last executing test programs: 9m11.650401502s ago: executing program 32 (id=2731): open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r1, r1, 0x0) fcntl$setlease(r0, 0x400, 0x0) 8m55.965396673s ago: executing program 33 (id=3027): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x3, 0x0, 0x0, 0xc, 0xb, 0x6, 0x5508, 0xc336, 0x1, 0xb, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 8m37.246740717s ago: executing program 34 (id=3109): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0xdb30}], 0x1, 0x40002142, 0x0) 8m23.299606756s ago: executing program 35 (id=3458): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendfile(r0, r1, 0x0, 0x2000fb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) 7m52.342913666s ago: executing program 36 (id=4021): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x166, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom(r0, &(0x7f0000000200)=""/131, 0xf92e58a67d38802c, 0x2101, 0x0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000140)) 7m50.162787219s ago: executing program 5 (id=4035): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, &(0x7f00000001c0)="b796", 0x57, 0x20004800, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) 7m49.78603748s ago: executing program 5 (id=4041): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) sendmmsg$sock(r0, &(0x7f0000001ec0)=[{{&(0x7f00000005c0)=@ll={0x11, 0x1, r2, 0x1, 0x2, 0x6, @random="c6ab055b4fad"}, 0x80, 0x0, 0x0, &(0x7f0000000bc0)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x18}}], 0x1, 0x200088d0) 7m49.783231018s ago: executing program 5 (id=4050): sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000400)=""/163, 0xa3}, {&(0x7f0000001580)=""/4088, 0xff8}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 7m49.629591618s ago: executing program 5 (id=4052): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000240)='./file0\x00') 7m49.556403695s ago: executing program 5 (id=4043): r0 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) 7m49.001999743s ago: executing program 5 (id=4055): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=""/245, 0xf5}, &(0x7f0000000240)=0x40) 7m48.879972172s ago: executing program 37 (id=4055): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=""/245, 0xf5}, &(0x7f0000000240)=0x40) 7m15.80213718s ago: executing program 2 (id=4507): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7m15.749024184s ago: executing program 2 (id=4508): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@hyper, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000100)={&(0x7f0000001080)={{@any, 0xfff}, {@any, 0x5}, 0x400, "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"}, 0x418, 0x8}) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, &(0x7f0000000140)={0x0, 0x10000}) 7m15.663662519s ago: executing program 2 (id=4511): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x0, 0xfd, 0x0, 0x4, 0x88, 0x1, 0xfd, 0x3}, 0xe) shutdown(r0, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x41d8, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 7m15.327932252s ago: executing program 2 (id=4522): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0\x00') 7m15.254905066s ago: executing program 2 (id=4516): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000440)={0xd5, 0x0, 0x10}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) 7m14.826168947s ago: executing program 2 (id=4534): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000002c0)={0xa0000013}) 7m14.758068722s ago: executing program 38 (id=4534): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000002c0)={0xa0000013}) 5m3.696851957s ago: executing program 9 (id=7108): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000180)='u', 0x1}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f00000001c0)="740e8c24b5448ec6eb7356d46528b9780f63c59d7b7ba60af9cc9a1b06533cc5ebbd9633b9799a74f02dd6b6346cdd7a1158c7f9938474320e3f6d64184d44372545b4798a719442d21f229fa8d6d0df9f6790091b3eb80cf95657342afe558df2c4958ffa949cf0eb3007a85b882139f441c861706fbc04b0b89a0e8c0601fe7b", 0x81, 0x40890, 0x0, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0x1f, &(0x7f0000000280), 0x2d}, 0x2) 5m3.604857195s ago: executing program 9 (id=7109): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) dup3(r2, r0, 0x0) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) 5m3.555594994s ago: executing program 9 (id=7111): mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4605fc0040ff7f00000000000002003e"], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 5m3.485434453s ago: executing program 9 (id=7113): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0/../file0/../file0/../file0/file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0/file0\x00') 5m3.425158139s ago: executing program 9 (id=7116): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x8080000, 0xb4e97df6b51a65a6, 0x0, 0xb, 0xb, 0x0, 0x1, 0x4, 0x81, 0xaf, 0x59}, {0xa000, 0x60000, 0xd, 0x2, 0x2, 0x3, 0x2d, 0x3, 0x3, 0xa3, 0x3, 0x7}, {0xe000, 0x6000, 0xd, 0x8, 0x9, 0xc, 0x2, 0xaf, 0x0, 0x5, 0x3, 0x6}, {0x0, 0x40000, 0x9, 0xc, 0x66, 0x17, 0x43, 0x9, 0x4, 0xfc, 0x4, 0x1}, {0x5000, 0x1, 0xd, 0x1, 0x4c, 0x8, 0x7, 0xf4, 0x1, 0x8, 0x3, 0x10}, {0xe000, 0xdddd0000, 0x2, 0x7, 0x0, 0x81, 0xb, 0xa4, 0x6, 0x6, 0x3, 0x4}, {0x60000, 0x80e6000, 0xd, 0x6, 0x2, 0x31, 0x9, 0x5, 0x9, 0xff, 0x34, 0x3}, {0x2000, 0x2, 0xf, 0x9, 0x0, 0x6, 0x2, 0x8, 0xef, 0x82, 0x2, 0x9}, {0x9000, 0x9}, {0x54000, 0x6}, 0x10, 0x0, 0x8080000, 0x8, 0x6, 0x3d01, 0x70000, [0x8000000000000000, 0x9, 0x0, 0x9]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43a"], 0x340a) 5m3.034162898s ago: executing program 9 (id=7122): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x4000c45, 0x9, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x10000, 0x3, 0x101, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m2.98895388s ago: executing program 39 (id=7122): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x4000c45, 0x9, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x10000, 0x3, 0x101, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m46.385975103s ago: executing program 4 (id=7381): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x1, 0x9}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1040}], 0x0, 0x0, 0x0}) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) 4m46.319632512s ago: executing program 4 (id=7384): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x0, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000800)={@flat=@weak_handle={0x77682a85, 0xe, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101, 0x3}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1040}], 0x0, 0x0, 0x0}) 4m46.254226763s ago: executing program 4 (id=7386): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_amd_invlpga={0x17d, 0x20, {0x400000, 0x1}}, @uexit={0x0, 0x18, 0xface}], 0x68}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xface) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xffffffffffffffff) 4m46.024106192s ago: executing program 4 (id=7389): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 4m45.88078852s ago: executing program 4 (id=7391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x8, 0x101, 0x800}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6}]}, 0x8c}}, 0x20000000) 4m45.581769395s ago: executing program 4 (id=7392): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) recvmmsg(r0, &(0x7f0000004140)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x20, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) 4m45.510170264s ago: executing program 40 (id=7392): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) recvmmsg(r0, &(0x7f0000004140)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x20, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) 4m15.61392279s ago: executing program 7 (id=7783): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x2000200b}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xfd, 0x7, 0x0, 0x20, 0x0, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x24041004}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4m15.404709565s ago: executing program 7 (id=7786): r0 = openat$mice(0xffffffffffffff9c, 0x0, 0x0) write$fb(r0, &(0x7f0000000140)="d053c2c627dc1ce537d386c6eb50844911937d7083bdd7f7bc5dc89277dc453518b8b9f37852be47d5be0eff", 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r1, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2020) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x1ff}]}, &(0x7f0000000140)=0x10) write$FUSE_INIT(r1, &(0x7f00000022c0)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0xffffffff81a00000, 0x13, 0x0, 0x87, 0x1, 0x0, 0x0, 0x10, 0xfffffffe}}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./bus\x00', &(0x7f00000000c0)='vfat\x00', 0x4000c0, &(0x7f00000001c0)='discard') 4m14.534386749s ago: executing program 7 (id=7794): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000780)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0xc000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff}) 4m14.463796972s ago: executing program 7 (id=7796): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r1, &(0x7f000000bb40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba4572d170b345ccb3b1b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c14f5ed1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172489d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x8000000000203, {0x7, 0x29, 0xcf940281, 0x702000a1, 0x1, 0x1a76, 0x4, 0x1801, 0x0, 0x0, 0x2, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f000000dcc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000db40)={0x78, 0x0, 0xa, {0x8, 0x0, 0x0, {0x4, 0x80800000009, 0x0, 0x7, 0x40000000000003, 0x2, 0x0, 0x35741061, 0x0, 0xa593e9c1ca988eda, 0xfffffff9, 0x0, 0x0, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000007b40)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_fuse_handle_req(r1, &(0x7f000000dd80)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4m14.344066014s ago: executing program 7 (id=7799): connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, 0x0) 4m14.260718257s ago: executing program 7 (id=7802): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4m7.953576988s ago: executing program 8 (id=7881): syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e71, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0xfe, 0x3, 0x0, 0x1, 0x4, {0x9, 0x21, 0x0, 0x80, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x3, 0x7f, 0xfa}}]}}}]}}]}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) request_key(0x0, &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000280)='GPL\x00', 0xfffffffffffffffb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000f, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) 4m6.558447499s ago: executing program 8 (id=7892): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) socket(0x2a, 0x2, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m6.473599234s ago: executing program 8 (id=7895): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_io_uring_setup(0x517, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x18}, 0x0, 0x8048094, 0x1}) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaa"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m6.314532988s ago: executing program 8 (id=7896): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mkdir(0x0, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0x4) listen(r0, 0x5) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x1015, 0x1) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 4m6.192648783s ago: executing program 8 (id=7898): socket$inet6_sctp(0xa, 0x1, 0x84) syz_pidfd_open(0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) 4m5.714713761s ago: executing program 8 (id=7901): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeff, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000480)={0x3f, 0x2, 0x2, 0x3}, 0x10) write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000000000000000000080009001d000000", 0x24) 4m5.602990322s ago: executing program 41 (id=7901): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeff, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000480)={0x3f, 0x2, 0x2, 0x3}, 0x10) write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000000000000000000080009001d000000", 0x24) 3m58.404899749s ago: executing program 42 (id=7802): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.362630043s ago: executing program 0 (id=12253): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) 1.27254478s ago: executing program 0 (id=12254): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) writev(r0, &(0x7f0000000080)=[{0x0}], 0x1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) 852.559084ms ago: executing program 3 (id=12257): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(r0, r1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 723.931351ms ago: executing program 3 (id=12261): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x75) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) unshare(0x4a000200) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0x1, 0x3, 0x0, {0x0, 0x0, 0x0, r1, 0x40001, 0x804c}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x0) 628.62653ms ago: executing program 1 (id=12263): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x400000b0, 0x0, 0x7fff}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 505.464014ms ago: executing program 1 (id=12266): r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x3) 426.048677ms ago: executing program 1 (id=12267): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x2, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x0, 0x80, 0x2, 0x3, 0x8, 0x20000006, 0x4e, 0x3, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0xfffffffd, 0x50, 0x3c5b, 0x5, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0xfffffffe, 0x7, 0x3, 0x400, 0x4c74, 0x80000000, 0x243, 0x3, 0x2e, 0x0, 0x8000806e, 0x7, 0x4, 0x1, 0xfffffffa, 0x5, 0x3e, 0x4008f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x8, 0x0, 0x6, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8008, 0x5, 0x2, 0x4, 0xc8, 0xf9, 0xe, 0x9, 0x6c7, 0x2, 0xfffffffc, 0x3, 0x0, 0xff, 0x5, 0x2002f, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x5, 0x400, 0x3ff, 0x6, 0x9, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x800004, 0x6, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8010, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x8, 0x3, 0x3, 0x9, 0x1, 0x8, 0x0, 0xbc45, 0x4, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x1, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x6, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0xb, 0x3, 0x3, 0x20000008, 0x4, 0x6d01, 0x0, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfae, 0x1000, 0xa0, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x39f, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x9, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x9, 0x938, 0x6, 0x40, 0xfffffffc, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x80000103, 0x10000, 0x4, 0x7fff, 0xffff, 0x3, 0x21, 0x5, 0x1, 0x4002, 0x14c, 0x60a7, 0x8000006, 0x2, 0xffffffff, 0x80000000, 0x1005, 0x4, 0xc5, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x2e12, 0x9, 0xe8a5, 0xa, 0xaf, 0x8, 0x3, 0x4, 0x4, 0x5, 0x8, 0x4, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1b, 0xd7, 0x200, 0xffff3441, 0x10fff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 341.114465ms ago: executing program 3 (id=12269): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r2}) close(0x3) 340.673822ms ago: executing program 1 (id=12270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r1, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 340.487271ms ago: executing program 0 (id=12271): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x94a}}, 0x1006) 340.32131ms ago: executing program 6 (id=12272): r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 286.670032ms ago: executing program 3 (id=12273): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) connect$inet(r1, &(0x7f0000000640)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r2, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000680)="9da9b107d30773a557f4e29cb34996964c1166b17a5669df8248be60409f28dfeb267ee562daf8099d659ff4283a584d79907fa20ce8bdc78aaa8d0505d9c8295e5dcdfb5dac063565b389138e", 0x4d}], 0x1}}], 0x1, 0x4000001) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) 286.117479ms ago: executing program 0 (id=12274): r0 = socket$inet(0x2, 0x2, 0x1) r1 = syz_open_dev$ndb(&(0x7f0000000380), 0x0, 0x4080) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r4, @ANYRES64=r3], 0x1c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000140), &(0x7f0000000240)=r2}, 0x20) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x90100, 0x83) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7000fedbdf25030000000800010000000000100007800c000180080001"], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008000) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="11002bdb1b3d1201abcf7a1c551c65f8114295bd7000bddbdf6507000000080001007a08000008004300", @ANYRES32=r11, @ANYBLOB="0c009900fbfffffffcffffff1400040070696d7265670000000000000000000005005300010000000800050002000000"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)={0x64, r12, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x4c}}}}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x19, 0x24, [{0x6, 0x1}, {0x6c, 0x1}, {0x16}, {0x30}, {0x60}, {0x2, 0x1}, {0x364d8c3c470ee948, 0x1}, {0x60}, {0x2}, {0x12}, {0x5}, {0x36, 0x1}, {0x2}, {0x2}, {0x36}, {0x24}, {0x1b}, {0xc, 0x1}, {0x0, 0x1}, {0x18}, {0x3, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xb9}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x96}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x48010}, 0x210bfb786b99cefc) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000440)={0x0, 0xe9, "c538d624424e4b26905c4bfd17120ea93e70d785ca81d825b3adc74425ee1403094367bab00a409fe3f1370edceec86478b5137b842713d877b5595c7e1d3927216bc2276aacb509d4ce11e43f8c454b5f7a5f2013619efa939a3916d126d8de5febfcc40719857636dc1159b8e39f9b323472ccf5bde319c43ab0cf93eef77cc94ea97e6fb75c64878a6c6aba93ffebc63505434a7f699ae7d65eda51bb5bac90b64306a9e7e49a4fc4dbe5fdf174e5e112bc4cacef9ac9089d13f8894c2fec1ad580119a588a2c56f66e778fecefdff0b4d74bce251bf2677c4c75d9f237e5dd8362aaeb90505eca"}, &(0x7f0000000180)=0xf1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={r14, 0x8c4}, 0x8) bind$netlink(r13, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r15 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r15, 0x29, 0x7, 0x0, &(0x7f00000017c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 285.708403ms ago: executing program 6 (id=12275): r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x3) 231.407838ms ago: executing program 3 (id=12276): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) shutdown(r0, 0x2) 229.828676ms ago: executing program 1 (id=12277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0xa, 0x6558}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x9c, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast2, {[], {0x4f19, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "860b7600edebd67c4b45fefb757a25e2ed7afec5ac70129b81482fd0ab79d69e", "2db55ce3bb6c2ae8f76a93095fc28ccb66caa8e68309251e6f47edf7782ee8cfbd79f2a0ce75100c19865295875f4bd9", "478abb5c546339b3d06f0dd6fd0fe76b7f8713975d1eb6d083d61a2c", {"8c1bb87db873c7c5620b53ef0306006c", "f22972a1f6f4ddad2c5c775a8e63cd41"}}}}}}}}}, 0xd6) 229.443327ms ago: executing program 3 (id=12278): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, 0x0, 0x40088c0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040850) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 170.852581ms ago: executing program 6 (id=12279): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x2, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x0, 0x80, 0x2, 0x3, 0x8, 0x20000006, 0x4e, 0x3, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0xfffffffd, 0x50, 0x3c5b, 0x5, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0xfffffffe, 0x7, 0x3, 0x400, 0x4c74, 0x80000000, 0x243, 0x3, 0x2e, 0x0, 0x8000806e, 0x7, 0x4, 0x1, 0xfffffffa, 0x5, 0x3e, 0x4008f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x8, 0x0, 0x6, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8008, 0x5, 0x2, 0x4, 0xc8, 0xf9, 0xe, 0x9, 0x6c7, 0x2, 0xfffffffc, 0x3, 0x0, 0xff, 0x5, 0x2002f, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x5, 0x400, 0x3ff, 0x6, 0x9, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x800004, 0x6, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8010, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x8, 0x3, 0x3, 0x9, 0x1, 0x8, 0x0, 0xbc45, 0x4, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x1, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x6, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0xb, 0x3, 0x3, 0x20000008, 0x4, 0x6d01, 0x0, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfae, 0x1000, 0xa0, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x39f, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x9, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x9, 0x938, 0x6, 0x40, 0xfffffffc, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x80000103, 0x10000, 0x4, 0x7fff, 0xffff, 0x3, 0x21, 0x5, 0x1, 0x4002, 0x14c, 0x60a7, 0x8000006, 0x2, 0xffffffff, 0x80000000, 0x1005, 0x4, 0xc5, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x2e12, 0x9, 0xe8a5, 0xa, 0xaf, 0x8, 0x3, 0x4, 0x4, 0x5, 0x8, 0x4, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1b, 0xd7, 0x200, 0xffff3441, 0x10fff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 144.864814ms ago: executing program 0 (id=12280): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f00000001c0)={0x2, 0x0, 0x8000, 0xb3f}) 143.084987ms ago: executing program 6 (id=12281): ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000300)={0x8}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x42300, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCGFLAGS1(r0, 0x80207450, &(0x7f00000001c0)) 85.689546ms ago: executing program 0 (id=12282): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000000000, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 85.423824ms ago: executing program 6 (id=12283): socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x42800) socket$igmp6(0xa, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) 232.1µs ago: executing program 1 (id=12284): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x756}) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000140)={0xed, 0x0, 0xffff}) 0s ago: executing program 6 (id=12285): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000400)=ANY=[], 0x0) kernel console output (not intermixed with test programs): 68 too low, using default minimum of 512 [ 615.450472][ T2384] syzkaller0: entered promiscuous mode [ 615.452596][ T2384] syzkaller0: entered allmulticast mode [ 615.884505][ T2424] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10965'. [ 615.934699][ T2428] overlayfs: failed to clone upperpath [ 616.086918][T23239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.190853][ T2443] tipc: Enabling of bearer rejected, failed to enable media [ 616.303556][ T10] usb 11-1: new low-speed USB device number 28 using dummy_hcd [ 616.464876][ T10] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 616.467756][ T10] usb 11-1: config 0 has no interface number 0 [ 616.469776][ T10] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 616.473321][ T10] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 616.477853][ T10] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 616.481565][ T10] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 616.485413][ T10] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 616.488926][ T10] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 616.493147][ T10] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 616.496465][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.501075][ T10] usb 11-1: config 0 descriptor?? [ 616.503433][ T2440] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 616.505864][ T2440] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 616.512050][ T10] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 616.677006][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.732582][T16585] usb 11-1: USB disconnect, device number 28 [ 616.736451][T16585] ldusb 11-1:0.55: LD USB Device #0 now disconnected [ 617.190615][T23239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.219521][ T5939] Bluetooth: hci0: unexpected event for opcode 0x202f [ 617.311035][ T2493] netlink: 60 bytes leftover after parsing attributes in process `syz.6.10983'. [ 617.359141][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.612944][ T2523] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10990'. [ 618.002175][ T2580] netlink: 44 bytes leftover after parsing attributes in process `syz.6.11001'. [ 618.165174][ T2601] overlayfs: failed to clone upperpath [ 618.216803][ T2612] overlayfs: failed to clone upperpath [ 618.244661][ T2606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11006'. [ 618.300895][T23239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.724191][T25497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.159334][ T2702] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11038'. [ 619.405939][T25497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.413761][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.530829][ T5939] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 619.557103][ T2741] overlayfs: failed to clone upperpath [ 619.727944][ T2753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.731317][ T2753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.735882][ T2753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.739186][ T2753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 620.087612][ C3] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 620.230896][ T2769] tipc: Enabling of bearer rejected, failed to enable media [ 620.255423][ T5939] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 620.255454][ T5939] Bluetooth: hci0: Malformed Event: 0x2f [ 620.440690][ T2793] tipc: Enabling of bearer rejected, failed to enable media [ 620.517307][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.857979][ T2839] tipc: Enabling of bearer rejected, failed to enable media [ 621.604521][ T2884] bridge12: entered allmulticast mode [ 621.625919][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.638035][ T2887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.886465][ T2914] tipc: Enabling of bearer rejected, failed to enable media [ 621.909195][ T2920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.113091][ T2933] netlink: 'syz.6.11094': attribute type 3 has an invalid length. [ 622.253553][ T5939] Bluetooth: hci4: unexpected event for opcode 0x202f [ 622.632149][ T3018] tipc: Enabling of bearer rejected, failed to enable media [ 622.742024][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.761783][ T3052] overlayfs: failed to clone upperpath [ 622.816494][ T174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.819088][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.047828][ T5939] Bluetooth: hci0: unexpected event for opcode 0x202f [ 623.100551][ T3101] overlayfs: failed to clone upperpath [ 623.409395][ T3128] tipc: Enabling of bearer rejected, failed to enable media [ 623.574940][ T3161] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 623.845493][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.036607][T21953] bridge_slave_1: left allmulticast mode [ 624.042892][T21953] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.055628][T21953] bridge_slave_0: left allmulticast mode [ 624.058290][T21953] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.200352][T21953] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 624.236324][ T3205] binder_alloc: 3204: binder_alloc_buf size 4096 failed, no address space [ 624.241202][ T3205] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 4088 (num: 1 largest: 4088) [ 624.293894][T21953] bond2 (unregistering): (slave erspan1): Releasing active interface [ 624.296986][T21953] erspan1 (unregistering): left promiscuous mode [ 624.348154][ T40] audit: type=1326 audit(870.527:11076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3216 comm="syz.1.11173" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe49319c629 code=0x0 [ 624.717472][T21953] bond6 (unregistering): (slave bridge3): Releasing backup interface [ 624.721047][T21953] bridge3 (unregistering): left promiscuous mode [ 624.779283][T21953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 624.783651][T21953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 624.788624][T21953] bond0 (unregistering): Released all slaves [ 624.794244][T21953] bond1 (unregistering): Released all slaves [ 624.801571][T21953] bond2 (unregistering): Released all slaves [ 624.809414][T21953] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 624.812684][T21953] bond3 (unregistering): Released all slaves [ 624.823040][T21953] bond4 (unregistering): Released all slaves [ 624.830049][T21953] bond5 (unregistering): Released all slaves [ 624.838396][T21953] bond6 (unregistering): Released all slaves [ 624.873655][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.877112][ T174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.954374][ T3238] syzkaller0: entered promiscuous mode [ 624.959513][ T3238] syzkaller0: entered allmulticast mode [ 624.962955][T23239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.972982][T21953] tipc: Disabling bearer [ 624.983942][T21953] tipc: Left network mode [ 625.271893][ T5939] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 625.462372][T21953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.465671][T21953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.625341][T21953] team0 (unregistering): Port device team_slave_1 removed [ 625.633486][T21953] team0 (unregistering): Port device team_slave_0 removed [ 625.693849][ T5991] usb 11-1: new high-speed USB device number 29 using dummy_hcd [ 625.705630][ T3275] tipc: Enabling of bearer rejected, failed to enable media [ 625.860434][ T5991] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 625.865847][ T5991] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 625.873248][ T5991] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 625.884012][ T5991] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.900257][ T3267] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 625.904583][ T5991] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 626.048587][T21953] IPVS: stop unused estimator thread 0... [ 626.063957][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.140586][ T5991] usb 11-1: USB disconnect, device number 29 [ 627.000480][ T3356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11201'. [ 627.166853][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.195474][ T3383] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 627.555245][ T3398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11214'. [ 628.276722][T25497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.279988][T25497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.533242][ T5939] Bluetooth: hci0: unexpected event for opcode 0x0c7b [ 628.838325][ T5939] Bluetooth: hci4: unexpected event for opcode 0x202f [ 628.957868][T25497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.085029][ T5939] Bluetooth: hci4: unexpected event for opcode 0x0c7b [ 629.337796][ T5939] Bluetooth: hci4: unexpected event for opcode 0x202f [ 629.395065][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.399052][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.528004][ T3542] tipc: Enabling of bearer rejected, failed to enable media [ 629.784501][ T3580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11256'. [ 629.917246][ T3593] syzkaller0: entered promiscuous mode [ 629.919005][ T3593] syzkaller0: entered allmulticast mode [ 629.924579][ T3593] tipc: Enabled bearer , priority 0 [ 629.928086][ T3592] tipc: Resetting bearer [ 629.947611][ T3592] tipc: Disabling bearer [ 630.133858][ T3608] syzkaller0: entered promiscuous mode [ 630.135910][ T3608] syzkaller0: entered allmulticast mode [ 630.235223][ T60] net_ratelimit: 2 callbacks suppressed [ 630.235237][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.461293][ T5939] Bluetooth: hci0: unexpected event for opcode 0x202f [ 630.492987][T23239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.925745][ T3639] tipc: Enabling of bearer rejected, failed to enable media [ 631.312856][ T3671] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11276'. [ 631.614341][T23239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.633557][ T5991] IPVS: starting estimator thread 0... [ 631.643380][ T3684] IPVS: sed: FWM 3 0x00000003 - no destination available [ 631.726781][ T3688] IPVS: using max 29 ests per chain, 69600 per kthread [ 631.774702][ T3693] syzkaller0: entered promiscuous mode [ 631.777079][ T3693] syzkaller0: entered allmulticast mode [ 632.060494][ T3720] syzkaller0: entered promiscuous mode [ 632.062836][ T3720] syzkaller0: entered allmulticast mode [ 632.102459][ T3722] tipc: Enabling of bearer rejected, failed to enable media [ 632.205263][ T3731] syzkaller0: entered promiscuous mode [ 632.207381][ T3731] syzkaller0: entered allmulticast mode [ 632.394999][ T3745] syzkaller0: entered promiscuous mode [ 632.396734][ T3745] syzkaller0: entered allmulticast mode [ 632.597114][ T3768] syzkaller0: entered promiscuous mode [ 632.599069][ T3768] syzkaller0: entered allmulticast mode [ 632.711003][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.757176][ T3789] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11302'. [ 632.760172][ T3789] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11302'. [ 632.766232][ T3789] syzkaller0: entered promiscuous mode [ 632.768073][ T3789] syzkaller0: entered allmulticast mode [ 632.886737][ T3798] syzkaller0: entered promiscuous mode [ 632.889633][ T3798] syzkaller0: entered allmulticast mode [ 633.237687][ T3822] syzkaller0: entered promiscuous mode [ 633.239883][ T3822] syzkaller0: entered allmulticast mode [ 633.259075][ T3822] tipc: Enabled bearer , priority 0 [ 633.263748][ T3821] tipc: Resetting bearer [ 633.280104][ T3821] tipc: Disabling bearer [ 633.375671][ T3840] syzkaller0: entered promiscuous mode [ 633.377382][ T3840] syzkaller0: entered allmulticast mode [ 633.511269][ T5939] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 633.731047][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.818064][T23239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.112547][ T3912] syzkaller0: entered promiscuous mode [ 634.115851][ T3912] syzkaller0: entered allmulticast mode [ 634.211790][ T5939] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 634.265516][ T3925] syzkaller0: entered promiscuous mode [ 634.270325][ T3925] syzkaller0: entered allmulticast mode [ 634.455066][ T3942] tipc: Enabling of bearer rejected, failed to enable media [ 634.931135][T23239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.095086][T25497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.161692][ T4013] netlink: 76 bytes leftover after parsing attributes in process `syz.3.11357'. [ 635.204603][ T5939] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 635.454002][ T5939] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 635.899104][ T4058] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11370'. [ 635.906624][ T4058] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11370'. [ 635.911256][ T4058] syzkaller0: entered promiscuous mode [ 635.913278][ T4058] syzkaller0: entered allmulticast mode [ 636.035362][T23239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.161565][ T6008] hid_parser_main: 1 callbacks suppressed [ 636.161586][ T6008] hid-generic 0103:0004:0000.0035: unknown main item tag 0x0 [ 636.166258][ T6008] hid-generic 0103:0004:0000.0035: unknown main item tag 0x0 [ 636.168962][ T6008] hid-generic 0103:0004:0000.0035: unknown main item tag 0x0 [ 636.192758][ T6008] hid-generic 0103:0004:0000.0035: unknown main item tag 0x0 [ 636.195667][ T6008] hid-generic 0103:0004:0000.0035: unknown main item tag 0x0 [ 636.198775][ T6008] hid-generic 0103:0004:0000.0035: unknown main item tag 0x0 [ 636.201360][ T6008] hid-generic 0103:0004:0000.0035: unknown main item tag 0x0 [ 636.214003][ T6008] hid-generic 0103:0004:0000.0035: unknown main item tag 0x0 [ 636.217054][ T6008] hid-generic 0103:0004:0000.0035: unknown main item tag 0x0 [ 636.220137][ T6008] hid-generic 0103:0004:0000.0035: unknown main item tag 0x0 [ 636.235591][ T6008] hid-generic 0103:0004:0000.0035: hidraw0: HID v0.02 Device [syz0] on syz1 [ 636.306708][ T4068] Set syz1 is full, maxelem 65536 reached [ 636.743065][ T4112] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11384'. [ 637.079563][ T40] audit: type=1800 audit(882.480:11077): pid=4131 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.11389" name="nullb0" dev="tmpfs" ino=1258 res=0 errno=0 [ 637.156403][T23239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.181297][ T4135] IPVS: set_ctl: invalid protocol: 137 10.1.1.5:20001 [ 637.201178][ T4135] IPVS: dh: FWM 3 0x00000003 - no destination available [ 637.205027][ T4135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11391'. [ 637.300697][ T4153] overlayfs: failed to clone lowerpath [ 637.304716][ T4153] 9pnet_virtio: no channels available for device ./file0 [ 637.380561][ T4158] netlink: 'syz.1.11395': attribute type 30 has an invalid length. [ 637.823706][ C3] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 638.045095][ T5939] Bluetooth: hci0: unexpected event for opcode 0x202f [ 638.106395][ T4240] syzkaller0: entered promiscuous mode [ 638.108301][ T4240] syzkaller0: entered allmulticast mode [ 638.253484][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.360412][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.872199][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.881366][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.884903][ T1219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.041545][ T5939] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 640.097802][ T5939] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 640.169660][ T4280] syzkaller0: entered promiscuous mode [ 640.175222][ T4280] syzkaller0: entered allmulticast mode [ 640.347819][ T4298] FAULT_INJECTION: forcing a failure. [ 640.347819][ T4298] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 640.354718][ T4298] CPU: 0 UID: 0 PID: 4298 Comm: syz.6.11419 Tainted: G L syzkaller #0 PREEMPT(full) [ 640.354746][ T4298] Tainted: [L]=SOFTLOCKUP [ 640.354753][ T4298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 640.354764][ T4298] Call Trace: [ 640.354771][ T4298] [ 640.354779][ T4298] dump_stack_lvl+0x100/0x190 [ 640.354829][ T4298] should_fail_ex.cold+0x5/0xa [ 640.354853][ T4298] _copy_to_user+0x32/0xd0 [ 640.354889][ T4298] simple_read_from_buffer+0xcb/0x170 [ 640.354918][ T4298] proc_fail_nth_read+0x1af/0x230 [ 640.354942][ T4298] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 640.354966][ T4298] ? rw_verify_area+0xce/0x6d0 [ 640.354988][ T4298] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 640.355011][ T4298] vfs_read+0x1e4/0xb30 [ 640.355039][ T4298] ? __pfx_vfs_read+0x10/0x10 [ 640.355062][ T4298] ? __fget_files+0x215/0x3d0 [ 640.355085][ T4298] ? __fget_files+0x21f/0x3d0 [ 640.355109][ T4298] ksys_read+0x12a/0x250 [ 640.355132][ T4298] ? __pfx_ksys_read+0x10/0x10 [ 640.355155][ T4298] ? lockdep_hardirqs_on+0x78/0x100 [ 640.355190][ T4298] do_syscall_64+0x106/0xf80 [ 640.355207][ T4298] ? clear_bhb_loop+0x40/0x90 [ 640.355229][ T4298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.355247][ T4298] RIP: 0033:0x7f4dcc15cece [ 640.355263][ T4298] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 640.355279][ T4298] RSP: 002b:00007f4dcd087fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 640.355297][ T4298] RAX: ffffffffffffffda RBX: 00007f4dcd0886c0 RCX: 00007f4dcc15cece [ 640.355308][ T4298] RDX: 000000000000000f RSI: 00007f4dcd0880a0 RDI: 0000000000000003 [ 640.355319][ T4298] RBP: 00007f4dcd088090 R08: 0000000000000000 R09: 0000000000000000 [ 640.355330][ T4298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.355340][ T4298] R13: 00007f4dcc416038 R14: 00007f4dcc415fa0 R15: 00007ffeec9d2e18 [ 640.355366][ T4298] [ 640.470171][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.654768][ T4318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11424'. [ 640.677513][ T5939] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 640.913544][ T5939] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 641.069203][ T4355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11436'. [ 641.099907][ T4359] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 641.105526][ T40] audit: type=1400 audit(886.251:11078): avc: denied { relabelto } for pid=4358 comm="syz.1.11438" name="1173" dev="tmpfs" ino=6111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 641.134786][ T40] audit: type=1400 audit(886.251:11079): avc: denied { associate } for pid=4358 comm="syz.1.11438" name="1173" dev="tmpfs" ino=6111 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 641.167465][ T40] audit: type=1400 audit(886.298:11080): avc: denied { remove_name } for pid=24049 comm="syz-executor" name="binderfs" dev="tmpfs" ino=6115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 641.191654][ T40] audit: type=1400 audit(886.298:11081): avc: denied { rmdir } for pid=24049 comm="syz-executor" name="1173" dev="tmpfs" ino=6111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 641.277812][ T4381] FAULT_INJECTION: forcing a failure. [ 641.277812][ T4381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.287151][ T4381] CPU: 3 UID: 0 PID: 4381 Comm: syz.6.11441 Tainted: G L syzkaller #0 PREEMPT(full) [ 641.287197][ T4381] Tainted: [L]=SOFTLOCKUP [ 641.287204][ T4381] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 641.287214][ T4381] Call Trace: [ 641.287221][ T4381] [ 641.287228][ T4381] dump_stack_lvl+0x100/0x190 [ 641.287263][ T4381] should_fail_ex.cold+0x5/0xa [ 641.287287][ T4381] _copy_from_user+0x2e/0xd0 [ 641.287314][ T4381] vsock_connectible_setsockopt+0x73b/0x890 [ 641.287337][ T4381] ? __pfx_vsock_connectible_setsockopt+0x10/0x10 [ 641.287358][ T4381] ? find_held_lock+0x2b/0x80 [ 641.287394][ T4381] ? __fget_files+0x215/0x3d0 [ 641.287417][ T4381] ? selinux_socket_setsockopt+0x6a/0x80 [ 641.287446][ T4381] ? __pfx_vsock_connectible_setsockopt+0x10/0x10 [ 641.287468][ T4381] do_sock_setsockopt+0xf3/0x1d0 [ 641.287494][ T4381] __sys_setsockopt+0x195/0x220 [ 641.287527][ T4381] __x64_sys_setsockopt+0xbd/0x160 [ 641.287552][ T4381] ? do_syscall_64+0x95/0xf80 [ 641.287573][ T4381] ? lockdep_hardirqs_on+0x78/0x100 [ 641.287591][ T4381] do_syscall_64+0x106/0xf80 [ 641.287609][ T4381] ? clear_bhb_loop+0x40/0x90 [ 641.287633][ T4381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.287651][ T4381] RIP: 0033:0x7f4dcc19c629 [ 641.287668][ T4381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.287685][ T4381] RSP: 002b:00007f4dcd088028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 641.287705][ T4381] RAX: ffffffffffffffda RBX: 00007f4dcc415fa0 RCX: 00007f4dcc19c629 [ 641.287718][ T4381] RDX: 0000000000000002 RSI: 0000000000000028 RDI: 0000000000000003 [ 641.287728][ T4381] RBP: 00007f4dcd088090 R08: 0000000000000008 R09: 0000000000000000 [ 641.287739][ T4381] R10: 0000200000001e80 R11: 0000000000000246 R12: 0000000000000001 [ 641.287750][ T4381] R13: 00007f4dcc416038 R14: 00007f4dcc415fa0 R15: 00007ffeec9d2e18 [ 641.287776][ T4381] [ 641.385850][ T4387] FAULT_INJECTION: forcing a failure. [ 641.385850][ T4387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.389988][ T4387] CPU: 0 UID: 0 PID: 4387 Comm: syz.6.11444 Tainted: G L syzkaller #0 PREEMPT(full) [ 641.390007][ T4387] Tainted: [L]=SOFTLOCKUP [ 641.390011][ T4387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 641.390018][ T4387] Call Trace: [ 641.390023][ T4387] [ 641.390028][ T4387] dump_stack_lvl+0x100/0x190 [ 641.390050][ T4387] should_fail_ex.cold+0x5/0xa [ 641.390066][ T4387] _copy_from_user+0x2e/0xd0 [ 641.390082][ T4387] move_addr_to_kernel+0x65/0x170 [ 641.390103][ T4387] __sys_connect+0xb5/0x170 [ 641.390123][ T4387] ? __pfx___sys_connect+0x10/0x10 [ 641.390142][ T4387] ? __fget_files+0x21f/0x3d0 [ 641.390164][ T4387] ? __pfx_ksys_write+0x10/0x10 [ 641.390189][ T4387] __x64_sys_connect+0x72/0xb0 [ 641.390204][ T4387] ? lockdep_hardirqs_on+0x78/0x100 [ 641.390216][ T4387] do_syscall_64+0x106/0xf80 [ 641.390227][ T4387] ? clear_bhb_loop+0x40/0x90 [ 641.390241][ T4387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.390253][ T4387] RIP: 0033:0x7f4dcc19c629 [ 641.390263][ T4387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.390274][ T4387] RSP: 002b:00007f4dcd088028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 641.390285][ T4387] RAX: ffffffffffffffda RBX: 00007f4dcc415fa0 RCX: 00007f4dcc19c629 [ 641.390292][ T4387] RDX: 000000000000001c RSI: 0000200000000180 RDI: 0000000000000003 [ 641.390299][ T4387] RBP: 00007f4dcd088090 R08: 0000000000000000 R09: 0000000000000000 [ 641.390306][ T4387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.390312][ T4387] R13: 00007f4dcc416038 R14: 00007f4dcc415fa0 R15: 00007ffeec9d2e18 [ 641.390343][ T4387] [ 641.499554][ T4402] macvtap0: entered allmulticast mode [ 641.503596][ T4402] veth0_macvtap: entered allmulticast mode [ 641.586782][T16855] net_ratelimit: 1 callbacks suppressed [ 641.586798][T16855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.888710][ T4450] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11463'. [ 641.945540][ T40] audit: type=1400 audit(887.039:11082): avc: denied { ioctl } for pid=4448 comm="syz.3.11463" path="socket:[148303]" dev="sockfs" ino=148303 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 641.945819][ T4453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11463'. [ 641.967608][ T40] audit: type=1400 audit(887.058:11083): avc: denied { checkpoint_restore } for pid=4448 comm="syz.3.11463" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 641.983513][ T4456] fuse: Unknown parameter '@' [ 642.478323][ T4482] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11470'. [ 642.482373][ T4482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 642.486973][ T4482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11470'. [ 642.490501][ T4482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11470'. [ 642.493853][ T4482] bridge_slave_1: entered allmulticast mode [ 642.544058][ T4492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 642.557572][ T4484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 642.687685][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.803547][ T40] audit: type=1400 audit(887.846:11084): avc: denied { getopt } for pid=4500 comm="syz.1.11477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 642.824061][ T4434] Set syz1 is full, maxelem 65536 reached [ 642.919423][ T4506] FAULT_INJECTION: forcing a failure. [ 642.919423][ T4506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 642.925327][ T4506] CPU: 2 UID: 0 PID: 4506 Comm: syz.6.11479 Tainted: G L syzkaller #0 PREEMPT(full) [ 642.925356][ T4506] Tainted: [L]=SOFTLOCKUP [ 642.925363][ T4506] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 642.925374][ T4506] Call Trace: [ 642.925380][ T4506] [ 642.925387][ T4506] dump_stack_lvl+0x100/0x190 [ 642.925419][ T4506] should_fail_ex.cold+0x5/0xa [ 642.925442][ T4506] _copy_from_user+0x2e/0xd0 [ 642.925467][ T4506] __sys_bpf+0x243/0x4b90 [ 642.925489][ T4506] ? __pfx___sys_bpf+0x10/0x10 [ 642.925504][ T4506] ? proc_fail_nth_write+0x9f/0x220 [ 642.925527][ T4506] ? find_held_lock+0x2b/0x80 [ 642.925554][ T4506] ? find_held_lock+0x2b/0x80 [ 642.925574][ T4506] ? ksys_write+0x190/0x250 [ 642.925604][ T4506] ? __mutex_unlock_slowpath+0x15c/0x790 [ 642.925625][ T4506] ? __fget_files+0x215/0x3d0 [ 642.925654][ T4506] ? fput+0x79/0x100 [ 642.925671][ T4506] ? ksys_write+0x1ac/0x250 [ 642.925695][ T4506] ? __pfx_ksys_write+0x10/0x10 [ 642.925724][ T4506] __x64_sys_bpf+0x7b/0xc0 [ 642.925748][ T4506] ? lockdep_hardirqs_on+0x78/0x100 [ 642.925766][ T4506] do_syscall_64+0x106/0xf80 [ 642.925783][ T4506] ? clear_bhb_loop+0x40/0x90 [ 642.925805][ T4506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.925823][ T4506] RIP: 0033:0x7f4dcc19c629 [ 642.925839][ T4506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.925856][ T4506] RSP: 002b:00007f4dcd088028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 642.925874][ T4506] RAX: ffffffffffffffda RBX: 00007f4dcc415fa0 RCX: 00007f4dcc19c629 [ 642.925886][ T4506] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c [ 642.925897][ T4506] RBP: 00007f4dcd088090 R08: 0000000000000000 R09: 0000000000000000 [ 642.925906][ T4506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.925916][ T4506] R13: 00007f4dcc416038 R14: 00007f4dcc415fa0 R15: 00007ffeec9d2e18 [ 642.925942][ T4506] [ 643.066082][ T4512] syzkaller0: entered promiscuous mode [ 643.067921][ T4512] syzkaller0: entered allmulticast mode [ 643.799287][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.903387][T16855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.911557][ T4522] tipc: Enabling of bearer rejected, failed to enable media [ 645.132338][ T4542] netlink: 'syz.0.11489': attribute type 4 has an invalid length. [ 645.242188][T21953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.247241][ T4549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 645.259760][ T4549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 645.266013][ T4556] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11494'. [ 645.271205][ T4556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 645.281053][ T4556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 645.670052][ T5926] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 645.978143][ T40] audit: type=1400 audit(890.830:11085): avc: denied { kexec_image_load } for pid=4588 comm="syz.0.11504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 645.980657][ T4590] netlink: 'syz.0.11504': attribute type 2 has an invalid length. [ 645.995971][ T4590] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11504'. [ 646.009884][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.013090][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.016237][ T174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.099992][ T4605] syzkaller0: entered promiscuous mode [ 646.102573][ T4605] syzkaller0: entered allmulticast mode [ 646.136820][ T4609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11508'. [ 646.142106][ T4601] netlink: 'syz.0.11508': attribute type 10 has an invalid length. [ 646.252160][ T4618] syzkaller0: entered promiscuous mode [ 646.253974][ T4618] syzkaller0: entered allmulticast mode [ 646.606723][ T5926] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 647.122865][ T29] net_ratelimit: 1 callbacks suppressed [ 647.122880][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.240700][T16855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.278565][ T4654] netlink: 100 bytes leftover after parsing attributes in process `syz.3.11522'. [ 648.339574][ T4657] 8021q: adding VLAN 0 to HW filter on device bond3 [ 648.368631][ T4657] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 648.373087][ T4657] bond3: (slave macvlan2): Enslaving as a backup interface with an up link [ 648.409548][ T4662] overlay: Bad value for 'workdir' [ 648.412516][ T4663] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 648.451181][ T174] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 648.467362][ T174] bond3: (slave macvlan2): link status up again after 0 ms [ 648.474862][ T174] bond3: (slave macvlan2): failed to get link speed/duplex [ 648.485966][ T4670] syzkaller0: entered promiscuous mode [ 648.487843][ T4670] syzkaller0: entered allmulticast mode [ 648.579583][ T174] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 648.588749][T25497] bond3: (slave macvlan2): failed to get link speed/duplex [ 648.623249][ T4679] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 648.628422][ T4679] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 648.635217][ T4679] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 648.638552][ T4679] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 648.672938][ T4684] nbd: illegal input index -2146435068 [ 648.706280][T21953] bond3: (slave macvlan2): failed to get link speed/duplex [ 648.756905][ T4690] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11534'. [ 648.762397][ T4690] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11534'. [ 648.798021][ T4679] Set syz1 is full, maxelem 65536 reached [ 648.844780][ T60] bond3: (slave macvlan2): failed to get link speed/duplex [ 648.999917][ T4713] netlink: 'syz.1.11540': attribute type 2 has an invalid length. [ 649.003444][ T4713] netlink: 46 bytes leftover after parsing attributes in process `syz.1.11540'. [ 649.008794][ T4707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11539'. [ 649.019190][ T4707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 649.033821][ T4707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 649.089026][ T4713] netlink: 9 bytes leftover after parsing attributes in process `syz.1.11540'. [ 649.092824][ T4713] 0·: renamed from hsr0 [ 649.096247][ T4713] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 649.099591][ T4713] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 649.103034][ T4713] 0·: entered allmulticast mode [ 649.104702][ T4713] hsr_slave_0: entered allmulticast mode [ 649.273267][ T4723] xt_hashlimit: size too large, truncated to 1048576 [ 649.348055][ T40] audit: type=1400 audit(893.991:11086): avc: denied { write } for pid=4735 comm="syz.1.11547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 649.386089][ T4741] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.11548'. [ 649.545409][ T4752] syzkaller0: entered promiscuous mode [ 649.547336][ T4752] syzkaller0: entered allmulticast mode [ 649.795643][ T4778] syzkaller0: entered promiscuous mode [ 649.798111][ T4778] syzkaller0: entered allmulticast mode [ 650.273314][ T4813] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 650.995785][ T4781] syz.0.11558 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 651.009760][ T4781] CPU: 1 UID: 0 PID: 4781 Comm: syz.0.11558 Tainted: G L syzkaller #0 PREEMPT(full) [ 651.009781][ T4781] Tainted: [L]=SOFTLOCKUP [ 651.009785][ T4781] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 651.009792][ T4781] Call Trace: [ 651.009797][ T4781] [ 651.009803][ T4781] dump_stack_lvl+0x100/0x190 [ 651.009825][ T4781] dump_header+0xfb/0x606 [ 651.009838][ T4781] oom_kill_process.cold+0xd/0x330 [ 651.009852][ T4781] out_of_memory+0x340/0x14f0 [ 651.009871][ T4781] ? __pfx_out_of_memory+0x10/0x10 [ 651.009890][ T4781] mem_cgroup_out_of_memory+0xc6/0x130 [ 651.009904][ T4781] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 651.009917][ T4781] ? find_held_lock+0x2b/0x80 [ 651.009935][ T4781] ? do_raw_spin_unlock+0x145/0x1e0 [ 651.009948][ T4781] ? _raw_spin_unlock+0x28/0x50 [ 651.009967][ T4781] try_charge_memcg+0x652/0xc90 [ 651.009988][ T4781] ? __pfx_try_charge_memcg+0x10/0x10 [ 651.010005][ T4781] ? find_held_lock+0x2b/0x80 [ 651.010018][ T4781] ? rcu_read_unlock+0x17/0x60 [ 651.010028][ T4781] ? rcu_read_unlock+0x17/0x60 [ 651.010043][ T4781] charge_memcg+0xa6/0x280 [ 651.010061][ T4781] __mem_cgroup_charge+0x2b/0x1e0 [ 651.010073][ T4781] shmem_alloc_and_add_folio+0x451/0xd40 [ 651.010092][ T4781] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 651.010109][ T4781] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 651.010128][ T4781] shmem_get_folio_gfp+0x6ab/0x1900 [ 651.010147][ T4781] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 651.010166][ T4781] shmem_write_begin+0x1a4/0x420 [ 651.010183][ T4781] ? __pfx_shmem_write_begin+0x10/0x10 [ 651.010199][ T4781] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 651.010218][ T4781] ? lockdep_hardirqs_on+0x78/0x100 [ 651.010231][ T4781] generic_perform_write+0x292/0xa40 [ 651.010263][ T4781] ? __pfx_generic_perform_write+0x10/0x10 [ 651.010280][ T4781] ? file_update_time_flags+0x373/0x500 [ 651.010296][ T4781] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 651.010313][ T4781] shmem_file_write_iter+0x10e/0x140 [ 651.010332][ T4781] __kernel_write_iter+0x2ac/0x920 [ 651.010350][ T4781] ? __pfx___kernel_write_iter+0x10/0x10 [ 651.010365][ T4781] ? cgroup1_freezing+0x12c/0x3b0 [ 651.010381][ T4781] ? cgroup1_freezing+0x136/0x3b0 [ 651.010414][ T4781] ? freezing_slow_path+0xb5/0x1a0 [ 651.010430][ T4781] dump_user_range+0x3f9/0xb50 [ 651.010447][ T4781] ? __pfx_dump_user_range+0x10/0x10 [ 651.010465][ T4781] ? __pfx_writenote+0x10/0x10 [ 651.010483][ T4781] elf_core_dump+0x2d16/0x3c60 [ 651.010506][ T4781] ? __pfx_elf_core_dump+0x10/0x10 [ 651.010521][ T4781] ? kasan_save_stack+0x3f/0x50 [ 651.010535][ T4781] ? kasan_save_track+0x14/0x30 [ 651.010550][ T4781] ? __kasan_kmalloc+0xaa/0xb0 [ 651.010565][ T4781] ? __kvmalloc_node_noprof+0x360/0xa00 [ 651.010582][ T4781] ? irqentry_exit+0x1f8/0x670 [ 651.010592][ T4781] ? asm_exc_page_fault+0x26/0x30 [ 651.010605][ T4781] ? 0xffffffffff600000 [ 651.010638][ T4781] ? vfs_coredump+0x27b4/0x5570 [ 651.010650][ T4781] vfs_coredump+0x27b4/0x5570 [ 651.010669][ T4781] ? __pfx_vfs_coredump+0x10/0x10 [ 651.010682][ T4781] ? __lock_acquire+0x4a5/0x2630 [ 651.010706][ T4781] ? lock_acquire+0x1cf/0x380 [ 651.010734][ T4781] ? is_bpf_text_address+0x8a/0x1a0 [ 651.010750][ T4781] ? bpf_ksym_find+0x128/0x1c0 [ 651.010771][ T4781] ? __kernel_text_address+0xd/0x30 [ 651.010783][ T4781] ? unwind_get_return_address+0x59/0xa0 [ 651.010798][ T4781] ? arch_stack_walk+0xa6/0xf0 [ 651.010816][ T4781] ? __sigqueue_free+0xbe/0x2a0 [ 651.010833][ T4781] ? stack_trace_save+0x8e/0xc0 [ 651.010847][ T4781] ? __pfx_stack_trace_save+0x10/0x10 [ 651.010861][ T4781] ? stack_depot_save_flags+0x27/0x9d0 [ 651.010878][ T4781] ? __lock_acquire+0x4a5/0x2630 [ 651.010919][ T4781] ? proc_coredump_connector+0x2d3/0x4f0 [ 651.010937][ T4781] ? __pfx_proc_coredump_connector+0x10/0x10 [ 651.010958][ T4781] ? rcu_is_watching+0x12/0xc0 [ 651.010974][ T4781] get_signal+0x1f2a/0x21e0 [ 651.010993][ T4781] ? __pfx_get_signal+0x10/0x10 [ 651.011011][ T4781] arch_do_signal_or_restart+0x91/0x7a0 [ 651.011027][ T4781] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 651.011046][ T4781] ? do_user_addr_fault+0x8d6/0x12f0 [ 651.011062][ T4781] irqentry_exit+0x1f8/0x670 [ 651.011076][ T4781] asm_exc_page_fault+0x26/0x30 [ 651.011087][ T4781] RIP: 0033:0x0 [ 651.011095][ T4781] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 651.011116][ T4781] RSP: 002b:0000200000000628 EFLAGS: 00010217 [ 651.011125][ T4781] RAX: 0000000000000000 RBX: 00007f0136616090 RCX: 00007f013639c629 [ 651.011132][ T4781] RDX: 0000200000000640 RSI: 0000200000000620 RDI: 0000000004000000 [ 651.011139][ T4781] RBP: 00007f0136432b39 R08: 00002000000006c0 R09: 00002000000006c0 [ 651.011146][ T4781] R10: 0000200000000680 R11: 0000000000000206 R12: 0000000000000000 [ 651.011152][ T4781] R13: 00007f0136616128 R14: 00007f0136616090 R15: 00007ffdd6ef5a68 [ 651.011167][ T4781] [ 651.011172][ T4781] memory: usage 305696kB, limit 307200kB, failcnt 2297 [ 651.176176][ T4781] memory+swap: usage 269612kB, limit 9007199254740988kB, failcnt 0 [ 651.179796][ T4781] kmem: usage 12828kB, limit 9007199254740988kB, failcnt 0 [ 651.182861][ T4781] Memory cgroup stats for /syz0: [ 651.183450][ T4781] cache 247275520 [ 651.186262][ T4781] rss 446464 [ 651.187349][ T4781] rss_huge 0 [ 651.188409][ T4781] shmem 245293056 [ 651.190310][ T4781] mapped_file 1949696 [ 651.191626][ T4781] dirty 0 [ 651.192587][ T4781] writeback 0 [ 651.193704][ T4781] workingset_refault_anon 111 [ 651.195217][ T4781] workingset_refault_file 256 [ 651.196721][ T4781] swap 12034048 [ 651.197864][ T4781] swapcached 53161984 [ 651.199473][ T4781] pgpgin 642037 [ 651.201998][ T4781] pgpgout 584625 [ 651.203546][ T4781] pgfault 635402 [ 651.204716][ T4781] pgmajfault 1082 [ 651.205909][ T4781] inactive_anon 140783616 [ 651.207304][ T4781] active_anon 105041920 [ 651.208664][ T4781] inactive_file 0 [ 651.209848][ T4781] active_file 1945600 [ 651.212646][ T4781] unevictable 0 [ 651.213799][ T4781] hierarchical_memory_limit 314572800 [ 651.215487][ T4781] hierarchical_memsw_limit 9223372036854771712 [ 651.217442][ T4781] total_cache 247275520 [ 651.218913][ T4781] total_rss 446464 [ 651.220983][ T4781] total_rss_huge 0 [ 651.222368][ T4781] total_shmem 245293056 [ 651.223692][ T4781] total_mapped_file 1949696 [ 651.225138][ T4781] total_dirty 0 [ 651.226265][ T4781] total_writeback 0 [ 651.227503][ T4781] total_workingset_refault_anon 111 [ 651.229206][ T4781] total_workingset_refault_file 256 [ 651.230924][ T4781] total_swap 12034048 [ 651.232958][ T4781] total_swapcached 53161984 [ 651.234453][ T4781] total_pgpgin 642037 [ 651.235724][ T4781] total_pgpgout 584625 [ 651.237026][ T4781] total_pgfault 635402 [ 651.238334][ T4781] total_pgmajfault 1082 [ 651.239741][ T4781] total_inactive_anon 140783616 [ 651.241318][ T4781] total_active_anon 105041920 [ 651.243355][ T4781] total_inactive_file 0 [ 651.244728][ T4781] total_active_file 1945600 [ 651.246008][ T4786] syz.0.11558 (4786) used greatest stack depth: 18584 bytes left [ 651.246179][ T4781] total_unevictable 0 [ 651.251880][ T4781] anon_cost 0 [ 651.268066][ T4781] file_cost 0 [ 651.269574][ T4781] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.11558,pid=4784,uid=0 [ 651.283066][ T4781] Memory cgroup out of memory: OOM victim 4784 (syz.0.11558) is already exiting. Skip killing the task [ 651.463060][ T4784] syz.0.11558 (4784) used greatest stack depth: 17592 bytes left [ 652.673065][T23239] net_ratelimit: 16 callbacks suppressed [ 652.673085][T23239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.940158][ T1219] bond3: (slave macvlan2): failed to get link speed/duplex [ 653.003582][ T4831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61968 sclass=netlink_route_socket pid=4831 comm=syz.1.11568 [ 653.008264][ T4833] netlink: 'syz.3.11570': attribute type 2 has an invalid length. [ 653.011024][ T4833] netlink: 46 bytes leftover after parsing attributes in process `syz.3.11570'. [ 653.054967][ T12] bond3: (slave macvlan2): failed to get link speed/duplex [ 653.067350][ T4831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 653.081092][ T4833] netlink: 9 bytes leftover after parsing attributes in process `syz.3.11570'. [ 653.084117][ T4833] 0·: renamed from hsr0 [ 653.088572][ T4833] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 653.091926][ T4833] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 653.095245][ T4833] 0·: entered allmulticast mode [ 653.096837][ T4833] hsr_slave_0: entered allmulticast mode [ 653.098693][ T4833] hsr_slave_1: entered allmulticast mode [ 653.101473][ T4833] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 653.172896][ T79] bond3: (slave macvlan2): failed to get link speed/duplex [ 653.237658][ T4853] sctp: [Deprecated]: syz.0.11574 (pid 4853) Use of struct sctp_assoc_value in delayed_ack socket option. [ 653.237658][ T4853] Use struct sctp_sack_info instead [ 653.289419][ T79] bond3: (slave macvlan2): failed to get link speed/duplex [ 653.293091][ T4853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11574'. [ 653.298910][ T4853] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 653.406804][T21953] bond3: (slave macvlan2): failed to get link speed/duplex [ 653.523830][T21953] bond3: (slave macvlan2): failed to get link speed/duplex [ 653.642515][ T79] bond3: (slave macvlan2): failed to get link speed/duplex [ 653.654067][ T4859] syzkaller0: entered promiscuous mode [ 653.656780][ T4859] syzkaller0: entered allmulticast mode [ 653.758598][ T1219] bond3: (slave macvlan2): failed to get link speed/duplex [ 653.799944][ T4870] netlink: 9 bytes leftover after parsing attributes in process `syz.6.11580'. [ 653.803495][ T4870] 0·: renamed from hsr0 (while UP) [ 653.806955][ T4870] 0·: entered allmulticast mode [ 653.808613][ T4870] hsr_slave_0: entered allmulticast mode [ 653.810546][ T4870] hsr_slave_1: entered allmulticast mode [ 654.252176][ T4921] netlink: 763 bytes leftover after parsing attributes in process `syz.1.11596'. [ 654.257968][ T4921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4921 comm=syz.1.11596 [ 654.416788][ T5939] Bluetooth: hci0: unexpected event for opcode 0x0c0d [ 654.719133][ T4949] tmpfs: Unknown parameter 'naswap ' [ 654.871328][ T4961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11610'. [ 655.114779][ T4978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11616'. [ 655.117945][ T4978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11616'. [ 655.126291][ T4978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11616'. [ 655.129364][ T4978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11616'. [ 655.316549][ T5004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.327550][ T5004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.971640][ T40] audit: type=1400 audit(900.202:11087): avc: denied { ioctl } for pid=5034 comm="syz.6.11632" path="socket:[149386]" dev="sockfs" ino=149386 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 655.981907][ T40] audit: type=1400 audit(900.202:11088): avc: denied { read } for pid=5036 comm="syz.0.11633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 656.118320][ T5050] syzkaller0: entered promiscuous mode [ 656.120203][ T5050] syzkaller0: entered allmulticast mode [ 656.261057][ T5054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 656.272951][ T5054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 656.311133][ T40] audit: type=1326 audit(900.521:11089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.3.11640" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232a79c629 code=0x7ffc0000 [ 656.319191][ T40] audit: type=1326 audit(900.521:11090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.3.11640" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232a79c629 code=0x7ffc0000 [ 656.328526][ T40] audit: type=1326 audit(900.521:11091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.3.11640" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f232a79c629 code=0x7ffc0000 [ 656.337959][ T40] audit: type=1326 audit(900.521:11092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.3.11640" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f232a79c629 code=0x7ffc0000 [ 656.346100][ T40] audit: type=1326 audit(900.521:11093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.3.11640" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f232a79c629 code=0x7ffc0000 [ 656.354534][ T40] audit: type=1326 audit(900.521:11094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.3.11640" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f232a79c629 code=0x7ffc0000 [ 656.364105][ T40] audit: type=1326 audit(900.521:11095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.3.11640" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f232a79c629 code=0x7ffc0000 [ 656.373629][ T40] audit: type=1326 audit(900.521:11096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.3.11640" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f232a79c629 code=0x7ffc0000 [ 656.811583][ T5104] fuse: Bad value for 'group_id' [ 656.813200][ T5104] fuse: Bad value for 'group_id' [ 657.790931][ T5145] Cannot find del_set index 4 as target [ 657.998816][ T5157] netlink: 'syz.1.11667': attribute type 10 has an invalid length. [ 658.011497][ T79] net_ratelimit: 41 callbacks suppressed [ 658.011519][ T79] bond3: (slave macvlan2): failed to get link speed/duplex [ 658.128325][ T12] bond3: (slave macvlan2): failed to get link speed/duplex [ 658.206271][T16855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.244420][ T5175] kAFS: unable to lookup cell '/,c¾ûL' [ 658.245655][ T1219] bond3: (slave macvlan2): failed to get link speed/duplex [ 658.288482][ T174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.346095][ T5186] IPVS: persistence engine module ip_vs_pe_s not found [ 658.352421][ T5188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 658.364745][ T5180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 658.377157][ T174] bond3: (slave macvlan2): failed to get link speed/duplex [ 658.490907][ T12] bond3: (slave macvlan2): failed to get link speed/duplex [ 658.529764][ T5197] __nla_validate_parse: 9 callbacks suppressed [ 658.529784][ T5197] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.11679'. [ 658.537614][ T5197] netlink: 'syz.0.11679': attribute type 12 has an invalid length. [ 658.602452][ T5205] netlink: 'syz.3.11681': attribute type 2 has an invalid length. [ 658.605554][ T5205] netlink: 46 bytes leftover after parsing attributes in process `syz.3.11681'. [ 658.618643][ T1219] bond3: (slave macvlan2): failed to get link speed/duplex [ 658.628496][ T5205] netlink: 9 bytes leftover after parsing attributes in process `syz.3.11681'. [ 658.634498][ T5205] 1·: renamed from 70· (while UP) [ 658.653871][ T5205] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 658.698209][ T5210] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11682'. [ 658.709066][ T5210] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11682'. [ 658.735851][ T79] bond3: (slave macvlan2): failed to get link speed/duplex [ 658.983980][ T5235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11691'. [ 659.197973][ T5251] netlink: 'syz.0.11696': attribute type 5 has an invalid length. [ 659.377389][ T5264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 659.387671][ T5264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 659.873442][ T5298] fuse: Bad value for 'fd' [ 659.876635][ T5298] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11711'. [ 660.368957][ T5339] syz.1.11720 (5339): attempted to duplicate a private mapping with mremap. This is not supported. [ 660.508083][ T5347] netlink: 'syz.1.11723': attribute type 4 has an invalid length. [ 660.539227][ T5349] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11724'. [ 660.573134][ T5354] netlink: 'syz.6.11726': attribute type 10 has an invalid length. [ 660.576724][ T5354] netlink: 'syz.6.11726': attribute type 10 has an invalid length. [ 660.580033][ T5354] netlink: 40 bytes leftover after parsing attributes in process `syz.6.11726'. [ 660.988950][ T5374] netlink: 64 bytes leftover after parsing attributes in process `syz.6.11732'. [ 661.735430][ T5416] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5416 comm=syz.1.11747 [ 661.926882][ T5425] x_tables: duplicate underflow at hook 1 [ 662.452742][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 662.452758][ T40] audit: type=1400 audit(906.282:11117): avc: denied { setopt } for pid=5446 comm="syz.0.11752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 662.570990][ T5449] netlink: 'syz.0.11753': attribute type 23 has an invalid length. [ 662.969037][ T40] audit: type=1400 audit(906.770:11118): avc: denied { getopt } for pid=5463 comm="syz.6.11759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 663.404613][ T1219] net_ratelimit: 45 callbacks suppressed [ 663.404627][ T1219] bond3: (slave macvlan2): failed to get link speed/duplex [ 663.521724][T21953] bond3: (slave macvlan2): failed to get link speed/duplex [ 663.638917][ T174] bond3: (slave macvlan2): failed to get link speed/duplex [ 663.746154][ T174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.749423][ T174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.756839][ T174] bond3: (slave macvlan2): failed to get link speed/duplex [ 663.873402][T21953] bond3: (slave macvlan2): failed to get link speed/duplex [ 663.991681][ T174] bond3: (slave macvlan2): failed to get link speed/duplex [ 664.108792][ T174] bond3: (slave macvlan2): failed to get link speed/duplex [ 664.225232][ T12] bond3: (slave macvlan2): failed to get link speed/duplex [ 668.755363][ T12] net_ratelimit: 43 callbacks suppressed [ 668.755386][ T12] bond3: (slave macvlan2): failed to get link speed/duplex [ 668.872412][ T60] bond3: (slave macvlan2): failed to get link speed/duplex [ 668.989710][T25497] bond3: (slave macvlan2): failed to get link speed/duplex [ 669.106955][ T1219] bond3: (slave macvlan2): failed to get link speed/duplex [ 669.224049][ T12] bond3: (slave macvlan2): failed to get link speed/duplex [ 669.288081][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.341360][ T60] bond3: (slave macvlan2): failed to get link speed/duplex [ 669.458603][ T12] bond3: (slave macvlan2): failed to get link speed/duplex [ 669.586618][T25497] bond3: (slave macvlan2): failed to get link speed/duplex [ 669.703795][T25497] bond3: (slave macvlan2): failed to get link speed/duplex [ 672.624249][ C3] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 674.137720][T25497] net_ratelimit: 43 callbacks suppressed [ 674.137740][T25497] bond3: (slave macvlan2): failed to get link speed/duplex [ 674.255120][ T12] bond3: (slave macvlan2): failed to get link speed/duplex [ 674.372359][ T12] bond3: (slave macvlan2): failed to get link speed/duplex [ 674.489446][ T13] bond3: (slave macvlan2): failed to get link speed/duplex [ 674.606688][T25497] bond3: (slave macvlan2): failed to get link speed/duplex [ 674.671105][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.724110][T21953] bond3: (slave macvlan2): failed to get link speed/duplex [ 674.841277][ T13] bond3: (slave macvlan2): failed to get link speed/duplex [ 674.841370][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.958422][ T12] bond3: (slave macvlan2): failed to get link speed/duplex [ 679.140939][ T5474] netlink: 'syz.3.11761': attribute type 5 has an invalid length. [ 679.150259][ T5474] vxlan0: entered promiscuous mode [ 679.152833][ T5474] vxlan0: entered allmulticast mode [ 679.155681][T25497] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.171009][T25497] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.174920][T25497] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.178634][T25497] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.242599][ T40] audit: type=1800 audit(922.034:11119): pid=5486 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.11766" name="nullb0" dev="tmpfs" ino=1258 res=0 errno=0 [ 679.277709][ T5495] __nla_validate_parse: 3 callbacks suppressed [ 679.277721][ T5495] netlink: 56 bytes leftover after parsing attributes in process `syz.6.11763'. [ 679.283696][ T5495] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11763'. [ 679.488798][T25497] net_ratelimit: 44 callbacks suppressed [ 679.488812][T25497] bond3: (slave macvlan2): failed to get link speed/duplex [ 679.535973][ T5514] futex_wake_op: syz.0.11773 tries to shift op by -1; fix this program [ 679.607240][ T13] bond3: (slave macvlan2): failed to get link speed/duplex [ 679.734406][ T13] bond3: (slave macvlan2): failed to get link speed/duplex [ 679.851136][ T12] bond3: (slave macvlan2): failed to get link speed/duplex [ 679.968771][ T12] bond3: (slave macvlan2): failed to get link speed/duplex [ 680.087804][ T12] bond3: (slave macvlan2): failed to get link speed/duplex [ 680.215799][T25497] bond3: (slave macvlan2): failed to get link speed/duplex [ 680.240053][ T40] audit: type=1804 audit(922.972:11120): pid=5535 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.11781" name="/newroot/556/file0" dev="tmpfs" ino=2904 res=1 errno=0 [ 680.248962][ T40] audit: type=1800 audit(922.972:11121): pid=5535 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.11781" name="file0" dev="tmpfs" ino=2904 res=0 errno=0 [ 680.278467][ T5535] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11781'. [ 680.364007][ T5545] netlink: 'syz.1.11785': attribute type 39 has an invalid length. [ 680.373098][T16855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.394678][ T13] bond3: (slave macvlan2): failed to get link speed/duplex [ 680.519806][ T5555] netlink: 'syz.6.11790': attribute type 1 has an invalid length. [ 680.522408][ T13] bond3: (slave macvlan2): failed to get link speed/duplex [ 680.527656][ T5555] netlink: 'syz.6.11790': attribute type 1 has an invalid length. [ 680.579270][ T5558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16466 sclass=netlink_route_socket pid=5558 comm=syz.1.11791 [ 680.683312][ T5556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11788'. [ 680.686705][ T5556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11788'. [ 680.690732][ T5556] netlink: 276 bytes leftover after parsing attributes in process `syz.3.11788'. [ 680.704727][ T5567] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11793'. [ 680.992835][ T5594] 9p: Bad value for 'rfdno' [ 681.116402][ T5600] netlink: 'syz.1.11805': attribute type 1 has an invalid length. [ 681.139433][ T5600] 8021q: adding VLAN 0 to HW filter on device bond5 [ 681.167456][ T5600] bond5: (slave geneve2): making interface the new active one [ 681.171703][ T5600] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 681.178076][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.181815][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.194483][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.198153][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.210262][ T40] audit: type=1400 audit(923.883:11122): avc: denied { accept } for pid=5599 comm="syz.1.11805" lport=59047 faddr=fe80::3c fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 681.253865][ T5603] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11806'. [ 681.430813][ T5614] Invalid ELF header magic: != ELF [ 681.434641][ T5614] xt_cgroup: invalid path, errno=-2 [ 681.994352][ T40] audit: type=1400 audit(924.614:11123): avc: denied { execute_no_trans } for pid=5665 comm="syz.0.11825" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=153627 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 682.208423][ T5674] xt_hashlimit: overflow, rate too high: 0 [ 682.219698][ T5674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 682.230801][ T5674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 682.234442][ T5677] netlink: 52 bytes leftover after parsing attributes in process `syz.6.11829'. [ 682.314662][ T5680] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11830'. [ 682.366773][ T5682] random: crng reseeded on system resumption [ 682.380292][ T5682] ubi31: attaching mtd0 [ 682.386416][ T5682] ubi31: scanning is finished [ 682.389138][ T5682] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 682.592294][ T5682] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 682.776840][ T40] audit: type=1400 audit(925.346:11124): avc: denied { remount } for pid=5699 comm="syz.1.11837" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 683.055163][ T40] audit: type=1400 audit(925.609:11125): avc: denied { accept } for pid=5727 comm="syz.1.11845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 683.129410][ T5733] can: request_module (can-proto-0) failed. [ 683.241994][ T40] audit: type=1400 audit(925.787:11126): avc: denied { bind } for pid=5742 comm="syz.1.11849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 683.362305][ T5753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=5753 comm=syz.1.11852 [ 683.477901][ T5769] xt_TPROXY: Can be used only with -p tcp or -p udp [ 683.523393][ T5939] Bluetooth: hci0: unexpected event for opcode 0x0407 [ 683.791083][ T5640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 683.800655][ T5640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 683.806013][ T5640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 683.810542][ T5640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 683.813261][ T5640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 683.958373][ T5810] SELinux: policydb version 994622212 does not match my version range 15-35 [ 683.961411][ T5810] SELinux: failed to load policy [ 684.101662][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 684.193588][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.195951][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.198378][ T5795] bridge_slave_0: entered allmulticast mode [ 684.202294][ T5795] bridge_slave_0: entered promiscuous mode [ 684.206410][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.208704][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.212657][ T5795] bridge_slave_1: entered allmulticast mode [ 684.216146][ T5795] bridge_slave_1: entered promiscuous mode [ 684.240013][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.244785][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.262250][ T5795] team0: Port device team_slave_0 added [ 684.265582][ T5795] team0: Port device team_slave_1 added [ 684.282560][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.284968][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.294169][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.299009][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.301469][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.309912][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.336049][ T5795] hsr_slave_0: entered promiscuous mode [ 684.340007][ T5795] hsr_slave_1: entered promiscuous mode [ 684.435886][ T5795] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.512673][ T5795] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.578911][ T5795] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.640809][ T5795] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.792368][ T5795] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 684.811531][ T5795] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 684.816673][ T5795] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 684.821478][ T5795] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 684.842779][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.845876][ T5795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.849202][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.852454][ T5795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.900960][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.911028][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.913934][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.921553][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.928924][T21953] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.931320][T21953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.938160][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.940537][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.967484][T25497] net_ratelimit: 43 callbacks suppressed [ 684.967501][T25497] bond3: (slave macvlan2): failed to get link speed/duplex [ 685.083751][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.155233][ T5795] veth0_vlan: entered promiscuous mode [ 685.168998][ T5795] veth1_vlan: entered promiscuous mode [ 685.191336][ T5851] __nla_validate_parse: 6 callbacks suppressed [ 685.191353][ T5851] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11876'. [ 685.194076][ T5795] veth0_macvtap: entered promiscuous mode [ 685.201518][ T5795] veth1_macvtap: entered promiscuous mode [ 685.210687][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.232443][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.248003][T25497] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.251704][T25497] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.266049][T25497] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.269850][T25497] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.288280][T25497] bond3: (slave macvlan2): failed to get link speed/duplex [ 685.345573][ T5865] hpfs: Bad magic ... probably not HPFS [ 685.349804][ T5865] F2FS-fs (nbd6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 685.352868][ T5865] F2FS-fs (nbd6): Can't find valid F2FS filesystem in 1th superblock [ 685.355822][ T5865] F2FS-fs (nbd6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 685.358534][ T5865] F2FS-fs (nbd6): Can't find valid F2FS filesystem in 2th superblock [ 685.404539][T21953] bond3: (slave macvlan2): failed to get link speed/duplex [ 685.521222][ T13] bond3: (slave macvlan2): failed to get link speed/duplex [ 685.628888][ T5872] tipc: Started in network mode [ 685.631164][ T5872] tipc: Node identity ac1414aa, cluster identity 4711 [ 685.634223][ T5872] tipc: New replicast peer: 10.1.1.2 [ 685.636532][ T5872] tipc: Enabled bearer , priority 10 [ 685.670431][ T1219] bond3: (slave macvlan2): failed to get link speed/duplex [ 685.681132][ T5874] overlayfs: failed to clone upperpath [ 685.731298][ T5881] overlayfs: failed to clone lowerpath [ 685.733996][ T5879] overlayfs: failed to clone lowerpath [ 685.738224][ T5880] netlink: 212304 bytes leftover after parsing attributes in process `syz.3.11882'. [ 685.742318][ T5880] openvswitch: netlink: Message has 6 unknown bytes. [ 685.773765][ T5884] netlink: 104 bytes leftover after parsing attributes in process `syz.3.11883'. [ 685.788476][T21953] bond3: (slave macvlan2): failed to get link speed/duplex [ 685.905780][T21953] bond3: (slave macvlan2): failed to get link speed/duplex [ 685.928288][T21953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.934897][T23237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.011667][ T5640] Bluetooth: hci1: command tx timeout [ 686.059027][ T5897] No such timeout policy "syz1" [ 686.379554][ T5905] batadv_slave_1: entered promiscuous mode [ 686.382169][ T5905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11892'. [ 686.387646][ T5905] team0 (unregistering): Port device team_slave_0 removed [ 686.391221][ T5905] team0 (unregistering): Port device team_slave_1 removed [ 686.461121][ T5904] batadv_slave_1: left promiscuous mode [ 686.497354][ T40] audit: type=1400 audit(928.836:11127): avc: denied { read } for pid=5907 comm="syz.1.11893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 686.715383][ T6011] tipc: Node number set to 2886997162 [ 686.806876][ T5935] xt_hashlimit: max too large, truncated to 1048576 [ 687.450529][ T5640] Bluetooth: hci0: command 0x0c1a tx timeout [ 687.450532][ T5855] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 688.217852][ T5640] Bluetooth: hci1: command tx timeout [ 688.399183][ T5855] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 688.402023][ T5855] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 688.406236][ T5855] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 688.411865][ T5855] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 688.436944][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.439919][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.466460][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.469337][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.481334][ T40] audit: type=1400 audit(930.703:11128): avc: denied { mounton } for pid=5795 comm="syz-executor" path="/syzkaller.RubDtf/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=153074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 688.985448][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 689.667706][ T5640] Bluetooth: hci4: command 0x0c1a tx timeout [ 690.088675][ T5939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 690.097418][ T5939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 690.102745][ T5939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 690.109112][ T5939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 690.113654][ T5939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 690.115917][ T5934] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 690.172731][ T40] audit: type=1400 audit(932.289:11129): avc: denied { map } for pid=5976 comm="syz.3.11911" path="socket:[155734]" dev="sockfs" ino=155734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 690.188776][ T5985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33012 sclass=netlink_route_socket pid=5985 comm=syz.3.11911 [ 690.212008][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11911'. [ 690.228004][ T5989] netlink: 212916 bytes leftover after parsing attributes in process `syz.0.11913'. [ 690.328373][ T2121] usb 11-1: new high-speed USB device number 30 using dummy_hcd [ 690.350429][ T12] net_ratelimit: 43 callbacks suppressed [ 690.350447][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.355139][T23239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.491991][ T2121] usb 11-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 690.496095][ T2121] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.498803][ T12] bond3: (slave macvlan2): failed to get link speed/duplex [ 690.500858][ T2121] usb 11-1: Product: syz [ 690.507100][ T2121] usb 11-1: Manufacturer: syz [ 690.509163][ T2121] usb 11-1: SerialNumber: syz [ 690.531390][ T5967] chnl_net:caif_netlink_parms(): no params data found [ 690.535617][ T2121] usb 11-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 690.598454][ T6011] usb 11-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 690.616052][ T5934] Bluetooth: hci1: command 0x0419 tx timeout [ 690.658910][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.662008][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.665068][ T5967] bridge_slave_0: entered allmulticast mode [ 690.669371][ T5967] bridge_slave_0: entered promiscuous mode [ 690.674473][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.677544][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.680242][ T5967] bridge_slave_1: entered allmulticast mode [ 690.683185][ T5967] bridge_slave_1: entered promiscuous mode [ 690.699652][ T5967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 690.704317][ T5967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 690.721475][ T5967] team0: Port device team_slave_0 added [ 690.724911][ T5967] team0: Port device team_slave_1 added [ 690.739115][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.741414][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 690.751884][ T5967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.757135][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.759738][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 690.767959][ T5967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.792065][ T5967] hsr_slave_0: entered promiscuous mode [ 690.794636][ T5967] hsr_slave_1: entered promiscuous mode [ 690.796755][ T5967] debugfs: 'hsr0' already exists in 'hsr' [ 690.798920][ T5967] Cannot create hsr debugfs directory [ 690.945911][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11925'. [ 690.960861][ T4959] syz_tun (unregistering): left allmulticast mode [ 690.962917][ T4959] syz_tun (unregistering): left promiscuous mode [ 690.964861][ T4959] bridge0: port 3(syz_tun) entered disabled state [ 691.006101][ T5967] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.041345][T23239] usb 11-1: USB disconnect, device number 30 [ 691.053095][ T13] bond3: (slave macvlan2): failed to get link speed/duplex [ 691.073882][ T5934] Bluetooth: hci1: unexpected event for opcode 0x0c12 [ 691.131005][ T5967] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.170718][ T13] bond3: (slave macvlan2): failed to get link speed/duplex [ 691.206353][ T6056] netlink: 'syz.0.11931': attribute type 10 has an invalid length. [ 691.209765][ T6056] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11931'. [ 691.240190][ T5967] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.251625][ T6056] batadv0: entered promiscuous mode [ 691.253307][ T6056] batadv0: entered allmulticast mode [ 691.255944][ T6056] bridge0: port 3(batadv0) entered blocking state [ 691.258133][ T6056] bridge0: port 3(batadv0) entered disabled state [ 691.261462][ T6056] bridge0: port 3(batadv0) entered blocking state [ 691.263972][ T6056] bridge0: port 3(batadv0) entered forwarding state [ 691.288906][ T13] bond3: (slave macvlan2): failed to get link speed/duplex [ 691.301902][ T6060] netlink: 'syz.3.11932': attribute type 12 has an invalid length. [ 691.305114][ T6060] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.11932'. [ 691.337289][ T5967] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.343073][ T6062] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6062 comm=syz.0.11933 [ 691.404859][ T13] bond3: (slave macvlan2): failed to get link speed/duplex [ 691.437317][T25497] bridge_slave_1: left allmulticast mode [ 691.439352][T25497] bridge_slave_1: left promiscuous mode [ 691.441270][T25497] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.445252][T25497] bridge_slave_0: left allmulticast mode [ 691.446910][T25497] bridge_slave_0: left promiscuous mode [ 691.452104][T25497] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.458751][T16855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.464810][T25497] vlan3: left promiscuous mode [ 691.466512][T25497] veth1: left promiscuous mode [ 691.468192][T25497] bridge4: port 2(vlan3) entered disabled state [ 691.471892][T25497] veth5: left allmulticast mode [ 691.473377][T25497] veth5: left promiscuous mode [ 691.475033][T25497] bridge4: port 1(veth5) entered disabled state [ 691.535781][T25497] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 691.557649][T25497] bond3 (unregistering): (slave ip6erspan0): Releasing active interface [ 691.661509][T25497] bond0 (unregistering): (slave gretap1): Releasing active interface [ 691.677485][T25497] bond5 (unregistering): (slave geneve2): Releasing active interface [ 691.715838][ T174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.722437][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.746000][ T174] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 691.749045][ T174] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 691.972280][ T6011] usb 11-1: Service connection timeout for: 256 [ 691.974922][ T6011] ath9k_htc 11-1:1.0: ath9k_htc: Unable to initialize HTC services [ 691.982538][ T6011] ath9k_htc: Failed to initialize the device [ 691.985569][T23239] usb 11-1: ath9k_htc: USB layer deinitialized [ 692.247315][ T5991] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 692.310826][ T5934] Bluetooth: hci3: command tx timeout [ 692.378579][T25497] bond1 (unregistering): left allmulticast mode [ 692.381479][T25497] bond1 (unregistering): Released all slaves [ 692.392125][T25497] bond2 (unregistering): Released all slaves [ 692.402062][T25497] bond3 (unregistering): Released all slaves [ 692.409951][T25497] bond0 (unregistering): Released all slaves [ 692.419328][T25497] bond4 (unregistering): Released all slaves [ 692.429581][T25497] bond5 (unregistering): Released all slaves [ 692.458179][ T5991] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 692.483880][ T5991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.490567][ T5991] usb 5-1: Product: syz [ 692.508217][ T5991] usb 5-1: Manufacturer: syz [ 692.510536][ T5991] usb 5-1: SerialNumber: syz [ 692.531130][ T5991] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 692.616429][ T39] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 692.684269][ T6094] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3642988519 (466302530432 ns) > initial count (459226025088 ns). Using initial count to start timer. [ 692.689698][ T5967] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 692.695479][ T40] audit: type=1400 audit(934.662:11130): avc: denied { write } for pid=6093 comm="syz.6.11945" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 692.714375][ T5967] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 692.739760][ T5967] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 692.764159][ T5967] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 692.841582][T25497] IPVS: stopping backup sync thread 26421 ... [ 692.990749][ T5967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.016363][ T5967] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.022739][ T174] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.025877][ T174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.046759][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.049895][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.071028][ T5926] usb 5-1: USB disconnect, device number 17 [ 693.219525][T25497] hsr_slave_0: left promiscuous mode [ 693.223789][T25497] veth0_macvtap: left allmulticast mode [ 693.239639][T25497] pim6reg99999999 (unregistering): left allmulticast mode [ 693.293726][ T40] audit: type=1400 audit(935.216:11131): avc: denied { mount } for pid=6115 comm="syz.6.11949" name="/" dev="pstore" ino=5916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 693.294309][ T6118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 693.305820][ T40] audit: type=1400 audit(935.235:11132): avc: denied { mounton } for pid=6115 comm="syz.6.11949" path="/syzcgroup/unified/syz6" dev="pstore" ino=5916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 693.309054][ T6119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 693.407796][T25497] vxcan1 (unregistering): left allmulticast mode [ 693.469024][ T5967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.505532][ T5967] veth0_vlan: entered promiscuous mode [ 693.514557][ T5967] veth1_vlan: entered promiscuous mode [ 693.539864][ T5967] veth0_macvtap: entered promiscuous mode [ 693.546126][ T5967] veth1_macvtap: entered promiscuous mode [ 693.560303][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.571773][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.581441][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.584354][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.587829][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.592491][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.684368][ T1219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.688865][ T1219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.725814][T25497] IPVS: stop unused estimator thread 0... [ 693.731247][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.735178][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.847978][ T6151] netlink: 'syz.0.11957': attribute type 4 has an invalid length. [ 693.896093][ T6157] netlink: 'syz.0.11959': attribute type 2 has an invalid length. [ 693.909543][ T6157] netlink: 46 bytes leftover after parsing attributes in process `syz.0.11959'. [ 693.920003][ T6157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11959'. [ 693.925707][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11960'. [ 693.935600][ T39] usb 5-1: Service connection timeout for: 256 [ 693.938327][ T39] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 693.941409][ T6157] netlink: 9 bytes leftover after parsing attributes in process `syz.0.11959'. [ 693.954392][ T39] ath9k_htc: Failed to initialize the device [ 693.959157][ T6157] 0·: renamed from hsr0 (while UP) [ 693.959647][ T5926] usb 5-1: ath9k_htc: USB layer deinitialized [ 693.968238][ T6157] 0·: entered allmulticast mode [ 693.970074][ T6157] hsr_slave_0: entered allmulticast mode [ 693.972128][ T6157] hsr_slave_1: entered allmulticast mode [ 694.033022][ T40] audit: type=1400 audit(935.910:11133): avc: denied { read } for pid=5319 comm="acpid" name="event#" dev="devtmpfs" ino=4914 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 694.042534][ T40] audit: type=1400 audit(935.910:11134): avc: denied { open } for pid=5319 comm="acpid" path="/dev/input/event#" dev="devtmpfs" ino=4914 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 694.059046][ T40] audit: type=1400 audit(935.910:11135): avc: denied { ioctl } for pid=5319 comm="acpid" path="/dev/input/event#" dev="devtmpfs" ino=4914 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 694.090104][ T6176] netlink: 'syz.1.11965': attribute type 23 has an invalid length. [ 694.111697][ T6176] syzkaller0: entered allmulticast mode [ 694.313319][ T6196] netlink: 'syz.0.11972': attribute type 2 has an invalid length. [ 694.316858][ T6196] netlink: 46 bytes leftover after parsing attributes in process `syz.0.11972'. [ 694.323422][ T6196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11972'. [ 694.379396][ T6196] netlink: 9 bytes leftover after parsing attributes in process `syz.0.11972'. [ 694.383369][ T6196] 1·: renamed from 70· (while UP) [ 694.391309][ T6196] 1·: failed to rename [ 694.467693][T21953] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 694.471397][T21953] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 694.475280][T21953] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 694.478968][T21953] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 694.505659][ T6212] overlayfs: failed to resolve '/ ': -2 [ 694.515373][ T6200] kvm_intel: kvm [6199]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xbb [ 694.540083][ T5934] Bluetooth: hci3: command tx timeout [ 694.622447][ T6221] binder: BC_ACQUIRE_RESULT not supported [ 694.624731][ T6221] binder: 6219:6221 ioctl c0306201 2000000003c0 returned -22 [ 694.628949][ T40] audit: type=1400 audit(936.473:11136): avc: denied { getopt } for pid=6219 comm="syz.0.11980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 694.711012][ T6233] netlink: 'syz.6.11984': attribute type 10 has an invalid length. [ 694.782140][ T6240] 9p: Bad value for 'wfdno' [ 694.787348][ T6235] netlink: 'syz.1.11985': attribute type 10 has an invalid length. [ 694.791703][ T6235] batadv0: entered promiscuous mode [ 694.793416][ T6235] batadv0: entered allmulticast mode [ 694.796441][ T6235] bridge0: port 3(batadv0) entered blocking state [ 694.799175][ T6235] bridge0: port 3(batadv0) entered disabled state [ 694.805684][ T6235] bridge0: port 3(batadv0) entered blocking state [ 694.808517][ T6235] bridge0: port 3(batadv0) entered forwarding state [ 694.878927][ T40] audit: type=1400 audit(936.698:11137): avc: denied { read write } for pid=6246 comm="syz.0.11989" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 694.891154][ T5640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 694.895815][ T5640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 694.899069][ T5640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 694.905169][ T40] audit: type=1400 audit(936.698:11138): avc: denied { open } for pid=6246 comm="syz.0.11989" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 694.912020][ T5640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 694.917245][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 694.918818][ T5640] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 694.920979][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 694.922533][ T40] audit: type=1400 audit(936.708:11139): avc: denied { ioctl } for pid=6246 comm="syz.0.11989" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 694.955681][ T6244] batman_adv: batadv0: Adding interface: gretap1 [ 694.957747][ T6244] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.965705][ T6244] batman_adv: batadv0: Interface activated: gretap1 [ 695.110441][ T6254] 0·: renamed from hsr0 (while UP) [ 695.121203][ T6261] netlink: 'syz.6.11995': attribute type 10 has an invalid length. [ 695.138867][ T6254] 0·: entered allmulticast mode [ 695.141699][ T6254] hsr_slave_0: entered allmulticast mode [ 695.144532][ T6254] hsr_slave_1: entered allmulticast mode [ 695.231824][ T6265] netlink: 'syz.6.11997': attribute type 10 has an invalid length. [ 695.312243][ T6266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 695.523497][ T6245] chnl_net:caif_netlink_parms(): no params data found [ 695.588099][ T6245] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.591290][ T6245] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.594718][ T6245] bridge_slave_0: entered allmulticast mode [ 695.598597][ T6245] bridge_slave_0: entered promiscuous mode [ 695.603399][ T6245] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.605962][ T6245] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.608560][ T6245] bridge_slave_1: entered allmulticast mode [ 695.612341][ T6245] bridge_slave_1: entered promiscuous mode [ 695.668904][ T6245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.672889][ T174] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.676330][ T174] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.692923][ T6245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.696705][ T174] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.710969][ T5926] usb 11-1: new high-speed USB device number 31 using dummy_hcd [ 695.717622][ T174] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.736068][ T6245] team0: Port device team_slave_0 added [ 695.740954][ T6245] team0: Port device team_slave_1 added [ 695.765221][ T6245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.767621][ T6245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.777527][ T6245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.782122][ T6245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.784240][ T6245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.792243][ T6245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.821579][ T6300] cgroup: No subsys list or none specified [ 695.824061][ T6245] hsr_slave_0: entered promiscuous mode [ 695.825039][ T6300] cgroup: No subsys list or none specified [ 695.831163][ T6245] hsr_slave_1: entered promiscuous mode [ 695.831875][ T6300] cgroup: No subsys list or none specified [ 695.835019][ T6300] cgroup: No subsys list or none specified [ 695.881509][ T5926] usb 11-1: Using ep0 maxpacket: 32 [ 695.888207][ T5926] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 695.898149][ T5926] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 695.902497][ T5926] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 695.907088][ T5926] usb 11-1: Product: syz [ 695.908923][ T5926] usb 11-1: Manufacturer: syz [ 695.910930][ T5926] usb 11-1: SerialNumber: syz [ 695.931113][ T5926] usb 11-1: config 0 descriptor?? [ 695.934039][ T6279] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 695.952293][ T5926] hub 11-1:0.0: bad descriptor, ignoring hub [ 695.955007][ T5926] hub 11-1:0.0: probe with driver hub failed with error -5 [ 695.970133][ T6245] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 696.009785][T21953] net_ratelimit: 29 callbacks suppressed [ 696.009799][T21953] bond3: (slave macvlan2): failed to get link speed/duplex [ 696.077433][ T6245] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 696.126621][ T174] bond3: (slave macvlan2): failed to get link speed/duplex [ 696.139182][ T6245] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 696.148275][T16855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.209349][ T6245] bond0: (slave netdevsim0): Releasing backup interface [ 696.216010][ T6245] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 696.243950][ T12] bond3: (slave macvlan2): failed to get link speed/duplex [ 696.265290][ T6011] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 696.382472][ T174] bond3: (slave macvlan2): failed to get link speed/duplex [ 696.415162][ T6245] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 696.421484][ T6245] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 696.427078][ T6245] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 696.433614][ T6245] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 696.443365][ T6011] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 696.451817][ T6011] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.456720][ T6011] usb 5-1: Product: syz [ 696.458975][ T6011] usb 5-1: Manufacturer: syz [ 696.460940][ T6011] usb 5-1: SerialNumber: syz [ 696.467812][ T6011] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 696.489320][T21953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.491518][ T6011] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 696.538073][ T6245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.554233][ T6245] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.562345][ T1219] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.565336][ T1219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.581486][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.584586][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.638758][ T1219] bond3: (slave macvlan2): failed to get link speed/duplex [ 696.723902][ T6245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.744817][ T5934] Bluetooth: hci3: command tx timeout [ 696.758338][ T174] bond3: (slave macvlan2): failed to get link speed/duplex [ 696.770539][ T6245] veth0_vlan: entered promiscuous mode [ 696.780743][ T6245] veth1_vlan: entered promiscuous mode [ 696.803216][ T6245] veth0_macvtap: entered promiscuous mode [ 696.809408][ T6245] veth1_macvtap: entered promiscuous mode [ 696.822472][ T6245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 696.835983][ T6245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 696.858482][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.863232][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.873222][ T1219] bond3: (slave macvlan2): failed to get link speed/duplex [ 696.877292][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.881023][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.991414][ T12] bond3: (slave macvlan2): failed to get link speed/duplex [ 697.034425][ T12] raw-gadget.0 gadget.6: failed to queue suspend event [ 697.046443][ T6008] usb 5-1: USB disconnect, device number 18 [ 697.058959][T21953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.062037][T21953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.082033][ T6314] raw-gadget.0 gadget.6: failed to queue disconnect event [ 697.086047][ T5934] Bluetooth: hci0: command tx timeout [ 697.103785][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.107492][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.248274][ T6342] tap0: tun_chr_ioctl cmd 1074025675 [ 697.250612][ T6342] tap0: persist enabled [ 697.482803][ T6355] validate_nla: 3 callbacks suppressed [ 697.482820][ T6355] netlink: 'syz.3.12022': attribute type 10 has an invalid length. [ 697.487238][ T6355] __nla_validate_parse: 16 callbacks suppressed [ 697.487247][ T6355] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12022'. [ 697.493388][ T6355] batadv0: entered promiscuous mode [ 697.495227][ T6355] batadv0: entered allmulticast mode [ 697.497324][ T6355] bridge0: port 3(batadv0) entered blocking state [ 697.499717][ T6355] bridge0: port 3(batadv0) entered disabled state [ 697.503191][ T6355] bridge0: port 3(batadv0) entered blocking state [ 697.505495][ T6355] bridge0: port 3(batadv0) entered forwarding state [ 697.517215][ T6357] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 697.521255][ T6357] Buffer I/O error on dev nbd1, logical block 0, async page read [ 697.525295][ T6357] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 697.529596][ T6357] Buffer I/O error on dev nbd1, logical block 1, async page read [ 697.532939][ T6357] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 697.537066][ T6357] Buffer I/O error on dev nbd1, logical block 2, async page read [ 697.540545][ T6357] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 697.544866][ T6357] Buffer I/O error on dev nbd1, logical block 3, async page read [ 697.548332][ T6357] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 697.552496][ T6357] Buffer I/O error on dev nbd1, logical block 0, async page read [ 697.556547][ T6357] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 697.566332][ T6357] Buffer I/O error on dev nbd1, logical block 1, async page read [ 697.569376][ T6357] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 697.573079][ T6357] Buffer I/O error on dev nbd1, logical block 2, async page read [ 697.576397][ T6357] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 697.580387][ T6357] Buffer I/O error on dev nbd1, logical block 3, async page read [ 697.582931][ T6357] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 697.585932][ T6357] Buffer I/O error on dev nbd1, logical block 0, async page read [ 697.588832][ T6357] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 697.595868][ T6357] Buffer I/O error on dev nbd1, logical block 1, async page read [ 697.599405][ T6357] ldm_validate_partition_table(): Disk read failed. [ 697.601886][ T6357] Dev nbd1: unable to read RDB block 0 [ 697.602121][ T6360] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12023'. [ 697.604079][ T6357] nbd1: unable to read partition table [ 697.684603][ T6362] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3642988519 (466302530432 ns) > initial count (459226025088 ns). Using initial count to start timer. [ 697.714968][T25497] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 697.719228][T25497] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 697.848337][ T6379] netlink: 'syz.0.12032': attribute type 6 has an invalid length. [ 697.872008][ T6011] usb 5-1: Service connection timeout for: 256 [ 697.879169][ T6011] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 697.894865][ T6011] ath9k_htc: Failed to initialize the device [ 697.903929][ T6008] usb 5-1: ath9k_htc: USB layer deinitialized [ 698.054688][ T6388] bridge0: port 4(syz_tun) entered blocking state [ 698.057095][ T6388] bridge0: port 4(syz_tun) entered disabled state [ 698.059438][ T6388] syz_tun: entered allmulticast mode [ 698.063478][ T6388] syz_tun: entered promiscuous mode [ 698.065701][ T6388] bridge0: port 4(syz_tun) entered blocking state [ 698.068330][ T6388] bridge0: port 4(syz_tun) entered forwarding state [ 698.102243][ T6391] mkiss: ax0: crc mode is auto. [ 698.237068][ T6008] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 698.407587][ T6008] usb 5-1: Using ep0 maxpacket: 32 [ 698.422333][ T6008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.426019][ T6008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 698.432728][ T6008] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 698.437204][ T6008] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 698.440392][ T6008] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.444715][ T6008] usb 5-1: config 0 descriptor?? [ 698.852539][ T6407] netlink: 9 bytes leftover after parsing attributes in process `syz.1.12044'. [ 698.856722][ T6407] 1·: renamed from 70· (while UP) [ 698.921580][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12046'. [ 698.961846][ T5934] Bluetooth: hci3: command tx timeout [ 698.999969][ T6421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29952 sclass=netlink_route_socket pid=6421 comm=syz.3.12049 [ 699.009016][ T6421] gtp0: entered promiscuous mode [ 699.011472][ T6421] netlink: 'syz.3.12049': attribute type 89 has an invalid length. [ 699.014701][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12049'. [ 699.093291][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 699.093302][ T40] audit: type=1400 audit(940.658:11142): avc: denied { read } for pid=6378 comm="syz.0.12032" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 699.103425][ T40] audit: type=1400 audit(940.658:11143): avc: denied { open } for pid=6378 comm="syz.0.12032" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 699.110815][ T6008] usbhid 5-1:0.0: can't add hid device: -71 [ 699.114596][ T6008] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 699.118521][ T6008] usb 5-1: USB disconnect, device number 19 [ 699.143982][ T40] audit: type=1400 audit(940.714:11144): avc: denied { create } for pid=6428 comm="syz.3.12050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 699.212190][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12053'. [ 699.302947][ T5934] Bluetooth: hci0: command tx timeout [ 699.338847][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12057'. [ 699.344056][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12057'. [ 699.848479][ T6466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12062'. [ 699.854898][ T6466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12062'. [ 699.942702][ T6012] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 700.123600][ T6012] usb 5-1: Using ep0 maxpacket: 32 [ 700.127543][ T6012] usb 5-1: config 0 has no interfaces? [ 700.131298][ T6012] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 700.134455][ T6012] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 700.137073][ T6012] usb 5-1: Product: syz [ 700.138443][ T6012] usb 5-1: Manufacturer: syz [ 700.139923][ T6012] usb 5-1: SerialNumber: syz [ 700.142946][ T6012] usb 5-1: config 0 descriptor?? [ 700.166282][ T10] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 700.328466][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 700.332360][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 700.336593][ T10] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 700.341047][ T10] usb 6-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 700.346491][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 700.352243][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 700.356022][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.359542][ T10] usb 6-1: Product: syz [ 700.361359][ T10] usb 6-1: Manufacturer: syz [ 700.363423][ T10] usb 6-1: SerialNumber: syz [ 700.363874][T16127] usb 5-1: USB disconnect, device number 20 [ 700.598748][ T40] audit: type=1400 audit(942.074:11145): avc: denied { ioctl } for pid=6467 comm="syz.1.12063" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 700.612062][ T10] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 700.620627][ T10] usb 6-1: USB disconnect, device number 17 [ 700.711833][ T29] usb 11-1: USB disconnect, device number 31 [ 700.829104][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 700.834610][ T5640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 700.843590][ T5640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 700.847960][ T5640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 700.854683][ T5640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 701.015704][ T40] audit: type=1401 audit(942.459:11146): op=setxattr invalid_context="system_u:object_r:crond_var_run_t:s0" [ 701.132944][ T6479] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 701.139996][ T6479] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.163593][ T6470] chnl_net:caif_netlink_parms(): no params data found [ 701.284182][ T6479] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 701.289277][ T6479] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.303933][ T6490] tmpfs: Bad value for 'mpol' [ 701.319053][ T6470] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.328030][ T6470] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.332044][ T6470] bridge_slave_0: entered allmulticast mode [ 701.335477][ T6470] bridge_slave_0: entered promiscuous mode [ 701.340756][ T6470] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.343543][ T6470] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.346384][ T6470] bridge_slave_1: entered allmulticast mode [ 701.353093][ T6470] bridge_slave_1: entered promiscuous mode [ 701.392420][ T6470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.420663][ T6479] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 701.427055][ T6479] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.444666][ T6470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.470977][ T6470] team0: Port device team_slave_0 added [ 701.474232][ T6470] team0: Port device team_slave_1 added [ 701.496189][ T6470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.499078][ T6470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.507282][ T6470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.525914][ T5934] Bluetooth: hci0: command tx timeout [ 701.534464][ T6479] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 701.537703][ T6479] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.544768][ T6470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 701.547793][ T6470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.558412][ T6470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.587667][ T6470] hsr_slave_0: entered promiscuous mode [ 701.590399][ T6470] hsr_slave_1: entered promiscuous mode [ 701.592562][ T6470] debugfs: 'hsr0' already exists in 'hsr' [ 701.594712][ T6470] Cannot create hsr debugfs directory [ 701.698134][ T174] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.701290][ T29] net_ratelimit: 44 callbacks suppressed [ 701.701307][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.707336][ T174] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.746505][ T6470] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.778012][ T174] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.781849][ T174] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.800297][ T174] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.803864][ T174] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.813341][ T174] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.816921][ T174] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.821191][ T174] bond3: (slave macvlan2): failed to get link speed/duplex [ 701.869042][ T6470] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.871983][ T10] IPVS: starting estimator thread 0... [ 701.935616][ T6090] bond3: (slave macvlan2): failed to get link speed/duplex [ 701.960308][ T6470] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.967644][ T6507] IPVS: using max 45 ests per chain, 108000 per kthread [ 702.052909][ T174] bond3: (slave macvlan2): failed to get link speed/duplex [ 702.085367][ T6470] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.170102][ T174] bond3: (slave macvlan2): failed to get link speed/duplex [ 702.297416][ T6470] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 702.330287][ T6470] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 702.340712][ T79] bond3: (slave macvlan2): failed to get link speed/duplex [ 702.345288][ T6470] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 702.353124][ T6470] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 702.427299][ T6470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.437855][ T6470] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.443221][ T174] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.445673][ T174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.448039][ T6523] netlink: 'syz.1.12081': attribute type 3 has an invalid length. [ 702.451555][ T6523] netlink: 'syz.1.12081': attribute type 3 has an invalid length. [ 702.456886][ T6523] netlink: 'syz.1.12081': attribute type 10 has an invalid length. [ 702.461741][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.464068][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.472137][ T6523] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.476047][ T6523] bond0: (slave team0): Enslaving as an active interface with an up link [ 702.511303][ T12] bond3: (slave macvlan2): failed to get link speed/duplex [ 702.628716][ T6090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.630955][ T6470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.650069][ T6090] bond3: (slave macvlan2): failed to get link speed/duplex [ 702.767046][ T79] bond3: (slave macvlan2): failed to get link speed/duplex [ 702.838275][ T6470] veth0_vlan: entered promiscuous mode [ 702.843466][ T6470] veth1_vlan: entered promiscuous mode [ 702.860770][ T6470] veth0_macvtap: entered promiscuous mode [ 702.865086][ T6470] veth1_macvtap: entered promiscuous mode [ 702.875481][ T6470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 702.883059][ T6470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.897266][T21953] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.901036][T21953] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.905020][ T79] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.917051][ T79] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.968981][ T6560] netlink: 'syz.0.12091': attribute type 10 has an invalid length. [ 702.981529][ T6560] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.985450][ T6560] bond0: (slave team0): Enslaving as an active interface with an up link [ 703.000033][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.003451][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.025442][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.028828][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.065978][ T5934] Bluetooth: hci2: command tx timeout [ 703.101153][ T6566] syz_tun: entered promiscuous mode [ 703.103550][ T6566] syz_tun: entered allmulticast mode [ 703.416677][ T6582] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12098'. [ 703.747875][ T5934] Bluetooth: hci0: command tx timeout [ 704.468401][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12104'. [ 705.303688][ T5934] Bluetooth: hci2: command tx timeout [ 706.264869][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12115'. [ 706.601758][ T40] audit: type=1326 audit(947.703:11147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6644 comm="syz.0.12121" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd2319c629 code=0x0 [ 707.115764][T21953] net_ratelimit: 42 callbacks suppressed [ 707.115786][T21953] bond3: (slave macvlan2): failed to get link speed/duplex [ 707.233007][ T12] bond3: (slave macvlan2): failed to get link speed/duplex [ 707.350262][ T174] bond3: (slave macvlan2): failed to get link speed/duplex [ 707.467455][ T174] bond3: (slave macvlan2): failed to get link speed/duplex [ 707.510398][ T5934] Bluetooth: hci2: command tx timeout [ 707.586107][ T118] bond3: (slave macvlan2): failed to get link speed/duplex [ 707.688241][T23239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.712633][ T118] bond3: (slave macvlan2): failed to get link speed/duplex [ 707.830108][ T174] bond3: (slave macvlan2): failed to get link speed/duplex [ 707.844059][ T40] audit: type=1400 audit(948.867:11148): avc: denied { write } for pid=6656 comm="syz.0.12125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 707.947117][ T174] bond3: (slave macvlan2): failed to get link speed/duplex [ 708.081450][ T6090] bond3: (slave macvlan2): failed to get link speed/duplex [ 708.668466][ T6669] sp0: Synchronizing with TNC [ 709.378076][ T6685] bond0: (slave rose0): Enslaving as an active interface with an up link [ 709.716451][ T5934] Bluetooth: hci2: command tx timeout [ 711.029650][ T6755] Bluetooth: MGMT ver 1.23 [ 711.503016][ T6777] input: syz0 as /devices/virtual/input/input78 [ 711.719390][ T6786] binder_alloc: 6785: pid 6785 spamming oneway? 1 buffers allocated for a total size of 4096 [ 711.986516][ T40] audit: type=1326 audit(952.751:11149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.0.12174" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2319c629 code=0x7ffc0000 [ 711.995132][ T40] audit: type=1326 audit(952.751:11151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.0.12174" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2319c629 code=0x7ffc0000 [ 712.003603][ T40] audit: type=1326 audit(952.751:11152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.0.12174" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2319c629 code=0x7ffc0000 [ 712.018054][ T40] audit: type=1326 audit(952.751:11150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.0.12174" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2319c629 code=0x7ffc0000 [ 712.034759][ T40] audit: type=1326 audit(952.751:11153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.0.12174" exe="/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fdd2319c629 code=0x7ffc0000 [ 712.043203][ T40] audit: type=1326 audit(952.751:11154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.0.12174" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2319c629 code=0x7ffc0000 [ 712.052825][ T40] audit: type=1326 audit(952.751:11155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.0.12174" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2319c629 code=0x7ffc0000 [ 712.064588][ T40] audit: type=1326 audit(952.751:11156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.0.12174" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdd2319c629 code=0x7ffc0000 [ 712.072735][ T40] audit: type=1326 audit(952.751:11157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.0.12174" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdd2319c629 code=0x7ffc0000 [ 712.267500][ T6808] syz_tun: entered allmulticast mode [ 712.405596][ T6814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 712.488692][ T6206] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 712.562387][ T6090] net_ratelimit: 44 callbacks suppressed [ 712.562406][ T6090] bond3: (slave macvlan2): failed to get link speed/duplex [ 712.648871][ T6206] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.652677][ T6206] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.656687][ T6206] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 712.662175][ T6206] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 712.665997][ T6206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.672578][ T6206] usb 5-1: config 0 descriptor?? [ 712.679770][ T46] bond3: (slave macvlan2): failed to get link speed/duplex [ 712.796854][ T46] bond3: (slave macvlan2): failed to get link speed/duplex [ 712.914318][T21953] bond3: (slave macvlan2): failed to get link speed/duplex [ 713.031403][ T6090] bond3: (slave macvlan2): failed to get link speed/duplex [ 713.095382][T16855] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 713.129093][ T6206] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 713.159974][T21953] bond3: (slave macvlan2): failed to get link speed/duplex [ 713.204364][T23239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.276736][ T174] bond3: (slave macvlan2): failed to get link speed/duplex [ 713.287238][T16855] usb 6-1: Using ep0 maxpacket: 8 [ 713.292036][T16855] usb 6-1: config 0 has no interfaces? [ 713.299857][T16855] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 713.303082][T16855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.306236][T16855] usb 6-1: Product: syz [ 713.308046][T16855] usb 6-1: Manufacturer: syz [ 713.312676][T16855] usb 6-1: SerialNumber: syz [ 713.317152][T16855] usb 6-1: config 0 descriptor?? [ 713.394592][ T118] bond3: (slave macvlan2): failed to get link speed/duplex [ 713.510993][ T118] bond3: (slave macvlan2): failed to get link speed/duplex [ 713.542145][T16855] usb 6-1: USB disconnect, device number 18 [ 713.597006][ T6863] kvm: pic: non byte write [ 713.652453][ T5926] usb 5-1: USB disconnect, device number 21 [ 714.029308][ T40] audit: type=1326 audit(954.674:11158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6865 comm="syz.6.12206" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd7e859c629 code=0x0 [ 714.092131][ T6870] [ 714.234590][ T6878] loop2: detected capacity change from 0 to 7 [ 714.247069][ T6878] Dev loop2: unable to read RDB block 7 [ 714.249531][ T6878] loop2: AHDI p1 p2 p3 [ 714.251510][ T6878] loop2: partition table partially beyond EOD, truncated [ 714.255037][ T6878] loop2: p1 start 1601398130 is beyond EOD, truncated [ 714.258453][ T6878] loop2: p2 start 1702059890 is beyond EOD, truncated [ 714.427614][T23239] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 714.788325][T23239] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.844567][T23239] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 714.847437][T23239] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.886429][T23239] usb 6-1: config 0 descriptor?? [ 714.892752][T23239] pwc: Askey VC010 type 2 USB webcam detected. [ 715.320137][T23239] pwc: recv_control_msg error -32 req 02 val 2b00 [ 715.326013][T23239] pwc: recv_control_msg error -32 req 02 val 2700 [ 715.336504][T23239] pwc: recv_control_msg error -32 req 02 val 2c00 [ 715.339039][T23239] pwc: recv_control_msg error -32 req 04 val 1000 [ 715.346770][T23239] pwc: recv_control_msg error -32 req 04 val 1300 [ 715.562922][T23239] pwc: recv_control_msg error -32 req 02 val 2000 [ 715.782625][T23239] pwc: recv_control_msg error -71 req 04 val 1500 [ 715.786272][T23239] pwc: recv_control_msg error -71 req 02 val 2500 [ 715.791979][T23239] pwc: recv_control_msg error -71 req 02 val 2400 [ 715.797009][T23239] pwc: recv_control_msg error -71 req 02 val 2600 [ 715.802990][T23239] pwc: recv_control_msg error -71 req 02 val 2900 [ 715.810162][T23239] pwc: recv_control_msg error -71 req 02 val 2800 [ 715.812762][T23239] pwc: recv_control_msg error -71 req 04 val 1100 [ 715.817195][T23239] pwc: recv_control_msg error -71 req 04 val 1200 [ 715.869013][T23239] pwc: Registered as video103. [ 715.887753][T23239] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb6/6-1/input/input80 [ 715.899461][T23239] usb 6-1: USB disconnect, device number 19 [ 716.179632][ T6980] ip6gretap1: entered promiscuous mode [ 716.916780][ T7027] netlink: 64 bytes leftover after parsing attributes in process `syz.0.12274'. [ 717.122341][ T7046] BUG: Bad page state in process syz.6.12285 pfn:2faf8 [ 717.124740][ T7046] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802faf8000 pfn:0x2faf8 [ 717.129890][ T7046] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 717.132145][ T7046] raw: 00fff00000000000 dead000000000040 ffff8880232ac000 0000000000000000 [ 717.134970][ T7046] raw: ffff88802faf8000 3ffffffffffffffe 00000000ffffffff 0000000000000000 [ 717.137677][ T7046] page dumped because: page_pool leak [ 717.139392][ T7046] page_owner tracks the page as allocated SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 717.141312][ T7046] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 23595, tgid 23594 (syz.4.7228), ts 420867969370, free_ts 420858224751 [ 717.147394][ T7046] post_alloc_hook+0x153/0x170 [ 717.149113][ T7046] get_page_from_freelist+0x111d/0x3140 [ 717.150886][ T7046] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 717.152766][ T7046] alloc_pages_bulk_noprof+0x782/0x1490 [ 717.154551][ T7046] __page_pool_alloc_netmems_slow+0x1c6/0xc10 [ 717.156910][ T7046] page_pool_alloc_netmems+0xc4/0x1a0 [ 717.158654][ T7046] page_pool_alloc_frag_netmem+0x21d/0xa00 [ 717.161020][ T7046] skb_pp_cow_data+0x243/0xea0 [ 717.162718][ T7046] skb_cow_data_for_xdp+0x88/0xb0 [ 717.164417][ T7046] do_xdp_generic+0x56b/0x12c0 [ 717.166034][ T7046] __netif_receive_skb_core.constprop.0+0x836/0x3550 [ 717.168283][ T7046] __netif_receive_skb_one_core+0xb0/0x1e0 [ 717.170627][ T7046] __netif_receive_skb+0x1f/0x120 [ 717.172353][ T7046] netif_receive_skb+0x139/0x820 [ 717.174051][ T7046] tun_rx_batched.isra.0+0x3f6/0x750 [ 717.175773][ T7046] tun_get_user+0x1e2e/0x3e10 [ 717.177353][ T7046] page last free pid 23595 tgid 23594 stack trace: [ 717.179565][ T7046] __free_frozen_pages+0x7ca/0x10a0 [ 717.181330][ T7046] vfree.part.0+0x12b/0x9d0 [ 717.182868][ T7046] vfree+0x55/0x80 [ 717.184248][ T7046] bpf_check+0xe83/0xcdd0 [ 717.185679][ T7046] bpf_prog_load+0x1c86/0x2c20 [ 717.187310][ T7046] __sys_bpf+0x223a/0x4b90 [ 717.188811][ T7046] __x64_sys_bpf+0x7b/0xc0 [ 717.190379][ T7046] do_syscall_64+0x106/0xf80 [ 717.191907][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.193936][ T7046] Modules linked in: [ 717.195283][ T7046] CPU: 3 UID: 0 PID: 7046 Comm: syz.6.12285 Tainted: G L syzkaller #0 PREEMPT(full) [ 717.195301][ T7046] Tainted: [L]=SOFTLOCKUP [ 717.195306][ T7046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 717.195313][ T7046] Call Trace: [ 717.195318][ T7046] [ 717.195323][ T7046] dump_stack_lvl+0x100/0x190 [ 717.195343][ T7046] bad_page.cold+0xbe/0xdf [ 717.195361][ T7046] ? __pfx_bad_page+0x10/0x10 [ 717.195379][ T7046] ? page_bad_reason+0x98/0x200 [ 717.195395][ T7046] __free_frozen_pages+0x7fe/0x10a0 [ 717.195408][ T7046] ? mark_held_locks+0x40/0x70 [ 717.195427][ T7046] page_frag_free+0x284/0x2e0 [ 717.195443][ T7046] __xdp_return+0x3cd/0xb90 [ 717.195456][ T7046] ? skb_release_data+0x7a0/0x9d0 [ 717.195481][ T7046] bpf_xdp_adjust_tail+0x854/0xb60 [ 717.195507][ T7046] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 717.195532][ T7046] bpf_prog_run_generic_xdp+0x614/0x1610 [ 717.195593][ T7046] do_xdp_generic+0x92e/0x12c0 [ 717.195638][ T7046] ? __pfx_do_xdp_generic+0x10/0x10 [ 717.195675][ T7046] ? __lock_acquire+0x4a5/0x2630 [ 717.195753][ T7046] tun_get_user+0x1bd2/0x3e10 [ 717.195787][ T7046] ? __pfx_tun_get_user+0x10/0x10 [ 717.195813][ T7046] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 717.195850][ T7046] ? find_held_lock+0x2b/0x80 [ 717.195890][ T7046] ? tun_get+0x191/0x370 [ 717.195907][ T7046] ? tun_get+0x191/0x370 [ 717.195932][ T7046] tun_chr_write_iter+0xdc/0x200 [ 717.195955][ T7046] vfs_write+0x6ac/0x1070 [ 717.195982][ T7046] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 717.196005][ T7046] ? __pfx_vfs_write+0x10/0x10 [ 717.196028][ T7046] ? find_held_lock+0x2b/0x80 [ 717.196065][ T7046] ksys_write+0x12a/0x250 [ 717.196124][ T7046] ? __pfx_ksys_write+0x10/0x10 [ 717.196159][ T7046] do_syscall_64+0x106/0xf80 [ 717.196180][ T7046] ? clear_bhb_loop+0x40/0x90 [ 717.196199][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.196214][ T7046] RIP: 0033:0x7fd7e855cece [ 717.196227][ T7046] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 717.196243][ T7046] RSP: 002b:00007fd7e93aefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 717.196258][ T7046] RAX: ffffffffffffffda RBX: 00007fd7e93af6c0 RCX: 00007fd7e855cece [ 717.196265][ T7046] RDX: 000000000000fdef RSI: 0000200000000400 RDI: 00000000000000c8 [ 717.196273][ T7046] RBP: 00007fd7e8632b39 R08: 0000000000000000 R09: 0000000000000000 [ 717.196281][ T7046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 717.196289][ T7046] R13: 00007fd7e8816038 R14: 00007fd7e8815fa0 R15: 00007ffe5c7c5038 [ 717.196304][ T7046] [ 717.196328][ T7046] Disabling lock debugging due to kernel taint [ 717.283146][ T7046] BUG: Bad page state in process syz.6.12285 pfn:5a4fc [ 717.285400][ T7046] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x4b91 pfn:0x5a4fc [ 717.288234][ T7046] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 717.290812][ T7046] raw: 00fff00000000000 dead000000000040 ffff8880232ac000 0000000000000000 [ 717.293482][ T7046] raw: 0000000000004b91 0000000000000001 00000000ffffffff 0000000000000000 [ 717.296245][ T7046] page dumped because: page_pool leak [ 717.297941][ T7046] page_owner tracks the page as allocated [ 717.299730][ T7046] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 7046, tgid 7044 (syz.6.12285), ts 717122280482, free_ts 717092950565 [ 717.305490][ T7046] post_alloc_hook+0x153/0x170 [ 717.307026][ T7046] get_page_from_freelist+0x111d/0x3140 [ 717.308771][ T7046] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 717.310681][ T7046] alloc_pages_bulk_noprof+0x782/0x1490 [ 717.312441][ T7046] __page_pool_alloc_netmems_slow+0x1c6/0xc10 [ 717.314448][ T7046] page_pool_alloc_netmems+0xc4/0x1a0 [ 717.316590][ T7046] skb_pp_cow_data+0x7f9/0xea0 [ 717.318234][ T7046] skb_cow_data_for_xdp+0x88/0xb0 [ 717.319877][ T7046] do_xdp_generic+0x56b/0x12c0 [ 717.321452][ T7046] tun_get_user+0x1bd2/0x3e10 [ 717.323014][ T7046] tun_chr_write_iter+0xdc/0x200 [ 717.324677][ T7046] vfs_write+0x6ac/0x1070 [ 717.326157][ T7046] ksys_write+0x12a/0x250 [ 717.327682][ T7046] do_syscall_64+0x106/0xf80 [ 717.329375][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.331433][ T7046] page last free pid 33 tgid 33 stack trace: [ 717.333336][ T7046] __free_frozen_pages+0x7ca/0x10a0 [ 717.335098][ T7046] tlb_remove_table_rcu+0x2b2/0x390 [ 717.336820][ T7046] rcu_core+0x5a2/0x10d0 [ 717.338257][ T7046] handle_softirqs+0x1eb/0x9e0 [ 717.339805][ T7046] run_ksoftirqd+0x38/0x60 [ 717.341243][ T7046] smpboot_thread_fn+0x3d3/0xaa0 [ 717.342848][ T7046] kthread+0x370/0x450 [ 717.344181][ T7046] ret_from_fork+0x754/0xd80 [ 717.345674][ T7046] ret_from_fork_asm+0x1a/0x30 [ 717.347217][ T7046] Modules linked in: [ 717.348535][ T7046] CPU: 3 UID: 0 PID: 7046 Comm: syz.6.12285 Tainted: G B L syzkaller #0 PREEMPT(full) [ 717.348555][ T7046] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 717.348560][ T7046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 717.348568][ T7046] Call Trace: [ 717.348574][ T7046] [ 717.348581][ T7046] dump_stack_lvl+0x100/0x190 [ 717.348599][ T7046] bad_page.cold+0xbe/0xdf [ 717.348615][ T7046] ? __pfx_bad_page+0x10/0x10 [ 717.348631][ T7046] ? page_bad_reason+0x98/0x200 [ 717.348648][ T7046] __free_frozen_pages+0x7fe/0x10a0 [ 717.348660][ T7046] ? mark_held_locks+0x40/0x70 [ 717.348678][ T7046] page_frag_free+0x284/0x2e0 [ 717.348693][ T7046] __xdp_return+0x3cd/0xb90 [ 717.348705][ T7046] ? skb_release_data+0x7a0/0x9d0 [ 717.348723][ T7046] bpf_xdp_adjust_tail+0x854/0xb60 [ 717.348739][ T7046] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 717.348749][ T7046] bpf_prog_run_generic_xdp+0x614/0x1610 [ 717.348767][ T7046] do_xdp_generic+0x92e/0x12c0 [ 717.348783][ T7046] ? __pfx_do_xdp_generic+0x10/0x10 [ 717.348798][ T7046] ? __lock_acquire+0x4a5/0x2630 [ 717.348822][ T7046] tun_get_user+0x1bd2/0x3e10 [ 717.348837][ T7046] ? __pfx_tun_get_user+0x10/0x10 [ 717.348850][ T7046] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 717.348873][ T7046] ? find_held_lock+0x2b/0x80 [ 717.348885][ T7046] ? tun_get+0x191/0x370 [ 717.348896][ T7046] ? tun_get+0x191/0x370 [ 717.348908][ T7046] tun_chr_write_iter+0xdc/0x200 [ 717.348921][ T7046] vfs_write+0x6ac/0x1070 [ 717.348936][ T7046] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 717.348950][ T7046] ? __pfx_vfs_write+0x10/0x10 [ 717.348966][ T7046] ? find_held_lock+0x2b/0x80 [ 717.348984][ T7046] ksys_write+0x12a/0x250 [ 717.349000][ T7046] ? __pfx_ksys_write+0x10/0x10 [ 717.349017][ T7046] do_syscall_64+0x106/0xf80 [ 717.349028][ T7046] ? clear_bhb_loop+0x40/0x90 [ 717.349041][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.349052][ T7046] RIP: 0033:0x7fd7e855cece [ 717.349061][ T7046] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 717.349072][ T7046] RSP: 002b:00007fd7e93aefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 717.349083][ T7046] RAX: ffffffffffffffda RBX: 00007fd7e93af6c0 RCX: 00007fd7e855cece [ 717.349091][ T7046] RDX: 000000000000fdef RSI: 0000200000000400 RDI: 00000000000000c8 [ 717.349099][ T7046] RBP: 00007fd7e8632b39 R08: 0000000000000000 R09: 0000000000000000 [ 717.349106][ T7046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 717.349114][ T7046] R13: 00007fd7e8816038 R14: 00007fd7e8815fa0 R15: 00007ffe5c7c5038 [ 717.349125][ T7046] [ 717.349133][ T7046] BUG: Bad page state in process syz.6.12285 pfn:5a4fb [ 717.435463][ T7046] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x4b90 pfn:0x5a4fb [ 717.438557][ T7046] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 717.440809][ T7046] raw: 00fff00000000000 dead000000000040 ffff8880232ac000 0000000000000000 [ 717.443547][ T7046] raw: 0000000000004b90 0000000000000001 00000000ffffffff 0000000000000000 [ 717.446313][ T7046] page dumped because: page_pool leak [ 717.448016][ T7046] page_owner tracks the page as allocated [ 717.450211][ T7046] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 7046, tgid 7044 (syz.6.12285), ts 717122274133, free_ts 717092962554 [ 717.455955][ T7046] post_alloc_hook+0x153/0x170 [ 717.457493][ T7046] get_page_from_freelist+0x111d/0x3140 [ 717.459263][ T7046] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 717.461172][ T7046] alloc_pages_bulk_noprof+0x782/0x1490 [ 717.462946][ T7046] __page_pool_alloc_netmems_slow+0x1c6/0xc10 [ 717.464956][ T7046] page_pool_alloc_netmems+0xc4/0x1a0 [ 717.466750][ T7046] skb_pp_cow_data+0x7f9/0xea0 [ 717.468283][ T7046] skb_cow_data_for_xdp+0x88/0xb0 [ 717.469947][ T7046] do_xdp_generic+0x56b/0x12c0 [ 717.471460][ T7046] tun_get_user+0x1bd2/0x3e10 [ 717.472964][ T7046] tun_chr_write_iter+0xdc/0x200 [ 717.474572][ T7046] vfs_write+0x6ac/0x1070 [ 717.476318][ T7046] ksys_write+0x12a/0x250 [ 717.477749][ T7046] do_syscall_64+0x106/0xf80 [ 717.479237][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.481156][ T7046] page last free pid 33 tgid 33 stack trace: [ 717.483064][ T7046] __free_frozen_pages+0x7ca/0x10a0 [ 717.484733][ T7046] tlb_remove_table_rcu+0x2b2/0x390 [ 717.486448][ T7046] rcu_core+0x5a2/0x10d0 [ 717.487877][ T7046] handle_softirqs+0x1eb/0x9e0 [ 717.489496][ T7046] run_ksoftirqd+0x38/0x60 [ 717.491151][ T7046] smpboot_thread_fn+0x3d3/0xaa0 [ 717.492760][ T7046] kthread+0x370/0x450 [ 717.494104][ T7046] ret_from_fork+0x754/0xd80 [ 717.495591][ T7046] ret_from_fork_asm+0x1a/0x30 [ 717.497233][ T7046] Modules linked in: [ 717.498506][ T7046] CPU: 3 UID: 0 PID: 7046 Comm: syz.6.12285 Tainted: G B L syzkaller #0 PREEMPT(full) [ 717.498525][ T7046] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 717.498529][ T7046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 717.498536][ T7046] Call Trace: [ 717.498540][ T7046] [ 717.498545][ T7046] dump_stack_lvl+0x100/0x190 [ 717.498564][ T7046] bad_page.cold+0xbe/0xdf [ 717.498581][ T7046] ? __pfx_bad_page+0x10/0x10 [ 717.498597][ T7046] ? page_bad_reason+0x98/0x200 [ 717.498612][ T7046] __free_frozen_pages+0x7fe/0x10a0 [ 717.498624][ T7046] ? mark_held_locks+0x40/0x70 [ 717.498642][ T7046] page_frag_free+0x284/0x2e0 [ 717.498658][ T7046] __xdp_return+0x3cd/0xb90 [ 717.498671][ T7046] ? skb_release_data+0x7a0/0x9d0 [ 717.498689][ T7046] bpf_xdp_adjust_tail+0x854/0xb60 [ 717.498705][ T7046] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 717.498714][ T7046] bpf_prog_run_generic_xdp+0x614/0x1610 [ 717.498733][ T7046] do_xdp_generic+0x92e/0x12c0 [ 717.498748][ T7046] ? __pfx_do_xdp_generic+0x10/0x10 [ 717.498762][ T7046] ? __lock_acquire+0x4a5/0x2630 [ 717.498784][ T7046] tun_get_user+0x1bd2/0x3e10 [ 717.498801][ T7046] ? __pfx_tun_get_user+0x10/0x10 [ 717.498814][ T7046] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 717.498832][ T7046] ? find_held_lock+0x2b/0x80 [ 717.498846][ T7046] ? tun_get+0x191/0x370 [ 717.498856][ T7046] ? tun_get+0x191/0x370 [ 717.498875][ T7046] tun_chr_write_iter+0xdc/0x200 [ 717.498888][ T7046] vfs_write+0x6ac/0x1070 [ 717.498905][ T7046] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 717.498918][ T7046] ? __pfx_vfs_write+0x10/0x10 [ 717.498932][ T7046] ? find_held_lock+0x2b/0x80 [ 717.498949][ T7046] ksys_write+0x12a/0x250 [ 717.498964][ T7046] ? __pfx_ksys_write+0x10/0x10 [ 717.498981][ T7046] do_syscall_64+0x106/0xf80 [ 717.498993][ T7046] ? clear_bhb_loop+0x40/0x90 [ 717.499005][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.499017][ T7046] RIP: 0033:0x7fd7e855cece [ 717.499026][ T7046] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 717.499037][ T7046] RSP: 002b:00007fd7e93aefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 717.499048][ T7046] RAX: ffffffffffffffda RBX: 00007fd7e93af6c0 RCX: 00007fd7e855cece [ 717.499055][ T7046] RDX: 000000000000fdef RSI: 0000200000000400 RDI: 00000000000000c8 [ 717.499062][ T7046] RBP: 00007fd7e8632b39 R08: 0000000000000000 R09: 0000000000000000 [ 717.499069][ T7046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 717.499075][ T7046] R13: 00007fd7e8816038 R14: 00007fd7e8815fa0 R15: 00007ffe5c7c5038 [ 717.499085][ T7046] [ 717.499092][ T7046] BUG: Bad page state in process syz.6.12285 pfn:5a4fa [ 717.585658][ T7046] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x4b8f pfn:0x5a4fa [ 717.588333][ T7046] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 717.590547][ T7046] raw: 00fff00000000000 dead000000000040 ffff8880232ac000 0000000000000000 [ 717.593286][ T7046] raw: 0000000000004b8f 0000000000000001 00000000ffffffff 0000000000000000 [ 717.596269][ T7046] page dumped because: page_pool leak [ 717.597933][ T7046] page_owner tracks the page as allocated [ 717.599713][ T7046] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 7046, tgid 7044 (syz.6.12285), ts 717122267396, free_ts 717092973624 [ 717.605334][ T7046] post_alloc_hook+0x153/0x170 [ 717.606826][ T7046] get_page_from_freelist+0x111d/0x3140 [ 717.608528][ T7046] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 717.610712][ T7046] alloc_pages_bulk_noprof+0x782/0x1490 [ 717.612425][ T7046] __page_pool_alloc_netmems_slow+0x1c6/0xc10 [ 717.614411][ T7046] page_pool_alloc_netmems+0xc4/0x1a0 [ 717.616176][ T7046] skb_pp_cow_data+0x7f9/0xea0 [ 717.617661][ T7046] skb_cow_data_for_xdp+0x88/0xb0 [ 717.619249][ T7046] do_xdp_generic+0x56b/0x12c0 [ 717.620765][ T7046] tun_get_user+0x1bd2/0x3e10 [ 717.622264][ T7046] tun_chr_write_iter+0xdc/0x200 [ 717.623822][ T7046] vfs_write+0x6ac/0x1070 [ 717.625273][ T7046] ksys_write+0x12a/0x250 [ 717.626656][ T7046] do_syscall_64+0x106/0xf80 [ 717.628087][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.629958][ T7046] page last free pid 33 tgid 33 stack trace: [ 717.631855][ T7046] __free_frozen_pages+0x7ca/0x10a0 [ 717.633522][ T7046] tlb_remove_table_rcu+0x2b2/0x390 [ 717.635237][ T7046] rcu_core+0x5a2/0x10d0 [ 717.636951][ T7046] handle_softirqs+0x1eb/0x9e0 [ 717.638485][ T7046] run_ksoftirqd+0x38/0x60 [ 717.639932][ T7046] smpboot_thread_fn+0x3d3/0xaa0 [ 717.641498][ T7046] kthread+0x370/0x450 [ 717.642794][ T7046] ret_from_fork+0x754/0xd80 [ 717.644312][ T7046] ret_from_fork_asm+0x1a/0x30 [ 717.645898][ T7046] Modules linked in: [ 717.647216][ T7046] CPU: 3 UID: 0 PID: 7046 Comm: syz.6.12285 Tainted: G B L syzkaller #0 PREEMPT(full) [ 717.647234][ T7046] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 717.647239][ T7046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 717.647246][ T7046] Call Trace: [ 717.647250][ T7046] [ 717.647255][ T7046] dump_stack_lvl+0x100/0x190 [ 717.647274][ T7046] bad_page.cold+0xbe/0xdf [ 717.647290][ T7046] ? __pfx_bad_page+0x10/0x10 [ 717.647306][ T7046] ? page_bad_reason+0x98/0x200 [ 717.647321][ T7046] __free_frozen_pages+0x7fe/0x10a0 [ 717.647333][ T7046] ? mark_held_locks+0x40/0x70 [ 717.647351][ T7046] page_frag_free+0x284/0x2e0 [ 717.647366][ T7046] __xdp_return+0x3cd/0xb90 [ 717.647379][ T7046] ? skb_release_data+0x7a0/0x9d0 [ 717.647397][ T7046] bpf_xdp_adjust_tail+0x854/0xb60 [ 717.647413][ T7046] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 717.647422][ T7046] bpf_prog_run_generic_xdp+0x614/0x1610 [ 717.647441][ T7046] do_xdp_generic+0x92e/0x12c0 [ 717.647456][ T7046] ? __pfx_do_xdp_generic+0x10/0x10 [ 717.647471][ T7046] ? __lock_acquire+0x4a5/0x2630 [ 717.647492][ T7046] tun_get_user+0x1bd2/0x3e10 [ 717.647507][ T7046] ? __pfx_tun_get_user+0x10/0x10 [ 717.647520][ T7046] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 717.647539][ T7046] ? find_held_lock+0x2b/0x80 [ 717.647552][ T7046] ? tun_get+0x191/0x370 [ 717.647562][ T7046] ? tun_get+0x191/0x370 [ 717.647575][ T7046] tun_chr_write_iter+0xdc/0x200 [ 717.647588][ T7046] vfs_write+0x6ac/0x1070 [ 717.647604][ T7046] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 717.647617][ T7046] ? __pfx_vfs_write+0x10/0x10 [ 717.647632][ T7046] ? find_held_lock+0x2b/0x80 [ 717.647649][ T7046] ksys_write+0x12a/0x250 [ 717.647664][ T7046] ? __pfx_ksys_write+0x10/0x10 [ 717.647680][ T7046] do_syscall_64+0x106/0xf80 [ 717.647695][ T7046] ? clear_bhb_loop+0x40/0x90 [ 717.647708][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.647721][ T7046] RIP: 0033:0x7fd7e855cece [ 717.647730][ T7046] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 717.647742][ T7046] RSP: 002b:00007fd7e93aefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 717.647766][ T7046] RAX: ffffffffffffffda RBX: 00007fd7e93af6c0 RCX: 00007fd7e855cece [ 717.647775][ T7046] RDX: 000000000000fdef RSI: 0000200000000400 RDI: 00000000000000c8 [ 717.647781][ T7046] RBP: 00007fd7e8632b39 R08: 0000000000000000 R09: 0000000000000000 [ 717.647788][ T7046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 717.647794][ T7046] R13: 00007fd7e8816038 R14: 00007fd7e8815fa0 R15: 00007ffe5c7c5038 [ 717.647805][ T7046] [ 717.647821][ T7046] BUG: Bad page state in process syz.6.12285 pfn:5a4f9 [ 717.733600][ T7046] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x5a4f9 [ 717.736819][ T7046] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 717.739091][ T7046] raw: 00fff00000000000 dead000000000040 ffff8880232ac000 0000000000000000 [ 717.741888][ T7046] raw: ffffffffffffffff 0000000000000001 00000000ffffffff 0000000000000000 [ 717.744671][ T7046] page dumped because: page_pool leak [ 717.746384][ T7046] page_owner tracks the page as allocated [ 717.748239][ T7046] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 7046, tgid 7044 (syz.6.12285), ts 717122261024, free_ts 717092984964 [ 717.754230][ T7046] post_alloc_hook+0x153/0x170 [ 717.755773][ T7046] get_page_from_freelist+0x111d/0x3140 [ 717.757535][ T7046] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 717.759479][ T7046] alloc_pages_bulk_noprof+0x782/0x1490 [ 717.761584][ T7046] __page_pool_alloc_netmems_slow+0x1c6/0xc10 [ 717.763588][ T7046] page_pool_alloc_netmems+0xc4/0x1a0 [ 717.765360][ T7046] skb_pp_cow_data+0x7f9/0xea0 [ 717.766909][ T7046] skb_cow_data_for_xdp+0x88/0xb0 [ 717.768561][ T7046] do_xdp_generic+0x56b/0x12c0 [ 717.770143][ T7046] tun_get_user+0x1bd2/0x3e10 [ 717.771979][ T7046] tun_chr_write_iter+0xdc/0x200 [ 717.773967][ T7046] vfs_write+0x6ac/0x1070 [ 717.775754][ T7046] ksys_write+0x12a/0x250 [ 717.777485][ T7046] do_syscall_64+0x106/0xf80 [ 717.779350][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.781715][ T7046] page last free pid 33 tgid 33 stack trace: [ 717.784096][ T7046] __free_frozen_pages+0x7ca/0x10a0 [ 717.786241][ T7046] tlb_remove_table_rcu+0x2b2/0x390 [ 717.788297][ T7046] rcu_core+0x5a2/0x10d0 [ 717.790041][ T7046] handle_softirqs+0x1eb/0x9e0 [ 717.791955][ T7046] run_ksoftirqd+0x38/0x60 [ 717.793571][ T7046] smpboot_thread_fn+0x3d3/0xaa0 [ 717.795243][ T7046] kthread+0x370/0x450 [ 717.796659][ T7046] ret_from_fork+0x754/0xd80 [ 717.798153][ T7046] ret_from_fork_asm+0x1a/0x30 [ 717.799679][ T7046] Modules linked in: [ 717.800944][ T7046] CPU: 3 UID: 0 PID: 7046 Comm: syz.6.12285 Tainted: G B L syzkaller #0 PREEMPT(full) [ 717.800962][ T7046] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 717.800967][ T7046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 717.800974][ T7046] Call Trace: [ 717.800979][ T7046] [ 717.800984][ T7046] dump_stack_lvl+0x100/0x190 [ 717.801002][ T7046] bad_page.cold+0xbe/0xdf [ 717.801019][ T7046] ? __pfx_bad_page+0x10/0x10 [ 717.801034][ T7046] ? page_bad_reason+0x98/0x200 [ 717.801050][ T7046] __free_frozen_pages+0x7fe/0x10a0 [ 717.801062][ T7046] ? mark_held_locks+0x40/0x70 [ 717.801080][ T7046] page_frag_free+0x284/0x2e0 [ 717.801096][ T7046] __xdp_return+0x3cd/0xb90 [ 717.801109][ T7046] ? skb_release_data+0x7a0/0x9d0 [ 717.801128][ T7046] bpf_xdp_adjust_tail+0x854/0xb60 [ 717.801143][ T7046] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 717.801153][ T7046] bpf_prog_run_generic_xdp+0x614/0x1610 [ 717.801171][ T7046] do_xdp_generic+0x92e/0x12c0 [ 717.801187][ T7046] ? __pfx_do_xdp_generic+0x10/0x10 [ 717.801201][ T7046] ? __lock_acquire+0x4a5/0x2630 [ 717.801223][ T7046] tun_get_user+0x1bd2/0x3e10 [ 717.801239][ T7046] ? __pfx_tun_get_user+0x10/0x10 [ 717.801253][ T7046] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 717.801271][ T7046] ? find_held_lock+0x2b/0x80 [ 717.801284][ T7046] ? tun_get+0x191/0x370 [ 717.801295][ T7046] ? tun_get+0x191/0x370 [ 717.801307][ T7046] tun_chr_write_iter+0xdc/0x200 [ 717.801320][ T7046] vfs_write+0x6ac/0x1070 [ 717.801336][ T7046] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 717.801350][ T7046] ? __pfx_vfs_write+0x10/0x10 [ 717.801364][ T7046] ? find_held_lock+0x2b/0x80 [ 717.801381][ T7046] ksys_write+0x12a/0x250 [ 717.801396][ T7046] ? __pfx_ksys_write+0x10/0x10 [ 717.801413][ T7046] do_syscall_64+0x106/0xf80 [ 717.801424][ T7046] ? clear_bhb_loop+0x40/0x90 [ 717.801437][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.801448][ T7046] RIP: 0033:0x7fd7e855cece [ 717.801458][ T7046] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 717.801468][ T7046] RSP: 002b:00007fd7e93aefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 717.801480][ T7046] RAX: ffffffffffffffda RBX: 00007fd7e93af6c0 RCX: 00007fd7e855cece [ 717.801487][ T7046] RDX: 000000000000fdef RSI: 0000200000000400 RDI: 00000000000000c8 [ 717.801494][ T7046] RBP: 00007fd7e8632b39 R08: 0000000000000000 R09: 0000000000000000 [ 717.801500][ T7046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 717.801507][ T7046] R13: 00007fd7e8816038 R14: 00007fd7e8815fa0 R15: 00007ffe5c7c5038 [ 717.801517][ T7046] [ 717.801525][ T7046] BUG: Bad page state in process syz.6.12285 pfn:5a4f8 [ 717.886637][ T7046] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805a4f8000 pfn:0x5a4f8 [ 717.890339][ T7046] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 717.893195][ T7046] raw: 00fff00000000000 dead000000000040 ffff8880232ac000 0000000000000000 [ 717.896569][ T7046] raw: ffff88805a4f8000 0000000000000001 00000000ffffffff 0000000000000000 [ 717.899945][ T7046] page dumped because: page_pool leak [ 717.902112][ T7046] page_owner tracks the page as allocated [ 717.904514][ T7046] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 7046, tgid 7044 (syz.6.12285), ts 717122254763, free_ts 717092996094 [ 717.911513][ T7046] post_alloc_hook+0x153/0x170 [ 717.913495][ T7046] get_page_from_freelist+0x111d/0x3140 [ 717.915707][ T7046] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 717.918064][ T7046] alloc_pages_bulk_noprof+0x782/0x1490 [ 717.920292][ T7046] __page_pool_alloc_netmems_slow+0x1c6/0xc10 [ 717.922719][ T7046] page_pool_alloc_netmems+0xc4/0x1a0 [ 717.924923][ T7046] skb_pp_cow_data+0x7f9/0xea0 [ 717.926832][ T7046] skb_cow_data_for_xdp+0x88/0xb0 [ 717.928833][ T7046] do_xdp_generic+0x56b/0x12c0 [ 717.930776][ T7046] tun_get_user+0x1bd2/0x3e10 [ 717.932655][ T7046] tun_chr_write_iter+0xdc/0x200 [ 717.934712][ T7046] vfs_write+0x6ac/0x1070 [ 717.936440][ T7046] ksys_write+0x12a/0x250 [ 717.938177][ T7046] do_syscall_64+0x106/0xf80 [ 717.940055][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.942415][ T7046] page last free pid 33 tgid 33 stack trace: [ 717.944813][ T7046] __free_frozen_pages+0x7ca/0x10a0 [ 717.946953][ T7046] tlb_remove_table_rcu+0x2b2/0x390 [ 717.949030][ T7046] rcu_core+0x5a2/0x10d0 [ 717.950773][ T7046] handle_softirqs+0x1eb/0x9e0 [ 717.952680][ T7046] run_ksoftirqd+0x38/0x60 [ 717.954495][ T7046] smpboot_thread_fn+0x3d3/0xaa0 [ 717.956587][ T7046] kthread+0x370/0x450 [ 717.958232][ T7046] ret_from_fork+0x754/0xd80 [ 717.960080][ T7046] ret_from_fork_asm+0x1a/0x30 [ 717.961994][ T7046] Modules linked in: [ 717.963557][ T7046] CPU: 3 UID: 0 PID: 7046 Comm: syz.6.12285 Tainted: G B L syzkaller #0 PREEMPT(full) [ 717.963576][ T7046] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 717.963580][ T7046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 717.963587][ T7046] Call Trace: [ 717.963592][ T7046] [ 717.963598][ T7046] dump_stack_lvl+0x100/0x190 [ 717.963615][ T7046] bad_page.cold+0xbe/0xdf [ 717.963632][ T7046] ? __pfx_bad_page+0x10/0x10 [ 717.963648][ T7046] ? page_bad_reason+0x98/0x200 [ 717.963663][ T7046] __free_frozen_pages+0x7fe/0x10a0 [ 717.963675][ T7046] ? mark_held_locks+0x40/0x70 [ 717.963693][ T7046] page_frag_free+0x284/0x2e0 [ 717.963709][ T7046] __xdp_return+0x3cd/0xb90 [ 717.963722][ T7046] ? skb_release_data+0x7a0/0x9d0 [ 717.963740][ T7046] bpf_xdp_adjust_tail+0x854/0xb60 [ 717.963755][ T7046] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 717.963765][ T7046] bpf_prog_run_generic_xdp+0x614/0x1610 [ 717.963783][ T7046] do_xdp_generic+0x92e/0x12c0 [ 717.963798][ T7046] ? __pfx_do_xdp_generic+0x10/0x10 [ 717.963813][ T7046] ? __lock_acquire+0x4a5/0x2630 [ 717.963835][ T7046] tun_get_user+0x1bd2/0x3e10 [ 717.963851][ T7046] ? __pfx_tun_get_user+0x10/0x10 [ 717.963869][ T7046] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 717.963888][ T7046] ? find_held_lock+0x2b/0x80 [ 717.963901][ T7046] ? tun_get+0x191/0x370 [ 717.963911][ T7046] ? tun_get+0x191/0x370 [ 717.963924][ T7046] tun_chr_write_iter+0xdc/0x200 [ 717.963937][ T7046] vfs_write+0x6ac/0x1070 [ 717.963953][ T7046] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 717.963966][ T7046] ? __pfx_vfs_write+0x10/0x10 [ 717.963981][ T7046] ? find_held_lock+0x2b/0x80 [ 717.963998][ T7046] ksys_write+0x12a/0x250 [ 717.964013][ T7046] ? __pfx_ksys_write+0x10/0x10 [ 717.964030][ T7046] do_syscall_64+0x106/0xf80 [ 717.964042][ T7046] ? clear_bhb_loop+0x40/0x90 [ 717.964054][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.964066][ T7046] RIP: 0033:0x7fd7e855cece [ 717.964075][ T7046] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 717.964086][ T7046] RSP: 002b:00007fd7e93aefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 717.964097][ T7046] RAX: ffffffffffffffda RBX: 00007fd7e93af6c0 RCX: 00007fd7e855cece [ 717.964105][ T7046] RDX: 000000000000fdef RSI: 0000200000000400 RDI: 00000000000000c8 [ 717.964113][ T7046] RBP: 00007fd7e8632b39 R08: 0000000000000000 R09: 0000000000000000 [ 717.964120][ T7046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 717.964126][ T7046] R13: 00007fd7e8816038 R14: 00007fd7e8815fa0 R15: 00007ffe5c7c5038 [ 717.964136][ T7046] [ 717.964144][ T7046] BUG: Bad page state in process syz.6.12285 pfn:4e4e7 [ 718.063208][ T7046] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x487d pfn:0x4e4e7 [ 718.066981][ T7046] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 718.069955][ T7046] raw: 00fff00000000000 dead000000000040 ffff8880232ac000 0000000000000000 [ 718.073566][ T7046] raw: 000000000000487d 0000000000000001 00000000ffffffff 0000000000000000 [ 718.077019][ T7046] page dumped because: page_pool leak [ 718.079020][ T7046] page_owner tracks the page as allocated [ 718.080945][ T7046] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 7046, tgid 7044 (syz.6.12285), ts 717122248223, free_ts 717093007187 [ 718.087643][ T7046] post_alloc_hook+0x153/0x170 [ 718.089517][ T7046] get_page_from_freelist+0x111d/0x3140 [ 718.091472][ T7046] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 718.093954][ T7046] alloc_pages_bulk_noprof+0x782/0x1490 [ 718.096010][ T7046] __page_pool_alloc_netmems_slow+0x1c6/0xc10 [ 718.098040][ T7046] page_pool_alloc_netmems+0xc4/0x1a0 [ 718.100226][ T7046] skb_pp_cow_data+0x7f9/0xea0 [ 718.102110][ T7046] skb_cow_data_for_xdp+0x88/0xb0 [ 718.104241][ T7046] do_xdp_generic+0x56b/0x12c0 [ 718.106383][ T7046] tun_get_user+0x1bd2/0x3e10 [ 718.108403][ T7046] tun_chr_write_iter+0xdc/0x200 [ 718.110590][ T7046] vfs_write+0x6ac/0x1070 [ 718.112452][ T7046] ksys_write+0x12a/0x250 [ 718.114305][ T7046] do_syscall_64+0x106/0xf80 [ 718.116382][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.118896][ T7046] page last free pid 33 tgid 33 stack trace: [ 718.120851][ T7046] __free_frozen_pages+0x7ca/0x10a0 [ 718.122635][ T7046] tlb_remove_table_rcu+0x2b2/0x390 [ 718.124732][ T7046] rcu_core+0x5a2/0x10d0 [ 718.126593][ T7046] handle_softirqs+0x1eb/0x9e0 [ 718.128620][ T7046] run_ksoftirqd+0x38/0x60 [ 718.130469][ T7046] smpboot_thread_fn+0x3d3/0xaa0 [ 718.132055][ T7046] kthread+0x370/0x450 [ 718.133360][ T7046] ret_from_fork+0x754/0xd80 [ 718.134860][ T7046] ret_from_fork_asm+0x1a/0x30 [ 718.136423][ T7046] Modules linked in: [ 718.137765][ T7046] CPU: 3 UID: 0 PID: 7046 Comm: syz.6.12285 Tainted: G B L syzkaller #0 PREEMPT(full) [ 718.137802][ T7046] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 718.137810][ T7046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 718.137818][ T7046] Call Trace: [ 718.137824][ T7046] [ 718.137831][ T7046] dump_stack_lvl+0x100/0x190 [ 718.137848][ T7046] bad_page.cold+0xbe/0xdf [ 718.137870][ T7046] ? __pfx_bad_page+0x10/0x10 [ 718.137887][ T7046] ? page_bad_reason+0x98/0x200 [ 718.137902][ T7046] __free_frozen_pages+0x7fe/0x10a0 [ 718.137914][ T7046] ? mark_held_locks+0x40/0x70 [ 718.137932][ T7046] page_frag_free+0x284/0x2e0 [ 718.137947][ T7046] __xdp_return+0x3cd/0xb90 [ 718.137960][ T7046] ? skb_release_data+0x7a0/0x9d0 [ 718.137979][ T7046] bpf_xdp_adjust_tail+0x854/0xb60 [ 718.137994][ T7046] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 718.138004][ T7046] bpf_prog_run_generic_xdp+0x614/0x1610 [ 718.138022][ T7046] do_xdp_generic+0x92e/0x12c0 [ 718.138038][ T7046] ? __pfx_do_xdp_generic+0x10/0x10 [ 718.138052][ T7046] ? __lock_acquire+0x4a5/0x2630 [ 718.138074][ T7046] tun_get_user+0x1bd2/0x3e10 [ 718.138091][ T7046] ? __pfx_tun_get_user+0x10/0x10 [ 718.138105][ T7046] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 718.138124][ T7046] ? find_held_lock+0x2b/0x80 [ 718.138137][ T7046] ? tun_get+0x191/0x370 [ 718.138148][ T7046] ? tun_get+0x191/0x370 [ 718.138160][ T7046] tun_chr_write_iter+0xdc/0x200 [ 718.138173][ T7046] vfs_write+0x6ac/0x1070 [ 718.138189][ T7046] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 718.138203][ T7046] ? __pfx_vfs_write+0x10/0x10 [ 718.138217][ T7046] ? find_held_lock+0x2b/0x80 [ 718.138234][ T7046] ksys_write+0x12a/0x250 [ 718.138249][ T7046] ? __pfx_ksys_write+0x10/0x10 [ 718.138266][ T7046] do_syscall_64+0x106/0xf80 [ 718.138277][ T7046] ? clear_bhb_loop+0x40/0x90 [ 718.138290][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.138301][ T7046] RIP: 0033:0x7fd7e855cece [ 718.138311][ T7046] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 718.138321][ T7046] RSP: 002b:00007fd7e93aefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 718.138332][ T7046] RAX: ffffffffffffffda RBX: 00007fd7e93af6c0 RCX: 00007fd7e855cece [ 718.138340][ T7046] RDX: 000000000000fdef RSI: 0000200000000400 RDI: 00000000000000c8 [ 718.138347][ T7046] RBP: 00007fd7e8632b39 R08: 0000000000000000 R09: 0000000000000000 [ 718.138353][ T7046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 718.138360][ T7046] R13: 00007fd7e8816038 R14: 00007fd7e8815fa0 R15: 00007ffe5c7c5038 [ 718.138370][ T7046] [ 718.138379][ T7046] BUG: Bad page state in process syz.6.12285 pfn:60f12 [ 718.230322][ T7046] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x60f12 [ 718.233831][ T7046] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 718.236296][ T7046] raw: 00fff00000000000 dead000000000040 ffff8880232ac000 0000000000000000 [ 718.239230][ T7046] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 718.242205][ T7046] page dumped because: page_pool leak [ 718.244114][ T7046] page_owner tracks the page as allocated [ 718.245929][ T7046] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 7046, tgid 7044 (syz.6.12285), ts 717122241471, free_ts 717093018983 [ 718.251685][ T7046] post_alloc_hook+0x153/0x170 [ 718.253209][ T7046] get_page_from_freelist+0x111d/0x3140 [ 718.255069][ T7046] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 718.256959][ T7046] alloc_pages_bulk_noprof+0x782/0x1490 [ 718.258750][ T7046] __page_pool_alloc_netmems_slow+0x1c6/0xc10 [ 718.260740][ T7046] page_pool_alloc_netmems+0xc4/0x1a0 [ 718.262746][ T7046] skb_pp_cow_data+0x7f9/0xea0 [ 718.264331][ T7046] skb_cow_data_for_xdp+0x88/0xb0 [ 718.266025][ T7046] do_xdp_generic+0x56b/0x12c0 [ 718.267561][ T7046] tun_get_user+0x1bd2/0x3e10 [ 718.269197][ T7046] tun_chr_write_iter+0xdc/0x200 [ 718.271369][ T7046] vfs_write+0x6ac/0x1070 [ 718.272818][ T7046] ksys_write+0x12a/0x250 [ 718.274217][ T7046] do_syscall_64+0x106/0xf80 [ 718.275743][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.277626][ T7046] page last free pid 33 tgid 33 stack trace: [ 718.279531][ T7046] __free_frozen_pages+0x7ca/0x10a0 [ 718.281200][ T7046] tlb_remove_table_rcu+0x2b2/0x390 [ 718.282838][ T7046] rcu_core+0x5a2/0x10d0 [ 718.284187][ T7046] handle_softirqs+0x1eb/0x9e0 [ 718.285737][ T7046] run_ksoftirqd+0x38/0x60 [ 718.287217][ T7046] smpboot_thread_fn+0x3d3/0xaa0 [ 718.288786][ T7046] kthread+0x370/0x450 [ 718.290107][ T7046] ret_from_fork+0x754/0xd80 [ 718.291529][ T7046] ret_from_fork_asm+0x1a/0x30 [ 718.293056][ T7046] Modules linked in: [ 718.294324][ T7046] CPU: 3 UID: 0 PID: 7046 Comm: syz.6.12285 Tainted: G B L syzkaller #0 PREEMPT(full) [ 718.294342][ T7046] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 718.294346][ T7046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 718.294353][ T7046] Call Trace: [ 718.294358][ T7046] [ 718.294364][ T7046] dump_stack_lvl+0x100/0x190 [ 718.294383][ T7046] bad_page.cold+0xbe/0xdf [ 718.294401][ T7046] ? __pfx_bad_page+0x10/0x10 [ 718.294416][ T7046] ? page_bad_reason+0x98/0x200 [ 718.294431][ T7046] __free_frozen_pages+0x7fe/0x10a0 [ 718.294444][ T7046] ? mark_held_locks+0x40/0x70 [ 718.294461][ T7046] page_frag_free+0x284/0x2e0 [ 718.294476][ T7046] __xdp_return+0x3cd/0xb90 [ 718.294489][ T7046] ? skb_release_data+0x7a0/0x9d0 [ 718.294508][ T7046] bpf_xdp_adjust_tail+0x854/0xb60 [ 718.294523][ T7046] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 718.294533][ T7046] bpf_prog_run_generic_xdp+0x614/0x1610 [ 718.294552][ T7046] do_xdp_generic+0x92e/0x12c0 [ 718.294567][ T7046] ? __pfx_do_xdp_generic+0x10/0x10 [ 718.294582][ T7046] ? __lock_acquire+0x4a5/0x2630 [ 718.294603][ T7046] tun_get_user+0x1bd2/0x3e10 [ 718.294620][ T7046] ? __pfx_tun_get_user+0x10/0x10 [ 718.294633][ T7046] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 718.294651][ T7046] ? find_held_lock+0x2b/0x80 [ 718.294664][ T7046] ? tun_get+0x191/0x370 [ 718.294675][ T7046] ? tun_get+0x191/0x370 [ 718.294687][ T7046] tun_chr_write_iter+0xdc/0x200 [ 718.294700][ T7046] vfs_write+0x6ac/0x1070 [ 718.294717][ T7046] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 718.294730][ T7046] ? __pfx_vfs_write+0x10/0x10 [ 718.294745][ T7046] ? find_held_lock+0x2b/0x80 [ 718.294762][ T7046] ksys_write+0x12a/0x250 [ 718.294777][ T7046] ? __pfx_ksys_write+0x10/0x10 [ 718.294798][ T7046] do_syscall_64+0x106/0xf80 [ 718.294810][ T7046] ? clear_bhb_loop+0x40/0x90 [ 718.294822][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.294834][ T7046] RIP: 0033:0x7fd7e855cece [ 718.294843][ T7046] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 718.294858][ T7046] RSP: 002b:00007fd7e93aefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 718.294870][ T7046] RAX: ffffffffffffffda RBX: 00007fd7e93af6c0 RCX: 00007fd7e855cece [ 718.294877][ T7046] RDX: 000000000000fdef RSI: 0000200000000400 RDI: 00000000000000c8 [ 718.294884][ T7046] RBP: 00007fd7e8632b39 R08: 0000000000000000 R09: 0000000000000000 [ 718.294890][ T7046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 718.294897][ T7046] R13: 00007fd7e8816038 R14: 00007fd7e8815fa0 R15: 00007ffe5c7c5038 [ 718.294907][ T7046] [ 718.294915][ T7046] BUG: Bad page state in process syz.6.12285 pfn:4e4e6 [ 718.379432][ T7046] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x487c pfn:0x4e4e6 [ 718.382280][ T7046] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 718.384496][ T7046] raw: 00fff00000000000 dead000000000040 ffff8880232ac000 0000000000000000 [ 718.387129][ T7046] raw: 000000000000487c 0000000000000001 00000000ffffffff 0000000000000000 [ 718.389830][ T7046] page dumped because: page_pool leak [ 718.391478][ T7046] page_owner tracks the page as allocated [ 718.393314][ T7046] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 7046, tgid 7044 (syz.6.12285), ts 717122235412, free_ts 717093035900 [ 718.399152][ T7046] post_alloc_hook+0x153/0x170 [ 718.400668][ T7046] get_page_from_freelist+0x111d/0x3140 [ 718.402378][ T7046] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 718.404262][ T7046] alloc_pages_bulk_noprof+0x782/0x1490 [ 718.405956][ T7046] __page_pool_alloc_netmems_slow+0x1c6/0xc10 [ 718.407856][ T7046] page_pool_alloc_netmems+0xc4/0x1a0 [ 718.409558][ T7046] skb_pp_cow_data+0x7f9/0xea0 [ 718.411121][ T7046] skb_cow_data_for_xdp+0x88/0xb0 [ 718.412718][ T7046] do_xdp_generic+0x56b/0x12c0 [ 718.414293][ T7046] tun_get_user+0x1bd2/0x3e10 [ 718.415784][ T7046] tun_chr_write_iter+0xdc/0x200 [ 718.417361][ T7046] vfs_write+0x6ac/0x1070 [ 718.418754][ T7046] ksys_write+0x12a/0x250 [ 718.420162][ T7046] do_syscall_64+0x106/0xf80 [ 718.421632][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.423508][ T7046] page last free pid 33 tgid 33 stack trace: [ 718.425447][ T7046] __free_frozen_pages+0x7ca/0x10a0 [ 718.427121][ T7046] tlb_remove_table_rcu+0x2b2/0x390 [ 718.428724][ T7046] rcu_core+0x5a2/0x10d0 [ 718.430092][ T7046] handle_softirqs+0x1eb/0x9e0 [ 718.431617][ T7046] run_ksoftirqd+0x38/0x60 [ 718.433047][ T7046] smpboot_thread_fn+0x3d3/0xaa0 [ 718.434664][ T7046] kthread+0x370/0x450 [ 718.436035][ T7046] ret_from_fork+0x754/0xd80 [ 718.437620][ T7046] ret_from_fork_asm+0x1a/0x30 [ 718.439175][ T7046] Modules linked in: [ 718.440415][ T7046] CPU: 3 UID: 0 PID: 7046 Comm: syz.6.12285 Tainted: G B L syzkaller #0 PREEMPT(full) [ 718.440434][ T7046] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 718.440439][ T7046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 718.440445][ T7046] Call Trace: [ 718.440451][ T7046] [ 718.440456][ T7046] dump_stack_lvl+0x100/0x190 [ 718.440475][ T7046] bad_page.cold+0xbe/0xdf [ 718.440491][ T7046] ? __pfx_bad_page+0x10/0x10 [ 718.440507][ T7046] ? page_bad_reason+0x98/0x200 [ 718.440522][ T7046] __free_frozen_pages+0x7fe/0x10a0 [ 718.440535][ T7046] ? mark_held_locks+0x40/0x70 [ 718.440553][ T7046] page_frag_free+0x284/0x2e0 [ 718.440568][ T7046] __xdp_return+0x3cd/0xb90 [ 718.440581][ T7046] ? skb_release_data+0x7a0/0x9d0 [ 718.440599][ T7046] bpf_xdp_adjust_tail+0x854/0xb60 [ 718.440615][ T7046] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 718.440625][ T7046] bpf_prog_run_generic_xdp+0x614/0x1610 [ 718.440643][ T7046] do_xdp_generic+0x92e/0x12c0 [ 718.440659][ T7046] ? __pfx_do_xdp_generic+0x10/0x10 [ 718.440674][ T7046] ? __lock_acquire+0x4a5/0x2630 [ 718.440696][ T7046] tun_get_user+0x1bd2/0x3e10 [ 718.440712][ T7046] ? __pfx_tun_get_user+0x10/0x10 [ 718.440725][ T7046] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 718.440748][ T7046] ? find_held_lock+0x2b/0x80 [ 718.440761][ T7046] ? tun_get+0x191/0x370 [ 718.440771][ T7046] ? tun_get+0x191/0x370 [ 718.440784][ T7046] tun_chr_write_iter+0xdc/0x200 [ 718.440797][ T7046] vfs_write+0x6ac/0x1070 [ 718.440813][ T7046] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 718.440827][ T7046] ? __pfx_vfs_write+0x10/0x10 [ 718.440841][ T7046] ? find_held_lock+0x2b/0x80 [ 718.440858][ T7046] ksys_write+0x12a/0x250 [ 718.440873][ T7046] ? __pfx_ksys_write+0x10/0x10 [ 718.440891][ T7046] do_syscall_64+0x106/0xf80 [ 718.440903][ T7046] ? clear_bhb_loop+0x40/0x90 [ 718.440915][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.440926][ T7046] RIP: 0033:0x7fd7e855cece [ 718.440936][ T7046] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 718.440947][ T7046] RSP: 002b:00007fd7e93aefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 718.440958][ T7046] RAX: ffffffffffffffda RBX: 00007fd7e93af6c0 RCX: 00007fd7e855cece [ 718.440965][ T7046] RDX: 000000000000fdef RSI: 0000200000000400 RDI: 00000000000000c8 [ 718.440972][ T7046] RBP: 00007fd7e8632b39 R08: 0000000000000000 R09: 0000000000000000 [ 718.440979][ T7046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 718.440985][ T7046] R13: 00007fd7e8816038 R14: 00007fd7e8815fa0 R15: 00007ffe5c7c5038 [ 718.440996][ T7046] [ 718.441008][ T7046] BUG: Bad page state in process syz.6.12285 pfn:4e4e5 [ 718.525192][ T7046] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x487b pfn:0x4e4e5 [ 718.528026][ T7046] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 718.530285][ T7046] raw: 00fff00000000000 dead000000000040 ffff8880232ac000 0000000000000000 [ 718.533039][ T7046] raw: 000000000000487b 0000000000000001 00000000ffffffff 0000000000000000 [ 718.535713][ T7046] page dumped because: page_pool leak [ 718.537398][ T7046] page_owner tracks the page as allocated [ 718.539201][ T7046] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 7046, tgid 7044 (syz.6.12285), ts 717122228753, free_ts 717093047089 [ 718.544962][ T7046] post_alloc_hook+0x153/0x170 [ 718.546496][ T7046] get_page_from_freelist+0x111d/0x3140 [ 718.548254][ T7046] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 718.550186][ T7046] alloc_pages_bulk_noprof+0x782/0x1490 [ 718.551972][ T7046] __page_pool_alloc_netmems_slow+0x1c6/0xc10 [ 718.553972][ T7046] page_pool_alloc_netmems+0xc4/0x1a0 [ 718.555679][ T7046] skb_pp_cow_data+0x7f9/0xea0 [ 718.557210][ T7046] skb_cow_data_for_xdp+0x88/0xb0 [ 718.558821][ T7046] do_xdp_generic+0x56b/0x12c0 [ 718.560363][ T7046] tun_get_user+0x1bd2/0x3e10 [ 718.561879][ T7046] tun_chr_write_iter+0xdc/0x200 [ 718.563513][ T7046] vfs_write+0x6ac/0x1070 [ 718.564897][ T7046] ksys_write+0x12a/0x250 [ 718.566296][ T7046] do_syscall_64+0x106/0xf80 [ 718.567772][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.569665][ T7046] page last free pid 33 tgid 33 stack trace: [ 718.571573][ T7046] __free_frozen_pages+0x7ca/0x10a0 [ 718.573260][ T7046] tlb_remove_table_rcu+0x2b2/0x390 [ 718.574974][ T7046] rcu_core+0x5a2/0x10d0 [ 718.576332][ T7046] handle_softirqs+0x1eb/0x9e0 [ 718.577866][ T7046] run_ksoftirqd+0x38/0x60 [ 718.579128][ T7046] smpboot_thread_fn+0x3d3/0xaa0 [ 718.580748][ T7046] kthread+0x370/0x450 [ 718.582068][ T7046] ret_from_fork+0x754/0xd80 [ 718.583552][ T7046] ret_from_fork_asm+0x1a/0x30 [ 718.585144][ T7046] Modules linked in: [ 718.586389][ T7046] CPU: 3 UID: 0 PID: 7046 Comm: syz.6.12285 Tainted: G B L syzkaller #0 PREEMPT(full) [ 718.586408][ T7046] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 718.586412][ T7046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 718.586420][ T7046] Call Trace: [ 718.586424][ T7046] [ 718.586430][ T7046] dump_stack_lvl+0x100/0x190 [ 718.586448][ T7046] bad_page.cold+0xbe/0xdf [ 718.586465][ T7046] ? __pfx_bad_page+0x10/0x10 [ 718.586481][ T7046] ? page_bad_reason+0x98/0x200 [ 718.586496][ T7046] __free_frozen_pages+0x7fe/0x10a0 [ 718.586508][ T7046] ? mark_held_locks+0x40/0x70 [ 718.586525][ T7046] page_frag_free+0x284/0x2e0 [ 718.586541][ T7046] __xdp_return+0x3cd/0xb90 [ 718.586554][ T7046] ? skb_release_data+0x7a0/0x9d0 [ 718.586572][ T7046] bpf_xdp_adjust_tail+0x854/0xb60 [ 718.586587][ T7046] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 718.586597][ T7046] bpf_prog_run_generic_xdp+0x614/0x1610 [ 718.586616][ T7046] do_xdp_generic+0x92e/0x12c0 [ 718.586631][ T7046] ? __pfx_do_xdp_generic+0x10/0x10 [ 718.586646][ T7046] ? __lock_acquire+0x4a5/0x2630 [ 718.586668][ T7046] tun_get_user+0x1bd2/0x3e10 [ 718.586684][ T7046] ? __pfx_tun_get_user+0x10/0x10 [ 718.586697][ T7046] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 718.586715][ T7046] ? find_held_lock+0x2b/0x80 [ 718.586728][ T7046] ? tun_get+0x191/0x370 [ 718.586739][ T7046] ? tun_get+0x191/0x370 [ 718.586751][ T7046] tun_chr_write_iter+0xdc/0x200 [ 718.586765][ T7046] vfs_write+0x6ac/0x1070 [ 718.586780][ T7046] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 718.586794][ T7046] ? __pfx_vfs_write+0x10/0x10 [ 718.586808][ T7046] ? find_held_lock+0x2b/0x80 [ 718.586826][ T7046] ksys_write+0x12a/0x250 [ 718.586841][ T7046] ? __pfx_ksys_write+0x10/0x10 [ 718.586858][ T7046] do_syscall_64+0x106/0xf80 [ 718.586869][ T7046] ? clear_bhb_loop+0x40/0x90 [ 718.586882][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.586894][ T7046] RIP: 0033:0x7fd7e855cece [ 718.586902][ T7046] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 718.586913][ T7046] RSP: 002b:00007fd7e93aefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 718.586924][ T7046] RAX: ffffffffffffffda RBX: 00007fd7e93af6c0 RCX: 00007fd7e855cece [ 718.586931][ T7046] RDX: 000000000000fdef RSI: 0000200000000400 RDI: 00000000000000c8 [ 718.586938][ T7046] RBP: 00007fd7e8632b39 R08: 0000000000000000 R09: 0000000000000000 [ 718.586945][ T7046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 718.586951][ T7046] R13: 00007fd7e8816038 R14: 00007fd7e8815fa0 R15: 00007ffe5c7c5038 [ 718.586962][ T7046] [ 718.586968][ T7046] BUG: Bad page state in process syz.6.12285 pfn:4e4e4 [ 718.671212][ T7046] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x487a pfn:0x4e4e4 [ 718.674037][ T7046] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 718.676271][ T7046] raw: 00fff00000000000 dead000000000040 ffff8880232ac000 0000000000000000 [ 718.678968][ T7046] raw: 000000000000487a 0000000000000001 00000000ffffffff 0000000000000000 [ 718.681693][ T7046] page dumped because: page_pool leak [ 718.683427][ T7046] page_owner tracks the page as allocated [ 718.685223][ T7046] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 7046, tgid 7044 (syz.6.12285), ts 717122222563, free_ts 717093058513 [ 718.691011][ T7046] post_alloc_hook+0x153/0x170 [ 718.692491][ T7046] get_page_from_freelist+0x111d/0x3140 [ 718.694262][ T7046] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 718.696148][ T7046] alloc_pages_bulk_noprof+0x782/0x1490 [ 718.697928][ T7046] __page_pool_alloc_netmems_slow+0x1c6/0xc10 [ 718.699870][ T7046] page_pool_alloc_netmems+0xc4/0x1a0 [ 718.701658][ T7046] skb_pp_cow_data+0x7f9/0xea0 [ 718.703194][ T7046] skb_cow_data_for_xdp+0x88/0xb0 [ 718.704793][ T7046] do_xdp_generic+0x56b/0x12c0 [ 718.706332][ T7046] tun_get_user+0x1bd2/0x3e10 [ 718.707835][ T7046] tun_chr_write_iter+0xdc/0x200 [ 718.709410][ T7046] vfs_write+0x6ac/0x1070 [ 718.710822][ T7046] ksys_write+0x12a/0x250 [ 718.712240][ T7046] do_syscall_64+0x106/0xf80 [ 718.713738][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.715644][ T7046] page last free pid 33 tgid 33 stack trace: [ 718.717535][ T7046] __free_frozen_pages+0x7ca/0x10a0 [ 718.719081][ T7046] tlb_remove_table_rcu+0x2b2/0x390 [ 718.720733][ T7046] rcu_core+0x5a2/0x10d0 [ 718.722110][ T7046] handle_softirqs+0x1eb/0x9e0 [ 718.723690][ T7046] run_ksoftirqd+0x38/0x60 [ 718.725111][ T7046] smpboot_thread_fn+0x3d3/0xaa0 [ 718.726689][ T7046] kthread+0x370/0x450 [ 718.727994][ T7046] ret_from_fork+0x754/0xd80 [ 718.729470][ T7046] ret_from_fork_asm+0x1a/0x30 [ 718.731024][ T7046] Modules linked in: [ 718.732278][ T7046] CPU: 3 UID: 0 PID: 7046 Comm: syz.6.12285 Tainted: G B L syzkaller #0 PREEMPT(full) [ 718.732296][ T7046] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 718.732300][ T7046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 718.732308][ T7046] Call Trace: [ 718.732313][ T7046] [ 718.732319][ T7046] dump_stack_lvl+0x100/0x190 [ 718.732336][ T7046] bad_page.cold+0xbe/0xdf [ 718.732353][ T7046] ? __pfx_bad_page+0x10/0x10 [ 718.732368][ T7046] ? page_bad_reason+0x98/0x200 [ 718.732384][ T7046] __free_frozen_pages+0x7fe/0x10a0 [ 718.732396][ T7046] ? mark_held_locks+0x40/0x70 [ 718.732413][ T7046] page_frag_free+0x284/0x2e0 [ 718.732428][ T7046] __xdp_return+0x3cd/0xb90 [ 718.732442][ T7046] ? skb_release_data+0x7a0/0x9d0 [ 718.732459][ T7046] bpf_xdp_adjust_tail+0x854/0xb60 [ 718.732475][ T7046] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 718.732484][ T7046] bpf_prog_run_generic_xdp+0x614/0x1610 [ 718.732503][ T7046] do_xdp_generic+0x92e/0x12c0 [ 718.732518][ T7046] ? __pfx_do_xdp_generic+0x10/0x10 [ 718.732533][ T7046] ? __lock_acquire+0x4a5/0x2630 [ 718.732555][ T7046] tun_get_user+0x1bd2/0x3e10 [ 718.732571][ T7046] ? __pfx_tun_get_user+0x10/0x10 [ 718.732584][ T7046] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 718.732602][ T7046] ? find_held_lock+0x2b/0x80 [ 718.732615][ T7046] ? tun_get+0x191/0x370 [ 718.732625][ T7046] ? tun_get+0x191/0x370 [ 718.732638][ T7046] tun_chr_write_iter+0xdc/0x200 [ 718.732651][ T7046] vfs_write+0x6ac/0x1070 [ 718.732666][ T7046] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 718.732679][ T7046] ? __pfx_vfs_write+0x10/0x10 [ 718.732694][ T7046] ? find_held_lock+0x2b/0x80 [ 718.732710][ T7046] ksys_write+0x12a/0x250 [ 718.732725][ T7046] ? __pfx_ksys_write+0x10/0x10 [ 718.732742][ T7046] do_syscall_64+0x106/0xf80 [ 718.732753][ T7046] ? clear_bhb_loop+0x40/0x90 [ 718.732766][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.732778][ T7046] RIP: 0033:0x7fd7e855cece [ 718.732787][ T7046] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 718.732798][ T7046] RSP: 002b:00007fd7e93aefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 718.732808][ T7046] RAX: ffffffffffffffda RBX: 00007fd7e93af6c0 RCX: 00007fd7e855cece [ 718.732815][ T7046] RDX: 000000000000fdef RSI: 0000200000000400 RDI: 00000000000000c8 [ 718.732822][ T7046] RBP: 00007fd7e8632b39 R08: 0000000000000000 R09: 0000000000000000 [ 718.732828][ T7046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 718.732835][ T7046] R13: 00007fd7e8816038 R14: 00007fd7e8815fa0 R15: 00007ffe5c7c5038 [ 718.732845][ T7046] [ 718.732853][ T7046] BUG: Bad page state in process syz.6.12285 pfn:4e4e3 [ 718.817694][ T7046] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x4879 pfn:0x4e4e3 [ 718.820635][ T7046] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 718.822877][ T7046] raw: 00fff00000000000 dead000000000040 ffff8880232ac000 0000000000000000 [ 718.825583][ T7046] raw: 0000000000004879 0000000000000001 00000000ffffffff 0000000000000000 [ 718.828305][ T7046] page dumped because: page_pool leak [ 718.830068][ T7046] page_owner tracks the page as allocated [ 718.831873][ T7046] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 7046, tgid 7044 (syz.6.12285), ts 717122216426, free_ts 717093070436 [ 718.837594][ T7046] post_alloc_hook+0x153/0x170 [ 718.839151][ T7046] get_page_from_freelist+0x111d/0x3140 [ 718.840962][ T7046] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 718.842772][ T7046] alloc_pages_bulk_noprof+0x782/0x1490 [ 718.844563][ T7046] __page_pool_alloc_netmems_slow+0x1c6/0xc10 [ 718.846483][ T7046] page_pool_alloc_netmems+0xc4/0x1a0 [ 718.848128][ T7046] skb_pp_cow_data+0x7f9/0xea0 [ 718.849614][ T7046] skb_cow_data_for_xdp+0x88/0xb0 [ 718.851299][ T7046] do_xdp_generic+0x56b/0x12c0 [ 718.852841][ T7046] tun_get_user+0x1bd2/0x3e10 [ 718.854363][ T7046] tun_chr_write_iter+0xdc/0x200 [ 718.855962][ T7046] vfs_write+0x6ac/0x1070 [ 718.857354][ T7046] ksys_write+0x12a/0x250 [ 718.858737][ T7046] do_syscall_64+0x106/0xf80 [ 718.860251][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.862152][ T7046] page last free pid 33 tgid 33 stack trace: [ 718.863981][ T7046] __free_frozen_pages+0x7ca/0x10a0 [ 718.865575][ T7046] tlb_remove_table_rcu+0x2b2/0x390 [ 718.867268][ T7046] rcu_core+0x5a2/0x10d0 [ 718.868635][ T7046] handle_softirqs+0x1eb/0x9e0 [ 718.870219][ T7046] run_ksoftirqd+0x38/0x60 [ 718.871683][ T7046] smpboot_thread_fn+0x3d3/0xaa0 [ 718.873333][ T7046] kthread+0x370/0x450 [ 718.874649][ T7046] ret_from_fork+0x754/0xd80 [ 718.876132][ T7046] ret_from_fork_asm+0x1a/0x30 [ 718.877661][ T7046] Modules linked in: [ 718.878955][ T7046] CPU: 3 UID: 0 PID: 7046 Comm: syz.6.12285 Tainted: G B L syzkaller #0 PREEMPT(full) [ 718.878973][ T7046] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 718.878977][ T7046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 718.878984][ T7046] Call Trace: [ 718.878990][ T7046] [ 718.878995][ T7046] dump_stack_lvl+0x100/0x190 [ 718.879013][ T7046] bad_page.cold+0xbe/0xdf [ 718.879030][ T7046] ? __pfx_bad_page+0x10/0x10 [ 718.879046][ T7046] ? page_bad_reason+0x98/0x200 [ 718.879061][ T7046] __free_frozen_pages+0x7fe/0x10a0 [ 718.879073][ T7046] ? mark_held_locks+0x40/0x70 [ 718.879090][ T7046] page_frag_free+0x284/0x2e0 [ 718.879109][ T7046] __xdp_return+0x3cd/0xb90 [ 718.879122][ T7046] ? skb_release_data+0x7a0/0x9d0 [ 718.879140][ T7046] bpf_xdp_adjust_tail+0x854/0xb60 [ 718.879156][ T7046] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 718.879166][ T7046] bpf_prog_run_generic_xdp+0x614/0x1610 [ 718.879184][ T7046] do_xdp_generic+0x92e/0x12c0 [ 718.879200][ T7046] ? __pfx_do_xdp_generic+0x10/0x10 [ 718.879214][ T7046] ? __lock_acquire+0x4a5/0x2630 [ 718.879236][ T7046] tun_get_user+0x1bd2/0x3e10 [ 718.879252][ T7046] ? __pfx_tun_get_user+0x10/0x10 [ 718.879265][ T7046] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 718.879284][ T7046] ? find_held_lock+0x2b/0x80 [ 718.879297][ T7046] ? tun_get+0x191/0x370 [ 718.879307][ T7046] ? tun_get+0x191/0x370 [ 718.879320][ T7046] tun_chr_write_iter+0xdc/0x200 [ 718.879333][ T7046] vfs_write+0x6ac/0x1070 [ 718.879349][ T7046] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 718.879362][ T7046] ? __pfx_vfs_write+0x10/0x10 [ 718.879376][ T7046] ? find_held_lock+0x2b/0x80 [ 718.879393][ T7046] ksys_write+0x12a/0x250 [ 718.879408][ T7046] ? __pfx_ksys_write+0x10/0x10 [ 718.879426][ T7046] do_syscall_64+0x106/0xf80 [ 718.879437][ T7046] ? clear_bhb_loop+0x40/0x90 [ 718.879450][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.879461][ T7046] RIP: 0033:0x7fd7e855cece [ 718.879471][ T7046] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 718.879481][ T7046] RSP: 002b:00007fd7e93aefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 718.879492][ T7046] RAX: ffffffffffffffda RBX: 00007fd7e93af6c0 RCX: 00007fd7e855cece [ 718.879499][ T7046] RDX: 000000000000fdef RSI: 0000200000000400 RDI: 00000000000000c8 [ 718.879506][ T7046] RBP: 00007fd7e8632b39 R08: 0000000000000000 R09: 0000000000000000 [ 718.879512][ T7046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 718.879519][ T7046] R13: 00007fd7e8816038 R14: 00007fd7e8815fa0 R15: 00007ffe5c7c5038 [ 718.879529][ T7046] [ 718.881143][T23239] net_ratelimit: 35 callbacks suppressed [ 718.881154][T23239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.053474][ T12] bond3: (slave macvlan2): failed to get link speed/duplex [ 719.139170][ T7045] bridge0: port 4(syz_tun) entered disabled state [ 719.145574][ T7045] syz_tun (unregistering): left allmulticast mode [ 719.148369][ T7045] syz_tun (unregistering): left promiscuous mode [ 719.151322][ T7045] bridge0: port 4(syz_tun) entered disabled state [ 719.162119][ T7032] syz_tun (unregistering): left allmulticast mode [ 719.181639][ T46] bond3: (slave macvlan2): failed to get link speed/duplex [ 719.298686][ T46] bond3: (slave macvlan2): failed to get link speed/duplex [ 719.304654][ T46] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.309094][ T46] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.426575][ T12] bond3: (slave macvlan2): failed to get link speed/duplex [ 719.438285][ T46] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.441305][ T46] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.543927][T21953] bond3: (slave macvlan2): failed to get link speed/duplex [ 719.599027][ T46] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.602154][ T46] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.661094][T21953] bond3: (slave macvlan2): failed to get link speed/duplex [ 719.695047][ T46] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.698064][ T46] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.775880][ T46] bridge0: port 3(batadv0) entered disabled state [ 719.779089][ T46] bridge_slave_1: left allmulticast mode [ 719.780945][ T46] bridge_slave_1: left promiscuous mode [ 719.782808][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.785636][ T46] bridge_slave_0: left allmulticast mode [ 719.787426][ T46] bridge_slave_0: left promiscuous mode [ 719.789671][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.883600][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 719.888195][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 719.892664][ T46] bond0 (unregistering): (slave team0): Releasing backup interface [ 719.896005][ T46] bond0 (unregistering): Released all slaves [ 719.916838][ T12] bond3: (slave macvlan2): failed to get link speed/duplex [ 720.025831][T16855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.045243][ T6090] bond3: (slave macvlan2): failed to get link speed/duplex [ 720.167854][ T46] hsr_slave_0: left promiscuous mode [ 720.170276][ T46] hsr_slave_1: left promiscuous mode [ 720.172390][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 720.175197][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.178215][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 720.180627][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 720.185322][ T46] veth1_macvtap: left promiscuous mode [ 720.187128][ T46] veth0_macvtap: left promiscuous mode [ 720.188873][ T46] veth1_vlan: left promiscuous mode [ 720.190687][ T46] veth0_vlan: left promiscuous mode [ 720.257095][ T46] team0 (unregistering): Port device team_slave_1 removed [ 720.262040][ T46] team0 (unregistering): Port device team_slave_0 removed [ 720.603121][ T46] IPVS: stop unused estimator thread 0... [ 720.679455][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.751912][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.794563][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.846810][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.911200][ T46] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.986276][ T46] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.044354][ T46] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.149198][ T46] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.221971][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.225426][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.307544][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.311021][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.392538][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.396011][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.478665][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.483035][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.603468][ T46] bridge0: port 3(batadv0) entered disabled state [ 721.614774][ T46] bridge_slave_1: left allmulticast mode [ 721.617105][ T46] bridge_slave_1: left promiscuous mode [ 721.619506][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.624189][ T46] bridge_slave_0: left allmulticast mode [ 721.626013][ T46] bridge_slave_0: left promiscuous mode [ 721.627861][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.632028][ T46] bridge_slave_1: left allmulticast mode [ 721.634041][ T46] bridge_slave_1: left promiscuous mode [ 721.635855][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.639202][ T46] bridge_slave_0: left allmulticast mode [ 721.641100][ T46] bridge_slave_0: left promiscuous mode [ 721.642919][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.647206][ T46] bridge0: port 3(batadv0) entered disabled state [ 721.651502][ T46] bridge_slave_1: left allmulticast mode [ 721.653838][ T46] bridge_slave_1: left promiscuous mode [ 721.657088][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.665617][ T46] bridge_slave_0: left allmulticast mode [ 721.667389][ T46] bridge_slave_0: left promiscuous mode [ 721.669467][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.676974][ T46] batman_adv: batadv0: Interface deactivated: gretap1 [ 721.838507][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 721.843508][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 721.848556][ T46] bond0 (unregistering): Released all slaves [ 721.936839][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 721.941708][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 721.946258][ T46] bond0 (unregistering): Released all slaves [ 721.950763][ T46] bond1 (unregistering): Released all slaves [ 721.971572][ T46] batman_adv: batadv0: Removing interface: gretap1 [ 722.053429][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 722.058603][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 722.063997][ T46] bond0 (unregistering): (slave team0): Releasing backup interface [ 722.068506][ T46] bond0 (unregistering): Released all slaves [ 722.775869][ T46] hsr_slave_0: left promiscuous mode [ 722.778106][ T46] hsr_slave_1: left promiscuous mode [ 722.780776][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.783865][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.793901][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 722.798286][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.816586][ T46] hsr_slave_0: left promiscuous mode [ 722.819193][ T46] hsr_slave_1: left promiscuous mode [ 722.821356][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.823843][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.826868][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 722.829306][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.833844][ T46] hsr_slave_0: left promiscuous mode [ 722.836009][ T46] hsr_slave_1: left promiscuous mode [ 722.838152][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.841142][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.844622][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 722.847649][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.857730][ T46] veth1_macvtap: left promiscuous mode [ 722.860317][ T46] veth0_macvtap: left promiscuous mode [ 722.862004][ T46] veth1_vlan: left promiscuous mode [ 722.863757][ T46] veth0_vlan: left promiscuous mode [ 722.866100][ T46] veth1_macvtap: left promiscuous mode [ 722.868387][ T46] veth0_macvtap: left promiscuous mode [ 722.870565][ T46] veth1_vlan: left promiscuous mode [ 722.872238][ T46] veth0_vlan: left promiscuous mode [ 722.874760][ T46] veth1_macvtap: left promiscuous mode [ 722.877099][ T46] veth0_macvtap: left promiscuous mode [ 722.879455][ T46] veth1_vlan: left promiscuous mode [ 722.882026][ T46] veth0_vlan: left promiscuous mode [ 723.002228][ T46] team0 (unregistering): Port device team_slave_1 removed [ 723.006739][ T46] team0 (unregistering): Port device team_slave_0 removed [ 723.089395][ T46] team0 (unregistering): Port device team_slave_1 removed [ 723.094079][ T46] team0 (unregistering): Port device team_slave_0 removed [ 723.175654][ T46] team0 (unregistering): Port device team_slave_1 removed [ 723.180284][ T46] team0 (unregistering): Port device team_slave_0 removed [ 724.287155][ T46] net_ratelimit: 33 callbacks suppressed [ 724.287175][ T46] bond3: (slave macvlan2): failed to get link speed/duplex [ 724.404158][ T6090] bond3: (slave macvlan2): failed to get link speed/duplex [ 724.468616][ T7176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.521428][ T46] bond3: (slave macvlan2): failed to get link speed/duplex [ 724.638765][ T118] bond3: (slave macvlan2): failed to get link speed/duplex [ 724.756089][ T6090] bond3: (slave macvlan2): failed to get link speed/duplex [ 724.873150][ T118] bond3: (slave macvlan2): failed to get link speed/duplex [ 724.990501][ T118] bond3: (slave macvlan2): failed to get link speed/duplex [ 725.107628][ T118] bond3: (slave macvlan2): failed to get link speed/duplex [ 725.224996][T21953] bond3: (slave macvlan2): failed to get link speed/duplex VM DIAGNOSIS: 20:42:25 Registers: info registers vcpu 0 CPU#0 RAX=000000000067c985 RBX=ffffffff8e4975c0 RCX=ffffffff8b8f6c75 RDX=0000000000000000 RSI=ffffffff8de71697 RDI=ffffffff8c1aefa0 RBP=0000000000000000 RSP=ffffffff8e407dd8 R8 =0000000000000001 R9 =ffffed100d486795 R10=ffff88806a433cab R11=0000000000000000 R12=fffffbfff1c92eb8 R13=0000000000000000 R14=ffffffff90d96210 R15=0000000000000000 RIP=ffffffff810014b0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d634a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000fef000 CR3=000000004adbd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7372656c6c6f7274 6e6f632e70756f72 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe5c7c5526 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe5c7c5526 00007ffe5c7c552c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7e863319f ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7e86331df ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7e8633343 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7e86331d1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000704a95 RBX=ffff88801e6f2480 RCX=ffffffff8b8f6c75 RDX=0000000000000000 RSI=ffffffff8de71697 RDI=ffffffff8c1aefa0 RBP=0000000000000001 RSP=ffffc90000177df0 R8 =0000000000000001 R9 =ffffed100d4a6795 R10=ffff88806a533cab R11=0000000000000000 R12=ffffed1003cde490 R13=0000000000000001 R14=ffffffff90d96210 R15=0000000000000000 RIP=ffffffff8b8f55df RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d644a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3fa6bb CR3=000000004adbd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd23f4d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe09a26596 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe09a26596 00007ffe09a2659c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd2323319f ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd232331df ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd23233343 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd232331d1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd233eb600 00007fdd233eb5e0 00007fdd233eb5e8 00007fdd233eb618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd233eb5f8 00007fdd233eb5c8 00007fdd233eb600 00007fdd233eb5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 0000000000000000 0000000000000000 0000000000000150 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000004 RCX=ffffffff84fe822c RDX=0000000000000000 RSI=0000000000000000 RDI=ffff88802e872480 RBP=0000000000000014 RSP=ffffc9000372f1c0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffffffff8c1b1a71 R13=0000000000000000 R14=0000000000000001 R15=0000000086dcd512 RIP=ffffffff820893f0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007ffaba781300 ffffffff 00c00000 GS =0000 ffff8880d654a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005619b0058000 CR3=00000000304ce000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003004 0000001400000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08060a0170de0008 0002100004100006 0072ee0600000063 0000000200000001 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000000080024 0000000000280030 0012010000000018 0000000800040009 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000a000800000000 0000001000000204 0001201000068004 0100000008060601 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 049202d40200068e 03280200068c0328 0200068a0302d802 0006880302b8c204 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8400068403040400 0680030010000fff ffffffffff041a08 000c080001000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a003010200039e03 0000000000000000 000000000001ffff ffffffffffffe508 ZMM25=7db292237db29223 7db292237db29223 7db292237db29223 7db292237db29223 7db292237db29223 7db292237db29223 7db292237db29223 7db292237db29223 ZMM26=8877693e8877693e 8877693e8877693e 8877693e8877693e 8877693e8877693e 8877693e8877693e 8877693e8877693e 8877693e8877693e 8877693e8877693e ZMM27=6e80630a6e80630a 6e80630a6e80630a 6e80630a6e80630a 6e80630a6e80630a 6e80630a6e80630a 6e80630a6e80630a 6e80630a6e80630a 6e80630a6e80630a ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=4e5800004e580000 4e5800004e580000 4e5800004e580000 4e5800004e580000 4e5800004e580000 4e5800004e580000 4e5800004e580000 4e5800004e580000 info registers vcpu 3 CPU#3 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8578da25 RDI=ffffffff9b49b940 RBP=ffffffff9b49b900 RSP=ffffc90005f56f08 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000030 R14=0000000000000010 R15=ffffffff8578d9c0 RIP=ffffffff8578da4f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fd7e93af6c0 ffffffff 00c00000 GS =0000 ffff8880d664a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000010000 CR3=000000004ba3a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000c DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe5c7c5526 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe5c7c5526 00007ffe5c7c552c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7e863319f ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7e86331df ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7e8633343 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7e86331d1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7e87eb5f8 00007fd7e87eb5c8 00007fd7e87eb600 00007fd7e87eb5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000