last executing test programs: 4.280644691s ago: executing program 3 (id=3072): r0 = memfd_create(&(0x7f0000000040)='rootmode', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)='E', 0x1}], 0x1, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1f, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, 'VB\x00\b\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) syz_emit_ethernet(0x13d, &(0x7f0000000340)={@broadcast, @multicast, @void, {@ipv4={0x800, @igmp={{0x17, 0x4, 0x3, 0x3e, 0x12f, 0x64, 0x0, 0x6d, 0x2, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x18, 0x0, [{0x7, 0xc, "5ed1917c30403ea5710e"}, {0x6, 0x6, "db6d097d"}]}, @lsrr={0x83, 0x23, 0xdf, [@multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @multicast2, @multicast1, @remote, @loopback]}, @end, @timestamp_prespec={0x44, 0xc, 0xf3, 0x3, 0x6, [{@remote, 0x1}]}]}}, {0x15, 0x9, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, "9598154940732d1a6bb664b10789765faea8f9d1ee32be86d5b6f2cecb3d165d4ccb0d99f5c0396cc1f9439ec5191851df8995dcc9e03ef662820d30e1c6ebad0beed47d7ce304235c47de29382ef22e4cdeac4b99235970970eb5d1eb349aae46e43bd18ed57ab84310ebe651d7f28f5a03ea35f9b2b1f1aadcc237cd1030519ad65955f42879ea74a774fcfd7b8b6081466090b4ee98a2d3308668b362e636c62503b891c81f7094b7e849841e76ad39a7f1346f11a65a4a1ce64a3c050f1c3b6c93b66fb348bde22a4e"}}}}}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f00000001c0)={0x1f, @fixed}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x13, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[], 0xa89) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r2, &(0x7f0000000300)="a3", 0x1, 0x2c091, 0x0, 0x0) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000240)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8, {0x0, 0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 4.140521966s ago: executing program 3 (id=3073): keyctl$instantiate(0xc, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="6c6f61642064656661756c7420747275737465643a737d7a20303030303030303030303030303030303430343520000966e6cc4cc11cf7943e7d05dc5acfe4c9be087241583c86fc2b3abd0fd27b02cf3daee5d8482b623fbd3a7b775db9429c39926b3feb3fc130a778642d46f28d10dc7a3ec02685148ea4b2e6c16fc660aa5d783a592c22e5f53067fa70d405a2ddbc3888a7130a78b5891fdaad4c7f6e2fc14a1bfbae46f36aef3257e3cfbaa5e2232a14c6225e7902dae4c44e11ffc16e02ccf09f9f45853e397091d021c3b52d599ef2a5ba"], 0x2f, 0xfffffffffffffffa) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x20002) r1 = dup(r0) read$FUSE(r1, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x15) r4 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0xfffffffd, 0x0, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f00006f2000/0x11000)=nil, 0x11000, 0x0, 0x11012, r7, 0xffffe000) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r9 = socket$netlink(0x10, 0x3, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000002540)={0x0, 0x1c, 0x4}, &(0x7f0000000200)={'enc=', 'raw', ' hash=', {'sha256-avx\x00'}}, &(0x7f0000002600)="22579d490c187d5a7bb88556cec7047664c712c1f12284dc054365b6", &(0x7f0000002640)=""/4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) r11 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r11, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002680)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r10, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRES32=r12, @ANYBLOB="355e528e97157dea8704c4ef227e1bdf2233af02f0dabe8736e085335a14fa0dc8c16e5f4e1109853609581d41e4fe843eab8563e7b34750030af337e6afaa96f81b7d644b58d70888c7fcbd9debc49690e4e8ce233e78ec28fb7dac2a86072f4527c85c93c6c28c895c4639c1b9ffb16db12752cfb12c1f7c89df62baebce61cab4351610d8825b31db41535e0b6d4c98baffca74d501369d253c9efc1e951607ae1043b7fcdae6d04b6edcbec4ebcba0b7b50cd785e40013cc7d9abb2a"], 0x24}}, 0x0) io_uring_enter(r4, 0x6ed3, 0x0, 0x0, 0x0, 0x0) r13 = syz_open_procfs(r2, &(0x7f0000000080)='net/udplite\x00') write$selinux_load(0xffffffffffffffff, &(0x7f0000002400)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75783cd6526792c624eaac669f9bbed84fc5a42457fb5f0f3fa1f4570697b6147435459d25e564c1ba7e3a996cd345d2f5beb242300feb7382218e4b40fcba8b27ecc793ae02ea5e3df9b7f12df64e20128bfc418efb9a1f7e9a73b97e3de1d7cd3ea57b200523b404554df6d2b1ddfbd1f0f857a6e7ca0497b5e12cff427c20831c7a39de85b3160d29a813ed684aef6ca0a9ccdf2f889b0963da3b6b3d20800b1f2511ea3664ad8a8384e5de04164a8b841ab53c36aabd9f0627be882955b6b7052f5d5a5fa0b10b58f2335c6289b7853b75b72ca7ee9542f1c46961ab61b4a87dd868f6addbe4730595dcdc0336939ebc38f3231f74b69d0f9513219eb1a4a8d1d8d88f1d61af3ef6b47d54bc89457ec06bca4d0ff5fc3632fc1f308ce2b9dcf6651e9267177378ae82cecda1d71ac1"], 0xa3) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r13}}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r13, 0xfffffffffffffffb) 3.941673869s ago: executing program 0 (id=3074): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setscheduler(r0, 0x3, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setuid(0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f00000000c0), 0x4) setsockopt$inet6_int(r3, 0x29, 0xb7c5409ce3d20df2, &(0x7f0000000040)=0x22, 0x37) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60"], 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f00000002c0)={0xc, r6}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) 3.341291952s ago: executing program 1 (id=3075): io_uring_setup(0x6a0d, &(0x7f0000000380)={0x0, 0x465a, 0x810, 0x2, 0x40294}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00000001000000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ipvlan1\x00', 0x0}) unshare(0x62040200) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES8, @ANYRES16=r0, @ANYRESHEX=r3, @ANYRES16=r0], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000005c0)='kyber_throttled\x00', r4}, 0x18) socket(0x40000000015, 0x5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x2, 0x4, "e43a00", 0x0, 0x8}) r5 = syz_io_uring_setup(0xd3, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x3, 0xffffffff}, &(0x7f0000000040)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x47ba, 0x1000000, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32], 0x28}}, 0x0) 3.341041949s ago: executing program 2 (id=3076): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_create1(0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300}, 0x0, &(0x7f00000002c0)={0x3ff, 0xa00}, 0x0, 0x0) 3.221118629s ago: executing program 3 (id=3077): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x200000000000005c, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setscheduler(r0, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setuid(0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60"], 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x7, 0x0, 0x0, &(0x7f0000fee000/0xf000)=nil, 0xf000}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) 3.219807381s ago: executing program 1 (id=3078): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='omfs\x00', 0xf01dc22aedd2d815, &(0x7f0000000240)) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$msr(0xffffffffffffffff, &(0x7f000001b700)=""/102392, 0x18ff8) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/43, 0x1) fcntl$addseals(r0, 0x409, 0xb) ioctl$FS_IOC_RESVSP(r2, 0x402c5828, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = io_uring_setup(0x202e, &(0x7f0000000080)={0x0, 0x1cd1, 0x0, 0x2, 0x1, 0x0, r1}) openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) mbind(&(0x7f0000571000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000040)=0x3, 0x6, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ptrace$getregset(0x4205, 0x0, 0x202, &(0x7f0000000240)={0x0}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r4, &(0x7f0000000300)='1\x00', 0xffffff4a) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000034700)=""/102400, 0x19000}], 0x1, 0x9, 0xfffffff7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x6c}}, 0x0) 3.141122848s ago: executing program 1 (id=3079): r0 = socket$inet6(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x90) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) socket$alg(0x26, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001040)=0x0) close(0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x8000000003c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000001100), 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @empty}, 0x1c) syslog(0x2, 0x0, 0x0) syslog(0x4, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000000)="80", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000001380)=""/4102, &(0x7f0000000040)=0x1006) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 3.033411563s ago: executing program 0 (id=3080): r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x140, 0x90) mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f000000aa00), 0xf, 0x840) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r8 = gettid() r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r9, &(0x7f0000000200)=""/186, 0xba) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r9, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r9, 0xc0305302, &(0x7f0000000300)) tkill(r8, 0x7) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r7, @ANYBLOB="1000beb30a0001000180c2000000000008000f0001"], 0x30}}, 0x0) io_setup(0x3205fa4c, &(0x7f0000000240)) read$usbfs(r4, &(0x7f000000aa40)=""/137, 0x89) sendto$l2tp(r3, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000000)=0x81000, 0x4) recvfrom$l2tp(r3, 0x0, 0x0, 0x2020, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x3a0012fb, 0x2759, 0xf, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x1, 0x1000000, 0x0, 0x10}]) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='.\x02\x00', 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f0000000140)={r10, 0x0, 0xe0, 0x7, 0x5}) r11 = getuid() quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000040)=@sr0, r11, &(0x7f00000000c0)={0x4, 0x8, 0x1, 0x1}) 2.503309799s ago: executing program 2 (id=3081): r0 = memfd_create(&(0x7f0000000040)='rootmode', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)='E', 0x1}], 0x1, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1f, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, 'VB\x00\b\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) syz_emit_ethernet(0x141, &(0x7f0000000340)={@broadcast, @multicast, @void, {@ipv4={0x800, @igmp={{0x18, 0x4, 0x3, 0x3e, 0x133, 0x64, 0x0, 0x6d, 0x2, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x18, 0x0, [{0x7, 0xc, "5ed1917c30403ea5710e"}, {0x6, 0x6, "db6d097d"}]}, @timestamp={0x44, 0x4, 0x21, 0x0, 0x3}, @lsrr={0x83, 0x23, 0xdf, [@multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @multicast2, @multicast1, @remote, @loopback]}, @end, @timestamp_prespec={0x44, 0xc, 0xf3, 0x3, 0x6, [{@remote, 0x1}]}]}}, {0x15, 0x9, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, "9598154940732d1a6bb664b10789765faea8f9d1ee32be86d5b6f2cecb3d165d4ccb0d99f5c0396cc1f9439ec5191851df8995dcc9e03ef662820d30e1c6ebad0beed47d7ce304235c47de29382ef22e4cdeac4b99235970970eb5d1eb349aae46e43bd18ed57ab84310ebe651d7f28f5a03ea35f9b2b1f1aadcc237cd1030519ad65955f42879ea74a774fcfd7b8b6081466090b4ee98a2d3308668b362e636c62503b891c81f7094b7e849841e76ad39a7f1346f11a65a4a1ce64a3c050f1c3b6c93b66fb348bde22a4e"}}}}}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f00000001c0)={0x1f, @fixed}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x13, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[], 0xa89) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r2, &(0x7f0000000300)="a3", 0x1, 0x2c091, 0x0, 0x0) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000240)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8, {0x0, 0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.320502471s ago: executing program 2 (id=3082): r0 = socket$inet6(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) socket$alg(0x26, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001040)=0x0) close(0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x8000000003c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000001100), 0x4) syslog(0x2, 0x0, 0x0) syslog(0x4, &(0x7f0000001300)=""/95, 0x5f) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000000)="80", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000001380)=""/4102, &(0x7f0000000040)=0x1006) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 2.250207871s ago: executing program 3 (id=3083): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe66, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$loop(&(0x7f0000000000), 0xb, 0x82642) ioctl$BLKSECDISCARD(r4, 0x127d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) waitid(0x0, r3, &(0x7f0000000440), 0x8, 0x0) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001800)=[@text64={0x40, &(0x7f0000001840)="f3470fbc06c74424000600007848b800280000000000000f23c00f21f835030004000f23f8c7442406000000000f0114246aa2450f0012124424001afa0000c744240216383d27c7442406000000000f011c2466b8f0000f00d0400f060f00e4c4a1c1edba2500000066baa00066b8000066ef66b82f008ed0", 0x79}], 0xaaaaaaaaaaaab0f, 0xa, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000040)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000951000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000080)="baf80c66b8447ed88d66efbafc0cb8ce46ef0f8acb66b93102000066b80bc5278066ba000000000f300f001166b8d80000000f23c80f21f86635040010000f23f864f33e0ef2a466b9fd02000066b80001c0fe66ba000000000f30f20d0401c4e2adde8c0068", 0x66}], 0x1, 0x16, 0x0, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', @link_local}) 2.249833341s ago: executing program 1 (id=3084): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400100bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a9001) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz0\x00', 0x200002, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000200)) syz_clone3(&(0x7f0000000480)={0x42000200, &(0x7f0000000280), &(0x7f0000000240), &(0x7f0000000300), {0x19}, &(0x7f0000000340)=""/157, 0x9d, 0x0, &(0x7f0000000440)}, 0x58) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x59, 0x0) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) socket$kcm(0x29, 0x2, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x8000, 0x100000000}) memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xff00000000000000}, 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x3, &(0x7f0000003680)=[&(0x7f0000003d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x15}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) 2.081073979s ago: executing program 0 (id=3085): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/keys\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000300)={0x2020}, 0x2020) openat$cgroup_ro(r1, 0x0, 0x26e1, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000000)) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x2, 0x0, 0x3}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.601383124s ago: executing program 0 (id=3086): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) accept$alg(r4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() flock(0xffffffffffffffff, 0x0) setuid(0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x4a, &(0x7f0000000280)=0x20, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) recvmmsg$unix(r5, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) mkdir(&(0x7f0000000600)='./file1\x00', 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18007000000000000000000000000000950000000000000046682d562c3163534e830000ac12a8b52f0d7086e274aa97a91fa46cdcefe7534fde04cace652b4c498a446290f93bce3177127ebc0c24e7e718c0b1da96d9c9fa8e95810000007cb9806b9641bb5a0124c1a1eae02533d551ea74d77602fab0ffc0a054efb9481ba4bf71fd681cb4a7dbe2f50747fcb93a0661f8889baa4958ff45d0961803846e520f882536fdad77614bdd2b6b19a7ead5ca28d9f56159ed73935ee196838e2d856a0d2f5564fa"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 1.269378278s ago: executing program 2 (id=3087): io_uring_setup(0x6a0d, &(0x7f0000000380)={0x0, 0x465a, 0x810, 0x2, 0x40294}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00000001000000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ipvlan1\x00', 0x0}) unshare(0x62040200) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES8, @ANYRES16=r0, @ANYRESHEX=r3, @ANYRES16=r0], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000005c0)='kyber_throttled\x00', r4}, 0x18) socket(0x40000000015, 0x5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x2, 0x4, "e43a00", 0x0, 0x8}) r5 = syz_io_uring_setup(0xd3, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x3, 0xffffffff}, &(0x7f0000000040)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x47ba, 0x1000000, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32], 0x28}}, 0x0) 1.020927981s ago: executing program 2 (id=3088): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x3) socket$key(0xf, 0x3, 0x2) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYRESOCT=r2], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000003c0)={0x640, 0x10, 0x0, 0x1000, 0x4000000, 0x1, 0x0, 0x1, {0x5}, {0x3, 0x4000}, {0x2000}, {0x2, 0x20000000, 0x1}, 0x0, 0x0, 0x400000, 0x28000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xb}) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000300)={0x8004}) close_range(r6, 0xffffffffffffffff, 0x0) 932.080717ms ago: executing program 1 (id=3089): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x40000) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000000c0)}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000004008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r5, r8, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000100), &(0x7f0000000140)=r4}, 0x20) sendmsg(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 729.162682ms ago: executing program 3 (id=3090): r0 = memfd_create(&(0x7f0000000040)='rootmode', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)='E', 0x1}], 0x1, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1f, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, 'VB\x00\b\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) syz_emit_ethernet(0x141, &(0x7f0000000340)={@broadcast, @multicast, @void, {@ipv4={0x800, @igmp={{0x18, 0x4, 0x3, 0x3e, 0x133, 0x64, 0x0, 0x6d, 0x2, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x18, 0x0, [{0x7, 0xc, "5ed1917c30403ea5710e"}, {0x6, 0x6, "db6d097d"}]}, @timestamp={0x44, 0x4, 0x21, 0x0, 0x3}, @lsrr={0x83, 0x23, 0xdf, [@multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @multicast2, @multicast1, @remote, @loopback]}, @end, @timestamp_prespec={0x44, 0xc, 0xf3, 0x3, 0x6, [{@remote, 0x1}]}]}}, {0x15, 0x9, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, "9598154940732d1a6bb664b10789765faea8f9d1ee32be86d5b6f2cecb3d165d4ccb0d99f5c0396cc1f9439ec5191851df8995dcc9e03ef662820d30e1c6ebad0beed47d7ce304235c47de29382ef22e4cdeac4b99235970970eb5d1eb349aae46e43bd18ed57ab84310ebe651d7f28f5a03ea35f9b2b1f1aadcc237cd1030519ad65955f42879ea74a774fcfd7b8b6081466090b4ee98a2d3308668b362e636c62503b891c81f7094b7e849841e76ad39a7f1346f11a65a4a1ce64a3c050f1c3b6c93b66fb348bde22a4e"}}}}}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f00000001c0)={0x1f, @fixed}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x13, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[], 0xa89) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r2, &(0x7f0000000300)="a3", 0x1, 0x2c091, 0x0, 0x0) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000240)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8, {0x0, 0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 421.491738ms ago: executing program 3 (id=3091): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x200000000000005c, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setscheduler(r0, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setuid(0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60"], 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x7, 0x0, 0x0, &(0x7f0000fee000/0xf000)=nil, 0xf000}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) 420.555249ms ago: executing program 0 (id=3092): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x80901) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85512, &(0x7f0000000180)={{0x7}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x4403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x40046207, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000c44185000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'ipvlan0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x4, r11}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000840)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000001600)=@delchain={0x2ad8, 0x65, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe}, {0x10, 0xfff3}, {0xd, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x101}, @filter_kind_options=@f_matchall={{0xd}, {0x2a8c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0x5}}, @TCA_MATCHALL_ACT={0x155c, 0x2, [@m_nat={0x1c0, 0xf, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x0, 0x6, 0x7fff, 0x4}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x2, 0x7, 0x5, 0x9}, @remote, @local, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa7aa, 0x4, 0x4, 0x7f, 0x4}, @empty, @empty, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xfffffffa, 0x1, 0x45, 0x80000000}, @dev={0xac, 0x14, 0x14, 0x3e}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x400, 0x196, 0x1, 0x6, 0x6}, @dev={0xac, 0x14, 0x14, 0x33}, @dev={0xac, 0x14, 0x14, 0x1c}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x10000, 0x5}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x1}}]}, {0xa7, 0x6, "58a93bb7a9e69e84f8516d3edce04f8c55c9d819906be021aba47ed76c65e05bb22d4c7adbd36fb8ed9c8e69f8c20b8c31e469b39a7ebd7adf764bf2e574ca7d4aaed6d0ac8c154f5c00fb40d6b6f378461557f91527aaecd7a2a5273607737973c42f9231d4064b2c6d1193cdd9d3024251967d8e9bf7e5184bb59890f32bb748b5e83e0751a0ec60c1f537e37a926723adc6582bd634347c851a9ce97944317d6666"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ctinfo={0x148, 0x1a, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0x64e8, 0x5, 0x6, 0x5}}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_gact={0xa0, 0x1a, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x7, 0x8, 0x6, 0x8}}]}, {0x5b, 0x6, "3e89ff765b4dcbf19e5b19afd7bc6ac82295c0d4302479aec3feb5efd9a80a0f6bee403f5d1b4c1c36bdd08208af860c3468cd6c08df8e7678351548aef2409fea7599b4352ccb3000b7547dc8b362dee97dfa6cb20e4b"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x8c, 0x1e, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x8, 0x1, 0x4}, 0x7a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x2, 0x7303, 0xfff}, 0x13}}]}, {0x25, 0x6, "ba28cbe8c0d06c6648e143ef9d358b4915384693f22104b35b40b25865659dff28"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x1038, 0x16, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x2f4af}]}, {0x1004, 0x6, "415323dc94422c6c0587e23475f0e0826310c3663672e8d3ca4e74a28011959255bad0ac98a11b49e18ff1abc9b100d1433ca7fdc96219a3a49affce727ca79f0f0c7d8539ee39bb257591d33f1b77eac0ce7aeba63fbfda6e91d275732d92af7a81c731017d68a9279ed30d41236676522d05cc4289d1bffc4820dd219fb5f67cbd88af80167508f9f7560190ca7258fed257ee29e1d236a4aa0ecabb0ec1455b79d42abf54ff52747c6b43171c434fb4acf773e2e9074367321d5f5c6983a7ed76c8be18c9d739ef763f3fcfc8bb09c86a605b1c6d1c35ffd357c4a9c020c2e2a79f4091a6b66bd8cd4af8c944b47791736aa692be9452702116e2edf37d837e7872597af0334744f76c70cd706596ee385b3e838a2fa398e1d6b019868f5aa67b26e392e07b2e10218dfda1f66de35d47592cc64779d7b4aab2866c9de2244af200a5b3b83bc1adb406ed0fb2dac2eb2c433b56bbf7e94231a9f9a1ab2356793647b001eeedb11b0d7c480e2762be7bab827e857e461b0c05885107add674c2f2b1caf485059f5383cdaca65174db43863e4653459b9653ab6ee8705879a9f9875d35369e84e74b6e059399971a4ee169e1f293a11d722267c7278e2743b80da25adc47b9eadf27d723e330dd92b3e93f47b10cec3802ea5ae100a3be4576fce3e4cfab6e1d710927206a8d20e6057be5d7c34aa3c4df00e920f560eafedc4279343b12f90775965fbe4c6e3608b5ca126a945e2e4b73fa9d5cd20ecc989aba786980bc12e83535b56c90b21ac9d9ccd0587348dbe30870161d3c7d757498cf0e1fcd85eb1810506b22340a4aef1aa5212e26dfea72655f59454c04b47a1b160f08d77d8228fc7124661ee9812e87663d9d7d22eac2b8ff8fb0fd59a4b9b7794c571a20a0c727aafdb15202087e1ab169f07b2c0e29aa39535240294ef184e8c10b77358d00c10be47fad03e743397874720375f579f2791ee378c02c4794cfa89be270fc4b4411f575084bf59d96e6136f9d651879e62848b44483e5d40f7071efc7c881f532fa405b72cb1616444854d10eb17da5c21b17f1dc784f66417e501096184af5395c6b2d3811a33ab3883aec1724193d6ea7b3bf1bb6f1def52b92d1835d36673bea3add2b9acad661041bd486edd848e7098d7a1651d2ddab806b10e91afe47bcd5bb0fe68131ed060c3ab5b18c193e8832674e0f2787cd6d93187ba8171232b75dccca12bd6a4b6953724e8c61ad25c0dd47d57fa579dcd4038d202f5d9e19d3da8d8d51f4c78717fed3781e6199787cd25c841defe52cc90cb10ea33468d0d65f404061f30311ddb02bfc61332c7742f3b4dd2059273ebc6fbf2474f163a694fff566f2a023ebc33f52262160b617574999467db62169608998dd64236bb7cd6af6f55b96f8c11896afb8430c641848de6929ccca44bf10cba58a07ac3565f03020ab8b74929d47ab5f43a33835bc17a12493bc60555c4756e31633d10ff96545cb96eff949a5c8347343dd6f96385195cc3b80e9e040d244e8eb7ff50a49510e2af7083638d75991582e5b8ddfde47a6f6b06fd17f0d2f804175c8ab938fd4e8f1b4bc452f3d977ffdacd9d762862d54b99ed8df560405e2bdf20a9f4ae35b764ad8879a6e52a8a55b01690b41a689eaf8c90ac7695f57251da1fe0979aac9e7f4918f68df00d2ea3ad8ee8ea6ce3030a48d45166e1e27ecb9037ae45b29e9675ad3c7a188aea5f90c3d475eb41ca623aff2c0965adb640f976c47c228dec255fbeb4985353c1bc97a130a724c16f120bc371ea9877ca9d9a226edd00d25242c5d162cb30d7e37853ea8fffc2628de0e14996cb7bb276df04742b3a08379cd0d162cdeb1feec425ac5807c4c4af522aefa0f1ad5ce581639243a0b5f64c93292f13e06970024882716f69cfd9acd656900076f589c7a56a9a1ef47a682183bb2d32ec2130b33966a6c589ae2e9023687a70c6aae2425692a50800a0f3f9e716732e539a2b5b80820b743e0e2e732ece8f06029597819d214b6451c6852fe7c45f9df4a3bb46f6c91dbcf2d184802dc303503b817364c93ea66e3ef01c05d2bfcfab64baf61d7729a3a4565270a1b06303cd978407d5db1331a3c9be57887f633b001e6871e71da3888b6cee03aa5b11fda19db2eb1fe48ccd71d487243227631611d2a21ba642dd4d6045a1a485019d90a7d7053f2caedf7aab29a63a2ba28d475063a8fa37e66bf1768a36ab7dac3675493e3001b5e75da3729a3e803175f19a356a61296e6efc5f267477078ada79bbbbd094a5611ef2eb11ea3d2628bfd86148c7b02f6e425b5ec45277c629ab95f46908e176f53897a81a02aa9db4e48011e9705b353ec5adc6d2ef0a04890333da2b3cf19e388fdf10c3739eb2c394117e0f9976131d1aa2a4311d2fb4799a473f568b0ca49e4efad07a37bc1a71ceacde5f149e854cecc90973fba5287edb2e59bd296a1b466ba308d45e4af0a65915108c474e69226020c348347dc8c0271eefcbac950e77597f8d987bf478a048ca5b06981ba2e84e982a5c5abef4173521abfa6349840e251e6d851e8b54331b873acd21ff90197c3fa34f1114e7f48ded7c7359d946a078efe2c5e2acc497a2fbe539e18183c3627efee429cf0fff4381c50c1ff2d8f3fc091ece03854959cd904b2e87117c88e962ed6b11ac9fa4199121f8044362963d56cf8a0e5aaf530a8d08c24418c03b1ad4efbfded749ffefc4211396cd40c69267e16798e556a7b23247ca84acf3e6caf13e7a834d3b891a3411e4f5133dc877a4c198ab85514824c78a1b77bbcfde04e5c06a28564c4dea492da4f9f6e0dbef81d11a14ff9f0f955e4cad5754b59bc8771736d28cce2f74e82b1321dec00653ab95151ec99da09476acd47f67ebf530772c8079f084a6634c1a96980b807c26f506694c76c4d6c704dd10a569570b37c8c2b3d79f2d14a62f54d24129d56b2cbde37cfd789d5767c8ed9aebcbb05454016b4fa3e6571fa9a09d72fcdca178402fe0d36b4df127526993a7be3ba92bc14979646fa80a5af75e482233c64e1b68641e07114bd8422150f185910e7b59023ecd59b0a9d84b998fc636f255cea798be5789ee6f08cff17a099b84c02bafb2e18e55ee906021117dfe285f3a1e12e9a61318b7b975eb617b7ce99524718013d679241061befcde2920830cfea10865acffd304b61b30ce0c329e003f35a689a654c0242978a2336f7979aef58d457ae93a8ad595406230e2e7b49944fbeab907dcb234d33327f7c3cd37e123f62ae010e1543c9472435341ab3f352d586d453068f20e64f5aff510c1f67ac0afb2ae30ad110ed8358639b6ab9c20ba5c359bf00617eac638c47647949a3fea4309c3d199d7442c969fd9f4b7359e9fc4f0107a8c4b925f5536590e6406e14249de4a2ece87efb3eb25d2321b6a11c3efca5b1ba32f2bf940662fadc44b6ed7bef438f4f4aff685418b478eb9b7c88619212697928148fe5e5c51b676298e5db417b8d1af81db27fa2dc16cac7549cbc2f785c71124c5576d8f8c8373812d07babed6e350778ebfc4b989d6eb74abdd29cbed555cdeaa5ea5fb04ff2fc95b40f5c80e6b1dfda57ac13ae48b2a0e2692dc4836a963cdd8011e5a9652d7ecc7d70d738f7aa08837861b67ff71ef44f3b0f1fb10b08b09ba88d26c9c70e6953615f947ef164a7de1ad748afe41ce195b206c7839c5777f9ddcf7ba7e54d9dd7af0b0afd1210514e17876cd3b232c04021bdf7370e05213d7c8c309ebf49b4f411f1bebe516d3c8b257362c4b261f0970384d81a70ce2a6171cd8814527046c93e73f0c783e88a097c950a82f1d48b0071f3c02f59434a8964d94eb2be501a6847a0e6951076b0dcf4a15b0c5e55e34653789756122361f39e582f17c098ed04b87e73b6b93de2270ad998ee07e19149f9860cceda43d1121570b6e49501dedca6a84c28a44df4b3db32ea7650e8aa49986e0b8b99cc10c9e059bd2a8d2b3894834b5b5fe49c21b774dfc8fd6133c7d0149572149f8aeb0e9e682f9811ff4fc33a4c967a810839fcfc5c9a078df0ee6d46bbc82fe43e67e976a5fa7fa77cb6d0ee865d75164404d14ee3f38ad6609732266db69a7bde339f824a06e91085b1d280846cf9462449ea85a1c164b8733c06ca98c511c4e18e23da7f73b4d0d2c89da1ffafbc2442df17e5ca30247f0b33526e01ccb0c7e567366d08dc6ffb3b7789a4a28ffe49f7b88c53cdd7edfd31a9046497a2ee3ed52fd6d24807ebf39fc3f76af05c3a42fba25d3150b55239773a0a42b4232470eb2fa2bb103c93ca4c977fc4e8c99b1e254339662e242ed0307e673e39bab5a2cc628399c0f805deb2819024daea98a591eac2488235d4f4557fd551b3c3b8d0f7e9762d4cd890349a46984cbf83e14aa702d60bea00cd07c8490c96d60a6ccf4ef3dfe75b0ceaf98a86a27da23cafe0c418be9589534331485e20feb30ac70c532185e3348c58b7542d14a2fea6ae448361ac0139c9fd0704d4ede29f357802f7bff277ab6b897222c69d665e16b7766bc0a9fa232e57d1b2687ba369824b139c3cbce7617115721ce2e25d78ffdfc019337fbddadc8ea2bc7b99479cda9e036a353519836b9737b225bbf52255f45c7a615549340dba4de436c77c430acd096c5d132aba6407c28040797d337ca70dfbf5ab37c5932d68564c0972841823df68afa713b4e0e27fea98c60724cfcb2b52a95725f5cd565bc1f8d409bc30fcbc0785891b779af66ce2593753c4697cf5b31ef350c63adf71c6e33f1e588d5d251bb91847c1ce95cee5a4f0b5e2feaeb9c402ce11d1d25dd3a4d31e11882dd57bf08df81853b3e16e6adce26b5a12ef642d0b9565ab31ed8c7f2541a9151246383091ff1430d1dbfd56c80e39791ab6803bf4bb4e12b2f879608f0c592e8dfbf5dd55364ff5a2d6d48783560200df9990186d8b9fdbeb4776094e094f14137bbdf3b8b6c9c4c3ec14538ffb1db39621c24d54bad6dbe7230a73b8ef53bb331ad5eb9e3bd4bce9dd8d1581d8c62bff2e10e98443dd5adfe312f6d2af7b4ae3438c743162b414348e69e0dff1ab0283611b97f50275eaa2de1429effc5daa130da05b287ba02ce1c0f61eb863c566f772f85e64b7d9d0cad46da7ec9cec77e9da682455d9038c5a052b0945a728e8f3ac82685520466bef9ec54d4ce32a6f97a17a1c479c8f09d6b0105434f7f8fb21d36766b3d57b4d27a837ee3f2d952f12e2e64da439e23d3b6687d21771002df65ded3b079dea15fed8a346635ee543e5ea05731adb175bfcac82ff030cae95dd6ebf0d9cebc0a339d41e33a881090cc8ebedb19e50bf2c34a39ca41df107f6c358fe1fa0b9ef93c1cbf1e941719b532c9819823fcc6642645a45d0101f4d6a73a9859595985f0314ba90f5902442497713ca4da66ca44f705200f5d82f287a2aa35cc0f3ef3d90a3d64be579268e86a087cb50cc0e85e181d99039e4e51fb29e6f8801b072b0ade72ea42ce535a7cf3400df55718e713ed88c54ae206acf681ff6d55dd08d9f96bac25b7812b72c400bd214311068d4264e6e895e135407f93bc3f323746d925c60317209293db328f8dddaecefce4d1643948a912693f1feab07950540f5ff1d1dad2c6b1235ca8e8a1b79a7534e5eb9abcdbe48371840e4f29fae08422caceab8cf50551e1494dc6a595e4c06b43e7484a83efa1514db1bfc2c19f84703fbf01ac022c1e5c7061a3cfc89901eb4eac16fbe22baf77aebb60aacd3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_nat={0xec, 0x20, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x71d, 0x3, 0x0, 0xaa3, 0x1}, @private=0xa010100, @multicast1, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x8, 0xffffffffffffffff, 0x1, 0x3ff}, @rand_addr=0x64010100, @remote, 0xff}}]}, {0x74, 0x6, "fe1b07dc1e1c9f159a731d57502b6deea4aa9bf03b3fa3c89f17eab13b772d120bdbd8142cebdf44825a2249b772123a1dbd3a0d84cec799ba4e57711a0a2c6188d8856dbbf6a5d136839ac824854d1610b6afd2bf12228201661cbc967e28ab43edfee279be312a413757a2933933e6"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0xc}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_ACT={0xd0, 0x2, [@m_skbmod={0xcc, 0x8, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x65, 0x3, 0x6, 0x100, 0x4}, 0xb}}]}, {0x7b, 0x6, "3618b966d450959c7c5d7a239d8a8fddcf8e50c281a2c283366014bed8ab7a46adce150777a43f5f5ce1fc7b2ad1ad72fd787edb3d1d7ec2ca2a3f7b29904f3f94369cc009bde1cf2d5f345bc39b79913063372e97b50dd24dc3003e08938abeaee1709845faa74dbc121aa9eff594e8bab331475ee584"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xffff}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xfff1}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x3}}, @TCA_MATCHALL_ACT={0x142c, 0x2, [@m_skbedit={0x1060, 0x12, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xe, 0xffe0}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xc5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xffff, 0x0, 0x20000004, 0x0, 0xfff}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0x8c, 0x1, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x3d, 0x6, "25458cb55d688a5971b9f202c13490a74b9a144f81ccb06cba57c0d4bfcb56cfdc3530a5ffd41451494072cc125e29d43be21e679263034a65"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x108, 0x1d, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x8, 0x72, 0x101}, 0x10}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x5, 0x1, 0xe, 0x401}, 0x34e3}}]}, {0x9e, 0x6, "d8024a386d10fea74c6dc2f8dc9694cfffb27f72fd16d1b7209f2ccab3405efb9d6498a764a3e48a7e2b227a7072bb125ccc45aa4a9c32dfa5f6cb64f8d5e3fba676301fee48d625082d923ece5736b1f5ba75f505c19c090031e6978506551536727e26f32e122da8fced504c3a4de8ef1b70731317720d648087e37f97328220a71786ddcd0de67740995fd5e81e438ccad7b6ffe994b7782b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1be796376847a894}}}}, @m_mirred={0x188, 0xd, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xa1, 0x5450, 0x3, 0xe, 0x10000}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x6ae1, 0x3, 0xa000, 0xb5}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x10000000, 0x6, 0xffffffc0}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xbb, 0xffc, 0x10000008, 0x99b2, 0x101}, 0x1, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x988, 0x5c, 0x10000000, 0x8, 0x80000001}, 0x3, r12}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa, 0x0, 0x4, 0x2, 0x5}, 0x2}}]}, {0x99, 0x6, "983a0c17148811920216cb83e8b35a7573189ec0ff1d6bc5ca6f3cc1628b7acbde7dc889565224aeff5935ad12035f8ca89aff7455d2fa4107a2323b62c148728644625019fac4f3e4b5e519ab987d852d1603f9b18f3b194ef4e61d101ddf9dbfb7d933ce51e4847cc6eedd70ae5eafb6ae59dabb8c50068c75efa6522f7b2627c2007cc38190adcde55a9c5e4f3f62afa2503f93"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_nat={0xac, 0x15, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x8, 0x7, 0x0, 0x40}, @dev={0xac, 0x14, 0x14, 0x1a}, @loopback, 0xffffff00, 0x1}}]}, {0x5a, 0x6, "4581548cb57f5d698a757e41590abd1e285842ec5c0f25204ecc127ae208706d9a05a2094e510641612b0fea4cf4f0a762f0d0dbf4cc8fe22c5c9af374e8644534b06edf9182a5bae9ad0431daedf94951af72c46dc3"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xa1, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x2ad8}, 0x1, 0x0, 0x0, 0x80}, 0x200010c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sys_enter\x00', r9}, 0x10) fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x400) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$binfmt_register(r3, &(0x7f00000002c0)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xffffffffffffffff, 0x3a, '!E\x0f/', 0x3a, '', 0x3a, './file0', 0x3a, [0x46, 0x50, 0x46]}, 0x2e) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRESHEX=r8], 0x7) 131.913777ms ago: executing program 2 (id=3093): r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x140, 0x90) mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f000000aa00), 0xf, 0x840) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r8 = gettid() r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r9, &(0x7f0000000200)=""/186, 0xba) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r9, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r9, 0xc0305302, &(0x7f0000000300)) tkill(r8, 0x7) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r7, @ANYBLOB="1000beb30a0001000180c2000000000008000f0001"], 0x30}}, 0x0) io_setup(0x3205fa4c, &(0x7f0000000240)) read$usbfs(r4, &(0x7f000000aa40)=""/137, 0x89) sendto$l2tp(r3, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000000)=0x81000, 0x4) recvfrom$l2tp(r3, 0x0, 0x0, 0x2020, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x3a0012fb, 0x2759, 0xf, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x1, 0x1000000, 0x0, 0x10}]) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='.\x02\x00', 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f0000000140)={r10, 0x0, 0xe0, 0x7, 0x5}) r11 = getuid() quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000040)=@sr0, r11, &(0x7f00000000c0)={0x4, 0x8, 0x1, 0x1}) 446.984µs ago: executing program 0 (id=3094): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$qrtr(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000200)="d77a1439e2f0c5a99a34602605f6ac950fc4eebe0d481f975f9097ec9b03c4f4ad72e18729ca3344a014e196f8b8145609b9b0dbfa81154daa8a1675273f67afca84f094be73ff302feefcc3f1cfbd4c0eb3b9ace0e95b8a39aae79ed9b35c363af85aa5557027b9065a382793f9106c4e6e99e6302ff9ae94148799672f2917691d823bc1fa4e5c6bb4e65750eb626eb71bfa4e1e3b09bf112810c21dbe02", 0x9f}, {&(0x7f00000002c0)="3803124df80ad6aca01839277d8813be734f89940f47e343644d41d050eead94ff795162db63ecfe9439856fae7874bccdd673d9e1a78dda3e80344b1906dc23698f2f11d85deb32ddc5d15a4db8f5b9665bbc91c0b3e6bda9fb5dc3144ea8d7990c7d8a429e338225f3c6491eea78798ef069408b75dba9bd60c2dcd48f236b6dd9ccd2f0dc99fec2df3b9ad3", 0x8d}, {&(0x7f0000000380)="27c185e4dc18a5ee092bd20c1b31a8f5e72bb4f26cdaa2756e547ef8d147aaf1beeb626a55d85ebd6d2fe729f4a83f961be5099d50ce31866416ebc04a573559281d33ae8c66486bbc7d7f158d5448fa4f8c7b8337ca76eeca176d5bc69f5d8d67b6d3fd0f02b84d25162e18979902e206df6bbe0b106ef6a2dd9acc9c0455b46d5f8d0ebfdf460e6fc7b2ce19da0ff1b9da3082df4d3dac6266114515096a838cc8b9f63ca5b5269474772caaf4cb9cab0d8bac85f0e07b6f5d51bf772903ef52eb3a2dbc52ac38a20a3e94", 0xcc}, {&(0x7f0000000480)="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", 0xfa}, {&(0x7f0000000580)="0875b63bf26438333792ff4c51db31bc1c0fdb6d3077f1d70c5ce7d9fccf0627edc4422188236dec0db9466a8146e44098b90177e303c48ba5aa5027548173cb787c445fc8bb985f14b461d70771e02bc65aa5", 0x53}, {&(0x7f0000000640)="e3d11d602d61734d41d179c09125d90b97382cfaa02e2e1839c527102251b094e1679def9aca1fa74ffa23e36fda0821fb1e04ceae21a7ae99edd4c8c5f0d86636c47f981b8455d4c051c5148cf5248a3c796b7257c4e1e2ea271cb581e239849080ab8cfc5ee4f840da93a53c68a19885199579cb1f6b803cdc4e393025cc8e715c1b1030f6fcb6184e1682639834536c41f4a6622dddb3255bdaba0c8ea3924bd20a0bf67eb2abfcf8729e4417a5568953a6d98ebccfd859b858", 0xbb}, {&(0x7f0000000100)="9a8073f8127ea06f1403aa4b962b00944860fad12549084a3f0e151c305747cfe9411aa9", 0x24}, {&(0x7f0000000740)="dadef8728e356456ad846faf497c8626bf84a641ebf47c6b974b02e854b2c1ed03e14606dc48c13b93f91d805b76910ebc974a4c577f9acf6330eab5647f024261a2c1387d0ad11cb13c5a92fedc86c4e7f3d019f01c1a1cfc6290d8c44dfd114ea785bdfed80cc2c442ead0b035370f0b0212ffd80b51e11a021a18049775aea9b3881f82d0df74ad8215aca470b84be0d10b8cffde00d49192cfc1bac9f3423f1f8530f1d4174f1177b4f56489963932ab324a84e5257b39e142e53d234933c61f33882febfd092eb3ce657910fbc007959897629ebf5ad3fe6e1dd19961", 0xdf}, {&(0x7f0000000840)="60cf5d90550d84e76a343cbd4dfcd771d5c5e5b4dfd4d87d528a2b45870f4e15d449729b5744061dac4a6e52ea5f5dbe3fd10def452a4177", 0x38}], 0x9, &(0x7f0000000940)=[{0x30, 0x113, 0xd26, "e7b20e3fdf130222ec232f6c0bebf48cb85d6b0b8c9e71391bc2bc57879ed7c2"}, {0x20, 0x1, 0x0, "4800b501e637a82dad1969"}, {0x100, 0x116, 0x9, "ed79aed519c087b084597ea9177f25bbed106399835943e478989d77bb26995245ff38a3dcc1ec4d4792f2312442637c4a940a826a882105afe34edbdcb28dedc6897814eaeeb97205ba9a082878ae7974fca51b8f076b841098711aa0c41ebb50b07a0e14a90a5ba5e46ddf43b2434e10060d59a4ffd6732b07db28fc6c8388b24b65809aa3743c1d96c17bda1259c7504cee43f98d8a23dc671777092cea937ed1a8b4ec013a30232ca8e5e798697e547a48691209bb3744ab335dd0970020aaf46e51473da75952a88acf52de6f7b489e882122428a5e994eecb877cd06bc1ad6c0a8aa1aa1bba1916391a699a2"}, {0xc8, 0x111, 0xca2, "cd6f654a62bdceec32bfaa528f0dd8f8c5e7a04fa2ae67b2b65fc764f9459412a334ff81327f1f1f31cda59a63136700a7a5dbfed2474199469dfa6a5819afa46d7ed46259d058f2753ba11121c9ff4a3e6c8b523bc39ac7bb6fabb74b117c5e4a12495eafac0cb11da107438f617a8c1dbadc2253c65e23c19cc98c2b84591a62585fe8bfc851ee2baf8cd6522cdb6cbacb2d3e52a68ea49f20d3661135e6d3f28f07be51e68621ee2cd70f0801e350594b1127b6c8056f"}, {0xf8, 0x6, 0x401, "8f4f3a4fffaba11dd60406075b3fb5d2b90c239289a70c04eaa8b60fb7bc13ab39959b5f93f7086f127823c536c9573101a1e50ebd7f631356f9d56aaf52e3109953e45c5e8b8e28057d60ce309974802bf735333ad3b9f4b23ac537f3491dc13754bca692c962e9501d74011e8e298b3990ea2bacd03edfb625d0bf88457d9d1d97b40642cd9fcba16362b05a6e640b0a867e725bdcd6327e8243e402395c78cbea99b38743202f10caba93de6fce376f1346900a608580dc2dd835b2b60d22218c693ae5adea111f1eb57d5cc6d4aa7dca4bbb764cb53cb9a007b81e48b9f3c7cabb"}, {0x60, 0x101, 0x8, "a1097cbbf60115285ab0e8a87a1c8314780762d731d61a19de7b2f4e89007989dd040ee99da9df4fd51ecc25b12c0273dfc8671e1f8cbe35fee4299aab249021118463f727d995ed1d1be4d7"}, {0x68, 0x110, 0x5, "d210f8af8640ffdebc0318d1388ae1bdf6651ac2d2d438da306631ba1e759a497d70e12d0c9c3d0a171562c46660bf76dfe81c28fb383dd5ebce244a4361fa3895454e8be0701ab776592a8de5221b3800c25ce2d601"}, {0x48, 0x88, 0x10, "052e6640567a08cca388ff27329d4f134fa71975a5dc5ec8ddf100b68e33785db0fbe993442d80db8db5df6a6325afd8df"}], 0x420, 0x8800}, 0x38) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000003340)="a5d3b26367b9576854ff7bdc3f6fea67", 0x10) sendmmsg$alg(r2, &(0x7f0000007b40)=[{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000001740)="415b66934845e42acb83a6dbd1b12a2745576c45be86eeff2575833567f96eb9dd4a5ef3ffce4ea4f15804e73b945754a8a4fb4cd667072489d4a839397d9e8aca8717d2102305e397b04050046dd6c0361f79a35f0a9371975687164fb5207aa57f62531a2feac47a0da785a74e89", 0x6f}], 0x1, &(0x7f0000002b80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000005740)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)=""/4, 0x4}, {&(0x7f0000000180)=""/106, 0x6a}], 0x2}}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x0) socket$packet(0x11, 0x3, 0x300) socketpair(0x1e, 0x1, 0x1, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000012840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000007e40)=[{&(0x7f0000006d00)="3e1aed9e55c3cdeee8c67499bf1348b9863f7b756cfa79e449223d4defacc740d79faaee01ee674abbae699f5be0b784d82a18d06c802c6fc9ac50e069db01a458353fd6392e644f340eac94565badc6788736847318f722e02a12d1811ff480096ce526a50068208b52f43e471ffe9801fb803d3e3256a718", 0x79}, {&(0x7f0000006d80)="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", 0x54c}], 0x2}}], 0x5, 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') pipe(&(0x7f0000000080)) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="053900002000ef029dd2b97576b11d2180"], 0x33fe0) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r9, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000240), 0x208e24b) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r11 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r11, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x0, [0x0, 0x8000000], [0x8200, 0x1]}}}) ioctl$VIDIOC_QBUF(r11, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603}) 0s ago: executing program 1 (id=3095): r0 = socket$inet6(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) socket$alg(0x26, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001040)=0x0) close(0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x8000000003c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000001100), 0x4) syslog(0x2, 0x0, 0x0) syslog(0x4, &(0x7f0000001300)=""/95, 0x5f) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000000)="80", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000001380)=""/4102, &(0x7f0000000040)=0x1006) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) kernel console output (not intermixed with test programs): 8] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.586010][T14578] team0: Port device team_slave_0 added [ 455.588892][T14578] team0: Port device team_slave_1 added [ 455.618599][T14578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.620316][T14578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.630075][T14578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.633652][T14578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.636049][T14578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.642480][T14578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.680268][T14578] hsr_slave_0: entered promiscuous mode [ 455.682394][T14578] hsr_slave_1: entered promiscuous mode [ 455.684341][T14578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 455.687975][T14578] Cannot create hsr debugfs directory [ 455.787111][T14578] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.908451][T14578] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.961537][T14578] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.031077][T14578] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.160155][T14578] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 456.163537][T14578] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 456.168017][T14578] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 456.171156][T14578] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 456.182953][T14578] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.185630][T14578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.188286][T14578] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.190114][T14578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.219969][T14578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.228920][T11335] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.232428][T11335] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.257592][T14578] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.264993][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.267023][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.273369][T11335] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.275083][T11335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.360027][T14578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.383243][T14578] veth0_vlan: entered promiscuous mode [ 456.388987][T14578] veth1_vlan: entered promiscuous mode [ 456.401855][T14578] veth0_macvtap: entered promiscuous mode [ 456.408575][T14578] veth1_macvtap: entered promiscuous mode [ 456.415349][T14578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.419192][T14578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.421731][T14578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.424397][T14578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.427078][T14578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.429734][T14578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.432242][T14578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.434906][T14578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.439081][T14578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.615712][ T5341] Bluetooth: hci3: command tx timeout [ 459.685744][ T5336] Bluetooth: hci3: command tx timeout [ 459.923921][ T5341] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 459.932306][ T5341] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 459.937205][ T5341] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 459.944717][ T5341] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 459.949928][ T5341] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 459.953841][ T5341] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 460.400708][ T39] audit: type=1400 audit(1729017922.647:1876): avc: denied { ioctl } for pid=14600 comm="syz.0.2655" path="socket:[65574]" dev="sockfs" ino=65574 ioctlcmd=0x8954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 460.416579][T14578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.420024][T14578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.423169][T14578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.426957][T14578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.429410][T14578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.432399][T14578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.437727][T14578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.440614][T14601] netlink: 'syz.0.2655': attribute type 9 has an invalid length. [ 460.445685][T14601] bond_slave_0: entered promiscuous mode [ 460.447710][T14601] bond_slave_1: entered promiscuous mode [ 460.449240][T14601] macvlan2: entered promiscuous mode [ 460.450603][T14601] bond0: entered promiscuous mode [ 460.452643][T14601] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 460.458077][T14578] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.460308][T14578] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.462599][T14578] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.464982][T14578] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.509037][ T39] audit: type=1400 audit(1729017922.757:1877): avc: denied { connect } for pid=14603 comm="syz.0.2656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 460.513354][T14593] lo speed is unknown, defaulting to 1000 [ 460.527881][ T39] audit: type=1400 audit(1729017922.767:1878): avc: denied { write } for pid=14603 comm="syz.0.2656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 460.562433][T11333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.564360][T11333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.588876][T11333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.590958][T11333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.642093][T14593] chnl_net:caif_netlink_parms(): no params data found [ 460.688550][ T39] audit: type=1400 audit(1729017922.937:1879): avc: denied { bind } for pid=14597 comm="syz.1.2654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 460.702159][ T5341] Bluetooth: hci8: sending frame failed (-49) [ 460.704685][ T5336] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 461.446063][T14574] plantronics 0003:047F:FFFF.000A: timeout initializing reports [ 461.765682][ T5336] Bluetooth: hci3: command tx timeout [ 462.005750][ T5336] Bluetooth: hci5: command tx timeout [ 463.527332][ T25] usb 7-1: USB disconnect, device number 37 [ 463.566679][T14593] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.569277][T14593] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.571360][T14593] bridge_slave_0: entered allmulticast mode [ 463.574251][T14593] bridge_slave_0: entered promiscuous mode [ 463.594654][T14593] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.597897][T14593] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.600194][T14593] bridge_slave_1: entered allmulticast mode [ 463.602957][T14593] bridge_slave_1: entered promiscuous mode [ 463.678262][T11333] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.688841][T14593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.692488][T14593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.728767][T14593] team0: Port device team_slave_0 added [ 463.733783][T14593] team0: Port device team_slave_1 added [ 463.766250][T11333] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.820652][T14593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.822479][T14593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.831210][T14593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.835376][T14593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.843005][T14593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.852406][T14593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.911527][T14593] hsr_slave_0: entered promiscuous mode [ 463.915358][T14593] hsr_slave_1: entered promiscuous mode [ 464.087247][ T5336] Bluetooth: hci5: command tx timeout [ 464.625054][T14647] Invalid logical block size (58623) [ 464.730438][T14593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 464.734534][T14593] Cannot create hsr debugfs directory [ 464.808260][T11333] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.029769][T11333] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.165974][ T5336] Bluetooth: hci5: command tx timeout [ 468.245633][ T5336] Bluetooth: hci5: command tx timeout [ 468.610567][ T39] audit: type=1400 audit(1729017930.857:1880): avc: denied { create } for pid=14704 comm="syz.1.2682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 468.622921][ T39] audit: type=1400 audit(1729017930.867:1881): avc: denied { getopt } for pid=14704 comm="syz.1.2682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 468.632610][ T39] audit: type=1400 audit(1729017930.877:1882): avc: denied { write } for pid=14704 comm="syz.1.2682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 468.641079][ T39] audit: type=1400 audit(1729017930.887:1883): avc: denied { ioctl } for pid=14704 comm="syz.1.2682" path="socket:[65743]" dev="sockfs" ino=65743 ioctlcmd=0x9428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 468.968319][ T39] audit: type=1400 audit(1729017931.207:1884): avc: denied { open } for pid=14693 comm="syz.3.2678" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=66926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 469.646976][T11333] bond0 (unregistering): Released all slaves [ 469.652096][T11333] bond1 (unregistering): Released all slaves [ 469.656530][T11333] bond2 (unregistering): Released all slaves [ 469.661396][T11333] bond3 (unregistering): (slave team_slave_1): Releasing active interface [ 469.664448][T11333] team_slave_1: left promiscuous mode [ 469.670595][T11333] bond3 (unregistering): Released all slaves [ 469.713274][ T39] audit: type=1400 audit(1729017931.957:1885): avc: denied { read append } for pid=14714 comm="syz.3.2684" name="btrfs-control" dev="devtmpfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 469.723628][ T39] audit: type=1400 audit(1729017931.957:1886): avc: denied { open } for pid=14714 comm="syz.3.2684" path="/dev/btrfs-control" dev="devtmpfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 469.752967][ T39] audit: type=1400 audit(1729017931.997:1887): avc: denied { ioctl } for pid=14714 comm="syz.3.2684" path="/dev/btrfs-control" dev="devtmpfs" ino=1149 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 469.875978][T11333] þü: left promiscuous mode [ 474.611756][T11333] IPVS: stopping master sync thread 13580 ... [ 474.820167][T14703] lo speed is unknown, defaulting to 1000 [ 475.571132][T14743] tmpfs: Unknown parameter 'usrquotae_lookup' [ 475.573181][ T39] audit: type=1400 audit(1729017937.817:1888): avc: denied { map } for pid=14742 comm="syz.1.2691" path="pipe:[65847]" dev="pipefs" ino=65847 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 478.793533][ T5341] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 478.800632][ T5341] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 478.804747][ T5341] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 478.814433][ T5341] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 478.817427][ T5341] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 478.821207][ T5341] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 480.885774][ T5336] Bluetooth: hci2: command tx timeout [ 482.965600][ T5336] Bluetooth: hci2: command tx timeout [ 485.045728][ T5336] Bluetooth: hci2: command tx timeout [ 486.068386][ T5341] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 486.081991][ T5341] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 486.091638][ T5341] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 486.098466][ T5341] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 486.111582][ T5341] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 486.122928][ T5341] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 486.126744][ T5340] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 486.130019][ T5341] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 486.141521][ T5340] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 486.206990][ T5340] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 486.210678][ T5340] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 486.213295][ T5340] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 487.125618][ T66] Bluetooth: hci2: command tx timeout [ 487.378634][T14754] lo speed is unknown, defaulting to 1000 [ 487.475672][T14754] chnl_net:caif_netlink_parms(): no params data found [ 488.165794][ T66] Bluetooth: hci6: command tx timeout [ 488.245695][ T66] Bluetooth: hci8: command tx timeout [ 490.251610][ T66] Bluetooth: hci6: command tx timeout [ 490.325690][ T66] Bluetooth: hci8: command tx timeout [ 490.497130][T11333] hsr_slave_0: left promiscuous mode [ 490.526225][T11333] hsr_slave_1: left promiscuous mode [ 490.568764][T11333] veth1_vlan: left promiscuous mode [ 490.570210][T11333] veth0_vlan: left promiscuous mode [ 492.308985][T14593] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 492.314410][T14593] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 492.325900][ T66] Bluetooth: hci6: command tx timeout [ 492.342479][T14754] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.344947][T14754] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.347321][T14754] bridge_slave_0: entered allmulticast mode [ 492.349341][T14754] bridge_slave_0: entered promiscuous mode [ 492.351949][T14593] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 492.354984][T14593] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 492.364850][T14754] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.367104][T14754] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.368847][T14754] bridge_slave_1: entered allmulticast mode [ 492.370722][T14754] bridge_slave_1: entered promiscuous mode [ 492.405666][ T66] Bluetooth: hci8: command tx timeout [ 492.416605][T14754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.423648][T14754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.459389][T14754] team0: Port device team_slave_0 added [ 492.464979][T14754] team0: Port device team_slave_1 added [ 492.519283][T14754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.521644][T14754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.532254][T14754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.538112][T14754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.540038][T14754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.548869][T14754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.590219][T14754] hsr_slave_0: entered promiscuous mode [ 492.592302][T14754] hsr_slave_1: entered promiscuous mode [ 492.634958][T11333] IPVS: stop unused estimator thread 0... [ 492.683600][T14758] chnl_net:caif_netlink_parms(): no params data found [ 492.700074][T14760] chnl_net:caif_netlink_parms(): no params data found [ 492.789966][T14754] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.932340][T14754] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.943330][T14593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.946231][T14758] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.948827][T14758] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.951388][T14758] bridge_slave_0: entered allmulticast mode [ 492.954761][T14758] bridge_slave_0: entered promiscuous mode [ 492.962790][T14758] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.965907][T14758] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.968382][T14758] bridge_slave_1: entered allmulticast mode [ 492.971423][T14758] bridge_slave_1: entered promiscuous mode [ 493.003346][T11333] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.013445][T14760] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.016224][T14760] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.018449][T14760] bridge_slave_0: entered allmulticast mode [ 493.020825][T14760] bridge_slave_0: entered promiscuous mode [ 493.024137][T14760] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.026240][T14760] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.028391][T14760] bridge_slave_1: entered allmulticast mode [ 493.031456][T14760] bridge_slave_1: entered promiscuous mode [ 493.117203][T14754] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.129168][T14758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.148598][T11333] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.156885][T14760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.162728][T14760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.184234][T14758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.245733][T14754] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.270997][T14760] team0: Port device team_slave_0 added [ 493.329441][T11333] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.337958][T14758] team0: Port device team_slave_0 added [ 493.341521][T14760] team0: Port device team_slave_1 added [ 493.371913][T14758] team0: Port device team_slave_1 added [ 493.390985][T14593] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.393938][T14760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.397427][T14760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.408052][T14760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.435157][T11333] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.454741][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.457330][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.460465][T14760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.462405][T14760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.469427][T14760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.472861][T14758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.474771][T14758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.482246][T14758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.486467][T14758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.488965][T14758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.496353][T14758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.522097][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.523983][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.588855][T14758] hsr_slave_0: entered promiscuous mode [ 493.591341][T14758] hsr_slave_1: entered promiscuous mode [ 493.593608][T14758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.596750][T14758] Cannot create hsr debugfs directory [ 493.637566][T14760] hsr_slave_0: entered promiscuous mode [ 493.640160][T14760] hsr_slave_1: entered promiscuous mode [ 493.642481][T14760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.644475][T14760] Cannot create hsr debugfs directory [ 493.646125][T14754] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 493.665113][T14754] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 493.692975][T14754] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 493.701098][T14754] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 493.811397][T11333] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.841267][T14593] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 493.844471][T14593] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 493.904780][T11333] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.945767][T14754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.954889][T14754] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.990254][T11333] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.006817][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.009406][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.018161][T11335] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.020472][T11335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.026362][T14593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.076911][T11333] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.084930][T14754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 494.094770][T14593] veth0_vlan: entered promiscuous mode [ 494.100681][T14593] veth1_vlan: entered promiscuous mode [ 494.124564][T14593] veth0_macvtap: entered promiscuous mode [ 494.133692][T14593] veth1_macvtap: entered promiscuous mode [ 494.145107][T14593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.149070][T14593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.151651][T14593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.155053][T14593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.160412][T14593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.163584][T14593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.166578][T14593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.169671][T14593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.172972][T14593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.177248][T14593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.180557][T14593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.184166][T14593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.188499][T14593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.191038][T14593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.193677][T14593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.196955][T14593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.200281][T14593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.202814][T14593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.206031][T14593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.210454][T14593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.228098][T14593] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.230866][T14593] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.233886][T14593] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.238402][T14593] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.258422][T11333] bridge_slave_1: left allmulticast mode [ 494.260366][T11333] bridge_slave_1: left promiscuous mode [ 494.262435][T11333] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.265742][T11333] bridge_slave_0: left allmulticast mode [ 494.267816][T11333] bridge_slave_0: left promiscuous mode [ 494.269428][T11333] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.273141][T11333] bridge_slave_1: left allmulticast mode [ 494.274660][T11333] bridge_slave_1: left promiscuous mode [ 494.276498][T11333] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.280653][T11333] bridge_slave_0: left allmulticast mode [ 494.282709][T11333] bridge_slave_0: left promiscuous mode [ 494.284455][T11333] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.289944][T11333] bridge_slave_1: left allmulticast mode [ 494.292095][T11333] bridge_slave_1: left promiscuous mode [ 494.294191][T11333] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.298948][T11333] bridge_slave_0: left allmulticast mode [ 494.301006][T11333] bridge_slave_0: left promiscuous mode [ 494.303140][T11333] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.311797][T11333] bridge_slave_1: left promiscuous mode [ 494.313903][T11333] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.317992][T11333] bridge_slave_0: left promiscuous mode [ 494.320132][T11333] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.324649][T11333] bridge_slave_1: left allmulticast mode [ 494.328119][T11333] bridge_slave_1: left promiscuous mode [ 494.329735][T11333] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.332751][T11333] bridge_slave_0: left allmulticast mode [ 494.334195][T11333] bridge_slave_0: left promiscuous mode [ 494.336323][T11333] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.405640][ T66] Bluetooth: hci6: command tx timeout [ 494.485769][ T66] Bluetooth: hci8: command tx timeout [ 495.930579][T11333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.934630][T11333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.939061][T11333] bond0 (unregistering): Released all slaves [ 496.039969][T11333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.044046][T11333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.048333][T11333] bond0 (unregistering): Released all slaves [ 496.145908][T11333] team0: Port device bond0 removed [ 496.158499][T11333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.167025][T11333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.171397][T11333] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 496.174391][T11333] bond0 (unregistering): Released all slaves [ 496.178959][T11333] bond1 (unregistering): Released all slaves [ 496.282166][T11333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.285208][T11333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.288181][T11333] bond0 (unregistering): Released all slaves [ 496.372654][T11333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.376578][T11333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.381925][T11333] bond0 (unregistering): Released all slaves [ 496.428948][T14754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.526794][T14754] veth0_vlan: entered promiscuous mode [ 496.539106][ T1210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.542633][ T1210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.547595][T14754] veth1_vlan: entered promiscuous mode [ 496.563597][T11333] þü: left promiscuous mode [ 496.582433][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.584625][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.616530][T14754] veth0_macvtap: entered promiscuous mode [ 496.619626][T14754] veth1_macvtap: entered promiscuous mode [ 496.627049][T14754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.628470][T14789] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2652'. [ 496.630537][T14754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.637808][T14754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.640534][T14754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.643398][T14754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.646543][T14754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.648987][T14754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.651608][T14754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.654355][T14754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.657685][T14754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.661089][T14754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.663786][T14754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.667258][T14754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.672313][T14754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.675019][T14754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.677854][T14754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.680555][T14754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.683063][T14754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.685805][T14754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.688317][T14754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.690983][T14754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.693712][T14754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.697270][T14754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.698529][ T39] audit: type=1400 audit(1729017958.947:1889): avc: denied { write } for pid=4819 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.701651][T14754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.706942][ T39] audit: type=1400 audit(1729017958.947:1890): avc: denied { remove_name } for pid=4819 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.710672][T14754] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.714921][ T39] audit: type=1400 audit(1729017958.947:1891): avc: denied { rename } for pid=4819 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 496.717319][T14754] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.717338][T14754] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.724222][ T39] audit: type=1400 audit(1729017958.947:1892): avc: denied { add_name } for pid=4819 comm="syslogd" name="messages.0" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.726683][T14754] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.736850][T11333] þü: left promiscuous mode [ 496.738164][ T39] audit: type=1400 audit(1729017958.947:1893): avc: denied { unlink } for pid=4819 comm="syslogd" name="messages.0" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 496.750490][ T39] audit: type=1400 audit(1729017958.947:1894): avc: denied { create } for pid=4819 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 496.794290][ T1210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.797905][ T1210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.811254][ T1210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.814597][ T1210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.548795][T14758] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 497.571738][T14758] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 497.620411][T14758] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 497.642540][T14758] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 497.731846][T14760] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 497.739202][T14760] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 497.744311][T14760] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 497.752052][T14760] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 497.844966][T14758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.895084][T14758] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.903143][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.905922][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.919523][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.922124][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.958400][T14760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.019010][T14760] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.032732][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.035380][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.064401][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.067112][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.130195][T14758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.207841][T14758] veth0_vlan: entered promiscuous mode [ 498.215770][T14758] veth1_vlan: entered promiscuous mode [ 498.247584][T11333] hsr_slave_0: left promiscuous mode [ 498.250220][T11333] hsr_slave_1: left promiscuous mode [ 498.252638][T11333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.254697][T11333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.258052][T11333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.260729][T11333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.266859][T11333] hsr_slave_0: left promiscuous mode [ 498.269536][T11333] hsr_slave_1: left promiscuous mode [ 498.272114][T11333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.274825][T11333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.279897][T11333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.282614][T11333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.288060][T11333] hsr_slave_0: left promiscuous mode [ 498.290603][T11333] hsr_slave_1: left promiscuous mode [ 498.296370][T11333] hsr_slave_0: left promiscuous mode [ 498.303643][T11333] hsr_slave_1: left promiscuous mode [ 498.307610][T11333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.310752][T11333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.317080][T11333] hsr_slave_0: left promiscuous mode [ 498.319734][T11333] hsr_slave_1: left promiscuous mode [ 498.322345][T11333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.324946][T11333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.328285][T11333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.330896][T11333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.494145][T11333] veth1_macvtap: left promiscuous mode [ 498.497171][T11333] veth0_macvtap: left promiscuous mode [ 498.499245][T11333] veth1_vlan: left promiscuous mode [ 498.501217][T11333] veth0_vlan: left promiscuous mode [ 498.504315][T11333] veth1_macvtap: left promiscuous mode [ 498.506521][T11333] veth0_macvtap: left promiscuous mode [ 498.508571][T11333] veth1_vlan: left promiscuous mode [ 498.510531][T11333] veth0_vlan: left promiscuous mode [ 498.513922][T11333] veth1_macvtap: left promiscuous mode [ 498.516158][T11333] veth0_macvtap: left promiscuous mode [ 498.518187][T11333] veth1_vlan: left promiscuous mode [ 498.520063][T11333] veth0_vlan: left promiscuous mode [ 498.522759][T11333] veth1_macvtap: left promiscuous mode [ 498.524849][T11333] veth0_macvtap: left promiscuous mode [ 498.527083][T11333] veth1_vlan: left promiscuous mode [ 498.528965][T11333] veth0_vlan: left promiscuous mode [ 500.105058][T11333] team0 (unregistering): Port device team_slave_1 removed [ 500.310902][T11333] team0 (unregistering): Port device team_slave_0 removed [ 501.138209][ T1382] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.528007][T11333] team0 (unregistering): Port device team_slave_1 removed [ 502.618925][T11333] team0 (unregistering): Port device team_slave_0 removed [ 504.053041][T11333] team0 (unregistering): Port device team_slave_1 removed [ 504.184712][T11333] team0 (unregistering): Port device team_slave_0 removed [ 505.760626][T11333] team0 (unregistering): Port device team_slave_1 removed [ 505.852012][T11333] team0 (unregistering): Port device team_slave_0 removed [ 507.441926][T11333] team0 (unregistering): Port device team_slave_1 removed [ 507.531274][T11333] team0 (unregistering): Port device team_slave_0 removed [ 508.356077][T14822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2701'. [ 508.385667][T14758] veth0_macvtap: entered promiscuous mode [ 508.394019][T14760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.397978][T14758] veth1_macvtap: entered promiscuous mode [ 508.430828][T14758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.434809][T14758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.438458][T14758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.441186][T14758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.443816][T14758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.446605][T14758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.449096][T14758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.451756][T14758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.455112][T14758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.468003][T14758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.470715][T14758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.473213][T14758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.476017][T14758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.478520][T14758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.481167][T14758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.484480][T14758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.492583][T14758] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.494923][T14758] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.497549][T14758] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.499791][T14758] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.513867][T14760] veth0_vlan: entered promiscuous mode [ 508.558012][T14760] veth1_vlan: entered promiscuous mode [ 508.578568][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.581291][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.620862][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.623608][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.642854][T14760] veth0_macvtap: entered promiscuous mode [ 508.647613][T14760] veth1_macvtap: entered promiscuous mode [ 508.661671][T14760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.664283][T14760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.666907][T14760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.669583][T14760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.672084][T14760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.675189][T14760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.677776][T14760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.680447][T14760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.682974][T14760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.685887][T14760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.689316][T14760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.709912][T14760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.712583][T14760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.714973][T14760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.740934][T14760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.743996][T14760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.752084][T14760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.754631][T14760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.763307][T14760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.774224][T14760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.782288][T14760] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.784722][T14760] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.787151][T14760] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.789462][T14760] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.810948][T14842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2706'. [ 508.824976][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.829281][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.839908][T14842] vlan2: entered allmulticast mode [ 508.841712][T14842] vlan1: entered allmulticast mode [ 508.843564][T14842] veth0_vlan: entered allmulticast mode [ 508.847643][T14842] bridge0: port 3(vlan2) entered blocking state [ 508.849980][T14842] bridge0: port 3(vlan2) entered disabled state [ 508.853107][T14842] vlan2: entered promiscuous mode [ 508.854945][T14842] vlan1: entered promiscuous mode [ 508.859467][T14842] bridge0: port 3(vlan2) entered blocking state [ 508.861433][T14842] bridge0: port 3(vlan2) entered forwarding state [ 508.915096][T14840] bridge0: port 3(vlan2) entered disabled state [ 508.917111][T14840] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.919767][T14840] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.008577][T14840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.021418][T14840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.067410][T14840] veth0_vlan: left allmulticast mode [ 509.073504][T14840] vlan1: left allmulticast mode [ 509.076989][T14840] vlan1: left promiscuous mode [ 509.100550][T14840] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.103562][T14840] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.112748][T14840] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.124895][T14840] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.182288][T14842] bridge_slave_0: left allmulticast mode [ 509.184186][T14842] bridge_slave_0: left promiscuous mode [ 509.186751][T14842] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.193340][T14842] bridge_slave_1: left allmulticast mode [ 509.195589][T14842] bridge_slave_1: left promiscuous mode [ 509.198004][T14842] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.204493][T14842] bond0: (slave bond_slave_0): Releasing backup interface [ 509.209742][T14842] bond0: (slave bond_slave_1): Releasing backup interface [ 509.220272][T14842] team0: Port device team_slave_0 removed [ 509.223826][T14842] team0: Port device team_slave_1 removed [ 509.229789][T14842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.233156][T14842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.240835][T14842] vlan2: left promiscuous mode [ 509.242682][T14842] bridge0: port 3(vlan2) entered disabled state [ 509.269745][T11335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.278878][T11335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.362618][ T39] audit: type=1400 audit(1729017971.607:1895): avc: denied { create } for pid=14846 comm="syz.3.2696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 510.010297][ T39] audit: type=1400 audit(1729017972.237:1896): avc: denied { write } for pid=14862 comm="syz.1.2711" name="sg0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 510.304000][ T39] audit: type=1400 audit(1729017972.547:1897): avc: denied { getopt } for pid=14865 comm="syz.3.2712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 510.350713][T11333] IPVS: stop unused estimator thread 0... [ 510.430068][T14870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2714'. [ 510.461583][T11333] bridge_slave_1: left allmulticast mode [ 510.463134][T11333] bridge_slave_1: left promiscuous mode [ 510.464663][T11333] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.479439][T11333] bridge_slave_0: left allmulticast mode [ 510.480975][T11333] bridge_slave_0: left promiscuous mode [ 510.483870][T11333] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.512044][ T39] audit: type=1400 audit(1729017972.757:1898): avc: denied { read write } for pid=14871 comm="syz.3.2716" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 510.552963][ T39] audit: type=1400 audit(1729017972.757:1899): avc: denied { open } for pid=14871 comm="syz.3.2716" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 510.559815][ T39] audit: type=1400 audit(1729017972.797:1900): avc: denied { unmount } for pid=14760 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 510.973886][T11333] bond0 (unregistering): left promiscuous mode [ 510.975791][T11333] bond_slave_0: left promiscuous mode [ 510.977441][T11333] bond_slave_1: left promiscuous mode [ 510.992186][T11333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.998565][T11333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 511.003521][T11333] bond0 (unregistering): Released all slaves [ 511.315589][T11333] hsr_slave_0: left promiscuous mode [ 511.317708][T11333] hsr_slave_1: left promiscuous mode [ 511.326756][T11333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.329483][T11333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.332098][T11333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.334167][T11333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.368516][T11333] veth1_macvtap: left promiscuous mode [ 511.372683][T11333] veth0_macvtap: left promiscuous mode [ 511.374829][T11333] veth1_vlan: left promiscuous mode [ 511.377269][T11333] veth0_vlan: left promiscuous mode [ 511.645536][T13991] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 511.822729][T13991] usb 6-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 511.825924][T13991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.836845][T13991] usb 6-1: config 0 descriptor?? [ 511.842749][T13991] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input28 [ 512.239862][ T39] audit: type=1400 audit(1729017974.487:1901): avc: denied { mount } for pid=14894 comm="syz.2.2723" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 512.246642][T14896] netlink: 560 bytes leftover after parsing attributes in process `syz.2.2723'. [ 512.250547][ T39] audit: type=1400 audit(1729017974.497:1902): avc: denied { write } for pid=14894 comm="syz.2.2723" name="task" dev="proc" ino=69191 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 512.256563][ T39] audit: type=1400 audit(1729017974.497:1903): avc: denied { add_name } for pid=14894 comm="syz.2.2723" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 512.263436][ T39] audit: type=1400 audit(1729017974.497:1904): avc: denied { create } for pid=14894 comm="syz.2.2723" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 512.501866][T14898] FAULT_INJECTION: forcing a failure. [ 512.501866][T14898] name failslab, interval 1, probability 0, space 0, times 0 [ 512.505269][T14898] CPU: 3 UID: 0 PID: 14898 Comm: syz.2.2724 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 512.508092][T14898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 512.511278][T14898] Call Trace: [ 512.512368][T14898] [ 512.512530][ T5395] IPVS: starting estimator thread 0... [ 512.513433][T14898] dump_stack_lvl+0x16c/0x1f0 [ 512.516524][T14898] should_fail_ex+0x497/0x5b0 [ 512.518151][T14898] ? fs_reclaim_acquire+0xae/0x150 [ 512.519899][T14898] should_failslab+0xc2/0x120 [ 512.521515][T14898] kmem_cache_alloc_node_noprof+0x71/0x310 [ 512.523506][T14898] ? __alloc_skb+0x2b1/0x380 [ 512.525100][T14898] __alloc_skb+0x2b1/0x380 [ 512.526652][T14898] ? __pfx___alloc_skb+0x10/0x10 [ 512.528339][T14898] ? hlock_class+0x4e/0x130 [ 512.529887][T14898] ? __lock_acquire+0x15e0/0x3ce0 [ 512.531617][T14898] alloc_skb_with_frags+0xe4/0x850 [ 512.533357][T14898] ? __pfx_lock_release+0x10/0x10 [ 512.535068][T14898] sock_alloc_send_pskb+0x7f1/0x980 [ 512.536842][T14898] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 512.538780][T14898] ? __pfx_lock_release+0x10/0x10 [ 512.540476][T14898] ? do_raw_spin_lock+0x12d/0x2c0 [ 512.542172][T14898] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 512.543991][T14898] ? lock_acquire+0x2f/0xb0 [ 512.545529][T14898] ? unix_dgram_sendmsg+0x928/0x19e0 [ 512.547375][T14898] unix_dgram_sendmsg+0x4b8/0x19e0 [ 512.549120][T14898] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 512.551402][T14898] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 512.553276][T14898] ? __import_iovec+0x1fd/0x6e0 [ 512.554943][T14898] ____sys_sendmsg+0xaaf/0xc90 [ 512.556565][T14898] ? copy_msghdr_from_user+0x10b/0x160 [ 512.558411][T14898] ? __pfx_____sys_sendmsg+0x10/0x10 [ 512.560183][T14898] ? hlock_class+0x4e/0x130 [ 512.561719][T14898] ? __lock_acquire+0x163e/0x3ce0 [ 512.563436][T14898] ___sys_sendmsg+0x135/0x1e0 [ 512.565048][T14898] ? __pfx____sys_sendmsg+0x10/0x10 [ 512.566834][T14898] ? __pfx___lock_acquire+0x10/0x10 [ 512.568623][T14898] ? __pfx___might_resched+0x10/0x10 [ 512.570422][T14898] ? __might_fault+0xe3/0x190 [ 512.572034][T14898] __sys_sendmmsg+0x1a1/0x450 [ 512.573647][T14898] ? __pfx___sys_sendmmsg+0x10/0x10 [ 512.575422][T14898] ? vfs_write+0x14d/0x1140 [ 512.576989][T14898] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 512.579037][T14898] ? fput+0x30/0x390 [ 512.580381][T14898] ? ksys_write+0x1ad/0x260 [ 512.581929][T14898] ? __pfx_ksys_write+0x10/0x10 [ 512.583602][T14898] __x64_sys_sendmmsg+0x9c/0x100 [ 512.585293][T14898] ? lockdep_hardirqs_on+0x7c/0x110 [ 512.587081][T14898] do_syscall_64+0xcd/0x250 [ 512.588643][T14898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.590656][T14898] RIP: 0033:0x7f9f6297dff9 [ 512.592174][T14898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.595688][T14899] IPVS: using max 34 ests per chain, 81600 per kthread [ 512.598603][T14898] RSP: 002b:00007f9f63859038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 512.603842][T14898] RAX: ffffffffffffffda RBX: 00007f9f62b35f80 RCX: 00007f9f6297dff9 [ 512.606530][T14898] RDX: 0000000000000651 RSI: 0000000020000000 RDI: 0000000000000004 [ 512.609162][T14898] RBP: 00007f9f63859090 R08: 0000000000000000 R09: 0000000000000000 [ 512.611827][T14898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 512.614481][T14898] R13: 0000000000000000 R14: 00007f9f62b35f80 R15: 00007fff1e5be588 [ 512.617160][T14898] [ 512.618336][ C3] vkms_vblank_simulate: vblank timer overrun [ 512.659447][T14901] FAULT_INJECTION: forcing a failure. [ 512.659447][T14901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.662808][T14901] CPU: 2 UID: 0 PID: 14901 Comm: syz.2.2725 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 512.665672][T14901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 512.668502][T14901] Call Trace: [ 512.669376][T14901] [ 512.670153][T14901] dump_stack_lvl+0x16c/0x1f0 [ 512.671414][T14901] should_fail_ex+0x497/0x5b0 [ 512.672641][T14901] _copy_from_user+0x30/0xf0 [ 512.673850][T14901] drm_ioctl+0x501/0xc00 [ 512.675096][T14901] ? __pfx_drm_mode_obj_set_property_ioctl+0x10/0x10 [ 512.676823][T14901] ? __pfx_drm_ioctl+0x10/0x10 [ 512.678065][T14901] ? trace_lock_acquire+0x14a/0x1d0 [ 512.679447][T14901] ? selinux_file_ioctl+0x180/0x270 [ 512.680818][T14901] ? selinux_file_ioctl+0xb4/0x270 [ 512.682227][T14901] ? __pfx_drm_ioctl+0x10/0x10 [ 512.683565][T14901] __x64_sys_ioctl+0x18f/0x220 [ 512.684849][T14901] do_syscall_64+0xcd/0x250 [ 512.686035][T14901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.687599][T14901] RIP: 0033:0x7f9f6297dff9 [ 512.688753][T14901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.693670][T14901] RSP: 002b:00007f9f63859038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 512.695852][T14901] RAX: ffffffffffffffda RBX: 00007f9f62b35f80 RCX: 00007f9f6297dff9 [ 512.697865][T14901] RDX: 00000000200000c0 RSI: 00000000c01864ba RDI: 0000000000000003 [ 512.699900][T14901] RBP: 00007f9f63859090 R08: 0000000000000000 R09: 0000000000000000 [ 512.701931][T14901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.703986][T14901] R13: 0000000000000000 R14: 00007f9f62b35f80 R15: 00007fff1e5be588 [ 512.706308][T14901] [ 512.796588][T14903] netlink: 'syz.2.2726': attribute type 4 has an invalid length. [ 512.799152][T14903] netlink: 'syz.2.2726': attribute type 1 has an invalid length. [ 512.801701][T14903] netlink: 88156 bytes leftover after parsing attributes in process `syz.2.2726'. [ 512.809229][ T5483] usb 6-1: USB disconnect, device number 17 [ 512.884060][T11333] team0 (unregistering): Port device team_slave_1 removed [ 512.985159][T11333] team0 (unregistering): Port device team_slave_0 removed [ 513.941105][T14914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.948485][T14914] batadv_slave_0: entered allmulticast mode [ 513.958358][T14919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2728'. [ 514.309639][T14943] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2740'. [ 514.396107][T14941] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 515.170551][T14960] ubi0: detaching mtd0 [ 515.176186][T14960] ubi0: mtd0 is detached [ 515.231467][T14961] loop0: detected capacity change from 0 to 128 [ 515.234498][T14961] loop0: [CUMANA/ADFS] p1 [ADFS] p1 [ 515.237794][T14961] loop0: partition table partially beyond EOD, truncated [ 515.240532][T14961] loop0: p1 size 348879409 extends beyond EOD, truncated [ 515.377569][T14966] overlayfs: failed to resolve './file1': -2 [ 515.385683][ T39] kauditd_printk_skb: 6 callbacks suppressed [ 515.385694][ T39] audit: type=1400 audit(1729017977.627:1911): avc: denied { write } for pid=14965 comm="syz.0.2747" name="/" dev="9p" ino=37617748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 515.402840][ T39] audit: type=1400 audit(1729017977.637:1912): avc: denied { remove_name } for pid=14965 comm="syz.0.2747" name="file1" dev="9p" ino=37617805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 515.416695][ T39] audit: type=1400 audit(1729017977.647:1913): avc: denied { unlink } for pid=14965 comm="syz.0.2747" name="file1" dev="9p" ino=37617805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 516.519318][T14987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 516.584507][T14988] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 516.599604][T14988] netlink: 4088 bytes leftover after parsing attributes in process `syz.2.2754'. [ 516.604354][T14988] openvswitch: netlink: Actions may not be safe on all matching packets [ 517.051161][T14995] Invalid option length (228) for dns_resolver key [ 517.523483][ T39] audit: type=1400 audit(1729017979.767:1914): avc: denied { getattr } for pid=15004 comm="syz.2.2761" path="socket:[66556]" dev="sockfs" ino=66556 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 520.133442][ T39] audit: type=1400 audit(1729017982.377:1915): avc: denied { read } for pid=15058 comm="syz.0.2777" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 520.145314][ T39] audit: type=1400 audit(1729017982.377:1916): avc: denied { open } for pid=15058 comm="syz.0.2777" path="/24/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 520.183629][ T39] audit: type=1400 audit(1729017982.427:1917): avc: denied { create } for pid=15066 comm="syz.1.2780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 520.192567][T15067] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15067 comm=syz.1.2780 [ 520.197228][ T39] audit: type=1400 audit(1729017982.447:1918): avc: denied { read } for pid=15066 comm="syz.1.2780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 521.384122][ T39] audit: type=1400 audit(1729017983.627:1919): avc: denied { getopt } for pid=15076 comm="syz.3.2783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 521.800185][T15087] overlayfs: conflicting options: metacopy=off,verity=require [ 521.855483][T15088] netlink: 'syz.2.2786': attribute type 4 has an invalid length. [ 521.862567][T15088] netlink: 'syz.2.2786': attribute type 4 has an invalid length. [ 521.868817][ T39] audit: type=1400 audit(1729017984.117:1920): avc: denied { setopt } for pid=15086 comm="syz.2.2786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 522.458311][T15101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2790'. [ 522.808125][T15110] erofs: (device loop1): erofs_read_superblock: cannot find valid erofs superblock [ 522.948067][ T39] audit: type=1400 audit(1729017985.197:1921): avc: denied { mounton } for pid=15109 comm="syz.1.2793" path="mnt:[4026534969]" dev="nsfs" ino=4026534969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 523.707021][T15122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2797'. [ 524.165237][T15134] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 524.405662][T13991] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 524.555816][T13991] usb 6-1: Using ep0 maxpacket: 8 [ 524.560013][T13991] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.563078][T13991] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.566173][T13991] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 524.569595][T13991] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 524.573052][T13991] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 524.579773][T13991] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 524.586589][T13991] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 524.592566][T13991] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.595355][T13991] usb 6-1: Product: syz [ 524.602172][T13991] usb 6-1: Manufacturer: syz [ 524.603863][T13991] usb 6-1: SerialNumber: syz [ 525.221788][T13991] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 525.224145][T13991] cdc_ncm 6-1:1.0: bind() failure [ 525.231848][T13991] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 525.234345][T13991] cdc_ncm 6-1:1.1: bind() failure [ 525.238720][T13991] usb 6-1: USB disconnect, device number 18 [ 525.640605][ T39] audit: type=1400 audit(1729017987.887:1922): avc: denied { ioctl } for pid=15153 comm="syz.2.2808" path="socket:[69425]" dev="sockfs" ino=69425 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 525.738445][ T39] audit: type=1400 audit(1729017987.987:1923): avc: denied { connect } for pid=15158 comm="syz.2.2809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 525.791137][ T39] audit: type=1400 audit(1729017988.037:1924): avc: denied { shutdown } for pid=15158 comm="syz.2.2809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 526.844126][T15180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2814'. [ 527.041840][T15190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.063454][T15190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.082207][T15190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.095534][ T39] audit: type=1400 audit(1729017989.337:1925): avc: denied { connect } for pid=15185 comm="syz.1.2817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 527.103412][ T39] audit: type=1400 audit(1729017989.337:1926): avc: denied { name_connect } for pid=15185 comm="syz.1.2817" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 527.765716][ T5340] Bluetooth: hci8: command 0x0405 tx timeout [ 528.452477][T15223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2824'. [ 529.419891][ T39] audit: type=1400 audit(1729017991.667:1927): avc: denied { cmd } for pid=15231 comm="syz.0.2828" path="socket:[69513]" dev="sockfs" ino=69513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 529.845637][ T5340] Bluetooth: hci8: command 0x0405 tx timeout [ 530.115137][T15245] FAULT_INJECTION: forcing a failure. [ 530.115137][T15245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.119821][T15245] CPU: 1 UID: 0 PID: 15245 Comm: syz.1.2832 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 530.123196][T15245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 530.126493][T15245] Call Trace: [ 530.127537][T15245] [ 530.128447][T15245] dump_stack_lvl+0x16c/0x1f0 [ 530.129898][T15245] should_fail_ex+0x497/0x5b0 [ 530.131368][T15245] _copy_to_user+0x30/0xc0 [ 530.132745][T15245] simple_read_from_buffer+0xd0/0x160 [ 530.134397][T15245] proc_fail_nth_read+0x198/0x270 [ 530.135921][T15245] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 530.137366][T15245] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 530.138662][T15245] vfs_read+0x1ce/0xbd0 [ 530.139628][T15245] ? __fget_files+0x23a/0x3f0 [ 530.140739][T15245] ? fdget_pos+0x24c/0x360 [ 530.141862][T15245] ? __pfx_lock_release+0x10/0x10 [ 530.143055][T15245] ? trace_lock_acquire+0x14a/0x1d0 [ 530.144283][T15245] ? __pfx_vfs_read+0x10/0x10 [ 530.145700][T15245] ? __pfx___mutex_lock+0x10/0x10 [ 530.146998][T15245] ? __fget_files+0x244/0x3f0 [ 530.148210][T15245] ksys_read+0x12f/0x260 [ 530.149247][T15245] ? __pfx_ksys_read+0x10/0x10 [ 530.150400][T15245] do_syscall_64+0xcd/0x250 [ 530.151491][T15245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.153629][T15245] RIP: 0033:0x7f2365d7ca3c [ 530.155015][T15245] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 530.161291][T15245] RSP: 002b:00007f2366c2c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 530.163893][T15245] RAX: ffffffffffffffda RBX: 00007f2365f35f80 RCX: 00007f2365d7ca3c [ 530.166288][T15245] RDX: 000000000000000f RSI: 00007f2366c2c0a0 RDI: 0000000000000004 [ 530.168701][T15245] RBP: 00007f2366c2c090 R08: 0000000000000000 R09: 0000000000000000 [ 530.171187][T15245] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000002 [ 530.173765][T15245] R13: 0000000000000000 R14: 00007f2365f35f80 R15: 00007ffe3496b708 [ 530.176331][T15245] [ 530.212153][ T39] audit: type=1400 audit(1729017992.457:1928): avc: denied { setopt } for pid=15246 comm="syz.1.2833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 530.225592][ T39] audit: type=1400 audit(1729017992.457:1929): avc: denied { lock } for pid=15246 comm="syz.1.2833" path="socket:[71696]" dev="sockfs" ino=71696 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 530.270076][ T39] audit: type=1400 audit(1729017992.517:1930): avc: denied { write } for pid=15246 comm="syz.1.2833" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 530.462845][T15257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2835'. [ 532.544671][T15297] Cannot find add_set index 0 as target [ 532.576654][ T39] audit: type=1400 audit(1729017994.827:1931): avc: denied { create } for pid=15300 comm="syz.0.2848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 534.320914][T14593] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 534.327589][T14593] CPU: 3 UID: 0 PID: 14593 Comm: syz-executor Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 534.330337][T14593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 534.333064][T14593] Call Trace: [ 534.333926][T14593] [ 534.334707][T14593] dump_stack_lvl+0x16c/0x1f0 [ 534.335931][T14593] dump_header+0x101/0x900 [ 534.337101][T14593] oom_kill_process+0x270/0xa60 [ 534.338371][T14593] out_of_memory+0x351/0x1700 [ 534.339596][T14593] ? __pfx_out_of_memory+0x10/0x10 [ 534.340909][T14593] ? rcu_read_unlock+0x17/0x60 [ 534.342152][T14593] ? find_held_lock+0x2d/0x110 [ 534.343395][T14593] mem_cgroup_out_of_memory+0x207/0x270 [ 534.344811][T14593] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 534.346393][T14593] ? do_raw_spin_unlock+0x172/0x230 [ 534.347732][T14593] try_charge_memcg+0x5b9/0xaf0 [ 534.348993][T14593] ? __pfx_try_charge_memcg+0x10/0x10 [ 534.350368][T14593] ? __pfx_lock_release+0x10/0x10 [ 534.351663][T14593] ? trace_lock_acquire+0xe1/0x1d0 [ 534.352985][T14593] mem_cgroup_swapin_charge_folio+0x12b/0x4e0 [ 534.354536][T14593] __read_swap_cache_async+0x436/0x660 [ 534.355927][T14593] ? __pfx___read_swap_cache_async+0x10/0x10 [ 534.357456][T14593] ? swp_swap_info+0xcf/0x130 [ 534.358680][T14593] ? __pfx_swp_swap_info+0x10/0x10 [ 534.359991][T14593] swap_cluster_readahead+0x4a9/0x6e0 [ 534.361369][T14593] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 534.362886][T14593] ? xas_load+0x49/0x5b0 [ 534.363977][T14593] ? filemap_get_entry+0xd0/0x3c0 [ 534.365271][T14593] ? filemap_get_entry+0x1b2/0x3c0 [ 534.366590][T14593] ? __pfx_filemap_get_entry+0x10/0x10 [ 534.367985][T14593] swapin_readahead+0x12e/0xd20 [ 534.369235][T14593] ? __filemap_get_folio+0x2a5/0xaf0 [ 534.370588][T14593] ? __pfx_swapin_readahead+0x10/0x10 [ 534.371959][T14593] ? swap_cache_get_folio+0x1e0/0x460 [ 534.373145][T14593] ? get_swap_device+0x245/0x5e0 [ 534.374409][T14593] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 534.375861][T14593] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 534.377296][T14593] ? rcu_is_watching+0x12/0xc0 [ 534.378534][T14593] do_swap_page+0x61a/0x5a10 [ 534.379732][T14593] ? __pte_offset_map+0x42/0x540 [ 534.381086][T14593] ? __pte_offset_map+0x1b9/0x540 [ 534.382468][T14593] ? pte_offset_map_nolock+0xfe/0x1c0 [ 534.383843][T14593] ? __pfx_do_swap_page+0x10/0x10 [ 534.385130][T14593] ? lock_vma_under_rcu+0x13e/0x980 [ 534.386472][T14593] ? lock_vma_under_rcu+0x13e/0x980 [ 534.387803][T14593] __handle_mm_fault+0x1023/0x2a10 [ 534.389122][T14593] ? __pfx_lock_release+0x10/0x10 [ 534.390421][T14593] ? lock_vma_under_rcu+0x13e/0x980 [ 534.391754][T14593] ? __pfx___handle_mm_fault+0x10/0x10 [ 534.393150][T14593] handle_mm_fault+0x3fa/0xaa0 [ 534.394392][T14593] do_user_addr_fault+0x60d/0x13f0 [ 534.395707][T14593] exc_page_fault+0x5c/0xc0 [ 534.396886][T14593] asm_exc_page_fault+0x26/0x30 [ 534.398147][T14593] RIP: 0033:0x7f9f629a5915 [ 534.399300][T14593] Code: 00 00 f0 83 88 08 03 00 00 10 64 48 8b 3c 25 00 03 00 00 e8 1d 13 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 e7 02 74 0b 66 2e 0f 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 8b 90 [ 534.404170][T14593] RSP: 002b:00007fff1e5be8a8 EFLAGS: 00010297 [ 534.405727][T14593] RAX: 0000000000000002 RBX: 0000000000000089 RCX: 0000000000000000 [ 534.407750][T14593] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555569293808 [ 534.409759][T14593] RBP: 00007fff1e5be94c R08: 0000000000000000 R09: 00007f9f6385a080 [ 534.411778][T14593] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 534.413797][T14593] R13: 0000000000082373 R14: 0000000000082373 R15: 00007fff1e5be9a0 [ 534.415834][T14593] [ 534.426021][T14593] memory: usage 307200kB, limit 307200kB, failcnt 2265 [ 534.428541][T14593] memory+swap: usage 307420kB, limit 9007199254740988kB, failcnt 0 [ 534.431314][T14593] kmem: usage 307004kB, limit 9007199254740988kB, failcnt 0 [ 534.433960][T14593] Memory cgroup stats for /syz2: [ 534.434497][T14593] cache 200704 [ 534.437689][T14593] rss 0 [ 534.438732][T14593] rss_huge 0 [ 534.439979][T14593] shmem 0 [ 534.441234][T14593] mapped_file 200704 [ 534.442662][T14593] dirty 200704 [ 534.443722][T14593] writeback 0 [ 534.445049][T14593] workingset_refault_anon 841 [ 534.446870][T14593] workingset_refault_file 0 [ 534.448474][T14593] swap 225280 [ 534.449706][T14593] swapcached 0 [ 534.450975][T14593] pgpgin 484003 [ 534.452252][T14593] pgpgout 487020 [ 534.453426][T14593] pgfault 624187 [ 534.454745][T14593] pgmajfault 68 [ 534.456026][T14593] inactive_anon 0 [ 534.457116][T14593] active_anon 0 [ 534.458050][T14593] inactive_file 0 [ 534.459042][T14593] active_file 200704 [ 534.460069][T14593] unevictable 0 [ 534.461058][T14593] hierarchical_memory_limit 314572800 [ 534.462517][T14593] hierarchical_memsw_limit 9223372036854771712 [ 534.464714][T14593] total_cache 200704 [ 534.466320][T14593] total_rss 0 [ 534.467560][T14593] total_rss_huge 0 [ 534.468916][T14593] total_shmem 0 [ 534.470166][T14593] total_mapped_file 200704 [ 534.471631][T14593] total_dirty 200704 [ 534.472716][T14593] total_writeback 0 [ 534.474101][T14593] total_workingset_refault_anon 841 [ 534.475835][T14593] total_workingset_refault_file 0 [ 534.477554][T14593] total_swap 225280 [ 534.478947][T14593] total_swapcached 0 [ 534.480363][T14593] total_pgpgin 484003 [ 534.481812][T14593] total_pgpgout 487020 [ 534.483411][T14593] total_pgfault 624187 [ 534.484914][T14593] total_pgmajfault 68 [ 534.486977][T14593] total_inactive_anon 0 [ 534.488537][T14593] total_active_anon 0 [ 534.489970][T14593] total_inactive_file 0 [ 534.491088][T14593] total_active_file 200704 [ 534.492271][T14593] total_unevictable 0 [ 534.493406][T14593] anon_cost 0 [ 534.494497][T14593] file_cost 0 [ 534.500835][T14593] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2850,pid=15317,uid=0 [ 534.508084][T14593] Memory cgroup out of memory: Killed process 15317 (syz.2.2850) total-vm:95180kB, anon-rss:592kB, file-rss:15516kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 535.137582][T15342] 9pnet_fd: Insufficient options for proto=fd [ 536.176763][T15366] block nbd3: NBD_DISCONNECT [ 536.178038][T15366] block nbd3: Disconnected due to user request. [ 536.180627][T15366] block nbd3: shutting down sockets [ 536.226842][T15374] trusted_key: encrypted_key: insufficient parameters specified [ 536.242650][T15374] input: syz0 as /devices/virtual/input/input29 [ 536.255923][T15372] block nbd2: NBD_DISCONNECT [ 536.259189][T15372] block nbd2: Disconnected due to user request. [ 536.260853][T15372] block nbd2: shutting down sockets [ 536.275633][T15377] xt_bpf: check failed: parse error [ 536.339197][T15379] netlink: 'syz.3.2875': attribute type 21 has an invalid length. [ 536.624100][T14758] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 536.627188][T14758] CPU: 0 UID: 0 PID: 14758 Comm: syz-executor Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 536.629902][T14758] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 536.632485][T14758] Call Trace: [ 536.633369][T14758] [ 536.634160][T14758] dump_stack_lvl+0x16c/0x1f0 [ 536.635414][T14758] dump_header+0x101/0x900 [ 536.636567][T14758] oom_kill_process+0x270/0xa60 [ 536.637828][T14758] out_of_memory+0x351/0x1700 [ 536.639070][T14758] ? __pfx_out_of_memory+0x10/0x10 [ 536.640402][T14758] ? rcu_read_unlock+0x17/0x60 [ 536.641654][T14758] ? find_held_lock+0x2d/0x110 [ 536.642906][T14758] mem_cgroup_out_of_memory+0x207/0x270 [ 536.644331][T14758] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 536.645918][T14758] ? do_raw_spin_unlock+0x172/0x230 [ 536.647272][T14758] try_charge_memcg+0x5b9/0xaf0 [ 536.648533][T14758] ? __pfx_try_charge_memcg+0x10/0x10 [ 536.649904][T14758] ? __pfx_lock_release+0x10/0x10 [ 536.651212][T14758] ? trace_lock_acquire+0xe1/0x1d0 [ 536.652587][T14758] mem_cgroup_swapin_charge_folio+0x12b/0x4e0 [ 536.654169][T14758] __read_swap_cache_async+0x436/0x660 [ 536.655580][T14758] ? __pfx___read_swap_cache_async+0x10/0x10 [ 536.657125][T14758] ? __lock_acquire+0x163e/0x3ce0 [ 536.658456][T14758] ? swp_swap_info+0xcf/0x130 [ 536.659678][T14758] ? __pfx_swp_swap_info+0x10/0x10 [ 536.661007][T14758] swap_cluster_readahead+0x4a9/0x6e0 [ 536.662385][T14758] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 536.663820][T14758] ? xas_load+0x49/0x5b0 [ 536.664895][T14758] ? filemap_get_entry+0xd0/0x3c0 [ 536.666226][T14758] ? filemap_get_entry+0x1b2/0x3c0 [ 536.667549][T14758] ? __pfx_filemap_get_entry+0x10/0x10 [ 536.668960][T14758] swapin_readahead+0x12e/0xd20 [ 536.670228][T14758] ? __filemap_get_folio+0x2a5/0xaf0 [ 536.671592][T14758] ? __pfx_swapin_readahead+0x10/0x10 [ 536.672984][T14758] ? swap_cache_get_folio+0x1e0/0x460 [ 536.674377][T14758] ? get_swap_device+0x245/0x5e0 [ 536.675662][T14758] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 536.677131][T14758] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 536.678591][T14758] ? rcu_is_watching+0x12/0xc0 [ 536.679834][T14758] do_swap_page+0x61a/0x5a10 [ 536.681038][T14758] ? __pte_offset_map+0x42/0x540 [ 536.682378][T14758] ? __pte_offset_map+0x1b9/0x540 [ 536.683691][T14758] ? pte_offset_map_nolock+0xfe/0x1c0 [ 536.685086][T14758] ? __pfx_do_swap_page+0x10/0x10 [ 536.686415][T14758] ? lock_vma_under_rcu+0x13e/0x980 [ 536.687768][T14758] ? lock_vma_under_rcu+0x13e/0x980 [ 536.689132][T14758] __handle_mm_fault+0x1023/0x2a10 [ 536.690481][T14758] ? __pfx_lock_release+0x10/0x10 [ 536.691799][T14758] ? lock_vma_under_rcu+0x13e/0x980 [ 536.693162][T14758] ? __pfx___handle_mm_fault+0x10/0x10 [ 536.694625][T14758] ? __pfx_get_timespec64+0x10/0x10 [ 536.695981][T14758] handle_mm_fault+0x3fa/0xaa0 [ 536.697232][T14758] do_user_addr_fault+0x60d/0x13f0 [ 536.698573][T14758] exc_page_fault+0x5c/0xc0 [ 536.699763][T14758] asm_exc_page_fault+0x26/0x30 [ 536.701033][T14758] RIP: 0033:0x7f2365db00e8 [ 536.702239][T14758] Code: 3c 24 48 89 4c 24 18 e8 c6 57 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 1f 58 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 536.707192][T14758] RSP: 002b:00007ffe3496ba30 EFLAGS: 00010293 [ 536.708794][T14758] RAX: 0000000000000000 RBX: 0000000000000089 RCX: 00007f2365db00e5 [ 536.710835][T14758] RDX: 00007ffe3496ba70 RSI: 0000000000000000 RDI: 0000000000000000 [ 536.712862][T14758] RBP: 00007ffe3496bacc R08: 0000000000000000 R09: 00007f2366c2d080 [ 536.714910][T14758] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 536.716936][T14758] R13: 0000000000082c5b R14: 0000000000082c5b R15: 00007ffe3496bb20 [ 536.718975][T14758] [ 536.724608][T14758] memory: usage 303560kB, limit 307200kB, failcnt 2109 [ 536.726692][T14758] memory+swap: usage 303160kB, limit 9007199254740988kB, failcnt 0 [ 536.728762][T14758] kmem: usage 302656kB, limit 9007199254740988kB, failcnt 0 [ 536.730774][T14758] Memory cgroup stats for /syz1: [ 536.730920][T14758] cache 176128 [ 536.733662][T14758] rss 0 [ 536.734448][T14758] rss_huge 0 [ 536.735336][T14758] shmem 0 [ 536.736546][T14758] mapped_file 176128 [ 536.737603][T14758] dirty 176128 [ 536.738539][T14758] writeback 0 [ 536.739477][T14758] workingset_refault_anon 4258 [ 536.740800][T14758] workingset_refault_file 0 [ 536.742223][T14758] swap 122880 [ 536.743130][T14758] swapcached 0 [ 536.744057][T14758] pgpgin 448637 [ 536.745009][T14758] pgpgout 449616 [ 536.746716][T14758] pgfault 630763 [ 536.747701][T14758] pgmajfault 104 [ 536.748674][T14758] inactive_anon 0 [ 536.749661][T14758] active_anon 0 [ 536.750618][T14758] inactive_file 176128 [ 536.751844][T14758] active_file 0 [ 536.753083][T14758] unevictable 0 [ 536.754229][T14758] hierarchical_memory_limit 314572800 [ 536.771637][T14758] hierarchical_memsw_limit 9223372036854771712 [ 536.774454][T14758] total_cache 176128 [ 536.783690][T14758] total_rss 0 [ 536.784581][T14758] total_rss_huge 0 [ 536.790415][T14758] total_shmem 0 [ 536.791354][T14758] total_mapped_file 176128 [ 536.805463][T14758] total_dirty 176128 [ 536.806542][T14758] total_writeback 0 [ 536.808053][T14758] total_workingset_refault_anon 4258 [ 536.809422][T14758] total_workingset_refault_file 0 [ 536.810743][T14758] total_swap 122880 [ 536.811832][T14758] total_swapcached 0 [ 536.812846][T14758] total_pgpgin 448637 [ 536.813890][T14758] total_pgpgout 449616 [ 536.814962][T14758] total_pgfault 630763 [ 536.834138][T14758] total_pgmajfault 104 [ 536.835265][T14758] total_inactive_anon 0 [ 536.836519][T14758] total_active_anon 0 [ 536.837601][T14758] total_inactive_file 176128 [ 536.838826][T14758] total_active_file 0 [ 536.839885][T14758] total_unevictable 0 [ 536.840951][T14758] anon_cost 0 [ 536.841838][T14758] file_cost 0 [ 536.842737][T14758] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2867,pid=15363,uid=0 [ 536.848546][T14758] Memory cgroup out of memory: Killed process 15363 (syz.1.2867) total-vm:95180kB, anon-rss:620kB, file-rss:15520kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 537.477947][T15403] FAULT_INJECTION: forcing a failure. [ 537.477947][T15403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.481290][T15403] CPU: 1 UID: 0 PID: 15403 Comm: syz.3.2879 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 537.484022][T15403] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 537.486954][T15403] Call Trace: [ 537.487813][T15403] [ 537.488579][T15403] dump_stack_lvl+0x16c/0x1f0 [ 537.489802][T15403] should_fail_ex+0x497/0x5b0 [ 537.491037][T15403] _copy_from_user+0x30/0xf0 [ 537.492254][T15403] memdup_user+0x71/0xd0 [ 537.493358][T15403] strndup_user+0x78/0xe0 [ 537.494662][T15403] __x64_sys_mount+0x138/0x320 [ 537.496384][T15403] ? __pfx___x64_sys_mount+0x10/0x10 [ 537.497917][T15403] do_syscall_64+0xcd/0x250 [ 537.499056][T15403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.500504][T15403] RIP: 0033:0x7f1d6977dff9 [ 537.501621][T15403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.506368][T15403] RSP: 002b:00007f1d691de038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 537.508391][T15403] RAX: ffffffffffffffda RBX: 00007f1d69936130 RCX: 00007f1d6977dff9 [ 537.510442][T15403] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000020000000 [ 537.512465][T15403] RBP: 00007f1d691de090 R08: 0000000000000000 R09: 0000000000000000 [ 537.514699][T15403] R10: 0000000000018642 R11: 0000000000000246 R12: 0000000000000001 [ 537.517347][T15403] R13: 0000000000000000 R14: 00007f1d69936130 R15: 00007ffdd7749118 [ 537.519385][T15403] [ 537.615571][T13991] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 537.785564][T13991] usb 6-1: Using ep0 maxpacket: 8 [ 537.788806][T13991] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 537.792338][T13991] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 537.796255][T13991] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 537.799992][T13991] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 537.804606][T13991] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 537.808313][T13991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.819219][ T39] audit: type=1400 audit(1729018000.067:1932): avc: denied { relabelfrom } for pid=15406 comm="syz.2.2882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 537.826576][ T39] audit: type=1400 audit(1729018000.067:1933): avc: denied { relabelto } for pid=15406 comm="syz.2.2882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 538.015632][T13991] usb 6-1: GET_CAPABILITIES returned 0 [ 538.021747][T13991] usbtmc 6-1:16.0: can't read capabilities [ 538.246749][T13991] usb 6-1: USB disconnect, device number 19 [ 538.401928][ T39] audit: type=1400 audit(1729018000.647:1934): avc: denied { ioctl } for pid=15414 comm="syz.3.2884" path="socket:[71150]" dev="sockfs" ino=71150 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 538.410706][ T39] audit: type=1400 audit(1729018000.657:1935): avc: denied { read } for pid=15414 comm="syz.3.2884" path="socket:[71150]" dev="sockfs" ino=71150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 538.851530][ T39] audit: type=1400 audit(1729018001.097:1936): avc: denied { map } for pid=15420 comm="syz.0.2886" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 538.927646][T15428] netlink: 'syz.1.2887': attribute type 20 has an invalid length. [ 539.523107][T15425] syz.2.2888 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 539.529756][T15425] CPU: 2 UID: 0 PID: 15425 Comm: syz.2.2888 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 539.533672][T15425] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 539.537635][T15425] Call Trace: [ 539.538847][T15425] [ 539.539910][T15425] dump_stack_lvl+0x16c/0x1f0 [ 539.541170][T15425] dump_header+0x101/0x900 [ 539.542339][T15425] oom_kill_process+0x270/0xa60 [ 539.543608][T15425] out_of_memory+0x351/0x1700 [ 539.544831][T15425] ? __pfx_out_of_memory+0x10/0x10 [ 539.546189][T15425] ? rcu_read_unlock+0x17/0x60 [ 539.547490][T15425] ? find_held_lock+0x2d/0x110 [ 539.548731][T15425] mem_cgroup_out_of_memory+0x207/0x270 [ 539.550164][T15425] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 539.551740][T15425] ? do_raw_spin_unlock+0x172/0x230 [ 539.553091][T15425] try_charge_memcg+0x5b9/0xaf0 [ 539.554424][T15425] ? __pfx_try_charge_memcg+0x10/0x10 [ 539.556330][T15425] ? __pfx_lock_release+0x10/0x10 [ 539.558091][T15425] ? trace_lock_acquire+0xe1/0x1d0 [ 539.559877][T15425] mem_cgroup_swapin_charge_folio+0x12b/0x4e0 [ 539.561733][T15425] __read_swap_cache_async+0x436/0x660 [ 539.563558][T15425] ? __pfx___read_swap_cache_async+0x10/0x10 [ 539.565542][T15425] ? swp_swap_info+0xcf/0x130 [ 539.566743][T15425] ? __pfx_swp_swap_info+0x10/0x10 [ 539.568212][T15425] swap_cluster_readahead+0x3bd/0x6e0 [ 539.569996][T15425] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 539.572099][T15425] ? xas_load+0x49/0x5b0 [ 539.573604][T15425] ? filemap_get_entry+0xd0/0x3c0 [ 539.575399][T15425] ? filemap_get_entry+0x1b2/0x3c0 [ 539.577236][T15425] ? __pfx_filemap_get_entry+0x10/0x10 [ 539.579177][T15425] swapin_readahead+0x12e/0xd20 [ 539.580894][T15425] ? __filemap_get_folio+0x2a5/0xaf0 [ 539.582810][T15425] ? __pfx_swapin_readahead+0x10/0x10 [ 539.584623][T15425] ? swap_cache_get_folio+0x1e0/0x460 [ 539.586556][T15425] ? get_swap_device+0x245/0x5e0 [ 539.588332][T15425] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 539.589876][T15425] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 539.591353][T15425] ? rcu_is_watching+0x12/0xc0 [ 539.592679][T15425] do_swap_page+0x61a/0x5a10 [ 539.593881][T15425] ? __pte_offset_map+0x42/0x540 [ 539.595287][T15425] ? __pte_offset_map+0x1b9/0x540 [ 539.596598][T15425] ? pte_offset_map_nolock+0xfe/0x1c0 [ 539.598687][T15425] ? __pfx_do_swap_page+0x10/0x10 [ 539.600335][T15425] ? lock_vma_under_rcu+0x13e/0x980 [ 539.601684][T15425] ? lock_vma_under_rcu+0x13e/0x980 [ 539.603165][T15425] __handle_mm_fault+0x1023/0x2a10 [ 539.604486][T15425] ? __pfx_lock_release+0x10/0x10 [ 539.606009][T15425] ? lock_vma_under_rcu+0x13e/0x980 [ 539.607736][T15425] ? __pfx___handle_mm_fault+0x10/0x10 [ 539.609506][T15425] handle_mm_fault+0x3fa/0xaa0 [ 539.610796][T15425] do_user_addr_fault+0x60d/0x13f0 [ 539.612121][T15425] exc_page_fault+0x5c/0xc0 [ 539.613300][T15425] asm_exc_page_fault+0x26/0x30 [ 539.614571][T15425] RIP: 0033:0x7f9f62851adc [ 539.615741][T15425] Code: 72 64 0f 1f 40 00 69 3d d6 3b e1 00 e8 03 00 00 48 8d 1d b7 44 2e 00 e8 82 c4 12 00 eb 0c 48 81 c3 d8 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 d8 00 00 [ 539.621107][T15425] RSP: 002b:00007fff1e5be6f0 EFLAGS: 00010206 [ 539.622752][T15425] RAX: 0000000000000000 RBX: 00007f9f62b35f80 RCX: 0000000000000000 [ 539.624831][T15425] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555569293808 [ 539.626955][T15425] RBP: 00007f9f62b37a80 R08: 0000000000000000 R09: 00007f9f6385a080 [ 539.629031][T15425] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000083b8b [ 539.631032][T15425] R13: 00007fff1e5be7f0 R14: 0000000000000032 R15: ffffffffffffffff [ 539.633043][T15425] [ 539.642634][T15437] FAULT_INJECTION: forcing a failure. [ 539.642634][T15437] name failslab, interval 1, probability 0, space 0, times 0 [ 539.645919][T15437] CPU: 0 UID: 0 PID: 15437 Comm: syz.0.2891 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 539.648665][T15437] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 539.649124][T15425] memory: usage 281904kB, limit 307200kB, failcnt 2487 [ 539.651430][T15437] Call Trace: [ 539.651442][T15437] [ 539.651447][T15437] dump_stack_lvl+0x16c/0x1f0 [ 539.651466][T15437] should_fail_ex+0x497/0x5b0 [ 539.657300][T15437] ? fs_reclaim_acquire+0xae/0x150 [ 539.658645][T15437] should_failslab+0xc2/0x120 [ 539.659883][T15437] __kmalloc_noprof+0xcb/0x400 [ 539.661135][T15437] ? d_absolute_path+0x137/0x1b0 [ 539.662406][T15437] tomoyo_encode2+0x100/0x3e0 [ 539.663576][T15437] tomoyo_encode+0x29/0x50 [ 539.664690][T15437] tomoyo_realpath_from_path+0x19d/0x720 [ 539.666079][T15437] tomoyo_path_number_perm+0x245/0x590 [ 539.667414][T15437] ? tomoyo_path_number_perm+0x232/0x590 [ 539.668877][T15437] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 539.670417][T15437] ? trace_lock_acquire+0x14a/0x1d0 [ 539.671768][T15437] ? lock_acquire+0x2f/0xb0 [ 539.672959][T15437] ? __fget_files+0x40/0x3f0 [ 539.674178][T15437] ? __fget_files+0x244/0x3f0 [ 539.675420][T15437] security_file_ioctl+0x9b/0x240 [ 539.676740][T15437] __x64_sys_ioctl+0xbb/0x220 [ 539.677981][T15437] do_syscall_64+0xcd/0x250 [ 539.679188][T15437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.680731][T15437] RIP: 0033:0x7f5d3037dff9 [ 539.681908][T15437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.686917][T15437] RSP: 002b:00007f5d31099038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 539.689075][T15437] RAX: ffffffffffffffda RBX: 00007f5d30535f80 RCX: 00007f5d3037dff9 [ 539.691133][T15437] RDX: 0000000020000080 RSI: 00000000400454ca RDI: 0000000000000005 [ 539.693182][T15437] RBP: 00007f5d31099090 R08: 0000000000000000 R09: 0000000000000000 [ 539.695230][T15437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.697198][T15437] R13: 0000000000000000 R14: 00007f5d30535f80 R15: 00007ffe45726e18 [ 539.699248][T15437] [ 539.702510][T15425] memory+swap: usage 252264kB, limit 9007199254740988kB, failcnt 0 [ 539.705212][T15425] kmem: usage 251296kB, limit 9007199254740988kB, failcnt 0 [ 539.708402][T15425] Memory cgroup stats for /syz2: [ 539.708481][T15425] cache 532480 [ 539.711152][T15425] rss 0 [ 539.712134][T15425] rss_huge 0 [ 539.713244][T15425] shmem 0 [ 539.714294][T15425] mapped_file 532480 [ 539.715774][T15425] dirty 532480 [ 539.717038][T15425] writeback 0 [ 539.718218][T15425] workingset_refault_anon 860 [ 539.719840][T15425] workingset_refault_file 68 [ 539.721437][T15425] swap 266240 [ 539.722586][T15425] swapcached 0 [ 539.723741][T15425] pgpgin 487400 [ 539.724919][T15425] pgpgout 490336 [ 539.725838][T15437] ERROR: Out of memory at tomoyo_realpath_from_path. [ 539.726250][T15425] pgfault 628242 [ 539.729694][T15425] pgmajfault 86 [ 539.732448][T15425] inactive_anon 0 [ 539.733709][T15425] active_anon 0 [ 539.734937][T15425] inactive_file 532480 [ 539.737475][T15425] active_file 0 [ 539.738660][T15425] unevictable 0 [ 539.739809][T15425] hierarchical_memory_limit 314572800 [ 539.741596][T15425] hierarchical_memsw_limit 9223372036854771712 [ 539.743716][T15425] total_cache 532480 [ 539.745172][T15425] total_rss 0 [ 539.746413][T15425] total_rss_huge 0 [ 539.747656][T15425] total_shmem 0 [ 539.748820][T15425] total_mapped_file 532480 [ 539.750273][T15425] total_dirty 532480 [ 539.753300][T15425] total_writeback 0 [ 539.754600][T15425] total_workingset_refault_anon 860 [ 539.756917][T15425] total_workingset_refault_file 68 [ 539.758792][T15425] total_swap 266240 [ 539.760308][T15425] total_swapcached 0 [ 539.761607][T15425] total_pgpgin 487400 [ 539.763166][T15425] total_pgpgout 490336 [ 539.765035][T15425] total_pgfault 628242 [ 539.766594][T15425] total_pgmajfault 86 [ 539.767903][T15425] total_inactive_anon 0 [ 539.769587][T15425] total_active_anon 0 [ 539.770943][T15425] total_inactive_file 532480 [ 539.772508][T15425] total_active_file 0 [ 539.773904][T15425] total_unevictable 0 [ 539.775324][T15425] anon_cost 0 [ 539.777227][T15425] file_cost 0 [ 539.778327][T15425] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2888,pid=15425,uid=0 [ 539.783116][T15425] Memory cgroup out of memory: Killed process 15425 (syz.2.2888) total-vm:95180kB, anon-rss:620kB, file-rss:15516kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 539.886456][T15441] mkiss: ax0: crc mode is auto. [ 540.145475][ T39] audit: type=1400 audit(1729018002.387:1937): avc: denied { append } for pid=15452 comm="syz.0.2896" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 540.166205][ T39] audit: type=1400 audit(1729018002.387:1938): avc: denied { map } for pid=15452 comm="syz.0.2896" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 540.173018][ T39] audit: type=1400 audit(1729018002.387:1939): avc: denied { execute } for pid=15452 comm="syz.0.2896" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 540.194307][T15453] vivid-007: ================= START STATUS ================= [ 540.198922][T15453] vivid-007: Enable Output Cropping: true [ 540.201261][T15453] vivid-007: Enable Output Composing: true [ 540.203412][T15453] vivid-007: Enable Output Scaler: true [ 540.206345][T15453] vivid-007: Tx RGB Quantization Range: Automatic [ 540.208721][T15453] vivid-007: Transmit Mode: HDMI [ 540.210547][T15453] vivid-007: Hotplug Present: 0x00000000 [ 540.212583][T15453] vivid-007: RxSense Present: 0x00000000 [ 540.213019][ T39] audit: type=1400 audit(1729018002.457:1940): avc: denied { create } for pid=15458 comm="syz.2.2897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 540.214627][T15453] vivid-007: EDID Present: 0x00000000 [ 540.223762][T15453] vivid-007: ================== END STATUS ================== [ 540.291242][T15463] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2898'. [ 540.310630][ T39] audit: type=1400 audit(1729018002.557:1941): avc: denied { ioctl } for pid=15458 comm="syz.2.2897" path="socket:[72960]" dev="sockfs" ino=72960 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 540.371923][T15459] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.495781][T15459] bridge_slave_1 (unregistering): left allmulticast mode [ 540.497963][T15459] bridge_slave_1 (unregistering): left promiscuous mode [ 540.500068][T15459] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.125357][T15474] mkiss: ax0: crc mode is auto. [ 541.184866][T15481] xt_bpf: check failed: parse error [ 542.438596][T15525] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2917'. [ 542.591664][T15536] FAULT_INJECTION: forcing a failure. [ 542.591664][T15536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.595130][T15536] CPU: 3 UID: 0 PID: 15536 Comm: syz.0.2923 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 542.598111][T15536] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 542.601651][T15536] Call Trace: [ 542.602817][T15536] [ 542.603842][T15536] dump_stack_lvl+0x16c/0x1f0 [ 542.605447][T15536] should_fail_ex+0x497/0x5b0 [ 542.607114][T15536] _copy_to_user+0x30/0xc0 [ 542.608220][T15536] simple_read_from_buffer+0xd0/0x160 [ 542.609529][T15536] proc_fail_nth_read+0x198/0x270 [ 542.610937][T15536] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 542.611176][T15538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2922'. [ 542.612321][T15536] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 542.616699][T15536] vfs_read+0x1ce/0xbd0 [ 542.617896][T15536] ? __fget_files+0x23a/0x3f0 [ 542.619111][T15536] ? fdget_pos+0x24c/0x360 [ 542.620239][T15536] ? __pfx_lock_release+0x10/0x10 [ 542.621542][T15536] ? trace_lock_acquire+0x14a/0x1d0 [ 542.622858][T15536] ? __pfx_vfs_read+0x10/0x10 [ 542.624085][T15536] ? __pfx___mutex_lock+0x10/0x10 [ 542.625363][T15536] ? __fget_files+0x244/0x3f0 [ 542.626583][T15536] ksys_read+0x12f/0x260 [ 542.627729][T15536] ? __pfx_ksys_read+0x10/0x10 [ 542.628988][T15536] do_syscall_64+0xcd/0x250 [ 542.630189][T15536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.631678][T15536] RIP: 0033:0x7f5d3037ca3c [ 542.632845][T15536] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 542.637703][T15536] RSP: 002b:00007f5d31099030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 542.640467][T15536] RAX: ffffffffffffffda RBX: 00007f5d30535f80 RCX: 00007f5d3037ca3c [ 542.643158][T15536] RDX: 000000000000000f RSI: 00007f5d310990a0 RDI: 0000000000000004 [ 542.645625][T15536] RBP: 00007f5d31099090 R08: 0000000000000000 R09: 0000000000000000 [ 542.647634][T15536] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 542.649649][T15536] R13: 0000000000000000 R14: 00007f5d30535f80 R15: 00007ffe45726e18 [ 542.651867][T15536] [ 542.889031][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 542.889049][ T39] audit: type=1400 audit(1729018005.137:1946): avc: denied { read write } for pid=15554 comm="syz.3.2931" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 542.909957][ T39] audit: type=1400 audit(1729018005.137:1947): avc: denied { open } for pid=15554 comm="syz.3.2931" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 544.491796][T15585] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 545.044643][T15599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2944'. [ 545.536551][T15606] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.584144][T15606] bridge_slave_1 (unregistering): left allmulticast mode [ 545.586057][T15606] bridge_slave_1 (unregistering): left promiscuous mode [ 545.587838][T15606] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.618403][ T39] audit: type=1400 audit(1729018007.867:1948): avc: denied { shutdown } for pid=15608 comm="syz.0.2946" lport=53736 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 546.017605][ T39] audit: type=1326 audit(1729018008.267:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15626 comm="syz.1.2951" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2365d7dff9 code=0x7ffc0000 [ 546.025209][ T39] audit: type=1326 audit(1729018008.267:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15626 comm="syz.1.2951" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2365d7dff9 code=0x7ffc0000 [ 546.033951][ T39] audit: type=1326 audit(1729018008.277:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15626 comm="syz.1.2951" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f2365d7dff9 code=0x7ffc0000 [ 546.041888][ T39] audit: type=1326 audit(1729018008.277:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15626 comm="syz.1.2951" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2365d7dff9 code=0x7ffc0000 [ 546.050540][ T39] audit: type=1326 audit(1729018008.277:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15626 comm="syz.1.2951" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2365d7dff9 code=0x7ffc0000 [ 546.058741][ T39] audit: type=1326 audit(1729018008.277:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15626 comm="syz.1.2951" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2365d7dff9 code=0x7ffc0000 [ 546.066590][ T39] audit: type=1326 audit(1729018008.277:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15626 comm="syz.1.2951" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2365d7dff9 code=0x7ffc0000 [ 546.810845][T15637] overlay: ./file0 is not a directory [ 547.092678][T15647] 9pnet_virtio: no channels available for device [ 547.996500][ T1073] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 547.998332][ T1073] ata1: failed to read log page 10h (errno=-5) [ 547.999920][ T1073] ata1.00: exception Emask 0x1 SAct 0x2 SErr 0x0 action 0x0 [ 548.001791][ T1073] ata1.00: irq_stat 0x40000000 [ 548.003164][ T1073] ata1.00: failed command: WRITE FPDMA QUEUED [ 548.004765][ T1073] ata1.00: cmd 61/00:08:62:af:0c/01:00:00:00:00/40 tag 1 ncq dma 131072 out [ 548.004765][ T1073] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 548.009410][ T1073] ata1.00: status: { DRDY } [ 548.011269][ T1073] ata1.00: configured for UDMA/100 [ 548.012777][ T1073] ata1: EH complete [ 548.531086][ T39] kauditd_printk_skb: 23 callbacks suppressed [ 548.531100][ T39] audit: type=1326 audit(1729018010.777:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15686 comm="syz.2.2967" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f6297dff9 code=0x7ffc0000 [ 548.558431][T15687] wg2: entered promiscuous mode [ 548.560231][T15687] wg2: entered allmulticast mode [ 548.802901][ T39] audit: type=1400 audit(1729018011.047:1980): avc: denied { name_bind } for pid=15693 comm="syz.2.2969" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 548.811602][ T39] audit: type=1400 audit(1729018011.047:1981): avc: denied { node_bind } for pid=15693 comm="syz.2.2969" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 548.968265][ T39] audit: type=1400 audit(1729018011.217:1982): avc: denied { ioctl } for pid=15693 comm="syz.2.2969" path="socket:[72212]" dev="sockfs" ino=72212 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 550.547591][T15712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2972'. [ 551.046201][ T5340] Bluetooth: hci8: command 0x0405 tx timeout [ 553.112098][T15749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2984'. [ 553.590637][T15740] syz.2.2981 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 553.593850][T15740] CPU: 1 UID: 0 PID: 15740 Comm: syz.2.2981 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 553.597383][T15740] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 553.600508][T15740] Call Trace: [ 553.601645][T15740] [ 553.602711][T15740] dump_stack_lvl+0x16c/0x1f0 [ 553.604364][T15740] dump_header+0x101/0x900 [ 553.605735][T15740] oom_kill_process+0x270/0xa60 [ 553.607462][T15740] out_of_memory+0x351/0x1700 [ 553.609123][T15740] ? __pfx_out_of_memory+0x10/0x10 [ 553.610995][T15740] ? rcu_read_unlock+0x17/0x60 [ 553.612747][T15740] ? find_held_lock+0x2d/0x110 [ 553.614449][T15740] mem_cgroup_out_of_memory+0x207/0x270 [ 553.616413][T15740] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 553.618556][T15740] ? do_raw_spin_unlock+0x172/0x230 [ 553.620411][T15740] try_charge_memcg+0x5b9/0xaf0 [ 553.622194][T15740] ? __pfx_try_charge_memcg+0x10/0x10 [ 553.623904][T15740] ? __pfx_lock_release+0x10/0x10 [ 553.625427][T15740] ? trace_lock_acquire+0xe1/0x1d0 [ 553.627257][T15740] mem_cgroup_swapin_charge_folio+0x12b/0x4e0 [ 553.629341][T15740] __read_swap_cache_async+0x436/0x660 [ 553.631325][T15740] ? __pfx___read_swap_cache_async+0x10/0x10 [ 553.633457][T15740] ? swp_swap_info+0xcf/0x130 [ 553.635137][T15740] ? __pfx_swp_swap_info+0x10/0x10 [ 553.636686][T15740] swap_cluster_readahead+0x3bd/0x6e0 [ 553.638050][T15740] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 553.639518][T15740] ? xas_load+0x49/0x5b0 [ 553.640754][T15740] ? filemap_get_entry+0xd0/0x3c0 [ 553.642044][T15740] ? filemap_get_entry+0x1b2/0x3c0 [ 553.643334][T15740] ? __pfx_filemap_get_entry+0x10/0x10 [ 553.644721][T15740] swapin_readahead+0x12e/0xd20 [ 553.646413][T15740] ? __filemap_get_folio+0x2a5/0xaf0 [ 553.648189][T15740] ? __pfx_swapin_readahead+0x10/0x10 [ 553.650096][T15740] ? swap_cache_get_folio+0x1e0/0x460 [ 553.651976][T15740] ? get_swap_device+0x245/0x5e0 [ 553.653786][T15740] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 553.655846][T15740] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 553.657872][T15740] ? rcu_is_watching+0x12/0xc0 [ 553.659407][T15740] do_swap_page+0x61a/0x5a10 [ 553.660618][T15740] ? __pte_offset_map+0x42/0x540 [ 553.661915][T15740] ? __pte_offset_map+0x1b9/0x540 [ 553.663262][T15740] ? pte_offset_map_nolock+0xfe/0x1c0 [ 553.664726][T15740] ? __pfx_do_swap_page+0x10/0x10 [ 553.666420][T15740] ? lock_vma_under_rcu+0x13e/0x980 [ 553.668289][T15740] ? lock_vma_under_rcu+0x13e/0x980 [ 553.670171][T15740] __handle_mm_fault+0x1023/0x2a10 [ 553.672027][T15740] ? __pfx_lock_release+0x10/0x10 [ 553.673844][T15740] ? lock_vma_under_rcu+0x13e/0x980 [ 553.675691][T15740] ? __pfx___handle_mm_fault+0x10/0x10 [ 553.677650][T15740] handle_mm_fault+0x3fa/0xaa0 [ 553.679302][T15740] do_user_addr_fault+0x60d/0x13f0 [ 553.681122][T15740] exc_page_fault+0x5c/0xc0 [ 553.682337][T15740] asm_exc_page_fault+0x26/0x30 [ 553.683646][T15740] RIP: 0033:0x7f9f62851adc [ 553.684909][T15740] Code: 72 64 0f 1f 40 00 69 3d d6 3b e1 00 e8 03 00 00 48 8d 1d b7 44 2e 00 e8 82 c4 12 00 eb 0c 48 81 c3 d8 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 d8 00 00 [ 553.690509][T15740] RSP: 002b:00007fff1e5be6f0 EFLAGS: 00010206 [ 553.692075][T15740] RAX: 0000000000000000 RBX: 00007f9f62b35f80 RCX: 0000000000000000 [ 553.694049][T15740] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555569293808 [ 553.696528][T15740] RBP: 00007f9f62b37a80 R08: 0000000000000000 R09: 00007f9f6385a080 [ 553.699265][T15740] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000008725f [ 553.701913][T15740] R13: 00007fff1e5be7f0 R14: 0000000000000032 R15: ffffffffffffffff [ 553.704231][T15740] [ 553.707297][T15740] memory: usage 293596kB, limit 307200kB, failcnt 2792 [ 553.710650][T15740] memory+swap: usage 292488kB, limit 9007199254740988kB, failcnt 0 [ 553.713458][T15740] kmem: usage 289956kB, limit 9007199254740988kB, failcnt 0 [ 553.715937][T15740] Memory cgroup stats for /syz2: [ 553.716077][T15740] cache 16384 [ 553.719061][T15740] rss 0 [ 553.720077][T15740] rss_huge 0 [ 553.721412][T15740] shmem 0 [ 553.722548][T15740] mapped_file 16384 [ 553.723932][T15740] dirty 16384 [ 553.725133][T15740] writeback 0 [ 553.726482][T15740] workingset_refault_anon 917 [ 553.728158][T15740] workingset_refault_file 149 [ 553.729605][T15740] swap 196608 [ 553.730484][T15740] swapcached 0 [ 553.731342][T15740] pgpgin 494964 [ 553.732283][T15740] pgpgout 498026 [ 553.733218][T15740] pgfault 637850 [ 553.734171][T15740] pgmajfault 108 [ 553.735255][T15740] inactive_anon 0 [ 553.736254][T15740] active_anon 0 [ 553.737287][T15740] inactive_file 0 [ 553.756636][T15740] active_file 16384 [ 553.757833][T15740] unevictable 0 [ 553.758896][T15740] hierarchical_memory_limit 314572800 [ 553.760489][T15740] hierarchical_memsw_limit 9223372036854771712 [ 553.762587][T15740] total_cache 16384 [ 553.763918][T15740] total_rss 0 [ 553.765127][T15740] total_rss_huge 0 [ 553.768597][T15740] total_shmem 0 [ 553.769910][T15740] total_mapped_file 16384 [ 553.770589][T15760] netlink: 664 bytes leftover after parsing attributes in process `syz.0.2987'. [ 553.771437][T15740] total_dirty 16384 [ 553.771449][T15740] total_writeback 0 [ 553.771457][T15740] total_workingset_refault_anon 917 [ 553.771466][T15740] total_workingset_refault_file 149 [ 553.779966][T15740] total_swap 196608 [ 553.781332][T15740] total_swapcached 0 [ 553.782680][T15740] total_pgpgin 494964 [ 553.784221][T15740] total_pgpgout 498026 [ 553.786342][T15740] total_pgfault 637850 [ 553.787661][T15740] total_pgmajfault 108 [ 553.789066][T15740] total_inactive_anon 0 [ 553.790532][T15740] total_active_anon 0 [ 553.791599][T15740] total_inactive_file 0 [ 553.792749][T15740] total_active_file 16384 [ 553.793991][T15740] total_unevictable 0 [ 553.795223][T15740] anon_cost 0 [ 553.796930][T15740] file_cost 0 [ 553.798606][T15740] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2981,pid=15740,uid=0 [ 553.805280][T15740] Memory cgroup out of memory: Killed process 15740 (syz.2.2981) total-vm:95180kB, anon-rss:620kB, file-rss:15516kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 553.835873][ T39] audit: type=1400 audit(1729018016.077:1983): avc: denied { checkpoint_restore } for pid=15761 comm="syz.0.2988" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 553.950647][ T39] audit: type=1400 audit(1729018016.197:1984): avc: denied { append } for pid=15769 comm="syz.0.2991" name="nullb0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 554.902624][T15790] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.904773][T15790] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.250307][T15798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2996'. [ 555.301706][T15804] netlink: 'syz.3.2999': attribute type 1 has an invalid length. [ 555.320402][T15805] netlink: 'syz.3.2999': attribute type 1 has an invalid length. [ 555.323552][T15805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20496 sclass=netlink_route_socket pid=15805 comm=syz.3.2999 [ 555.329370][T15804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20496 sclass=netlink_route_socket pid=15804 comm=syz.3.2999 [ 555.351747][T15804] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2999'. [ 555.400794][ T39] audit: type=1400 audit(1729018017.647:1985): avc: denied { bind } for pid=15808 comm="syz.3.3000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 555.407552][ T39] audit: type=1400 audit(1729018017.657:1986): avc: denied { read } for pid=15808 comm="syz.3.3000" path="socket:[73984]" dev="sockfs" ino=73984 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 555.461548][T15809] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3000'. [ 556.033517][ T39] audit: type=1400 audit(1729018018.277:1987): avc: denied { mount } for pid=15817 comm="syz.0.3003" name="/" dev="autofs" ino=74890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 556.048267][T15819] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 556.180216][ T39] audit: type=1400 audit(1729018018.427:1988): avc: denied { unmount } for pid=14754 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 557.035880][T15834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3007'. [ 557.268994][T15842] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.282667][T15838] bridge_slave_0: left allmulticast mode [ 557.284283][T15838] bridge_slave_0: left promiscuous mode [ 557.288218][T15838] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.633485][ T39] audit: type=1400 audit(1729018019.877:1989): avc: denied { append } for pid=15849 comm="syz.2.3012" name="nbd2" dev="devtmpfs" ino=676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 557.831878][T15860] overlay: ./file0 is not a directory [ 557.839194][ T39] audit: type=1400 audit(1729018020.087:1990): avc: denied { module_load } for pid=15857 comm="syz.1.3015" path="/76/bus/bus" dev="tmpfs" ino=420 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 557.839207][T15860] Invalid ELF header magic: != ELF [ 557.850649][T15860] netlink: 9728 bytes leftover after parsing attributes in process `syz.1.3015'. [ 558.766179][T15877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3020'. [ 558.874830][T15888] overlay: ./file0 is not a directory [ 558.880913][T15888] Invalid ELF header magic: != ELF [ 558.885206][T15888] netlink: 9728 bytes leftover after parsing attributes in process `syz.2.3025'. [ 558.929559][T15889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3023'. [ 558.932398][T15893] FAULT_INJECTION: forcing a failure. [ 558.932398][T15893] name failslab, interval 1, probability 0, space 0, times 0 [ 558.939502][T15893] CPU: 3 UID: 0 PID: 15893 Comm: syz.2.3026 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 558.943320][T15893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 558.946778][T15893] Call Trace: [ 558.948001][T15893] [ 558.949031][T15893] dump_stack_lvl+0x16c/0x1f0 [ 558.950563][T15893] should_fail_ex+0x497/0x5b0 [ 558.952023][T15893] ? fs_reclaim_acquire+0xae/0x150 [ 558.954272][T15893] should_failslab+0xc2/0x120 [ 558.956676][T15893] __kmalloc_cache_noprof+0x6b/0x300 [ 558.958768][T15893] ? __vb2_init_fileio+0x253/0x1110 [ 558.960317][T15893] __vb2_init_fileio+0x253/0x1110 [ 558.961990][T15893] ? lockdep_hardirqs_on+0x7c/0x110 [ 558.963864][T15893] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 558.966254][T15893] ? __pollwait+0x26d/0x4c0 [ 558.967837][T15893] vb2_core_poll+0x5e8/0x700 [ 558.969470][T15893] vb2_poll+0x35/0x160 [ 558.970569][T15893] vb2_fop_poll+0x10f/0x2c0 [ 558.971766][T15893] ? __pfx_vb2_fop_poll+0x10/0x10 [ 558.973104][T15893] v4l2_poll+0x160/0x320 [ 558.974242][T15893] do_select+0xc9a/0x17b0 [ 558.975746][T15893] ? __pfx_v4l2_poll+0x10/0x10 [ 558.977648][T15893] ? __pfx_do_select+0x10/0x10 [ 558.979565][T15893] ? hlock_class+0x4e/0x130 [ 558.981377][T15893] ? mark_lock+0xb5/0xc60 [ 558.983106][T15893] ? hlock_class+0x4e/0x130 [ 558.984910][T15893] ? mark_lock+0xb5/0xc60 [ 558.986459][T15893] ? __pfx___pollwait+0x10/0x10 [ 558.987767][T15893] ? __pfx_pollwake+0x10/0x10 [ 558.989026][T15893] ? __pfx_pollwake+0x10/0x10 [ 558.990419][T15893] ? __pfx_pollwake+0x10/0x10 [ 558.991739][T15893] ? __pfx_pollwake+0x10/0x10 [ 558.993454][T15893] ? lock_acquire+0x2f/0xb0 [ 558.995093][T15893] ? __might_fault+0xe3/0x190 [ 558.996700][T15893] ? __might_fault+0xe3/0x190 [ 558.998826][T15893] ? core_sys_select+0x459/0xb80 [ 559.001436][T15893] core_sys_select+0x459/0xb80 [ 559.003557][T15893] ? __pfx_core_sys_select+0x10/0x10 [ 559.005402][T15893] ? get_pid_task+0xfc/0x250 [ 559.006810][T15893] ? set_user_sigmask+0x217/0x2a0 [ 559.008628][T15893] ? __pfx_set_user_sigmask+0x10/0x10 [ 559.010582][T15893] do_pselect.constprop.0+0x1a0/0x1f0 [ 559.012550][T15893] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 559.014709][T15893] __x64_sys_pselect6+0x183/0x240 [ 559.016294][T15893] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 559.017866][T15893] do_syscall_64+0xcd/0x250 [ 559.019134][T15893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.021235][T15893] RIP: 0033:0x7f9f6297dff9 [ 559.023157][T15893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.030935][T15893] RSP: 002b:00007f9f63859038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 559.033238][T15893] RAX: ffffffffffffffda RBX: 00007f9f62b35f80 RCX: 00007f9f6297dff9 [ 559.035789][T15893] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000040 [ 559.038726][T15893] RBP: 00007f9f63859090 R08: 0000000000000000 R09: 0000000000000000 [ 559.041612][T15893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.045605][T15893] R13: 0000000000000000 R14: 00007f9f62b35f80 R15: 00007fff1e5be588 [ 559.049220][T15893] [ 560.195915][T15931] fuse: Bad value for 'user_id' [ 560.197633][T15931] fuse: Bad value for 'user_id' [ 560.568876][T15939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3039'. [ 561.300489][T15970] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3048'. [ 561.370387][ T39] audit: type=1400 audit(1729018023.617:1991): avc: denied { read } for pid=15969 comm="syz.2.3048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 561.449662][T15974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3049'. [ 561.623699][ T39] audit: type=1400 audit(1729018023.867:1992): avc: denied { link } for pid=15983 comm="syz.2.3053" name="#5d" dev="tmpfs" ino=612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 561.635176][ T39] audit: type=1400 audit(1729018023.877:1993): avc: denied { rename } for pid=15983 comm="syz.2.3053" name="#5e" dev="tmpfs" ino=612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 562.409501][T16010] sp0: Synchronizing with TNC [ 562.480554][ T39] audit: type=1400 audit(1729018024.727:1994): avc: denied { read } for pid=16009 comm="syz.2.3060" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 562.481367][T16010] md: md0 stopped. [ 562.495549][ T39] audit: type=1400 audit(1729018024.727:1995): avc: denied { open } for pid=16009 comm="syz.2.3060" path="/114/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 562.501399][ T39] audit: type=1400 audit(1729018024.727:1996): avc: denied { ioctl } for pid=16009 comm="syz.2.3060" path="/114/file0/file0" dev="fuse" ino=0 ioctlcmd=0x932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 562.566686][ T1382] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.199054][ T39] audit: type=1400 audit(1729018025.447:1997): avc: denied { setopt } for pid=16022 comm="syz.1.3065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 563.257309][ T39] audit: type=1400 audit(1729018025.507:1998): avc: denied { bind } for pid=16025 comm="syz.1.3066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 564.644746][T13417] libceph: connect (1)[c::]:6789 error -101 [ 564.647108][T13417] libceph: mon0 (1)[c::]:6789 connect error [ 564.669469][T16042] ceph: No mds server is up or the cluster is laggy [ 564.701134][T16051] overlayfs: failed to resolve 'volatile': -2 [ 564.780054][ T39] audit: type=1400 audit(1729018027.027:1999): avc: denied { block_suspend } for pid=16043 comm="syz.1.3071" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 564.874227][ T39] audit: type=1400 audit(1729018027.117:2000): avc: denied { getattr } for pid=16043 comm="syz.1.3071" name="/" dev="9p" ino=37617748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 564.875557][T16056] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 566.518309][T16085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3081'. [ 567.117031][T16100] input: syz0 as /devices/virtual/input/input30 [ 568.306268][ T39] audit: type=1400 audit(1729018030.557:2001): avc: denied { bind } for pid=16114 comm="syz.2.3088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 568.368643][ T39] audit: type=1400 audit(1729018030.617:2002): avc: denied { write } for pid=16114 comm="syz.2.3088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 568.455868][ T39] audit: type=1400 audit(1729018030.707:2003): avc: denied { listen } for pid=16114 comm="syz.2.3088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 SYZFAIL: ShmemBuilder: too large output offset size=14597 consumed=49217568 (errno 11: Resource temporarily unavailable) [ 568.666347][ T66] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 568.995161][ T39] audit: type=1400 audit(1729018031.237:2004): avc: denied { write } for pid=5254 comm="syz-executor" path="pipe:[3872]" dev="pipefs" ino=3872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 570.277403][ T1104] bond0 (unregistering): Released all slaves [ 570.589016][ T1104] hsr_slave_0: left promiscuous mode [ 570.590879][ T1104] hsr_slave_1: left promiscuous mode [ 572.365041][ T1104] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.439301][ T1104] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.504916][ T1104] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.577922][ T1104] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.676133][ T1104] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.739767][ T1104] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.813358][ T1104] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.909482][ T1104] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.064707][ T1104] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.203818][ T1104] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.269730][ T1104] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.357079][ T1104] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.443791][ T1104] bridge_slave_0: left allmulticast mode [ 573.445303][ T1104] bridge_slave_0: left promiscuous mode [ 573.447036][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.451508][ T1104] bridge_slave_1: left allmulticast mode [ 573.452999][ T1104] bridge_slave_1: left promiscuous mode [ 573.455028][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.457907][ T1104] bridge_slave_0: left allmulticast mode [ 573.459549][ T1104] bridge_slave_0: left promiscuous mode [ 573.461061][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.140775][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.147788][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.151654][ T1104] bond0 (unregistering): Released all slaves [ 574.239033][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.242780][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.246097][ T1104] bond0 (unregistering): Released all slaves [ 574.250212][ T1104] bond1 (unregistering): Released all slaves [ 574.349112][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.354652][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.359870][ T1104] bond0 (unregistering): Released all slaves [ 575.013359][ T1104] hsr_slave_0: left promiscuous mode [ 575.015119][ T1104] hsr_slave_1: left promiscuous mode [ 575.017100][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.019028][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.021199][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.023092][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.027346][ T1104] hsr_slave_0: left promiscuous mode [ 575.029081][ T1104] hsr_slave_1: left promiscuous mode [ 575.030924][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.032830][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.035025][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.036976][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.040727][ T1104] hsr_slave_0: left promiscuous mode [ 575.042477][ T1104] hsr_slave_1: left promiscuous mode [ 575.044224][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.046835][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.048739][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.103799][ T1104] veth1_macvtap: left promiscuous mode [ 575.105287][ T1104] veth0_macvtap: left promiscuous mode [ 575.106844][ T1104] veth1_vlan: left promiscuous mode [ 575.108272][ T1104] veth0_vlan: left promiscuous mode [ 575.110196][ T1104] veth1_macvtap: left promiscuous mode [ 575.111636][ T1104] veth0_macvtap: left promiscuous mode [ 575.113327][ T1104] veth1_vlan: left promiscuous mode [ 575.114895][ T1104] veth0_vlan: left promiscuous mode [ 575.117040][ T1104] veth1_macvtap: left promiscuous mode [ 575.118491][ T1104] veth0_macvtap: left promiscuous mode [ 575.119911][ T1104] veth1_vlan: left promiscuous mode [ 575.122753][ T1104] veth0_vlan: left promiscuous mode [ 575.884934][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 575.969897][ T1104] team0 (unregistering): Port device team_slave_0 removed [ 577.363884][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 577.458870][ T1104] team0 (unregistering): Port device team_slave_0 removed [ 578.875184][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 578.985165][ T1104] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 18:47:11 Registers: info registers vcpu 0 CPU#0 RAX=00000002000008fd RBX=ffff88802ebba440 RCX=0000000000000830 RDX=0000000000000002 RSI=00000000000000fd RDI=0000000000000002 RBP=0000000000000001 RSP=ffffc90000007d80 R8 =0000000000000000 R9 =fffffbfff20be7e1 R10=ffffffff905f3f0f R11=0000000000000000 R12=1ffff92000000fb1 R13=ffffc90000007da8 R14=ffffffff8da51770 R15=ffffffff905f7218 RIP=ffffffff813c0088 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9f637f6d58 CR3=0000000062998000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 01000f0008000000 0000c28001000100 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f629f1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f629f1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f629f113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f629f114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f629f11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f629f12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f62b0b488 00007f9f62b0b480 00007f9f62b0b478 00007f9f62b0b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f6366d100 00007f9f62b0b440 00007f9f62b00004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f62b0b498 00007f9f62b0b490 00007f9f62b0b488 00007f9f62b0b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000046 RBX=ffff88802ebbaf20 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8b6cd340 RDI=ffffffff8bd1a1c0 RBP=ffffffff8e1b8280 RSP=ffffc90003c577d8 R8 =0000000000000006 R9 =0000555565c00000 R10=0000555565b7c000 R11=0000000000000000 R12=ffff88802ebba440 R13=0000000000000000 R14=00000000ffffffff R15=0000000000000001 RIP=ffffffff8b21e2c7 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fff0d9c1dbc CR3=0000000028452000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=672640b9672640b9 672640b9672640b9 672640b9672640b9 672640b9672640b9 672640b9672640b9 672640b9672640b9 672640b9672640b9 672640b9672640b9 ZMM22=7fc4be637fc4be63 7fc4be637fc4be63 7fc4be637fc4be63 7fc4be637fc4be63 7fc4be637fc4be63 7fc4be637fc4be63 7fc4be637fc4be63 7fc4be637fc4be63 ZMM23=3b4797703b479770 3b4797703b479770 3b4797703b479770 3b4797703b479770 3b4797703b479770 3b4797703b479770 3b4797703b479770 3b4797703b479770 ZMM24=13a7ea6413a7ea64 13a7ea6413a7ea64 13a7ea6413a7ea64 13a7ea6413a7ea64 13a7ea6413a7ea64 13a7ea6413a7ea64 13a7ea6413a7ea64 13a7ea6413a7ea64 ZMM25=5ef6fce05ef6fce0 5ef6fce05ef6fce0 5ef6fce05ef6fce0 5ef6fce05ef6fce0 5ef6fce05ef6fce0 5ef6fce05ef6fce0 5ef6fce05ef6fce0 5ef6fce05ef6fce0 ZMM26=b6f6e1d6b6f6e1d6 b6f6e1d6b6f6e1d6 b6f6e1d6b6f6e1d6 b6f6e1d6b6f6e1d6 b6f6e1d6b6f6e1d6 b6f6e1d6b6f6e1d6 b6f6e1d6b6f6e1d6 b6f6e1d6b6f6e1d6 ZMM27=732e05bd732e05bd 732e05bd732e05bd 732e05bd732e05bd 732e05bd732e05bd 732e05bd732e05bd 732e05bd732e05bd 732e05bd732e05bd 732e05bd732e05bd ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=eb130000eb130000 eb130000eb130000 eb130000eb130000 eb130000eb130000 eb130000eb130000 eb130000eb130000 eb130000eb130000 eb130000eb130000 info registers vcpu 2 CPU#2 RAX=0000000000000069 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850a90b5 RDI=ffffffff9aae3b40 RBP=ffffffff9aae3b00 RSP=ffffc900009778d0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000069 R14=ffffffff850a9050 R15=0000000000000000 RIP=ffffffff850a90df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020006d00 CR3=000000003b672000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 010000000000002f ff00000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d697f1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d697f1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d697f113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d697f114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d697f11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d697f12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d6990b488 00007f1d6990b480 00007f1d6990b478 00007f1d6990b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d6a46d100 00007f1d6990b440 00007f1d69900004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d6990b498 00007f1d6990b490 00007f1d6990b488 00007f1d6990b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000038 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080000000 RBX=0000000000000003 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8b6cd300 RDI=ffffffff8bd1a1c0 RBP=ffffffff8e1b82e0 RSP=ffffc900009b7740 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=ffffc900009b7938 R12=ffff88801cf8c880 R13=00000000ffffffff R14=00000000ffffffff R15=0000000000000000 RIP=ffffffff8b21f83d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9f637f5f98 CR3=0000000062998000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f629f1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f629f1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f629f113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f629f114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f629f11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f629f12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f62b0b488 00007f9f62b0b480 00007f9f62b0b478 00007f9f62b0b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f6366d100 00007f9f62b0b440 00007f9f62b0b458 00007f9f62b0b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f62b0b498 00007f9f62b0b490 00007f9f62b0b488 00007f9f62b0b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000