=syz.2.1490 [ 148.242701][T10661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10661 comm=syz.2.1490 [ 148.473048][T10672] 9p: Unknown Cache mode or invalid value fsca [ 148.518588][T10669] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 148.596719][T10674] netlink: 'syz.6.1494': attribute type 1 has an invalid length. [ 148.604165][T10677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1495'. [ 148.607163][T10677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1495'. [ 148.610159][T10677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1495'. [ 148.614187][T10677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1495'. [ 148.616934][T10677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1495'. [ 148.619647][T10677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1495'. [ 148.622190][T10674] 8021q: adding VLAN 0 to HW filter on device bond4 [ 148.625521][T10677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1495'. [ 148.628440][T10677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1495'. [ 148.777627][T10689] evm: overlay not supported [ 148.924494][ T5292] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 149.204547][T10714] 9p: Unknown Cache mode or invalid value fsca [ 149.245143][T10714] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 149.744455][T10730] netlink: 'syz.2.1514': attribute type 1 has an invalid length. [ 149.866567][T10749] 9p: Unknown Cache mode or invalid value fsca [ 149.916981][T10742] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 150.014398][T10757] netlink: 'syz.4.1525': attribute type 9 has an invalid length. [ 150.108553][T10765] netlink: 'syz.4.1529': attribute type 1 has an invalid length. [ 150.127490][T10765] 8021q: adding VLAN 0 to HW filter on device bond4 [ 150.335466][T10771] 9p: Unknown Cache mode or invalid value fsca [ 150.386588][T10772] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 150.965446][T10789] Bluetooth: MGMT ver 1.23 [ 151.063617][T10793] lo speed is unknown, defaulting to 1000 [ 151.830920][T10829] netlink: 'syz.5.1548': attribute type 1 has an invalid length. [ 151.833252][T10829] __nla_validate_parse: 27 callbacks suppressed [ 151.833260][T10829] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.1548'. [ 152.275289][T10849] netlink: 'syz.5.1557': attribute type 9 has an invalid length. [ 152.278054][T10849] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1557'. [ 152.454884][ T39] kauditd_printk_skb: 509 callbacks suppressed [ 152.454900][ T39] audit: type=1326 audit(1740659886.259:6413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10820 comm="syz.4.1547" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524778d169 code=0x7fc00000 [ 152.565468][T10853] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1558'. [ 152.759374][T10868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1566'. [ 152.760040][T10869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.972417][ T5292] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 152.975197][ T5292] Bluetooth: hci0: Injecting HCI hardware error event [ 152.979214][ T5292] Bluetooth: hci0: hardware error 0x00 [ 152.983654][ T39] audit: type=1400 audit(1740659886.789:6414): avc: denied { setopt } for pid=10877 comm="syz.5.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 153.156853][T10885] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1572'. [ 153.159523][T10885] team_slave_1: entered promiscuous mode [ 153.161720][T10885] team_slave_1: entered allmulticast mode [ 153.276131][T10893] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1575'. [ 153.314326][T10899] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1577'. [ 153.351200][T10901] netlink: 'syz.6.1578': attribute type 1 has an invalid length. [ 153.359559][T10901] 8021q: adding VLAN 0 to HW filter on device bond5 [ 153.495883][ T39] audit: type=1400 audit(1740659887.299:6415): avc: denied { read } for pid=10911 comm="syz.2.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 153.505562][ T39] audit: type=1400 audit(1740659887.309:6416): avc: denied { write } for pid=10911 comm="syz.2.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 153.958179][T10937] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 154.027469][T10944] netlink: 'syz.6.1594': attribute type 1 has an invalid length. [ 154.029731][T10944] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.1594'. [ 154.163281][T10951] netlink: 9 bytes leftover after parsing attributes in process `syz.6.1597'. [ 154.333669][T10961] lo speed is unknown, defaulting to 1000 [ 154.774471][ T5938] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 154.835452][T10983] tmpfs: Cannot change global quota limit on remount [ 155.042343][ T5292] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 155.398100][T10995] netlink: 'syz.5.1611': attribute type 1 has an invalid length. [ 155.416149][T10995] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.429131][ T39] audit: type=1326 audit(1740659889.219:6417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10972 comm="syz.6.1605" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c698d169 code=0x7fc00000 [ 155.551482][ T39] audit: type=1400 audit(1740659889.349:6418): avc: denied { getopt } for pid=11004 comm="syz.5.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.703358][ T39] audit: type=1400 audit(1740659889.509:6419): avc: denied { getopt } for pid=11014 comm="syz.6.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 155.706170][T11015] overlay: ./file0 is not a directory [ 155.771788][T11020] lo speed is unknown, defaulting to 1000 [ 155.793533][ T39] audit: type=1400 audit(1740659889.599:6420): avc: denied { write } for pid=11024 comm="syz.5.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 155.802913][T11026] netlink: 'syz.5.1624': attribute type 1 has an invalid length. [ 155.805978][T11026] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.1624'. [ 155.821404][ T39] audit: type=1400 audit(1740659889.619:6421): avc: denied { bind } for pid=11027 comm="syz.4.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 155.832149][ T39] audit: type=1400 audit(1740659889.619:6422): avc: denied { shutdown } for pid=11027 comm="syz.4.1625" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 155.842351][T11032] gretap0: entered promiscuous mode [ 156.015682][T11054] team_slave_1: entered promiscuous mode [ 156.017416][T11054] team_slave_1: entered allmulticast mode [ 156.019611][T11053] lo speed is unknown, defaulting to 1000 [ 156.064014][T11059] fuse: Invalid rootmode [ 156.522171][ T948] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 156.682221][ T948] usb 11-1: Using ep0 maxpacket: 8 [ 156.690432][ T948] usb 11-1: config 2 has an invalid interface number: 6 but max is 1 [ 156.694264][ T948] usb 11-1: config 2 has an invalid interface number: 207 but max is 1 [ 156.698102][ T948] usb 11-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 156.701334][ T948] usb 11-1: config 2 has an invalid descriptor of length 248, skipping remainder of the config [ 156.710442][ T948] usb 11-1: config 2 has no interface number 0 [ 156.713476][ T948] usb 11-1: config 2 has no interface number 1 [ 156.716005][ T948] usb 11-1: config 2 interface 6 altsetting 8 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 156.719618][ T948] usb 11-1: config 2 interface 6 altsetting 8 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 156.722857][ T948] usb 11-1: config 2 interface 6 altsetting 8 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 156.726613][ T948] usb 11-1: config 2 interface 6 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 156.729468][ T948] usb 11-1: config 2 interface 207 altsetting 171 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 156.733585][ T948] usb 11-1: config 2 interface 6 has no altsetting 0 [ 156.735887][ T948] usb 11-1: config 2 interface 207 has no altsetting 0 [ 156.741415][ T948] usb 11-1: New USB device found, idVendor=04b4, idProduct=931f, bcdDevice=aa.d3 [ 156.744489][ T948] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.747329][ T948] usb 11-1: Product: ꕲ槤ꦆຠ′㦃튖깊洂ጆ椯엶邧륖鷗谝ࡥ⁆۷헳ڝ谱믎㉦⡞쐷⿕䦑毑閙魷⑸쏵險㓘⁊ᅄꬹ읚깔䡪┕즏Ⳃ䵓䫎頳⍟偶⺈⺜걨㹕⸧㙬̮偳㢱싳쳐傗葓㡋跴濱灒⠔둵⦚窴ễ凅䲯┺瑸穰헝퀝ꭈ聛扥䎗퐫陮ႉ鐔ꃯᄸೄﭦ菂 [ 156.756145][ T948] usb 11-1: SerialNumber: и [ 156.832194][T11096] 9p: Unknown Cache mode or invalid value fsca [ 156.883332][T11097] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 156.968360][T11062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.972253][T11062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.980631][ T948] usb 11-1: can't set first interface for hiFace device. [ 156.982888][ T948] snd-usb-hiface 11-1:2.6: probe with driver snd-usb-hiface failed with error -5 [ 156.991076][ T948] usb 11-1: can't set first interface for hiFace device. [ 156.993059][ T948] snd-usb-hiface 11-1:2.207: probe with driver snd-usb-hiface failed with error -5 [ 156.996221][ T948] usb 11-1: USB disconnect, device number 2 [ 157.586422][T11120] __nla_validate_parse: 6 callbacks suppressed [ 157.586434][T11120] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1662'. [ 157.590626][T11121] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1663'. [ 157.593858][T11121] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1663'. [ 157.613439][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 157.613449][ T39] audit: type=1400 audit(1740659891.409:6428): avc: denied { mount } for pid=11119 comm="syz.5.1663" name="/" dev="pstore" ino=1858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 157.633969][ T39] audit: type=1400 audit(1740659891.439:6429): avc: denied { unmount } for pid=8845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 157.637053][T11124] lo speed is unknown, defaulting to 1000 [ 157.644030][ T39] audit: type=1400 audit(1740659891.449:6430): avc: denied { unmount } for pid=8845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 157.911406][T11131] fuse: Bad value for 'fd' [ 158.118672][ T8300] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.133079][T11141] tmpfs: Bad value for 'mpol' [ 158.147400][ T5938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 158.152001][ T5938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 158.155641][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 158.160804][ T5938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 158.165493][ T5938] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 158.168264][ T5938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 158.190772][T11141] kvm: pic: single mode not supported [ 158.191332][T11141] kvm: pic: single mode not supported [ 158.200796][T11141] kvm: pic: single mode not supported [ 158.203146][ T8300] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.211761][T11141] kvm: pic: single mode not supported [ 158.214994][T11141] kvm: pic: single mode not supported [ 158.217984][T11141] kvm: pic: single mode not supported [ 158.220305][T11141] kvm: pic: single mode not supported [ 158.222711][T11143] lo speed is unknown, defaulting to 1000 [ 158.290421][ T8300] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.323459][T11143] chnl_net:caif_netlink_parms(): no params data found [ 158.416439][ T8300] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.421130][T11143] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.425463][T11143] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.427584][T11143] bridge_slave_0: entered allmulticast mode [ 158.429881][T11143] bridge_slave_0: entered promiscuous mode [ 158.432824][T11143] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.435035][T11143] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.437162][T11143] bridge_slave_1: entered allmulticast mode [ 158.439385][T11143] bridge_slave_1: entered promiscuous mode [ 158.467407][T11143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.471213][T11143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.512366][T11143] team0: Port device team_slave_0 added [ 158.519380][T11143] team0: Port device team_slave_1 added [ 158.556281][T11143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.558452][T11143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.567959][T11143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.569198][T11159] 9p: Unknown Cache mode or invalid value fsca [ 158.583613][T11143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.585741][T11143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.596078][T11143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.616102][ T8300] bridge_slave_1: left allmulticast mode [ 158.617665][T11158] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 158.618287][ T8300] bridge_slave_1: left promiscuous mode [ 158.623524][ T8300] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.628284][ T8300] bridge_slave_0: left allmulticast mode [ 158.630081][ T8300] bridge_slave_0: left promiscuous mode [ 158.632388][ T8300] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.709803][ T8300] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 158.992483][ T8300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.997875][ T8300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.002214][ T8300] bond0 (unregistering): Released all slaves [ 159.083531][ T8300] bond1 (unregistering): Released all slaves [ 159.161932][ T8300] bond2 (unregistering): Released all slaves [ 159.216091][T11143] hsr_slave_0: entered promiscuous mode [ 159.218026][T11143] hsr_slave_1: entered promiscuous mode [ 159.388512][T11143] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 159.392723][T11143] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 159.396743][T11143] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 159.407378][T11143] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 159.434429][T11183] 9p: Unknown Cache mode or invalid value fsca [ 159.483125][T11143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.495192][T11143] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.496417][T11179] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 159.500210][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.503361][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.516633][ T8303] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.518784][ T8303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.523442][ T39] audit: type=1326 audit(1740659893.319:6431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11163 comm="syz.2.1677" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3398d169 code=0x7fc00000 [ 159.589664][ T8300] hsr_slave_0: left promiscuous mode [ 159.612914][ T8300] hsr_slave_1: left promiscuous mode [ 159.614858][ T8300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.617015][ T8300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.619515][ T8300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.621613][ T8300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.649609][ T8300] veth1_macvtap: left promiscuous mode [ 159.651197][ T8300] veth0_macvtap: left promiscuous mode [ 159.653028][ T8300] veth1_vlan: left promiscuous mode [ 159.654607][ T8300] veth0_vlan: left promiscuous mode [ 159.775527][ T39] audit: type=1400 audit(1740659893.579:6432): avc: denied { read write } for pid=11197 comm="syz.4.1686" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 159.783829][ T39] audit: type=1400 audit(1740659893.579:6433): avc: denied { open } for pid=11197 comm="syz.4.1686" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 159.838219][ T39] audit: type=1400 audit(1740659893.639:6434): avc: denied { map } for pid=11197 comm="syz.4.1686" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 159.857755][T11206] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1666'. [ 160.256021][ T5292] Bluetooth: hci1: command tx timeout [ 160.341424][ T8300] team0 (unregistering): Port device team_slave_1 removed [ 160.412574][ T8300] team0 (unregistering): Port device team_slave_0 removed [ 161.100672][T11143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.134557][T11228] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1691'. [ 161.137183][T11228] team_slave_1: entered promiscuous mode [ 161.138838][T11228] team_slave_1: entered allmulticast mode [ 161.156340][T11225] BUG: Bad page state in process syz.2.1692 pfn:24543 [ 161.158779][T11225] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x24543 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 161.163986][T11225] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 161.166428][T11225] raw: 00fff00000000000 dead000000000040 ffff8880202b4000 0000000000000000 [ 161.169234][T11225] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 161.171953][T11225] page dumped because: page_pool leak [ 161.173915][T11225] page_owner tracks the page as allocated [ 161.175835][T11225] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11225, tgid 11224 (syz.2.1692), ts 161156276867, free_ts 161117275658 [ 161.181645][T11225] post_alloc_hook+0x181/0x1b0 [ 161.183387][T11225] get_page_from_freelist+0xfce/0x2f80 [ 161.184908][T11225] __alloc_frozen_pages_noprof+0x221/0x2470 [ 161.186817][T11225] alloc_pages_bulk_noprof+0x6f9/0x1390 [ 161.188563][T11225] __page_pool_alloc_pages_slow+0x18c/0x770 [ 161.190263][T11225] page_pool_alloc_netmems+0xc4/0x160 [ 161.191792][T11225] skb_pp_cow_data+0x776/0xf10 [ 161.193126][T11225] skb_cow_data_for_xdp+0x88/0xb0 [ 161.194529][T11225] do_xdp_generic+0x3f1/0xe70 [ 161.195912][T11225] __netif_receive_skb_core.constprop.0+0x12da/0x4330 [ 161.198060][T11225] __netif_receive_skb_one_core+0xb1/0x1e0 [ 161.199714][T11225] __netif_receive_skb+0x1d/0x160 [ 161.201148][T11225] netif_receive_skb+0x13f/0x7b0 [ 161.202576][T11225] tun_rx_batched.isra.0+0x3eb/0x730 [ 161.204103][T11225] tun_get_user+0x2a22/0x3e50 [ 161.205432][T11225] tun_chr_write_iter+0xdc/0x210 [ 161.206918][T11225] page last free pid 34 tgid 34 stack trace: [ 161.208651][T11225] free_frozen_pages+0x6db/0xfb0 [ 161.210126][T11225] tlb_remove_table_rcu+0x116/0x1a0 [ 161.211617][T11225] rcu_core+0x79d/0x14d0 [ 161.212886][T11225] handle_softirqs+0x213/0x8f0 [ 161.214313][T11225] run_ksoftirqd+0x3a/0x60 [ 161.215616][T11225] smpboot_thread_fn+0x661/0xa30 [ 161.217204][T11225] kthread+0x3af/0x750 [ 161.218469][T11225] ret_from_fork+0x45/0x80 [ 161.219784][T11225] ret_from_fork_asm+0x1a/0x30 [ 161.221199][T11225] Modules linked in: [ 161.222398][T11225] CPU: 3 UID: 0 PID: 11225 Comm: syz.2.1692 Not tainted 6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0 [ 161.222412][T11225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.222418][T11225] Call Trace: [ 161.222422][T11225] [ 161.222427][T11225] dump_stack_lvl+0x16c/0x1f0 [ 161.222443][T11225] bad_page+0xb3/0x1f0 [ 161.222456][T11225] ? __pfx_bad_page+0x10/0x10 [ 161.222470][T11225] ? page_bad_reason+0x9d/0x1e0 [ 161.222485][T11225] free_frozen_pages+0x701/0xfb0 [ 161.222498][T11225] page_frag_free+0x255/0x2a0 [ 161.222511][T11225] __xdp_return+0x319/0xa70 [ 161.222527][T11225] ? kmem_cache_free+0x2e2/0x4d0 [ 161.222539][T11225] bpf_xdp_adjust_tail+0x9de/0xf70 [ 161.222561][T11225] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 161.222570][T11225] bpf_prog_run_generic_xdp+0x623/0x1500 [ 161.222589][T11225] do_xdp_generic+0x70a/0xe70 [ 161.222603][T11225] ? __pfx_do_xdp_generic+0x10/0x10 [ 161.222618][T11225] ? hlock_class+0x4e/0x130 [ 161.222629][T11225] ? __lock_acquire+0xcc5/0x3c40 [ 161.222647][T11225] ? mark_lock+0xb5/0xc60 [ 161.222663][T11225] __netif_receive_skb_core.constprop.0+0x12da/0x4330 [ 161.222678][T11225] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 161.222695][T11225] ? __skb_flow_dissect+0x11df/0x7e40 [ 161.222707][T11225] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 161.222720][T11225] ? hlock_class+0x4e/0x130 [ 161.222730][T11225] ? __lock_acquire+0xcc5/0x3c40 [ 161.222748][T11225] ? handle_mm_fault+0x497/0xaa0 [ 161.222759][T11225] ? __pfx___lock_acquire+0x10/0x10 [ 161.222774][T11225] ? __pfx_mark_lock+0x10/0x10 [ 161.222792][T11225] __netif_receive_skb_one_core+0xb1/0x1e0 [ 161.222808][T11225] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 161.222821][T11225] ? rcu_is_watching+0x12/0xc0 [ 161.222833][T11225] ? netif_receive_skb+0x109/0x7b0 [ 161.222847][T11225] __netif_receive_skb+0x1d/0x160 [ 161.222859][T11225] netif_receive_skb+0x13f/0x7b0 [ 161.222870][T11225] ? __pfx_netif_receive_skb+0x10/0x10 [ 161.222882][T11225] ? _copy_from_iter+0x15e/0x1560 [ 161.222892][T11225] ? __pfx___lock_acquire+0x10/0x10 [ 161.222906][T11225] ? __pfx__copy_from_iter+0x10/0x10 [ 161.222919][T11225] tun_rx_batched.isra.0+0x3eb/0x730 [ 161.222936][T11225] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 161.222954][T11225] ? tun_get_user+0x13e6/0x3e50 [ 161.222969][T11225] ? lock_acquire+0x2f/0xb0 [ 161.222982][T11225] ? tun_get_user+0x13e6/0x3e50 [ 161.222999][T11225] tun_get_user+0x2a22/0x3e50 [ 161.223019][T11225] ? __pfx_tun_get_user+0x10/0x10 [ 161.223035][T11225] ? find_held_lock+0x2d/0x110 [ 161.223048][T11225] ? __pfx_lock_release+0x10/0x10 [ 161.223068][T11225] tun_chr_write_iter+0xdc/0x210 [ 161.223085][T11225] vfs_write+0x5ae/0x1150 [ 161.223102][T11225] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 161.223119][T11225] ? __pfx_vfs_write+0x10/0x10 [ 161.223133][T11225] ? do_futex+0x123/0x350 [ 161.223147][T11225] ? __fget_files+0x40/0x3a0 [ 161.223163][T11225] ksys_write+0x12b/0x250 [ 161.223179][T11225] ? __pfx_ksys_write+0x10/0x10 [ 161.223199][T11225] do_syscall_64+0xcd/0x250 [ 161.223213][T11225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.223227][T11225] RIP: 0033:0x7f1f3398bc1f [ 161.223236][T11225] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 161.223245][T11225] RSP: 002b:00007f1f348a9000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 161.223255][T11225] RAX: ffffffffffffffda RBX: 00007f1f33ba5fa0 RCX: 00007f1f3398bc1f [ 161.223261][T11225] RDX: 000000000000fd5c RSI: 0000400000000440 RDI: 00000000000000c8 [ 161.223267][T11225] RBP: 00007f1f33a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 161.223273][T11225] R10: 000000000000fd5c R11: 0000000000000293 R12: 0000000000000000 [ 161.223278][T11225] R13: 0000000000000000 R14: 00007f1f33ba5fa0 R15: 00007fff452cdf78 [ 161.223291][T11225] [ 161.223295][T11225] Disabling lock debugging due to kernel taint [ 161.336214][T11225] BUG: Bad page state in process syz.2.1692 pfn:57465 [ 161.338185][T11225] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57465 [ 161.340659][T11225] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 161.342750][T11225] raw: 00fff00000000000 dead000000000040 ffff8880202b4000 0000000000000000 [ 161.345118][T11225] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 161.347974][T11225] page dumped because: page_pool leak [ 161.349478][T11225] page_owner tracks the page as allocated [ 161.351114][T11225] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11225, tgid 11224 (syz.2.1692), ts 161156269310, free_ts 161117280487 [ 161.355995][T11225] post_alloc_hook+0x181/0x1b0 [ 161.357414][T11225] get_page_from_freelist+0xfce/0x2f80 [ 161.358954][T11225] __alloc_frozen_pages_noprof+0x221/0x2470 [ 161.360634][T11225] alloc_pages_bulk_noprof+0x6f9/0x1390 [ 161.362306][T11225] __page_pool_alloc_pages_slow+0x18c/0x770 [ 161.364067][T11225] page_pool_alloc_netmems+0xc4/0x160 [ 161.365721][T11225] skb_pp_cow_data+0x776/0xf10 [ 161.367297][T11225] skb_cow_data_for_xdp+0x88/0xb0 [ 161.368755][T11225] do_xdp_generic+0x3f1/0xe70 [ 161.370577][T11225] __netif_receive_skb_core.constprop.0+0x12da/0x4330 [ 161.373373][T11225] __netif_receive_skb_one_core+0xb1/0x1e0 [ 161.375700][T11225] __netif_receive_skb+0x1d/0x160 [ 161.377690][T11225] netif_receive_skb+0x13f/0x7b0 [ 161.379671][T11225] tun_rx_batched.isra.0+0x3eb/0x730 [ 161.381848][T11225] tun_get_user+0x2a22/0x3e50 [ 161.383757][T11225] tun_chr_write_iter+0xdc/0x210 [ 161.385828][T11225] page last free pid 34 tgid 34 stack trace: [ 161.388274][T11225] free_frozen_pages+0x6db/0xfb0 [ 161.390310][T11225] tlb_remove_table_rcu+0x116/0x1a0 [ 161.392457][T11225] rcu_core+0x79d/0x14d0 [ 161.394191][T11225] handle_softirqs+0x213/0x8f0 [ 161.396152][T11225] run_ksoftirqd+0x3a/0x60 [ 161.398010][T11225] smpboot_thread_fn+0x661/0xa30 [ 161.400042][T11225] kthread+0x3af/0x750 [ 161.401715][T11225] ret_from_fork+0x45/0x80 [ 161.403662][T11225] ret_from_fork_asm+0x1a/0x30 [ 161.405563][T11225] Modules linked in: [ 161.407106][T11225] CPU: 3 UID: 0 PID: 11225 Comm: syz.2.1692 Tainted: G B 6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0 [ 161.407132][T11225] Tainted: [B]=BAD_PAGE [ 161.407138][T11225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.407149][T11225] Call Trace: [ 161.407155][T11225] [ 161.407162][T11225] dump_stack_lvl+0x16c/0x1f0 [ 161.407186][T11225] bad_page+0xb3/0x1f0 [ 161.407210][T11225] ? __pfx_bad_page+0x10/0x10 [ 161.407233][T11225] ? page_bad_reason+0x9d/0x1e0 [ 161.407255][T11225] free_frozen_pages+0x701/0xfb0 [ 161.407275][T11225] page_frag_free+0x255/0x2a0 [ 161.407295][T11225] __xdp_return+0x319/0xa70 [ 161.407320][T11225] ? kmem_cache_free+0x2e2/0x4d0 [ 161.407338][T11225] bpf_xdp_adjust_tail+0x9de/0xf70 [ 161.407369][T11225] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 161.407384][T11225] bpf_prog_run_generic_xdp+0x623/0x1500 [ 161.407410][T11225] do_xdp_generic+0x70a/0xe70 [ 161.407430][T11225] ? __pfx_do_xdp_generic+0x10/0x10 [ 161.407451][T11225] ? hlock_class+0x4e/0x130 [ 161.407469][T11225] ? __lock_acquire+0xcc5/0x3c40 [ 161.407495][T11225] ? mark_lock+0xb5/0xc60 [ 161.407519][T11225] __netif_receive_skb_core.constprop.0+0x12da/0x4330 [ 161.407543][T11225] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 161.407570][T11225] ? __skb_flow_dissect+0x11df/0x7e40 [ 161.407590][T11225] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 161.407610][T11225] ? hlock_class+0x4e/0x130 [ 161.407626][T11225] ? __lock_acquire+0xcc5/0x3c40 [ 161.407649][T11225] ? handle_mm_fault+0x497/0xaa0 [ 161.407666][T11225] ? __pfx___lock_acquire+0x10/0x10 [ 161.407689][T11225] ? __pfx_mark_lock+0x10/0x10 [ 161.407714][T11225] __netif_receive_skb_one_core+0xb1/0x1e0 [ 161.407741][T11225] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 161.407761][T11225] ? rcu_is_watching+0x12/0xc0 [ 161.407779][T11225] ? netif_receive_skb+0x109/0x7b0 [ 161.407800][T11225] __netif_receive_skb+0x1d/0x160 [ 161.407820][T11225] netif_receive_skb+0x13f/0x7b0 [ 161.407839][T11225] ? __pfx_netif_receive_skb+0x10/0x10 [ 161.407858][T11225] ? _copy_from_iter+0x15e/0x1560 [ 161.407876][T11225] ? __pfx___lock_acquire+0x10/0x10 [ 161.407898][T11225] ? __pfx__copy_from_iter+0x10/0x10 [ 161.407916][T11225] tun_rx_batched.isra.0+0x3eb/0x730 [ 161.407943][T11225] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 161.407969][T11225] ? tun_get_user+0x13e6/0x3e50 [ 161.407992][T11225] ? lock_acquire+0x2f/0xb0 [ 161.408013][T11225] ? tun_get_user+0x13e6/0x3e50 [ 161.408039][T11225] tun_get_user+0x2a22/0x3e50 [ 161.408069][T11225] ? __pfx_tun_get_user+0x10/0x10 [ 161.408094][T11225] ? find_held_lock+0x2d/0x110 [ 161.408113][T11225] ? __pfx_lock_release+0x10/0x10 [ 161.408141][T11225] tun_chr_write_iter+0xdc/0x210 [ 161.408168][T11225] vfs_write+0x5ae/0x1150 [ 161.408193][T11225] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 161.408219][T11225] ? __pfx_vfs_write+0x10/0x10 [ 161.408242][T11225] ? do_futex+0x123/0x350 [ 161.408261][T11225] ? __fget_files+0x40/0x3a0 [ 161.408282][T11225] ksys_write+0x12b/0x250 [ 161.408307][T11225] ? __pfx_ksys_write+0x10/0x10 [ 161.408335][T11225] do_syscall_64+0xcd/0x250 [ 161.408357][T11225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.408381][T11225] RIP: 0033:0x7f1f3398bc1f [ 161.408395][T11225] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 161.408412][T11225] RSP: 002b:00007f1f348a9000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 161.408428][T11225] RAX: ffffffffffffffda RBX: 00007f1f33ba5fa0 RCX: 00007f1f3398bc1f [ 161.408440][T11225] RDX: 000000000000fd5c RSI: 0000400000000440 RDI: 00000000000000c8 [ 161.408450][T11225] RBP: 00007f1f33a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 161.408461][T11225] R10: 000000000000fd5c R11: 0000000000000293 R12: 0000000000000000 [ 161.408471][T11225] R13: 0000000000000000 R14: 00007f1f33ba5fa0 R15: 00007fff452cdf78 [ 161.408487][T11225] [ 161.408496][T11225] BUG: Bad page state in process syz.2.1692 pfn:3215d [ 161.530217][T11225] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3215d [ 161.532754][T11225] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 161.534800][T11225] raw: 00fff00000000000 dead000000000040 ffff8880202b4000 0000000000000000 [ 161.537341][T11225] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 161.539790][T11225] page dumped because: page_pool leak [ 161.541331][T11225] page_owner tracks the page as allocated [ 161.543007][T11225] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11225, tgid 11224 (syz.2.1692), ts 161156262411, free_ts 161117285163 [ 161.547916][T11225] post_alloc_hook+0x181/0x1b0 [ 161.549332][T11225] get_page_from_freelist+0xfce/0x2f80 [ 161.550911][T11225] __alloc_frozen_pages_noprof+0x221/0x2470 [ 161.552657][T11225] alloc_pages_bulk_noprof+0x6f9/0x1390 [ 161.554896][T11225] __page_pool_alloc_pages_slow+0x18c/0x770 [ 161.557321][T11225] page_pool_alloc_netmems+0xc4/0x160 [ 161.559586][T11225] skb_pp_cow_data+0x776/0xf10 [ 161.561513][T11225] skb_cow_data_for_xdp+0x88/0xb0 [ 161.563523][T11225] do_xdp_generic+0x3f1/0xe70 [ 161.565400][T11225] __netif_receive_skb_core.constprop.0+0x12da/0x4330 [ 161.568012][T11225] __netif_receive_skb_one_core+0xb1/0x1e0 [ 161.570281][T11225] __netif_receive_skb+0x1d/0x160 [ 161.572290][T11225] netif_receive_skb+0x13f/0x7b0 [ 161.574165][T11225] tun_rx_batched.isra.0+0x3eb/0x730 [ 161.576156][T11225] tun_get_user+0x2a22/0x3e50 [ 161.577985][T11225] tun_chr_write_iter+0xdc/0x210 [ 161.579932][T11225] page last free pid 34 tgid 34 stack trace: [ 161.582270][T11225] free_frozen_pages+0x6db/0xfb0 [ 161.584189][T11225] tlb_remove_table_rcu+0x116/0x1a0 [ 161.586211][T11225] rcu_core+0x79d/0x14d0 [ 161.587892][T11225] handle_softirqs+0x213/0x8f0 [ 161.589786][T11225] run_ksoftirqd+0x3a/0x60 [ 161.591533][T11225] smpboot_thread_fn+0x661/0xa30 [ 161.593546][T11225] kthread+0x3af/0x750 [ 161.595195][T11225] ret_from_fork+0x45/0x80 [ 161.596949][T11225] ret_from_fork_asm+0x1a/0x30 [ 161.598874][T11225] Modules linked in: [ 161.600447][T11225] CPU: 3 UID: 0 PID: 11225 Comm: syz.2.1692 Tainted: G B 6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0 [ 161.600469][T11225] Tainted: [B]=BAD_PAGE [ 161.600475][T11225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.600485][T11225] Call Trace: [ 161.600491][T11225] [ 161.600498][T11225] dump_stack_lvl+0x16c/0x1f0 [ 161.600517][T11225] bad_page+0xb3/0x1f0 [ 161.600538][T11225] ? __pfx_bad_page+0x10/0x10 [ 161.600559][T11225] ? page_bad_reason+0x9d/0x1e0 [ 161.600580][T11225] free_frozen_pages+0x701/0xfb0 [ 161.600597][T11225] page_frag_free+0x255/0x2a0 [ 161.600613][T11225] __xdp_return+0x319/0xa70 [ 161.600637][T11225] ? kmem_cache_free+0x2e2/0x4d0 [ 161.600653][T11225] bpf_xdp_adjust_tail+0x9de/0xf70 [ 161.600681][T11225] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 161.600695][T11225] bpf_prog_run_generic_xdp+0x623/0x1500 [ 161.600718][T11225] do_xdp_generic+0x70a/0xe70 [ 161.600742][T11225] ? __pfx_do_xdp_generic+0x10/0x10 [ 161.600764][T11225] ? hlock_class+0x4e/0x130 [ 161.600779][T11225] ? __lock_acquire+0xcc5/0x3c40 [ 161.600807][T11225] ? mark_lock+0xb5/0xc60 [ 161.600829][T11225] __netif_receive_skb_core.constprop.0+0x12da/0x4330 [ 161.600850][T11225] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 161.600876][T11225] ? __skb_flow_dissect+0x11df/0x7e40 [ 161.600894][T11225] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 161.600916][T11225] ? hlock_class+0x4e/0x130 [ 161.600932][T11225] ? __lock_acquire+0xcc5/0x3c40 [ 161.600957][T11225] ? handle_mm_fault+0x497/0xaa0 [ 161.600973][T11225] ? __pfx___lock_acquire+0x10/0x10 [ 161.601011][T11225] ? __pfx_mark_lock+0x10/0x10 [ 161.601036][T11225] __netif_receive_skb_one_core+0xb1/0x1e0 [ 161.601055][T11225] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 161.601074][T11225] ? rcu_is_watching+0x12/0xc0 [ 161.601092][T11225] ? netif_receive_skb+0x109/0x7b0 [ 161.601111][T11225] __netif_receive_skb+0x1d/0x160 [ 161.601129][T11225] netif_receive_skb+0x13f/0x7b0 [ 161.601147][T11225] ? __pfx_netif_receive_skb+0x10/0x10 [ 161.601165][T11225] ? _copy_from_iter+0x15e/0x1560 [ 161.601180][T11225] ? __pfx___lock_acquire+0x10/0x10 [ 161.601202][T11225] ? __pfx__copy_from_iter+0x10/0x10 [ 161.601219][T11225] tun_rx_batched.isra.0+0x3eb/0x730 [ 161.601245][T11225] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 161.601270][T11225] ? tun_get_user+0x13e6/0x3e50 [ 161.601292][T11225] ? lock_acquire+0x2f/0xb0 [ 161.601314][T11225] ? tun_get_user+0x13e6/0x3e50 [ 161.601338][T11225] tun_get_user+0x2a22/0x3e50 [ 161.601368][T11225] ? __pfx_tun_get_user+0x10/0x10 [ 161.601391][T11225] ? find_held_lock+0x2d/0x110 [ 161.601409][T11225] ? __pfx_lock_release+0x10/0x10 [ 161.601438][T11225] tun_chr_write_iter+0xdc/0x210 [ 161.601462][T11225] vfs_write+0x5ae/0x1150 [ 161.601488][T11225] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 161.601512][T11225] ? __pfx_vfs_write+0x10/0x10 [ 161.601534][T11225] ? do_futex+0x123/0x350 [ 161.601552][T11225] ? __fget_files+0x40/0x3a0 [ 161.601574][T11225] ksys_write+0x12b/0x250 [ 161.601597][T11225] ? __pfx_ksys_write+0x10/0x10 [ 161.601623][T11225] do_syscall_64+0xcd/0x250 [ 161.601645][T11225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.601666][T11225] RIP: 0033:0x7f1f3398bc1f [ 161.601678][T11225] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 161.601695][T11225] RSP: 002b:00007f1f348a9000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 161.601709][T11225] RAX: ffffffffffffffda RBX: 00007f1f33ba5fa0 RCX: 00007f1f3398bc1f [ 161.601720][T11225] RDX: 000000000000fd5c RSI: 0000400000000440 RDI: 00000000000000c8 [ 161.601734][T11225] RBP: 00007f1f33a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 161.601744][T11225] R10: 000000000000fd5c R11: 0000000000000293 R12: 0000000000000000 [ 161.601753][T11225] R13: 0000000000000000 R14: 00007f1f33ba5fa0 R15: 00007fff452cdf78 [ 161.601768][T11225] [ 161.601776][T11225] BUG: Bad page state in process syz.2.1692 pfn:4e32f [ 161.744612][T11225] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x4e32f [ 161.748076][T11225] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 161.750044][T11225] raw: 00fff00000000000 dead000000000040 ffff8880202b4000 0000000000000000 [ 161.752564][T11225] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 161.755125][T11225] page dumped because: page_pool leak [ 161.757042][T11225] page_owner tracks the page as allocated [ 161.759256][T11225] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11225, tgid 11224 (syz.2.1692), ts 161156255738, free_ts 161117289901 [ 161.764775][T11225] post_alloc_hook+0x181/0x1b0 [ 161.766443][T11225] get_page_from_freelist+0xfce/0x2f80 [ 161.768172][T11225] __alloc_frozen_pages_noprof+0x221/0x2470 [ 161.769884][T11225] alloc_pages_bulk_noprof+0x6f9/0x1390 [ 161.771474][T11225] __page_pool_alloc_pages_slow+0x18c/0x770 [ 161.773232][T11225] page_pool_alloc_netmems+0xc4/0x160 [ 161.774917][T11225] skb_pp_cow_data+0x776/0xf10 [ 161.776512][T11225] skb_cow_data_for_xdp+0x88/0xb0 [ 161.778402][T11225] do_xdp_generic+0x3f1/0xe70 [ 161.780216][T11225] __netif_receive_skb_core.constprop.0+0x12da/0x4330 [ 161.782968][T11225] __netif_receive_skb_one_core+0xb1/0x1e0 [ 161.785353][T11225] __netif_receive_skb+0x1d/0x160 [ 161.787527][T11225] netif_receive_skb+0x13f/0x7b0 [ 161.789576][T11225] tun_rx_batched.isra.0+0x3eb/0x730 [ 161.791734][T11225] tun_get_user+0x2a22/0x3e50 [ 161.793752][T11225] tun_chr_write_iter+0xdc/0x210 [ 161.795792][T11225] page last free pid 34 tgid 34 stack trace: [ 161.798030][T11225] free_frozen_pages+0x6db/0xfb0 [ 161.799505][T11225] tlb_remove_table_rcu+0x116/0x1a0 [ 161.801114][T11225] rcu_core+0x79d/0x14d0 [ 161.802590][T11225] handle_softirqs+0x213/0x8f0 [ 161.804215][T11225] run_ksoftirqd+0x3a/0x60 [ 161.805733][T11225] smpboot_thread_fn+0x661/0xa30 [ 161.807508][T11225] kthread+0x3af/0x750 [ 161.808859][T11225] ret_from_fork+0x45/0x80 [ 161.810202][T11225] ret_from_fork_asm+0x1a/0x30 [ 161.811664][T11225] Modules linked in: [ 161.813060][T11225] CPU: 3 UID: 0 PID: 11225 Comm: syz.2.1692 Tainted: G B 6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0 [ 161.813076][T11225] Tainted: [B]=BAD_PAGE [ 161.813079][T11225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.813086][T11225] Call Trace: [ 161.813089][T11225] [ 161.813093][T11225] dump_stack_lvl+0x16c/0x1f0 [ 161.813107][T11225] bad_page+0xb3/0x1f0 [ 161.813120][T11225] ? __pfx_bad_page+0x10/0x10 [ 161.813132][T11225] ? page_bad_reason+0x9d/0x1e0 [ 161.813144][T11225] free_frozen_pages+0x701/0xfb0 [ 161.813155][T11225] page_frag_free+0x255/0x2a0 [ 161.813166][T11225] __xdp_return+0x319/0xa70 [ 161.813181][T11225] ? kmem_cache_free+0x2e2/0x4d0 [ 161.813191][T11225] bpf_xdp_adjust_tail+0x9de/0xf70 [ 161.813210][T11225] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 161.813218][T11225] bpf_prog_run_generic_xdp+0x623/0x1500 [ 161.813232][T11225] do_xdp_generic+0x70a/0xe70 [ 161.813244][T11225] ? __pfx_do_xdp_generic+0x10/0x10 [ 161.813256][T11225] ? hlock_class+0x4e/0x130 [ 161.813266][T11225] ? __lock_acquire+0xcc5/0x3c40 [ 161.813282][T11225] ? mark_lock+0xb5/0xc60 [ 161.813296][T11225] __netif_receive_skb_core.constprop.0+0x12da/0x4330 [ 161.813309][T11225] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 161.813325][T11225] ? __skb_flow_dissect+0x11df/0x7e40 [ 161.813336][T11225] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 161.813349][T11225] ? hlock_class+0x4e/0x130 [ 161.813359][T11225] ? __lock_acquire+0xcc5/0x3c40 [ 161.813374][T11225] ? handle_mm_fault+0x497/0xaa0 [ 161.813385][T11225] ? __pfx___lock_acquire+0x10/0x10 [ 161.813398][T11225] ? __pfx_mark_lock+0x10/0x10 [ 161.813413][T11225] __netif_receive_skb_one_core+0xb1/0x1e0 [ 161.813425][T11225] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 161.813437][T11225] ? rcu_is_watching+0x12/0xc0 [ 161.813448][T11225] ? netif_receive_skb+0x109/0x7b0 [ 161.813460][T11225] __netif_receive_skb+0x1d/0x160 [ 161.813471][T11225] netif_receive_skb+0x13f/0x7b0 [ 161.813482][T11225] ? __pfx_netif_receive_skb+0x10/0x10 [ 161.813493][T11225] ? _copy_from_iter+0x15e/0x1560 [ 161.813503][T11225] ? __pfx___lock_acquire+0x10/0x10 [ 161.813516][T11225] ? __pfx__copy_from_iter+0x10/0x10 [ 161.813526][T11225] tun_rx_batched.isra.0+0x3eb/0x730 [ 161.813541][T11225] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 161.813556][T11225] ? tun_get_user+0x13e6/0x3e50 [ 161.813570][T11225] ? lock_acquire+0x2f/0xb0 [ 161.813583][T11225] ? tun_get_user+0x13e6/0x3e50 [ 161.813598][T11225] tun_get_user+0x2a22/0x3e50 [ 161.813615][T11225] ? __pfx_tun_get_user+0x10/0x10 [ 161.813630][T11225] ? find_held_lock+0x2d/0x110 [ 161.813641][T11225] ? __pfx_lock_release+0x10/0x10 [ 161.813656][T11225] tun_chr_write_iter+0xdc/0x210 [ 161.813672][T11225] vfs_write+0x5ae/0x1150 [ 161.813687][T11225] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 161.813703][T11225] ? __pfx_vfs_write+0x10/0x10 [ 161.813717][T11225] ? do_futex+0x123/0x350 [ 161.813733][T11225] ? __fget_files+0x40/0x3a0 [ 161.813745][T11225] ksys_write+0x12b/0x250 [ 161.813760][T11225] ? __pfx_ksys_write+0x10/0x10 [ 161.813777][T11225] do_syscall_64+0xcd/0x250 [ 161.813790][T11225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.813804][T11225] RIP: 0033:0x7f1f3398bc1f [ 161.813812][T11225] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 161.813822][T11225] RSP: 002b:00007f1f348a9000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 161.813831][T11225] RAX: ffffffffffffffda RBX: 00007f1f33ba5fa0 RCX: 00007f1f3398bc1f [ 161.813837][T11225] RDX: 000000000000fd5c RSI: 0000400000000440 RDI: 00000000000000c8 [ 161.813843][T11225] RBP: 00007f1f33a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 161.813849][T11225] R10: 000000000000fd5c R11: 0000000000000293 R12: 0000000000000000 [ 161.813854][T11225] R13: 0000000000000000 R14: 00007f1f33ba5fa0 R15: 00007fff452cdf78 [ 161.813863][T11225] [ 161.813868][T11225] BUG: Bad page state in process syz.2.1692 pfn:5a3dc [ 161.929947][T11225] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805a3dcf78 pfn:0x5a3dc [ 161.933513][T11225] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 161.935966][T11225] raw: 00fff00000000000 dead000000000040 ffff8880202b4000 0000000000000000 [ 161.938737][T11225] raw: ffff88805a3dcf78 0000000000000001 00000000ffffffff 0000000000000000 [ 161.941605][T11225] page dumped because: page_pool leak [ 161.943488][T11225] page_owner tracks the page as allocated [ 161.945149][T11225] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11225, tgid 11224 (syz.2.1692), ts 161156248812, free_ts 161117293021 [ 161.949771][T11225] post_alloc_hook+0x181/0x1b0 [ 161.951122][T11225] get_page_from_freelist+0xfce/0x2f80 [ 161.952695][T11225] __alloc_frozen_pages_noprof+0x221/0x2470 [ 161.954359][T11225] alloc_pages_bulk_noprof+0x6f9/0x1390 [ 161.956105][T11225] __page_pool_alloc_pages_slow+0x18c/0x770 [ 161.957971][T11225] page_pool_alloc_netmems+0xc4/0x160 [ 161.959547][T11225] skb_pp_cow_data+0x776/0xf10 [ 161.960932][T11225] skb_cow_data_for_xdp+0x88/0xb0 [ 161.962469][T11225] do_xdp_generic+0x3f1/0xe70 [ 161.963849][T11225] __netif_receive_skb_core.constprop.0+0x12da/0x4330 [ 161.965791][T11225] __netif_receive_skb_one_core+0xb1/0x1e0 [ 161.967459][T11225] __netif_receive_skb+0x1d/0x160 [ 161.968911][T11225] netif_receive_skb+0x13f/0x7b0 [ 161.970327][T11225] tun_rx_batched.isra.0+0x3eb/0x730 [ 161.971776][T11225] tun_get_user+0x2a22/0x3e50 [ 161.973371][T11225] tun_chr_write_iter+0xdc/0x210 [ 161.974832][T11225] page last free pid 34 tgid 34 stack trace: [ 161.976564][T11225] free_frozen_pages+0x6db/0xfb0 [ 161.978047][T11225] tlb_remove_table_rcu+0x116/0x1a0 [ 161.979559][T11225] rcu_core+0x79d/0x14d0 [ 161.980787][T11225] handle_softirqs+0x213/0x8f0 [ 161.982232][T11225] run_ksoftirqd+0x3a/0x60 [ 161.983604][T11225] smpboot_thread_fn+0x661/0xa30 [ 161.985331][T11225] kthread+0x3af/0x750 [ 161.986549][T11225] ret_from_fork+0x45/0x80 [ 161.987996][T11225] ret_from_fork_asm+0x1a/0x30 [ 161.989740][T11225] Modules linked in: [ 161.991099][T11225] CPU: 3 UID: 0 PID: 11225 Comm: syz.2.1692 Tainted: G B 6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0 [ 161.991123][T11225] Tainted: [B]=BAD_PAGE [ 161.991128][T11225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.991137][T11225] Call Trace: [ 161.991143][T11225] [ 161.991150][T11225] dump_stack_lvl+0x16c/0x1f0 [ 161.991169][T11225] bad_page+0xb3/0x1f0 [ 161.991189][T11225] ? __pfx_bad_page+0x10/0x10 [ 161.991207][T11225] ? page_bad_reason+0x9d/0x1e0 [ 161.991225][T11225] free_frozen_pages+0x701/0xfb0 [ 161.991242][T11225] page_frag_free+0x255/0x2a0 [ 161.991260][T11225] __xdp_return+0x319/0xa70 [ 161.991281][T11225] ? kmem_cache_free+0x2e2/0x4d0 [ 161.991296][T11225] bpf_xdp_adjust_tail+0x9de/0xf70 [ 161.991325][T11225] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 161.991338][T11225] bpf_prog_run_generic_xdp+0x623/0x1500 [ 161.991361][T11225] do_xdp_generic+0x70a/0xe70 [ 161.991379][T11225] ? __pfx_do_xdp_generic+0x10/0x10 [ 161.991396][T11225] ? hlock_class+0x4e/0x130 [ 161.991412][T11225] ? __lock_acquire+0xcc5/0x3c40 [ 161.991436][T11225] ? mark_lock+0xb5/0xc60 [ 161.991457][T11225] __netif_receive_skb_core.constprop.0+0x12da/0x4330 [ 161.991476][T11225] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 161.991493][T11225] ? __skb_flow_dissect+0x11df/0x7e40 [ 161.991504][T11225] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 161.991516][T11225] ? hlock_class+0x4e/0x130 [ 161.991526][T11225] ? __lock_acquire+0xcc5/0x3c40 [ 161.991541][T11225] ? handle_mm_fault+0x497/0xaa0 [ 161.991551][T11225] ? __pfx___lock_acquire+0x10/0x10 [ 161.991565][T11225] ? __pfx_mark_lock+0x10/0x10 [ 161.991579][T11225] __netif_receive_skb_one_core+0xb1/0x1e0 [ 161.991591][T11225] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 161.991603][T11225] ? rcu_is_watching+0x12/0xc0 [ 161.991614][T11225] ? netif_receive_skb+0x109/0x7b0 [ 161.991626][T11225] __netif_receive_skb+0x1d/0x160 [ 161.991638][T11225] netif_receive_skb+0x13f/0x7b0 [ 161.991648][T11225] ? __pfx_netif_receive_skb+0x10/0x10 [ 161.991660][T11225] ? _copy_from_iter+0x15e/0x1560 [ 161.991670][T11225] ? __pfx___lock_acquire+0x10/0x10 [ 161.991683][T11225] ? __pfx__copy_from_iter+0x10/0x10 [ 161.991693][T11225] tun_rx_batched.isra.0+0x3eb/0x730 [ 161.991708][T11225] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 161.991728][T11225] ? tun_get_user+0x13e6/0x3e50 [ 161.991751][T11225] ? lock_acquire+0x2f/0xb0 [ 161.991768][T11225] ? tun_get_user+0x13e6/0x3e50 [ 161.991789][T11225] tun_get_user+0x2a22/0x3e50 [ 161.991812][T11225] ? __pfx_tun_get_user+0x10/0x10 [ 161.991835][T11225] ? find_held_lock+0x2d/0x110 [ 161.991851][T11225] ? __pfx_lock_release+0x10/0x10 [ 161.991876][T11225] tun_chr_write_iter+0xdc/0x210 [ 161.991898][T11225] vfs_write+0x5ae/0x1150 [ 161.991921][T11225] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 161.991945][T11225] ? __pfx_vfs_write+0x10/0x10 [ 161.991965][T11225] ? do_futex+0x123/0x350 [ 161.991984][T11225] ? __fget_files+0x40/0x3a0 [ 161.992002][T11225] ksys_write+0x12b/0x250 [ 161.992024][T11225] ? __pfx_ksys_write+0x10/0x10 [ 161.992064][T11225] do_syscall_64+0xcd/0x250 [ 161.992089][T11225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.992112][T11225] RIP: 0033:0x7f1f3398bc1f [ 161.992125][T11225] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 161.992140][T11225] RSP: 002b:00007f1f348a9000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 161.992155][T11225] RAX: ffffffffffffffda RBX: 00007f1f33ba5fa0 RCX: 00007f1f3398bc1f [ 161.992165][T11225] RDX: 000000000000fd5c RSI: 0000400000000440 RDI: 00000000000000c8 [ 161.992174][T11225] RBP: 00007f1f33a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 161.992184][T11225] R10: 000000000000fd5c R11: 0000000000000293 R12: 0000000000000000 [ 161.992193][T11225] R13: 0000000000000000 R14: 00007f1f33ba5fa0 R15: 00007fff452cdf78 [ 161.992207][T11225] [ 162.107297][T11225] BUG: Bad page state in process syz.2.1692 pfn:245f5 [ 162.109198][T11225] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880245f5e70 pfn:0x245f5 [ 162.112124][T11225] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 162.114211][T11225] raw: 00fff00000000000 dead000000000040 ffff8880202b4000 0000000000000000 [ 162.117047][T11225] raw: ffff8880245f5e70 0000000000000001 00000000ffffffff 0000000000000000 [ 162.119681][T11225] page dumped because: page_pool leak [ 162.121274][T11225] page_owner tracks the page as allocated [ 162.123070][T11225] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11225, tgid 11224 (syz.2.1692), ts 161156241702, free_ts 161133949835 [ 162.128339][T11225] post_alloc_hook+0x181/0x1b0 [ 162.129761][T11225] get_page_from_freelist+0xfce/0x2f80 [ 162.131505][T11225] __alloc_frozen_pages_noprof+0x221/0x2470 [ 162.133539][T11225] alloc_pages_bulk_noprof+0x6f9/0x1390 [ 162.135375][T11225] __page_pool_alloc_pages_slow+0x18c/0x770 [ 162.137521][T11225] page_pool_alloc_netmems+0xc4/0x160 [ 162.139403][T11225] skb_pp_cow_data+0x776/0xf10 [ 162.141099][T11225] skb_cow_data_for_xdp+0x88/0xb0 [ 162.142982][T11225] do_xdp_generic+0x3f1/0xe70 [ 162.144662][T11225] __netif_receive_skb_core.constprop.0+0x12da/0x4330 [ 162.147126][T11225] __netif_receive_skb_one_core+0xb1/0x1e0 [ 162.149204][T11225] __netif_receive_skb+0x1d/0x160 [ 162.150948][T11225] netif_receive_skb+0x13f/0x7b0 [ 162.152748][T11225] tun_rx_batched.isra.0+0x3eb/0x730 [ 162.154608][T11225] tun_get_user+0x2a22/0x3e50 [ 162.156215][T11225] tun_chr_write_iter+0xdc/0x210 [ 162.158024][T11225] page last free pid 9304 tgid 9304 stack trace: [ 162.160266][T11225] free_frozen_pages+0x6db/0xfb0 [ 162.161845][T11225] tlb_remove_table_rcu+0x116/0x1a0 [ 162.163514][T11225] rcu_core+0x79d/0x14d0 [ 162.165113][T11225] handle_softirqs+0x213/0x8f0 [ 162.166855][T11225] __irq_exit_rcu+0x109/0x170 [ 162.168396][T11225] irq_exit_rcu+0x9/0x30 [ 162.169960][T11225] sysvec_call_function+0xa4/0xc0 [ 162.171587][T11225] asm_sysvec_call_function+0x1a/0x20 [ 162.173333][T11225] Modules linked in: [ 162.174698][T11225] CPU: 3 UID: 0 PID: 11225 Comm: syz.2.1692 Tainted: G B 6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0 [ 162.174724][T11225] Tainted: [B]=BAD_PAGE [ 162.174729][T11225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 162.174739][T11225] Call Trace: [ 162.174744][T11225] [ 162.174751][T11225] dump_stack_lvl+0x16c/0x1f0 [ 162.174771][T11225] bad_page+0xb3/0x1f0 [ 162.174787][T11225] ? __pfx_bad_page+0x10/0x10 [ 162.174799][T11225] ? page_bad_reason+0x9d/0x1e0 [ 162.174813][T11225] free_frozen_pages+0x701/0xfb0 [ 162.174830][T11225] page_frag_free+0x255/0x2a0 [ 162.174847][T11225] __xdp_return+0x319/0xa70 [ 162.174870][T11225] ? kmem_cache_free+0x2e2/0x4d0 [ 162.174885][T11225] bpf_xdp_adjust_tail+0x9de/0xf70 [ 162.174904][T11225] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 162.174912][T11225] bpf_prog_run_generic_xdp+0x623/0x1500 [ 162.174927][T11225] do_xdp_generic+0x70a/0xe70 [ 162.174938][T11225] ? __pfx_do_xdp_generic+0x10/0x10 [ 162.174950][T11225] ? hlock_class+0x4e/0x130 [ 162.174961][T11225] ? __lock_acquire+0xcc5/0x3c40 [ 162.174976][T11225] ? mark_lock+0xb5/0xc60 [ 162.174990][T11225] __netif_receive_skb_core.constprop.0+0x12da/0x4330 [ 162.175003][T11225] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 162.175024][T11225] ? __skb_flow_dissect+0x11df/0x7e40 [ 162.175042][T11225] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 162.175061][T11225] ? hlock_class+0x4e/0x130 [ 162.175075][T11225] ? __lock_acquire+0xcc5/0x3c40 [ 162.175092][T11225] ? handle_mm_fault+0x497/0xaa0 [ 162.175102][T11225] ? __pfx___lock_acquire+0x10/0x10 [ 162.175116][T11225] ? __pfx_mark_lock+0x10/0x10 [ 162.175130][T11225] __netif_receive_skb_one_core+0xb1/0x1e0 [ 162.175142][T11225] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 162.175154][T11225] ? rcu_is_watching+0x12/0xc0 [ 162.175165][T11225] ? netif_receive_skb+0x109/0x7b0 [ 162.175177][T11225] __netif_receive_skb+0x1d/0x160 [ 162.175188][T11225] netif_receive_skb+0x13f/0x7b0 [ 162.175199][T11225] ? __pfx_netif_receive_skb+0x10/0x10 [ 162.175210][T11225] ? _copy_from_iter+0x15e/0x1560 [ 162.175220][T11225] ? __pfx___lock_acquire+0x10/0x10 [ 162.175233][T11225] ? __pfx__copy_from_iter+0x10/0x10 [ 162.175243][T11225] tun_rx_batched.isra.0+0x3eb/0x730 [ 162.175258][T11225] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 162.175273][T11225] ? tun_get_user+0x13e6/0x3e50 [ 162.175288][T11225] ? lock_acquire+0x2f/0xb0 [ 162.175301][T11225] ? tun_get_user+0x13e6/0x3e50 [ 162.175316][T11225] tun_get_user+0x2a22/0x3e50 [ 162.175333][T11225] ? __pfx_tun_get_user+0x10/0x10 [ 162.175348][T11225] ? find_held_lock+0x2d/0x110 [ 162.175359][T11225] ? __pfx_lock_release+0x10/0x10 [ 162.175375][T11225] tun_chr_write_iter+0xdc/0x210 [ 162.175390][T11225] vfs_write+0x5ae/0x1150 [ 162.175406][T11225] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 162.175424][T11225] ? __pfx_vfs_write+0x10/0x10 [ 162.175444][T11225] ? do_futex+0x123/0x350 [ 162.175455][T11225] ? __fget_files+0x40/0x3a0 [ 162.175468][T11225] ksys_write+0x12b/0x250 [ 162.175482][T11225] ? __pfx_ksys_write+0x10/0x10 [ 162.175499][T11225] do_syscall_64+0xcd/0x250 [ 162.175512][T11225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.175526][T11225] RIP: 0033:0x7f1f3398bc1f [ 162.175534][T11225] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 162.175544][T11225] RSP: 002b:00007f1f348a9000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 162.175554][T11225] RAX: ffffffffffffffda RBX: 00007f1f33ba5fa0 RCX: 00007f1f3398bc1f [ 162.175560][T11225] RDX: 000000000000fd5c RSI: 0000400000000440 RDI: 00000000000000c8 [ 162.175566][T11225] RBP: 00007f1f33a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 162.175572][T11225] R10: 000000000000fd5c R11: 0000000000000293 R12: 0000000000000000 [ 162.175578][T11225] R13: 0000000000000000 R14: 00007f1f33ba5fa0 R15: 00007fff452cdf78 [ 162.175586][T11225] [ 162.175592][T11225] BUG: Bad page state in process syz.2.1692 pfn:2f32d [ 162.305578][T11225] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f32d [ 162.308523][T11225] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 162.311053][T11225] raw: 00fff00000000000 dead000000000040 ffff8880202b4000 0000000000000000 [ 162.313820][T11225] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 162.316483][T11225] page dumped because: page_pool leak [ 162.318188][T11225] page_owner tracks the page as allocated [ 162.319978][T11225] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11225, tgid 11224 (syz.2.1692), ts 161156234556, free_ts 161133957470 [ 162.325884][T11225] post_alloc_hook+0x181/0x1b0 [ 162.327321][T11225] get_page_from_freelist+0xfce/0x2f80 [ 162.329106][T11225] __alloc_frozen_pages_noprof+0x221/0x2470 [ 162.331282][T11225] alloc_pages_bulk_noprof+0x6f9/0x1390 [ 162.332215][ T5292] Bluetooth: hci1: command tx timeout [ 162.333349][T11225] __page_pool_alloc_pages_slow+0x18c/0x770 [ 162.337124][T11225] page_pool_alloc_netmems+0xc4/0x160 [ 162.338719][T11225] skb_pp_cow_data+0x776/0xf10 [ 162.340137][T11225] skb_cow_data_for_xdp+0x88/0xb0 [ 162.341620][T11225] do_xdp_generic+0x3f1/0xe70 [ 162.343045][T11225] __netif_receive_skb_core.constprop.0+0x12da/0x4330 [ 162.345047][T11225] __netif_receive_skb_one_core+0xb1/0x1e0 [ 162.346754][T11225] __netif_receive_skb+0x1d/0x160 [ 162.348230][T11225] netif_receive_skb+0x13f/0x7b0 [ 162.349696][T11225] tun_rx_batched.isra.0+0x3eb/0x730 [ 162.351250][T11225] tun_get_user+0x2a22/0x3e50 [ 162.352697][T11225] tun_chr_write_iter+0xdc/0x210 [ 162.354206][T11225] page last free pid 9304 tgid 9304 stack trace: [ 162.356054][T11225] free_frozen_pages+0x6db/0xfb0 [ 162.357668][T11225] tlb_remove_table_rcu+0x116/0x1a0 [ 162.359197][T11225] rcu_core+0x79d/0x14d0 [ 162.360454][T11225] handle_softirqs+0x213/0x8f0 [ 162.361890][T11225] __irq_exit_rcu+0x109/0x170 [ 162.363341][T11225] irq_exit_rcu+0x9/0x30 [ 162.364592][T11225] sysvec_call_function+0xa4/0xc0 [ 162.366067][T11225] asm_sysvec_call_function+0x1a/0x20 [ 162.367766][T11225] Modules linked in: [ 162.369082][T11225] CPU: 3 UID: 0 PID: 11225 Comm: syz.2.1692 Tainted: G B 6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0 [ 162.369104][T11225] Tainted: [B]=BAD_PAGE [ 162.369110][T11225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 162.369120][T11225] Call Trace: [ 162.369125][T11225] [ 162.369132][T11225] dump_stack_lvl+0x16c/0x1f0 [ 162.369151][T11225] bad_page+0xb3/0x1f0 [ 162.369170][T11225] ? __pfx_bad_page+0x10/0x10 [ 162.369189][T11225] ? page_bad_reason+0x9d/0x1e0 [ 162.369208][T11225] free_frozen_pages+0x701/0xfb0 [ 162.369225][T11225] page_frag_free+0x255/0x2a0 [ 162.369241][T11225] __xdp_return+0x319/0xa70 [ 162.369262][T11225] ? kmem_cache_free+0x2e2/0x4d0 [ 162.369279][T11225] bpf_xdp_adjust_tail+0x9de/0xf70 [ 162.369306][T11225] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 162.369318][T11225] bpf_prog_run_generic_xdp+0x623/0x1500 [ 162.369344][T11225] do_xdp_generic+0x70a/0xe70 [ 162.369362][T11225] ? __pfx_do_xdp_generic+0x10/0x10 [ 162.369381][T11225] ? hlock_class+0x4e/0x130 [ 162.369396][T11225] ? __lock_acquire+0xcc5/0x3c40 [ 162.369412][T11225] ? mark_lock+0xb5/0xc60 [ 162.369426][T11225] __netif_receive_skb_core.constprop.0+0x12da/0x4330 [ 162.369439][T11225] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 162.369456][T11225] ? __skb_flow_dissect+0x11df/0x7e40 [ 162.369467][T11225] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 162.369480][T11225] ? hlock_class+0x4e/0x130 [ 162.369489][T11225] ? __lock_acquire+0xcc5/0x3c40 [ 162.369505][T11225] ? handle_mm_fault+0x497/0xaa0 [ 162.369514][T11225] ? __pfx___lock_acquire+0x10/0x10 [ 162.369528][T11225] ? __pfx_mark_lock+0x10/0x10 [ 162.369543][T11225] __netif_receive_skb_one_core+0xb1/0x1e0 [ 162.369555][T11225] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 162.369567][T11225] ? rcu_is_watching+0x12/0xc0 [ 162.369578][T11225] ? netif_receive_skb+0x109/0x7b0 [ 162.369590][T11225] __netif_receive_skb+0x1d/0x160 [ 162.369601][T11225] netif_receive_skb+0x13f/0x7b0 [ 162.369612][T11225] ? __pfx_netif_receive_skb+0x10/0x10 [ 162.369623][T11225] ? _copy_from_iter+0x15e/0x1560 [ 162.369633][T11225] ? __pfx___lock_acquire+0x10/0x10 [ 162.369646][T11225] ? __pfx__copy_from_iter+0x10/0x10 [ 162.369656][T11225] tun_rx_batched.isra.0+0x3eb/0x730 [ 162.369671][T11225] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 162.369686][T11225] ? tun_get_user+0x13e6/0x3e50 [ 162.369701][T11225] ? lock_acquire+0x2f/0xb0 [ 162.369718][T11225] ? tun_get_user+0x13e6/0x3e50 [ 162.369733][T11225] tun_get_user+0x2a22/0x3e50 [ 162.369750][T11225] ? __pfx_tun_get_user+0x10/0x10 [ 162.369765][T11225] ? find_held_lock+0x2d/0x110 [ 162.369776][T11225] ? __pfx_lock_release+0x10/0x10 [ 162.369792][T11225] tun_chr_write_iter+0xdc/0x210 [ 162.369807][T11225] vfs_write+0x5ae/0x1150 [ 162.369823][T11225] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 162.369839][T11225] ? __pfx_vfs_write+0x10/0x10 [ 162.369853][T11225] ? do_futex+0x123/0x350 [ 162.369865][T11225] ? __fget_files+0x40/0x3a0 [ 162.369877][T11225] ksys_write+0x12b/0x250 [ 162.369891][T11225] ? __pfx_ksys_write+0x10/0x10 [ 162.369908][T11225] do_syscall_64+0xcd/0x250 [ 162.369920][T11225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.369934][T11225] RIP: 0033:0x7f1f3398bc1f [ 162.369942][T11225] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 162.369952][T11225] RSP: 002b:00007f1f348a9000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 162.369961][T11225] RAX: ffffffffffffffda RBX: 00007f1f33ba5fa0 RCX: 00007f1f3398bc1f [ 162.369969][T11225] RDX: 000000000000fd5c RSI: 0000400000000440 RDI: 00000000000000c8 [ 162.369974][T11225] RBP: 00007f1f33a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 162.369980][T11225] R10: 000000000000fd5c R11: 0000000000000293 R12: 0000000000000000 [ 162.369985][T11225] R13: 0000000000000000 R14: 00007f1f33ba5fa0 R15: 00007fff452cdf78 [ 162.369994][T11225] [ 162.370000][T11225] BUG: Bad page state in process syz.2.1692 pfn:359a7 [ 162.488868][T11225] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880359a7000 pfn:0x359a7 [ 162.491641][T11225] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 162.493696][T11225] raw: 00fff00000000000 dead000000000040 ffff8880202b4000 0000000000000000 [ 162.496168][T11225] raw: ffff8880359a7000 0000000000000001 00000000ffffffff 0000000000000000 [ 162.498664][T11225] page dumped because: page_pool leak [ 162.500227][T11225] page_owner tracks the page as allocated [ 162.501917][T11225] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11225, tgid 11224 (syz.2.1692), ts 161156227694, free_ts 161133974970 [ 162.506885][T11225] post_alloc_hook+0x181/0x1b0 [ 162.508231][T11225] get_page_from_freelist+0xfce/0x2f80 [ 162.509781][T11225] __alloc_frozen_pages_noprof+0x221/0x2470 [ 162.511488][T11225] alloc_pages_bulk_noprof+0x6f9/0x1390 [ 162.513159][T11225] __page_pool_alloc_pages_slow+0x18c/0x770 [ 162.514974][T11225] page_pool_alloc_netmems+0xc4/0x160 [ 162.516549][T11225] skb_pp_cow_data+0x776/0xf10 [ 162.517988][T11225] skb_cow_data_for_xdp+0x88/0xb0 [ 162.519469][T11225] do_xdp_generic+0x3f1/0xe70 [ 162.520863][T11225] __netif_receive_skb_core.constprop.0+0x12da/0x4330 [ 162.522879][T11225] __netif_receive_skb_one_core+0xb1/0x1e0 [ 162.524646][T11225] __netif_receive_skb+0x1d/0x160 [ 162.526137][T11225] netif_receive_skb+0x13f/0x7b0 [ 162.527591][T11225] tun_rx_batched.isra.0+0x3eb/0x730 [ 162.529170][T11225] tun_get_user+0x2a22/0x3e50 [ 162.530554][T11225] tun_chr_write_iter+0xdc/0x210 [ 162.532013][T11225] page last free pid 9304 tgid 9304 stack trace: [ 162.533909][T11225] free_frozen_pages+0x6db/0xfb0 [ 162.535363][T11225] tlb_remove_table_rcu+0x116/0x1a0 [ 162.536885][T11225] rcu_core+0x79d/0x14d0 [ 162.538163][T11225] handle_softirqs+0x213/0x8f0 [ 162.539567][T11225] __irq_exit_rcu+0x109/0x170 [ 162.540958][T11225] irq_exit_rcu+0x9/0x30 [ 162.542273][T11225] sysvec_call_function+0xa4/0xc0 [ 162.543751][T11225] asm_sysvec_call_function+0x1a/0x20 [ 162.545354][T11225] Modules linked in: [ 162.546511][T11225] CPU: 3 UID: 0 PID: 11225 Comm: syz.2.1692 Tainted: G B 6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0 [ 162.546525][T11225] Tainted: [B]=BAD_PAGE [ 162.546528][T11225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 162.546534][T11225] Call Trace: [ 162.546538][T11225] [ 162.546542][T11225] dump_stack_lvl+0x16c/0x1f0 [ 162.546556][T11225] bad_page+0xb3/0x1f0 [ 162.546568][T11225] ? __pfx_bad_page+0x10/0x10 [ 162.546580][T11225] ? page_bad_reason+0x9d/0x1e0 [ 162.546592][T11225] free_frozen_pages+0x701/0xfb0 [ 162.546603][T11225] page_frag_free+0x255/0x2a0 [ 162.546614][T11225] __xdp_return+0x319/0xa70 [ 162.546629][T11225] ? kmem_cache_free+0x2e2/0x4d0 [ 162.546638][T11225] bpf_xdp_adjust_tail+0x9de/0xf70 [ 162.546657][T11225] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 162.546665][T11225] bpf_prog_run_generic_xdp+0x623/0x1500 [ 162.546679][T11225] do_xdp_generic+0x70a/0xe70 [ 162.546690][T11225] ? __pfx_do_xdp_generic+0x10/0x10 [ 162.546702][T11225] ? hlock_class+0x4e/0x130 [ 162.546713][T11225] ? __lock_acquire+0xcc5/0x3c40 [ 162.546728][T11225] ? mark_lock+0xb5/0xc60 [ 162.546742][T11225] __netif_receive_skb_core.constprop.0+0x12da/0x4330 [ 162.546755][T11225] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 162.546771][T11225] ? __skb_flow_dissect+0x11df/0x7e40 [ 162.546787][T11225] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 162.546800][T11225] ? hlock_class+0x4e/0x130 [ 162.546810][T11225] ? __lock_acquire+0xcc5/0x3c40 [ 162.546825][T11225] ? handle_mm_fault+0x497/0xaa0 [ 162.546834][T11225] ? __pfx___lock_acquire+0x10/0x10 [ 162.546848][T11225] ? __pfx_mark_lock+0x10/0x10 [ 162.546863][T11225] __netif_receive_skb_one_core+0xb1/0x1e0 [ 162.546874][T11225] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 162.546886][T11225] ? rcu_is_watching+0x12/0xc0 [ 162.546898][T11225] ? netif_receive_skb+0x109/0x7b0 [ 162.546909][T11225] __netif_receive_skb+0x1d/0x160 [ 162.546921][T11225] netif_receive_skb+0x13f/0x7b0 [ 162.546931][T11225] ? __pfx_netif_receive_skb+0x10/0x10 [ 162.546943][T11225] ? _copy_from_iter+0x15e/0x1560 [ 162.546953][T11225] ? __pfx___lock_acquire+0x10/0x10 [ 162.546966][T11225] ? __pfx__copy_from_iter+0x10/0x10 [ 162.546976][T11225] tun_rx_batched.isra.0+0x3eb/0x730 [ 162.546991][T11225] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 162.547006][T11225] ? tun_get_user+0x13e6/0x3e50 [ 162.547021][T11225] ? lock_acquire+0x2f/0xb0 [ 162.547034][T11225] ? tun_get_user+0x13e6/0x3e50 [ 162.547049][T11225] tun_get_user+0x2a22/0x3e50 [ 162.547065][T11225] ? __pfx_tun_get_user+0x10/0x10 [ 162.547080][T11225] ? find_held_lock+0x2d/0x110 [ 162.547091][T11225] ? __pfx_lock_release+0x10/0x10 [ 162.547107][T11225] tun_chr_write_iter+0xdc/0x210 [ 162.547123][T11225] vfs_write+0x5ae/0x1150 [ 162.547138][T11225] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 162.547154][T11225] ? __pfx_vfs_write+0x10/0x10 [ 162.547168][T11225] ? do_futex+0x123/0x350 [ 162.547181][T11225] ? __fget_files+0x40/0x3a0 [ 162.547192][T11225] ksys_write+0x12b/0x250 [ 162.547207][T11225] ? __pfx_ksys_write+0x10/0x10 [ 162.547224][T11225] do_syscall_64+0xcd/0x250 [ 162.547236][T11225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.547250][T11225] RIP: 0033:0x7f1f3398bc1f [ 162.547258][T11225] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 162.547268][T11225] RSP: 002b:00007f1f348a9000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 162.547277][T11225] RAX: ffffffffffffffda RBX: 00007f1f33ba5fa0 RCX: 00007f1f3398bc1f [ 162.547283][T11225] RDX: 000000000000fd5c RSI: 0000400000000440 RDI: 00000000000000c8 [ 162.547289][T11225] RBP: 00007f1f33a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 162.547295][T11225] R10: 000000000000fd5c R11: 0000000000000293 R12: 0000000000000000 [ 162.547301][T11225] R13: 0000000000000000 R14: 00007f1f33ba5fa0 R15: 00007fff452cdf78 [ 162.547309][T11225] [ 162.547315][T11225] BUG: Bad page state in process syz.2.1692 pfn:323a0 [ 162.665383][T11225] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x323a0 [ 162.668107][T11225] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 162.670130][T11225] raw: 00fff00000000000 dead000000000040 ffff8880202b4000 0000000000000000 [ 162.672806][T11225] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 162.675450][T11225] page dumped because: page_pool leak [ 162.677296][T11225] page_owner tracks the page as allocated [ 162.679227][T11225] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11225, tgid 11224 (syz.2.1692), ts 161156220804, free_ts 161133981256 [ 162.684509][T11225] post_alloc_hook+0x181/0x1b0 [ 162.685942][T11225] get_page_from_freelist+0xfce/0x2f80 [ 162.687625][T11225] __alloc_frozen_pages_noprof+0x221/0x2470 [ 162.689674][T11225] alloc_pages_bulk_noprof+0x6f9/0x1390 [ 162.691402][T11225] __page_pool_alloc_pages_slow+0x18c/0x770 [ 162.693217][T11225] page_pool_alloc_netmems+0xc4/0x160 [ 162.694818][T11225] skb_pp_cow_data+0x776/0xf10 [ 162.696231][T11225] skb_cow_data_for_xdp+0x88/0xb0 [ 162.697737][T11225] do_xdp_generic+0x3f1/0xe70 [ 162.699128][T11225] __netif_receive_skb_core.constprop.0+0x12da/0x4330 [ 162.701104][T11225] __netif_receive_skb_one_core+0xb1/0x1e0 [ 162.702951][T11225] __netif_receive_skb+0x1d/0x160 [ 162.704658][T11225] netif_receive_skb+0x13f/0x7b0 [ 162.706154][T11225] tun_rx_batched.isra.0+0x3eb/0x730 [ 162.707670][T11225] tun_get_user+0x2a22/0x3e50 [ 162.709070][T11225] tun_chr_write_iter+0xdc/0x210 [ 162.710524][T11225] page last free pid 9304 tgid 9304 stack trace: [ 162.712415][T11225] free_frozen_pages+0x6db/0xfb0 [ 162.713906][T11225] tlb_remove_table_rcu+0x116/0x1a0 [ 162.715920][T11225] rcu_core+0x79d/0x14d0 [ 162.717570][T11225] handle_softirqs+0x213/0x8f0 [ 162.719282][T11225] __irq_exit_rcu+0x109/0x170 [ 162.720820][T11225] irq_exit_rcu+0x9/0x30 [ 162.722406][T11225] sysvec_call_function+0xa4/0xc0 [ 162.724316][T11225] asm_sysvec_call_function+0x1a/0x20 [ 162.725895][T11225] Modules linked in: [ 162.727058][T11225] CPU: 3 UID: 0 PID: 11225 Comm: syz.2.1692 Tainted: G B 6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0 [ 162.727078][T11225] Tainted: [B]=BAD_PAGE [ 162.727082][T11225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 162.727088][T11225] Call Trace: [ 162.727092][T11225] [ 162.727096][T11225] dump_stack_lvl+0x16c/0x1f0 [ 162.727110][T11225] bad_page+0xb3/0x1f0 [ 162.727123][T11225] ? __pfx_bad_page+0x10/0x10 [ 162.727135][T11225] ? page_bad_reason+0x9d/0x1e0 [ 162.727147][T11225] free_frozen_pages+0x701/0xfb0 [ 162.727158][T11225] page_frag_free+0x255/0x2a0 [ 162.727169][T11225] __xdp_return+0x319/0xa70 [ 162.727184][T11225] ? kmem_cache_free+0x2e2/0x4d0 [ 162.727194][T11225] bpf_xdp_adjust_tail+0x9de/0xf70 [ 162.727212][T11225] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 162.727220][T11225] bpf_prog_run_generic_xdp+0x623/0x1500 [ 162.727237][T11225] do_xdp_generic+0x70a/0xe70 [ 162.727252][T11225] ? __pfx_do_xdp_generic+0x10/0x10 [ 162.727264][T11225] ? hlock_class+0x4e/0x130 [ 162.727274][T11225] ? __lock_acquire+0xcc5/0x3c40 [ 162.727290][T11225] ? mark_lock+0xb5/0xc60 [ 162.727304][T11225] __netif_receive_skb_core.constprop.0+0x12da/0x4330 [ 162.727323][T11225] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 162.727339][T11225] ? __skb_flow_dissect+0x11df/0x7e40 [ 162.727351][T11225] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 162.727364][T11225] ? hlock_class+0x4e/0x130 [ 162.727373][T11225] ? __lock_acquire+0xcc5/0x3c40 [ 162.727388][T11225] ? handle_mm_fault+0x497/0xaa0 [ 162.727398][T11225] ? __pfx___lock_acquire+0x10/0x10 [ 162.727412][T11225] ? __pfx_mark_lock+0x10/0x10 [ 162.727427][T11225] __netif_receive_skb_one_core+0xb1/0x1e0 [ 162.727438][T11225] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 162.727451][T11225] ? rcu_is_watching+0x12/0xc0 [ 162.727462][T11225] ? netif_receive_skb+0x109/0x7b0 [ 162.727473][T11225] __netif_receive_skb+0x1d/0x160 [ 162.727485][T11225] netif_receive_skb+0x13f/0x7b0 [ 162.727496][T11225] ? __pfx_netif_receive_skb+0x10/0x10 [ 162.727507][T11225] ? _copy_from_iter+0x15e/0x1560 [ 162.727517][T11225] ? __pfx___lock_acquire+0x10/0x10 [ 162.727530][T11225] ? __pfx__copy_from_iter+0x10/0x10 [ 162.727540][T11225] tun_rx_batched.isra.0+0x3eb/0x730 [ 162.727555][T11225] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 162.727570][T11225] ? tun_get_user+0x13e6/0x3e50 [ 162.727584][T11225] ? lock_acquire+0x2f/0xb0 [ 162.727597][T11225] ? tun_get_user+0x13e6/0x3e50 [ 162.727612][T11225] tun_get_user+0x2a22/0x3e50 [ 162.727628][T11225] ? __pfx_tun_get_user+0x10/0x10 [ 162.727643][T11225] ? find_held_lock+0x2d/0x110 [ 162.727654][T11225] ? __pfx_lock_release+0x10/0x10 [ 162.727670][T11225] tun_chr_write_iter+0xdc/0x210 [ 162.727685][T11225] vfs_write+0x5ae/0x1150 [ 162.727700][T11225] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 162.727716][T11225] ? __pfx_vfs_write+0x10/0x10 [ 162.727730][T11225] ? do_futex+0x123/0x350 [ 162.727742][T11225] ? __fget_files+0x40/0x3a0 [ 162.727753][T11225] ksys_write+0x12b/0x250 [ 162.727768][T11225] ? __pfx_ksys_write+0x10/0x10 [ 162.727789][T11225] do_syscall_64+0xcd/0x250 [ 162.727801][T11225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.727815][T11225] RIP: 0033:0x7f1f3398bc1f [ 162.727823][T11225] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 162.727832][T11225] RSP: 002b:00007f1f348a9000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 162.727844][T11225] RAX: ffffffffffffffda RBX: 00007f1f33ba5fa0 RCX: 00007f1f3398bc1f [ 162.727853][T11225] RDX: 000000000000fd5c RSI: 0000400000000440 RDI: 00000000000000c8 [ 162.727859][T11225] RBP: 00007f1f33a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 162.727864][T11225] R10: 000000000000fd5c R11: 0000000000000293 R12: 0000000000000000 [ 162.727870][T11225] R13: 0000000000000000 R14: 00007f1f33ba5fa0 R15: 00007fff452cdf78 [ 162.727878][T11225] [ 162.727885][T11225] BUG: Bad page state in process syz.2.1692 pfn:31b55 [ 162.853803][T11225] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x31b55 [ 162.857119][T11225] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 162.859640][T11225] raw: 00fff00000000000 dead000000000040 ffff8880202b4000 0000000000000000 [ 162.862409][T11225] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 162.865195][T11225] page dumped because: page_pool leak [ 162.866943][T11225] page_owner tracks the page as allocated [ 162.868872][T11225] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11225, tgid 11224 (syz.2.1692), ts 161156213566, free_ts 161133987628 [ 162.874112][T11225] post_alloc_hook+0x181/0x1b0 [ 162.875565][T11225] get_page_from_freelist+0xfce/0x2f80 [ 162.877127][T11225] __alloc_frozen_pages_noprof+0x221/0x2470 [ 162.878886][T11225] alloc_pages_bulk_noprof+0x6f9/0x1390 [ 162.880386][T11225] __page_pool_alloc_pages_slow+0x18c/0x770 [ 162.882016][T11225] page_pool_alloc_netmems+0xc4/0x160 [ 162.883578][T11225] skb_pp_cow_data+0x776/0xf10 [ 162.884967][T11225] skb_cow_data_for_xdp+0x88/0xb0 [ 162.886428][T11225] do_xdp_generic+0x3f1/0xe70 [ 162.887782][T11225] __netif_receive_skb_core.constprop.0+0x12da/0x4330 [ 162.889675][T11225] __netif_receive_skb_one_core+0xb1/0x1e0 [ 162.891373][T11225] __netif_receive_skb+0x1d/0x160 [ 162.892845][T11225] netif_receive_skb+0x13f/0x7b0 [ 162.894332][T11225] tun_rx_batched.isra.0+0x3eb/0x730 [ 162.895998][T11225] tun_get_user+0x2a22/0x3e50 [ 162.897418][T11225] tun_chr_write_iter+0xdc/0x210 [ 162.899015][T11225] page last free pid 9304 tgid 9304 stack trace: [ 162.901033][T11225] free_frozen_pages+0x6db/0xfb0 [ 162.902523][T11225] tlb_remove_table_rcu+0x116/0x1a0 [ 162.904010][T11225] rcu_core+0x79d/0x14d0 [ 162.905380][T11225] handle_softirqs+0x213/0x8f0 [ 162.906889][T11225] __irq_exit_rcu+0x109/0x170 [ 162.908333][T11225] irq_exit_rcu+0x9/0x30 [ 162.909775][T11225] sysvec_call_function+0xa4/0xc0 [ 162.911466][T11225] asm_sysvec_call_function+0x1a/0x20 [ 162.913410][T11225] Modules linked in: [ 162.914817][T11225] CPU: 3 UID: 0 PID: 11225 Comm: syz.2.1692 Tainted: G B 6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0 [ 162.914832][T11225] Tainted: [B]=BAD_PAGE [ 162.914836][T11225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 162.914842][T11225] Call Trace: [ 162.914845][T11225] [ 162.914849][T11225] dump_stack_lvl+0x16c/0x1f0 [ 162.914863][T11225] bad_page+0xb3/0x1f0 [ 162.914876][T11225] ? __pfx_bad_page+0x10/0x10 [ 162.914888][T11225] ? page_bad_reason+0x9d/0x1e0 [ 162.914900][T11225] free_frozen_pages+0x701/0xfb0 [ 162.914911][T11225] page_frag_free+0x255/0x2a0 [ 162.914922][T11225] __xdp_return+0x319/0xa70 [ 162.914937][T11225] ? kmem_cache_free+0x2e2/0x4d0 [ 162.914947][T11225] bpf_xdp_adjust_tail+0x9de/0xf70 [ 162.914965][T11225] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 162.914973][T11225] bpf_prog_run_generic_xdp+0x623/0x1500 [ 162.914988][T11225] do_xdp_generic+0x70a/0xe70 [ 162.914999][T11225] ? __pfx_do_xdp_generic+0x10/0x10 [ 162.915011][T11225] ? hlock_class+0x4e/0x130 [ 162.915023][T11225] ? __lock_acquire+0xcc5/0x3c40 [ 162.915038][T11225] ? mark_lock+0xb5/0xc60 [ 162.915052][T11225] __netif_receive_skb_core.constprop.0+0x12da/0x4330 [ 162.915066][T11225] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 162.915082][T11225] ? __skb_flow_dissect+0x11df/0x7e40 [ 162.915094][T11225] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 162.915106][T11225] ? hlock_class+0x4e/0x130 [ 162.915116][T11225] ? __lock_acquire+0xcc5/0x3c40 [ 162.915131][T11225] ? handle_mm_fault+0x497/0xaa0 [ 162.915141][T11225] ? __pfx___lock_acquire+0x10/0x10 [ 162.915154][T11225] ? __pfx_mark_lock+0x10/0x10 [ 162.915169][T11225] __netif_receive_skb_one_core+0xb1/0x1e0 [ 162.915181][T11225] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 162.915192][T11225] ? rcu_is_watching+0x12/0xc0 [ 162.915203][T11225] ? netif_receive_skb+0x109/0x7b0 [ 162.915215][T11225] __netif_receive_skb+0x1d/0x160 [ 162.915226][T11225] netif_receive_skb+0x13f/0x7b0 [ 162.915237][T11225] ? __pfx_netif_receive_skb+0x10/0x10 [ 162.915248][T11225] ? _copy_from_iter+0x15e/0x1560 [ 162.915258][T11225] ? __pfx___lock_acquire+0x10/0x10 [ 162.915271][T11225] ? __pfx__copy_from_iter+0x10/0x10 [ 162.915281][T11225] tun_rx_batched.isra.0+0x3eb/0x730 [ 162.915297][T11225] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 162.915312][T11225] ? tun_get_user+0x13e6/0x3e50 [ 162.915327][T11225] ? lock_acquire+0x2f/0xb0 [ 162.915340][T11225] ? tun_get_user+0x13e6/0x3e50 [ 162.915355][T11225] tun_get_user+0x2a22/0x3e50 [ 162.915372][T11225] ? __pfx_tun_get_user+0x10/0x10 [ 162.915386][T11225] ? find_held_lock+0x2d/0x110 [ 162.915397][T11225] ? __pfx_lock_release+0x10/0x10 [ 162.915413][T11225] tun_chr_write_iter+0xdc/0x210 [ 162.915428][T11225] vfs_write+0x5ae/0x1150 [ 162.915444][T11225] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 162.915460][T11225] ? __pfx_vfs_write+0x10/0x10 [ 162.915474][T11225] ? do_futex+0x123/0x350 [ 162.915486][T11225] ? __fget_files+0x40/0x3a0 [ 162.915497][T11225] ksys_write+0x12b/0x250 [ 162.915512][T11225] ? __pfx_ksys_write+0x10/0x10 [ 162.915529][T11225] do_syscall_64+0xcd/0x250 [ 162.915541][T11225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.915555][T11225] RIP: 0033:0x7f1f3398bc1f [ 162.915563][T11225] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 162.915573][T11225] RSP: 002b:00007f1f348a9000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 162.915583][T11225] RAX: ffffffffffffffda RBX: 00007f1f33ba5fa0 RCX: 00007f1f3398bc1f [ 162.915589][T11225] RDX: 000000000000fd5c RSI: 0000400000000440 RDI: 00000000000000c8 [ 162.915595][T11225] RBP: 00007f1f33a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 162.915600][T11225] R10: 000000000000fd5c R11: 0000000000000293 R12: 0000000000000000 [ 162.915606][T11225] R13: 0000000000000000 R14: 00007f1f33ba5fa0 R15: 00007fff452cdf78 [ 162.915615][T11225] [ 162.915621][T11225] BUG: Bad page state in process syz.2.1692 pfn:4e250 [ 163.032128][T11225] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x4e250 [ 163.035461][T11225] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 163.037840][T11225] raw: 00fff00000000000 dead000000000040 ffff8880202b4000 0000000000000000 [ 163.040870][T11225] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 163.043879][T11225] page dumped because: page_pool leak [ 163.045784][T11225] page_owner tracks the page as allocated [ 163.047756][T11225] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11225, tgid 11224 (syz.2.1692), ts 161156206722, free_ts 161133991323 [ 163.053534][T11225] post_alloc_hook+0x181/0x1b0 [ 163.055154][T11225] get_page_from_freelist+0xfce/0x2f80 [ 163.056723][T11225] __alloc_frozen_pages_noprof+0x221/0x2470 [ 163.058429][T11225] alloc_pages_bulk_noprof+0x6f9/0x1390 [ 163.060006][T11225] __page_pool_alloc_pages_slow+0x18c/0x770 [ 163.061703][T11225] page_pool_alloc_netmems+0xc4/0x160 [ 163.063299][T11225] skb_pp_cow_data+0x776/0xf10 [ 163.064693][T11225] skb_cow_data_for_xdp+0x88/0xb0 [ 163.066144][T11225] do_xdp_generic+0x3f1/0xe70 [ 163.067451][T11225] __netif_receive_skb_core.constprop.0+0x12da/0x4330 [ 163.069357][T11225] __netif_receive_skb_one_core+0xb1/0x1e0 [ 163.071024][T11225] __netif_receive_skb+0x1d/0x160 [ 163.072540][T11225] netif_receive_skb+0x13f/0x7b0 [ 163.074164][T11225] tun_rx_batched.isra.0+0x3eb/0x730 [ 163.075877][T11225] tun_get_user+0x2a22/0x3e50 [ 163.077568][T11225] tun_chr_write_iter+0xdc/0x210 [ 163.079183][T11225] page last free pid 9304 tgid 9304 stack trace: [ 163.081243][T11225] free_frozen_pages+0x6db/0xfb0 [ 163.082945][T11225] tlb_remove_table_rcu+0x116/0x1a0 [ 163.084673][T11225] rcu_core+0x79d/0x14d0 [ 163.086090][T11225] handle_softirqs+0x213/0x8f0 [ 163.087784][T11225] __irq_exit_rcu+0x109/0x170 [ 163.089308][T11225] irq_exit_rcu+0x9/0x30 [ 163.090569][T11225] sysvec_call_function+0xa4/0xc0 [ 163.092109][T11225] asm_sysvec_call_function+0x1a/0x20 [ 163.093715][T11225] Modules linked in: [ 163.094874][T11225] CPU: 3 UID: 0 PID: 11225 Comm: syz.2.1692 Tainted: G B 6.14.0-rc4-syzkaller-00090-gdd83757f6e68 #0 [ 163.094888][T11225] Tainted: [B]=BAD_PAGE [ 163.094892][T11225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 163.094898][T11225] Call Trace: [ 163.094901][T11225] [ 163.094905][T11225] dump_stack_lvl+0x16c/0x1f0 [ 163.094919][T11225] bad_page+0xb3/0x1f0 [ 163.094932][T11225] ? __pfx_bad_page+0x10/0x10 [ 163.094944][T11225] ? page_bad_reason+0x9d/0x1e0 [ 163.094955][T11225] free_frozen_pages+0x701/0xfb0 [ 163.094966][T11225] page_frag_free+0x255/0x2a0 [ 163.094978][T11225] __xdp_return+0x319/0xa70 [ 163.094993][T11225] ? kmem_cache_free+0x2e2/0x4d0 [ 163.095003][T11225] bpf_xdp_adjust_tail+0x9de/0xf70 [ 163.095023][T11225] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 163.095031][T11225] bpf_prog_run_generic_xdp+0x623/0x1500 [ 163.095045][T11225] do_xdp_generic+0x70a/0xe70 [ 163.095057][T11225] ? __pfx_do_xdp_generic+0x10/0x10 [ 163.095069][T11225] ? hlock_class+0x4e/0x130 [ 163.095079][T11225] ? __lock_acquire+0xcc5/0x3c40 [ 163.095094][T11225] ? mark_lock+0xb5/0xc60 [ 163.095108][T11225] __netif_receive_skb_core.constprop.0+0x12da/0x4330 [ 163.095122][T11225] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 163.095138][T11225] ? __skb_flow_dissect+0x11df/0x7e40 [ 163.095149][T11225] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 163.095162][T11225] ? hlock_class+0x4e/0x130 [ 163.095172][T11225] ? __lock_acquire+0xcc5/0x3c40 [ 163.095187][T11225] ? handle_mm_fault+0x497/0xaa0 [ 163.095196][T11225] ? __pfx___lock_acquire+0x10/0x10 [ 163.095210][T11225] ? __pfx_mark_lock+0x10/0x10 [ 163.095224][T11225] __netif_receive_skb_one_core+0xb1/0x1e0 [ 163.095236][T11225] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 163.095248][T11225] ? rcu_is_watching+0x12/0xc0 [ 163.095258][T11225] ? netif_receive_skb+0x109/0x7b0 [ 163.095270][T11225] __netif_receive_skb+0x1d/0x160 [ 163.095282][T11225] netif_receive_skb+0x13f/0x7b0 [ 163.095293][T11225] ? __pfx_netif_receive_skb+0x10/0x10 [ 163.095304][T11225] ? _copy_from_iter+0x15e/0x1560 [ 163.095313][T11225] ? __pfx___lock_acquire+0x10/0x10 [ 163.095327][T11225] ? __pfx__copy_from_iter+0x10/0x10 [ 163.095336][T11225] tun_rx_batched.isra.0+0x3eb/0x730 [ 163.095351][T11225] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 163.095366][T11225] ? tun_get_user+0x13e6/0x3e50 [ 163.095380][T11225] ? lock_acquire+0x2f/0xb0 [ 163.095393][T11225] ? tun_get_user+0x13e6/0x3e50 [ 163.095408][T11225] tun_get_user+0x2a22/0x3e50 [ 163.095425][T11225] ? __pfx_tun_get_user+0x10/0x10 [ 163.095439][T11225] ? find_held_lock+0x2d/0x110 [ 163.095450][T11225] ? __pfx_lock_release+0x10/0x10 [ 163.095466][T11225] tun_chr_write_iter+0xdc/0x210 [ 163.095482][T11225] vfs_write+0x5ae/0x1150 [ 163.095497][T11225] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 163.095513][T11225] ? __pfx_vfs_write+0x10/0x10 [ 163.095527][T11225] ? do_futex+0x123/0x350 [ 163.095539][T11225] ? __fget_files+0x40/0x3a0 [ 163.095550][T11225] ksys_write+0x12b/0x250 [ 163.095565][T11225] ? __pfx_ksys_write+0x10/0x10 [ 163.095582][T11225] do_syscall_64+0xcd/0x250 [ 163.095594][T11225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.095608][T11225] RIP: 0033:0x7f1f3398bc1f [ 163.095615][T11225] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 163.095625][T11225] RSP: 002b:00007f1f348a9000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 163.095634][T11225] RAX: ffffffffffffffda RBX: 00007f1f33ba5fa0 RCX: 00007f1f3398bc1f [ 163.095640][T11225] RDX: 000000000000fd5c RSI: 0000400000000440 RDI: 00000000000000c8 [ 163.095646][T11225] RBP: 00007f1f33a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 163.095652][T11225] R10: 000000000000fd5c R11: 0000000000000293 R12: 0000000000000000 [ 163.095658][T11225] R13: 0000000000000000 R14: 00007f1f33ba5fa0 R15: 00007fff452cdf78 [ 163.095666][T11225] [ 163.862573][ T8300] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.935148][ T8300] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.994770][ T8300] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.056931][ T8300] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.141116][ T8300] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.206048][ T8300] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.275025][ T8300] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.335718][ T8300] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.420612][ T8300] bridge_slave_1: left allmulticast mode [ 164.424102][ T8300] bridge_slave_1: left promiscuous mode [ 164.426412][ T8300] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.430355][ T8300] bridge_slave_0: left allmulticast mode [ 164.433245][ T8300] bridge_slave_0: left promiscuous mode [ 164.435507][ T8300] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.439564][ T8300] bridge_slave_1: left allmulticast mode [ 164.441721][ T8300] bridge_slave_1: left promiscuous mode [ 164.444125][ T8300] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.448048][ T8300] bridge_slave_0: left allmulticast mode [ 164.450234][ T8300] bridge_slave_0: left promiscuous mode [ 164.452658][ T8300] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.456596][ T8300] bridge_slave_1: left allmulticast mode [ 164.458965][ T8300] bridge_slave_1: left promiscuous mode [ 164.461201][ T8300] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.465562][ T8300] bridge_slave_0: left allmulticast mode [ 164.467761][ T8300] bridge_slave_0: left promiscuous mode [ 164.469996][ T8300] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.523379][ T8300] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 164.529106][ T8300] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 165.197177][ T8300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.201524][ T8300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.205774][ T8300] bond0 (unregistering): Released all slaves [ 165.215335][ T8300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.220408][ T8300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.224735][ T8300] bond0 (unregistering): Released all slaves [ 165.298035][ T8300] bond1 (unregistering): Released all slaves [ 165.305601][ T8300] bond2 (unregistering): Released all slaves [ 165.380849][ T8300] bond3 (unregistering): Released all slaves [ 165.456500][ T8300] bond4 (unregistering): Released all slaves [ 165.532238][ T8300] bond5 (unregistering): Released all slaves [ 165.538690][ T8300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.542846][ T8300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.546274][ T8300] bond0 (unregistering): Released all slaves [ 165.552582][ T8300] bond1 (unregistering): Released all slaves [ 165.622943][ T8300] bond2 (unregistering): Released all slaves [ 165.628302][ T8300] bond3 (unregistering): Released all slaves [ 165.716650][ T8300] bond4 (unregistering): Released all slaves [ 166.166870][ T8300] hsr_slave_0: left promiscuous mode [ 166.168700][ T8300] hsr_slave_1: left promiscuous mode [ 166.170431][ T8300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.175147][ T8300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.180409][ T8300] hsr_slave_0: left promiscuous mode [ 166.182710][ T8300] hsr_slave_1: left promiscuous mode [ 166.184935][ T8300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.187673][ T8300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.190406][ T8300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.193153][ T8300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.198124][ T8300] hsr_slave_0: left promiscuous mode [ 166.200337][ T8300] hsr_slave_1: left promiscuous mode [ 166.202704][ T8300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.205287][ T8300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.207596][ T8300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.209751][ T8300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.214773][ T8300] veth1_macvtap: left promiscuous mode [ 166.216440][ T8300] veth0_macvtap: left promiscuous mode [ 166.218090][ T8300] veth1_vlan: left promiscuous mode [ 166.219622][ T8300] veth0_vlan: left promiscuous mode [ 166.221650][ T8300] veth1_macvtap: left promiscuous mode [ 166.224122][ T8300] veth0_macvtap: left promiscuous mode [ 166.226186][ T8300] veth1_vlan: left promiscuous mode [ 166.227764][ T8300] veth0_vlan: left promiscuous mode [ 166.384834][ T8300] team0 (unregistering): Port device team_slave_1 removed [ 166.431603][ T8300] team0 (unregistering): Port device team_slave_0 removed [ 166.715703][ T8300] team0 (unregistering): Port device team_slave_1 removed [ 166.753243][ T8300] team0 (unregistering): Port device team_slave_0 removed [ 167.029627][ T8300] team0 (unregistering): Port device team_slave_1 removed [ 167.066060][ T8300] team0 (unregistering): Port device team_slave_0 removed [ 168.082785][ T8300] IPVS: stop unused estimator thread 0... VM DIAGNOSIS: 12:38:15 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff9103df50 RDX=0000000000000005 RSI=0000000000000001 RDI=ffffffff907c7df0 RBP=ffffc90005f1f2a0 RSP=ffffc90005f1f1e8 R8 =ffffffff9103df62 R9 =ffffffff9103df54 R10=ffffc90005f1f258 R11=0000000000011cc8 R12=ffffc90005f1f2a8 R13=ffffc90005f1f258 R14=ffffc90005f1f28d R15=0000000000000000 RIP=ffffffff81692eb1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffcfa219dd8 CR3=0000000037a94000 CR4=00352ef0 DR0=1040000000000000 DR1=0000000000000004 DR2=000000000000002f DR3=0000000100000008 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000062b8e06c0c RBX=ffff88806a728400 RCX=00000000000006e0 RDX=0000000000000062 RSI=ffff88806a728400 RDI=0000000000316c1b RBP=0000000000316c1b RSP=ffffc900006b0ec0 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=0000000000000001 R12=0000000000000000 R13=0000000000000019 R14=0000000000000000 R15=000000258100cafd RIP=ffffffff8166a025 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7340ad7d60 CR3=00000000315a0000 CR4=00352ef0 DR0=1040000000000000 DR1=0000000000000004 DR2=000000000000002f DR3=0000000100000008 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f733ff7c6a3 00007f733ff7c6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb7681f60 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555576007a99 0000555576007300 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555575f91498 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555575f94eb9 0000555575f94d50 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00100006c0030210 0006b0035810000a 90030008001fd003 1a04001fcc031004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100006800401 0000000806060164 f010908080800800 06e00300100006d0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300100006c00302 100006b003581000 0a90030008001fd0 031a04001fcc0310 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04001fc8031a0400 1fc4031c04001fc0 030004001fbc0307 ffc404001fb80300 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04001fb40307ffc0 04001fb003000000 0608061fa8030004 001fa4030002001f ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffffc90004186e48 RCX=ffffffff9185b9c6 RDX=ffffc90004186e58 RSI=ffffc90004187a10 RDI=ffffc90004186e48 RBP=ffffc90004187a10 RSP=ffffc90004186d98 R8 =ffffffff9185b9cc R9 =ffffffff9185b9ca R10=ffffc90004186e48 R11=0000000000083584 R12=0000000000000008 R13=ffffc90004186e58 R14=ffffc90004186e50 R15=ffffc90004180000 RIP=ffffffff8169276b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f08da628740 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056310acb1c38 CR3=0000000031c16000 CR4=00352ef0 DR0=1040000000000000 DR1=0000000000000004 DR2=000000000000002f DR3=0000000100000008 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0c0c0f8 Opmask01=000000000000007f Opmask02=00000000feff7f7f Opmask03=0104100080810010 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e34b0526e6cf6d1e d826857d2b682826 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e9816775156790c0 3ebe7cf7587897f0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a6edb76f70b2ece1 fe9a76c5c2968495 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b008738fedd87fd3 43dd87ddc957dc61 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000007500 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 62b5212400011984 c0000000de000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001c37562b6604d 000062b7000062b6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 62b64b4978000000 4c000000e8000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 67d43475451f2800 70a50e4270000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a16064313b37d854 83554c232d547f83 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 39eb0939f848aa7f 81bd2ed2d43ac97e ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 696c2f7273752f00 534b4e494c564544 00454d414e564544 005845444e494649 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7665642027627375 2720746e65726170 20646e6966206f74 20656c62616e7500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5340410502475650 0205514b40574455 05414b4c43054a51 05404947444b5000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000271 0000000000000000 36706f6f6c2f6b63 6f6c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261742f78756e69 6c65732f6374652f 0000000000000041 0000000033326c6c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5bafd8d610c9c5c3 00005600e320c3d0 0000000000000101 0000000000007974 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a263b383a3a263a 383a3a26493b3a3a 26483b3a3a264b3b 3a0a00307f617930 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 3 CPU#3 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85407af5 RDI=ffffffff9ab80780 RBP=ffffffff9ab80740 RSP=ffffc90006ab6ad0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000006 R12=0000000000000000 R13=0000000000000035 R14=ffffffff9ab80740 R15=0000000000000000 RIP=ffffffff85407b1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f1f348a96c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000400000010000 CR3=0000000058e60000 CR4=00352ef0 DR0=1040000000000000 DR1=0000000000000004 DR2=000000000000002f DR3=0000000100000008 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffc000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1f33a0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1f33a0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1f33a0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1f33a0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1f33a0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1f33a0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000031647261632f 6972642f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000012475142400c 4a51470c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000