last executing test programs: 1m4.496780527s ago: executing program 1 (id=415): keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r5}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="8ce59abc1ca09fab9a0a8c234d7293811fdfae02faf44ad82c8d3b9d3b3fb33b3a283b54dcb6417fa8198068ebab744398505033b37e8bf99d81514c0f9c95b1e94e0ffc6777e973aeca7a80fc937409208820083284d87b3b02be08d05867af120ca5f7de90bee665de1a9d9d3b4d2b401cec7854d2c31626f8522cb38340e429186536983832b78f43134830", 0x8d, 0xfffffffffffffff8) r8 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="16c69451817edc9c849825c6015edf7cd3f243f80db69456bd4db7da7078a9dc71050dee9e17ec0c9f05cfcc28f618e0c138cfc0f8f9b4cf5498d915ac6c9a71b7472935aa46b7508a1b942d3ac21476c3a8ac559ceaea18f00eae771b2c520b75e5cbb6bc106a63e4a127c72d956b3e990ba383b14fed3b6dd84cf3e01f4514c06c3e64dfb24670a63816", 0x8b, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000300)={0x0, r7, r8}, &(0x7f0000000340)=""/25, 0x19, &(0x7f0000000440)={&(0x7f0000000380)={'blake2s-128-arm\x00'}, &(0x7f00000003c0)="7ae86b9751daa7693994150abebf6e40c7794a9e26575a1d6423d81f4951957db0d34a007c0e34ed20698e0348c90a2634a29b6ea54ebc5c45aab88f84880a79c6a9194f5abefa920157e41517a0d359341fb344090661c5c4186e7d1a5184788d9087161e367d5a0c461b45054382443d940c590b04", 0x76}) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r10, 0x112, 0x4, &(0x7f0000000300)={0x1, 0xff}, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r9, 0x0, 0x61, &(0x7f0000000140)=ANY=[@ANYBLOB="6669d052337a00000000000000000000000000000000000000000000000000e304"], &(0x7f0000000bc0)=0x2c) r11 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r12 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r12, 0x6a, 0x2, 0x0, &(0x7f00000000c0)=0xfffffffffffffd27) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r11, 0xc1105511, &(0x7f0000000700)={{0x7, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x589a6a38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r6, 0x4008af13, &(0x7f0000000000)={0x1, 0x1}) 1m4.253745135s ago: executing program 1 (id=418): r0 = io_uring_setup(0x4b93, &(0x7f0000000200)={0x0, 0x1595, 0x400, 0x3, 0x306}) r1 = syz_io_uring_setup(0x24fc, &(0x7f00000000c0)={0x0, 0x0, 0x1000, 0x1, 0xe6, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x6) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000034"]) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) r8 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmmsg$sock(r8, &(0x7f00000025c0)=[{{&(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e23, @multicast1}, 0x4, 0x1, 0x0, 0x4}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)="960a9a288ac7fd0e8cefd7aa856c2c0b32f0747ed41bf95745be8c51f8443a5e1f31e8c32361eccd4e29431157809d721577f4ddccbc89a6421327c25e7a42528496d8d5d2d7381c4dbd4122f5fb28536966264b4e1a4312af5bdf94a7758b3b51e84e84e8e1c032b1d7701a74ef82e1e9cd4b4a7a038f411532e94abc55f03e3de00e23f7750d8b11df8a9df6a465aed68b679bcedc2a0276d9a5ff900238a938c6764b5896b491a28e1015c809eba5ed4c5be0bdb2923917753c146002d79b2d86fb1c7ab324521b6a8f0b6b3efea2240849f4589ea9b74c6a274dba0a1ccb5a71582ec58abfa3112e10846ba4fcde0cc8102385d756326522a3d9af0bb42dd0389d378a05b6570e9a05cc12ff56f302b044b55e89b25e9da18d36e7da6ba5d6042677a38d83428916dc45dff7c9430c13f7b34ae8bbe13b5ffc2a9bfce36775e464cb4a8eef72236898488b462226bd9dae60e2747c98b09bac822b027c3e470488817baf77475eafed082034eac08bbf4f96cc047b7b45c238067bbc35b5d9221ce9956ca553033f6ac6618a6fb18f9863fc62edf60d346161aa12ccd024360ccb87ff6489c28ec0f37214f07cb65e37c59975c5900f95507ac554abdaa5089afe53e5275d4ed07b4a65c404a4eea2c77bfa9b2d2b84ae5784b6f138c16b3589f22024b2f0719030982679408b40f7d38bb5d872f4d3fb553d90457cc7812c1cfc9822efbd397ea2334c25af9398b85cc5626d509bbbfd9fda499f852f4b3bd7d9c4f7581f7482b704075e437d27c53de4ca5c9622c6abbacca992d47693ecfc5e0b9a715efb98f53d537c381337e1644870e4166c09d9f23c52280519b83058c53828e0830887884632ef580eaf2fbc835c9d7507bd05eb00e54d5b930af1748373f7b8d2caa589d49087182e4a2dce00e8a61e13e7662b02c940a3dcf348686e36d39a0a44cb768357a63b1f3a8b5d581aa24276391e6e549be7a02bcd9fadbbad7b36f741e6056beeb4d78dc37253e5795675697380bac507bbb443e1ceb1ea7370a9b93c6438f47b5a56e698f69d25c0fd4fb4674b35302928b1e9c4076d1ee44b8c0497620b6a06993122b4cd87fdb94bb528d5aebbb6934ffd4ac11eb479401591a2b7258dab46879e27535384cb3262a10f6cdfa904bf117a0fd8981d6caa541c3934f5bb3e384d8fb3835bfc1fe4e2f1a4c31d3bceed5f3066e36f7e9bd3769a6d7aa4dfbe4e527ef91b68750e24c1da3e20aa14bf2e0d5afde4b3553327ea20b891d3e130dfdd169fa01de927cd5cb3990d29a2b3708d6b80a42f91994a7796913650fe748d0f62ca9a91f7c850aa5033bbe077f8af59237a673e13ded4ca1a8ad4e80b7775d0d260b68dee4388b2f6b23c041f0be6abe98c67e68e3d7ae6fcc86db2eb8027912a66d27a32ad4c6167b7ed9ec5e307472b7a1da5c2252424861243273ea84519a46748fbcd0694a9db9c99e7ddd0bfb173d62a4fccdae3e1a803f850f9207a97f4ebed889aaf146d4015500eaa439c7e490a5ddd46a5f0e45312a09c77d07dff9cbb06ab23d3441d49f03589324b84b41510dfa0579542d3a02a22655188f49cf3c81e4035e0092412556b1a7f285ed481ca34f34239057de14ec0d7ae1b1d728a81c322981f90bd0ce7634b9f8ac2b354aa8b9c7bf5c13ebaaf310266f52fa8a0a2620878027e61e39f6b298c519c93291bfbf2572ff1302d59ba4426a9e70867d3a923c1707b49d1d78fbfe8f1c4d163dc522a10623b4085c057c5d8b092ffda34ba35e677e398fae42e99b5b4c0ca6e1eaf3be86881e76bab8264211c8a436765067afedcc7679bc030b27bda90e5457206f5b77b81cba11d839e52cb85973f37487e344631584a1b84b21600dc2fdbd6ba9e730d1fbe277d798903269ef264e100fb0207a23f99ba5ed6cca0f82ee960c273ca071ed121e05240f438e5b5d7c9de669d11e0f8fb75d9dd1ce4d8f2e6b4e7d3b975f69ac6c97bf9c5c5b0fcfcd51eb9be749ca78c4d2d6adc6d2d98816319e18e4274acf741dc1e8ad8d75266d70587bc5fd7b3e37dcd6dd153555f0e8411e0a44c7819cf5e434ae7dba31b8d458470007bf0cb6e4e03ce0455b741054c86ff57e95a9c0162ab70f0c7cedb7003f93b52ddbeeeda92e9f979483dfd807e644bcf31ee792a30342d0d43c4239508afa6043913d21a278cfa5cd076adbecea41958d2a6e2f170a83b29f0aa6245fcfff5393f2d787dde22a2a939776f24a61dd7bbae2d2d21b7ce70333d920695ad50ed4cc06f8675151b3f6d0b6dc96d8186c320272c2952dce19c7e11ba9d96315c8f7a5fb1fa6dbac82f11b4e9598b0119aa4181f288fcf3c6d2fe967cccded33d8182cee337b017d8263c6143f9065ab3645eaf59efba2de9a53a596cc953870f3db4d35fbe9d2cca0e6a0e8ded6346775d1cfe3278dd05e31ef5c5ef48282dc446c1ae708b6f3b78c27346af25e5c138c6aa06f8d11a2f26b1ea21c742c3c96f1f1fe7a6678464ad4bfab37b2285fca07530141c789d0c954fefa8f1dea0e287dc4d4d92d2199559c07faad6ee3f90fb06d5f56a402bd56bb3a444d8de8068f26589d41b78b98030902cedc10e3f98270f57747fb338d4a4fb523c3851a3dedc034f9f47271150518325f308002545e93956cda7da32f8793d5cf74ed52e73fb85a0e88ec7e9828e5d770ef7ff0f9c27130afb2a5218f1581afb974b2990d47f4df172da3da480a6dcd3dac657a29872b08fa18d0ab52aa0db4cda54a8db0755b56b01eff2a91803b6453388552a16fbd945d3a4809fef6dbf464fc364b741ad156efcf62eedb7e2ff02ceb8d6fc0f007ebcb8493655eb343e882343acfa037bf73b46ad851e489a021f17ba49a5dcaafd6294949ea860833723d205e2fa8b835cd408c7fff66a7967a344080063b1c32c28c66761305de0419c23c66333c300fc82c6c0d88f2fa36f085b86de2a0767494fe4711dda65f12057fbc8321238d379ed15635a4621ce1d44903ab9d00829ab343d197258457d5ec7e9179d09d4ebed73699fc202bff2d60ed2a50ca3d38d545747ca803891beb74d22703dfb0f9160523874a7303b93025472066fcfadac3bfc1ea0fbf573f0d91a65e15b05f386be71fe28021fd1690ee6baa4c22962cb76dd982b41cf8bb581c8ffd11e8687a67539f6cd123b671f7f7330a84f65d0ecee976185f221b38ae1967f9a96aa3a90834d9feff94d2d1170a0cb1d4a06ae68daa6943667b208edd45b8be10ed0b4195ed0c15331ca726fed46b0bf682871e8a05b0780a404d9896f2d938d312e27f885db9852d69ca82053884b48ac256c8aab027b97db08b5e08e91d09d49a799278731f54bf58288b0ecd4d31d4d2eb2ad048d098e0166db71bec5356fda9b58e477f9c7103207b206fd099dd7572d04dbc0e2ddaacb986d72961ae6b126759638172973bf84016822eba50f31b0d5221ee9d5d2ebac7cd436e63f8dc4aa4dabb1fbda4446b14b46f715cd226606a0ee2ddc8c18d85bfa990ec605358fd33625e76b5e6b5f14c35de82c8fbfffe1bbae9ab0716349e60393821b16be593924e51ddd61719e2a73c8905dbb5cd73d2e1ceb2025daa9a524ee085e4bf473f8525c63d4db9587e07fb5be3208e3e00c24cb8e5f317542f2213832b63d0a1576aad587579d52356e5be7d98b3de56989402fa6b43d24cfa7c1d1e7a877cbf843b0a063c6f2af01b623a2b7ffa54b1942255197891bc693f35505c0d3bfd9b517d8b20f820d5408846be0421503ce36d28c5f840d3e60294090e8f3a220cf010b1b2e005d86a3b63afa3cdd7bf1a0c5dc2edcdf88fb9a9099e9f2887ae66e4243e8a99c0bff392d31cd4bf27a77794695b27757e539f4b69ef7c9a4beffe5c06fdb8cdca0462cdbdb1aed6f1c99aa4233a6c47a3eb328ec98a68115364f00fcfaf04d0fede9e50b7a219796d68e1c2e29e6d0201afc016c939d64a2abc39cb8dc30b5db5c1e4dddc9768dfcef18f0b79d5a1dd2406c07d6566b34378632d9026793ca41c755ff887d5941b7a5e6e55a7a4796c41eb922445722e5c8700bd87b14c4d1b2f3542d1d1dd4d34287739515fef1187b095a2817b3be1077128b865aeaf73fb0684b6ef75e66c5f306847f42dd89c1526a898ef90d5ef54f70a890ff64fa85e45fa59037c6e9b03b7bee687c2677a5d902d91e7ebeefdbca6e4b8fe96d765563117d4790132199de5d4d03bc70f696ae29158d3a930d3f0ab8b0e754e2ed97ef50ad4927be50fec6ae5bd73ced74b74dbe7df1f873488c8389034ad1b7c9dfdba3b172aced00c96cbb4580b0d11d0f36e4c0d591884f587dd56353c67bd597ccfb5e43b3b8d9947a70cd2aa359cb5e916875f7a9d76284540224a8c3eec3428930accc1b9ab45361c74531babd162e7bb22a9ee58b11dc5dcd64401f7e5f64742690574db81fb24384cce215aa30aff1d7cdfdd2410cdd318d7ce78e685b55ed569ee20896697d437ff66c937eb6859ee1de8d611996987b301099f6ecb31119efbcbefc54f538808c55121a4093a13a21847538f997d058b347e6ac2cc7da6bcbb2dad4a261a6db6fba65d20fbf0dde7fd7113be619e16d9e37021b95220618bb7e1d12a67350540d86e6b9e14172a42db1d689b7a644a1e67e5ce3581c7414d362332bf2af2508752ac926ff93a967d73e420c96df8943522988c3997bba1b351eee075fd341d2f54faae879f32d7d06ef14e1ab817e5379558d9a7fe5a7fed89451d2c3c5d1a1edad66db6ab23d803c599964c21bca8ab0c7422caa0a251c659736180722a7b2ebe9926a054f807e7028fcebea1cc25e072185bf465f0c0b0f25aac648cf08cd497e3384e9852d96595e753874cba1037558f8d42649f74df4e1660bba5b4d3e62166a143d83782fd21201151e3abea88c64d026de1246948e4ea1920dccd957cc495de59d4442e4c6f4c98e93b2d8b967f6144fc94f6f7629eecf6fa1ab0ce8f11d79e0a4567470a249772b719bc3c0fd9e864bb46625d24abee89c7267e2c08f4ffa835afdf577eef2e1f21bce7a94540414369c54f7bae51fce552e2fbee69156e5f8ba3029e330c35881159fdef982dca48cd510e27d2b4f16d232aa482dae51927b0e3632667cca8cc51a50485ba5377e1ea5498ee132af0686648c8885d03078144aba400add3a29be675fa07d163eb00e409d1c7bddb3dbb4c57f97322c31c5de8aa4f1748107ce8228cd230bf1f14222472b0f5e43267a0fecc82d6849a712b5ea55c5a97893c7f11c96b81ba2a335e974a2f79ebf2a5fba35d17e42756f7a7a578e041d628b20e39eeafe67d3b3d7c540f3319983a8fd60f811f658b0d38a93054fee5154b74fe9063a263df98b136694b570642d6046cc20a91c4f150fb8c7df55a14756bff6e23443c0950876fb264a3569c12ac8c78354c1aaea4fb9d624f6aa337792f65ab46e109d5c1d94717b1ac049e4614ed5fef566f3ec80699685cd48b4102f01d9cd78774b2fab0b34eb97834a06c8aff57f754058bd856e5e7db24fb1662075bc9c66eed0dbaf58f4118f04d57628cb428892a93295ccc0262a016d1b226af195873644d21088bacb44c432a3c909d2d99247fa6f11b858cdacd585ab4cb7dc8a3c2bb652dd2f8cd3bdbf0f712a41aeacce14c449a405350d3b38f42168c6bc164ad7f7308664fa2ec0da639a14430d5269b3a7b748e50738c04b6e898bf7f8e1712c99146bb0a8a7b0dcfd9ce333bbc20a4454798853639f50ea0ce542", 0x1000}], 0x1, &(0x7f0000001300)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x826}}, @mark={{0x14, 0x1, 0x24, 0x7e03}}], 0x48}}, {{&(0x7f0000001380)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000002500)=[{&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000002400)="e6853c1f681b3f2b2e0243c8445ccd95d18560ef8506361c89123ec601cac8cdb68ae6e0ffe467f1122e110fcb7fe1ce6a9123035323da05223e6ea3", 0x3c}, {&(0x7f0000002440)="0d8b0ce22d4dd8d2b1158c644f3a85f0e5caebc1cd370e453cf8e62400af7a0706986a5e1e0e3d936903b65581398b81130e97d6229d0fe5254f62d391475a6108bfc6d8960c086b5007fee42f82c3dfde8c16443532cf9c6747b5efa30d9de18a3fa700d761cbcf92143ad36f407dff66a8c3c7d70e187307d6bcf8fce1c2dd7115c14463f0bdc45a9521c3749d2d53087e251fba08ed3750b514ce44cc587216cc12014a464d30e2eb7f7f1fd186d2f2bc50fc279966d2c592", 0xba}], 0x3, &(0x7f0000002540)=[@mark={{0x14, 0x1, 0x24, 0x7f}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @timestamping={{0xfffffffffffffc2d, 0x1, 0x25, 0x1}}], 0x48}}], 0x2, 0x4c0) connect$netlink(0xffffffffffffffff, &(0x7f0000002640)=@kern={0x10, 0x0, 0x0, 0x800000}, 0xc) io_uring_enter(r1, 0x5b43, 0x0, 0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, r10, 0x1, 0x0, 0x2000000, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x34, r13, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008041}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000002940)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002900)={&(0x7f0000002a80)={0xd0, r13, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0xa8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '&^@/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1b4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!*\'\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10000}, @ETHTOOL_A_BITSET_VALUE={0x29, 0x4, "8ba196381d85a70939739ee517a89820967d09ac587d026b209783cd3bd4a327ebf0953dc4"}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x4884) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000026c0)={@multicast2, @dev, 0x0}, &(0x7f0000002700)=0xc) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x24, r10, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r14}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000844) 1m4.075913728s ago: executing program 1 (id=420): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r2, 0x25, 0x0, @val=@tracing={0x0, 0x20000000}}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r3, r4}, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r6 = msgget$private(0x0, 0x288) msgsnd(r6, &(0x7f0000001280)={0x1}, 0x8, 0x0) msgrcv(r6, &(0x7f0000000240)={0x0, ""/4096}, 0x1008, 0x1, 0x1800) r7 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x46, &(0x7f0000000100)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r8}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r11}, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2c000000170a030c0000000000000000020000000900010073797a3000000000090002"], 0x2c}}, 0x0) r14 = dup(r10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r14}, 0x2c, {[], [], 0x6b}}) 1m3.774376559s ago: executing program 1 (id=423): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x4, 0x0) (async) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) unshare(0x62040200) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000300)={0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000280)={r3, 0x2, 0x2009, 0x1, &(0x7f0000000200)=[{0x6, 0x6, 0x26b2, 0x40}]}) close(r0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m2.335756077s ago: executing program 1 (id=433): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000001000000002"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x30}, @map_fd={0x18, 0x2, 0x1, 0x0, r1}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket(0x10, 0x3, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000000000000000c000180060006008848"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file1\x00') r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES64=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000001000000002"], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x30}, @map_fd={0x18, 0x2, 0x1, 0x0, r1}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) socket(0x10, 0x3, 0x0) (async) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000000000000000c000180060006008848"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) (async) chdir(&(0x7f0000000100)='./file1\x00') (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES64=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 1m2.191401487s ago: executing program 1 (id=437): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x1, 0xfffff030}, {0x6, 0x80, 0x0, 0x80}]}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x101ff, 0x5, 0xdddd1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008aeba, 0x0) 47.133853365s ago: executing program 32 (id=437): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x1, 0xfffff030}, {0x6, 0x80, 0x0, 0x80}]}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x101ff, 0x5, 0xdddd1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008aeba, 0x0) 32.977745661s ago: executing program 2 (id=643): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mremap(&(0x7f00005a9000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000292000/0x4000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() (async) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x4c, 0x0, &(0x7f00001a2000/0x3000)=nil, 0xfe90, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0xb) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in6=@dev, 0x40, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x200ff}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x2}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7}}, 0xe8) (async) migrate_pages(r1, 0x2, &(0x7f0000000040)=0x5, &(0x7f0000000100)=0x7) (async) ioctl$sock_FIOSETOWN(r2, 0x8901, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800040010108900"/20, @ANYRES32=0x0, @ANYBLOB="010900000000000008001b0000000000"], 0x28}}, 0x0) (async, rerun: 32) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) (async, rerun: 32) syz_emit_ethernet(0x62, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "40ff8c", 0x2c, 0x6, 0x0, @local, @local, {[], {{0xfffa, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0xb, 0x0, 0x0, {[@sack={0x5, 0x16, [0x3, 0xffffffff, 0x1, 0x0, 0x5]}]}}}}}}}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000}, 0x18, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0) socket$key(0xf, 0x3, 0x2) 32.733913402s ago: executing program 2 (id=646): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14, 0x80000) recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/213, 0xd5, 0x101, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @empty}, 0x4}}, 0x80) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0xd85, 0x202) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xfd, 0x9, 0xa9, 0x3, 0x0, 0x2, 0x40000004}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x4, 0x0, 0x5e, 0x0, 0x3, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r3, @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800900010069706970000000000c0002800500090004000000"], 0x3c}, 0x1, 0x2}, 0x0) 25.6188872s ago: executing program 2 (id=646): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14, 0x80000) recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/213, 0xd5, 0x101, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @empty}, 0x4}}, 0x80) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0xd85, 0x202) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xfd, 0x9, 0xa9, 0x3, 0x0, 0x2, 0x40000004}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x4, 0x0, 0x5e, 0x0, 0x3, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r3, @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800900010069706970000000000c0002800500090004000000"], 0x3c}, 0x1, 0x2}, 0x0) 18.840404328s ago: executing program 3 (id=748): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xffa2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x4) r9 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = openat$nmem0(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) dup3(r2, r2, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x800}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}}, 0x40) syz_kvm_setup_cpu$x86(r9, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000100)="0f20d835200000000f22d80fc75cba100fae465ede149a0f06c4e27d78b00030000066baf80cb82b9e6f80ef66bafc0cec0f01c30f205a64660f3881ba3831064c", 0x41}], 0x1, 0x10, &(0x7f0000000200), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000780)=[@textreal={0x8, &(0x7f0000000040)="7e0db80f008ee0263e0fc7a8b3000f1c850050f6ab5b0066b9f70300000f320fda7f00f20f2b35670ff8090f08", 0x2d}], 0x1, 0x4c, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000080)=r13) r14 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r14, 0x29, 0x2e, &(0x7f0000000000)={0x2b, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x200, @mcast1}}}, 0x108) getsockopt$inet6_buf(r14, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 18.639952919s ago: executing program 4 (id=751): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x44, 0x2f, 0x0, @remote, @private0, {[@dstopts={0xc, 0x1, '\x00', [@pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @dstopts={0x5e}, @srh={0x3c, 0x2, 0x4, 0x1, 0x5, 0x18, 0x8, [@local]}], {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x180}}}}}}}, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0) (async) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async) recvmmsg(r2, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x2, 0x60, 0x0) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000011d80)=@newtfilter={0x104c, 0x2c, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff1}, {0x9, 0xfff1}, {0xfff3, 0x7}}, [@f_rsvp6={{0xa}, {0x101c, 0x2, [@TCA_RSVP_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x0, 0x1, 0x21, 0x6, 0x4, 0x9, 0xa, 0x6, 0x3, 0xe23f, 0x243c, 0x58b, 0x1000, 0x2, 0x5, 0x6, 0x80000000, 0x1, 0x80000000, 0x7, 0x1, 0x7, 0xc7, 0x7, 0x5, 0x7, 0x200, 0x7, 0x7, 0xde7, 0x3, 0x88f00000, 0x30000000, 0x2, 0x6, 0x3, 0x5, 0xd3a, 0x3, 0x5, 0x4, 0x0, 0x0, 0x6, 0x39f0, 0x72, 0x7, 0x0, 0x28, 0x91, 0x4, 0x2, 0xffff, 0x3, 0x7, 0x1, 0xcc9, 0x6, 0x10000, 0x0, 0x1, 0x2, 0x9, 0xfffffffb, 0x7, 0x1, 0x0, 0x9a, 0xe25, 0x5, 0x9, 0x80, 0x200, 0xffff, 0x0, 0x7ff, 0x4027, 0xa, 0x1, 0x4, 0x8, 0x700, 0x0, 0xe97, 0x5, 0x4, 0x4, 0x6, 0x0, 0x10001, 0x4, 0x7, 0xb36, 0xe, 0x6, 0x6, 0x9, 0x7, 0x8000, 0x2, 0x3, 0x20, 0x0, 0x0, 0x101, 0x7, 0x13, 0x10, 0x2, 0xc, 0x5, 0x7, 0x4, 0xfffffffa, 0x9, 0x1, 0x1, 0x8, 0x81, 0x2, 0x0, 0xa, 0xffffffff, 0x6, 0x6, 0x8, 0x8, 0x8, 0x6a0ff34, 0xfffffff8, 0x0, 0x3, 0x7, 0x36, 0x401, 0xfffffff5, 0xac4, 0x5, 0x40, 0x80000000, 0x1, 0x85f, 0x3, 0x8, 0xfffffffc, 0x0, 0x4, 0x3, 0x5, 0x3, 0x300000, 0x1, 0x0, 0x8cb, 0x0, 0x9a89, 0x3, 0x1, 0xd, 0xfffffff8, 0xffff, 0xfffff1b5, 0x94f, 0x7, 0x2, 0x45, 0x8, 0x7, 0x2, 0x7fff, 0x2, 0x401, 0x0, 0x10000, 0x0, 0x4, 0x0, 0x6, 0x3, 0x1, 0x6, 0xffffffff, 0x1ff, 0x9, 0x951e, 0x10000, 0x2, 0x7fffffff, 0x6, 0x3, 0x6, 0x9, 0x1, 0x7, 0x3, 0x9, 0x2, 0x3, 0x4, 0x5, 0xa, 0x7d8, 0xff, 0x6, 0x2, 0x5, 0x11, 0x2e0c, 0x1ff, 0x0, 0x8, 0x6, 0x4, 0x3, 0x80000000, 0x9, 0x4, 0x5, 0xd, 0x6899, 0x2d87, 0x2, 0x8, 0x8, 0x8, 0x5, 0x4, 0x9, 0x1, 0x3, 0x6, 0x9, 0xff, 0x2000, 0x4, 0x75, 0x1, 0x4, 0x4, 0x0, 0xd, 0x5, 0x433, 0x9, 0x4, 0x5, 0x7ff, 0x200, 0x84, 0xfffffffb, 0x6, 0x5, 0x7, 0x7ff, 0x80000001]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x964, 0x2, 0x5, 0x0, 0x3, 0x24000000, 0x3, 0x8, 0x307, 0x6, 0x80, 0x3, 0x3, 0x8000, 0x832b, 0x6, 0x10000, 0x0, 0x0, 0x5, 0x5, 0x1, 0x6, 0x93c, 0xf75f, 0x7, 0x7f, 0x0, 0x2800000, 0x6, 0x9, 0x3, 0xa, 0x6, 0x7, 0x3, 0x0, 0xaa3, 0x2, 0x101, 0x3, 0x9, 0x1, 0xe, 0x4, 0xfffffc01, 0x101, 0x8, 0x2, 0x3, 0x4, 0xffff, 0x7fffffff, 0x6, 0x5, 0x4a, 0xbcc, 0xff, 0x8, 0x5, 0xff, 0xff, 0x6, 0x9b4, 0x3, 0x2, 0x2, 0x1, 0x2, 0x0, 0x0, 0x0, 0x4, 0x81, 0x4, 0x8, 0x10000, 0x74f, 0x5, 0x7fffffff, 0x2, 0x4, 0x8, 0xfffffffa, 0x80, 0x1000, 0x400, 0x7, 0xd2a, 0x3, 0x400, 0x1b, 0x400, 0x4, 0x8, 0x10000, 0x1ff, 0x1, 0xad99, 0xff, 0xb, 0x3, 0x2, 0xa99, 0x4, 0xa, 0x6609, 0x5, 0x3, 0x4, 0x101, 0x7, 0x7, 0x21, 0x8, 0x8, 0x2, 0x1000, 0xc, 0x0, 0x5, 0x7fffffff, 0xffffffff, 0x9, 0xc, 0x1, 0x7ff, 0x9, 0x1, 0xff, 0x8, 0x7, 0xc, 0x5, 0x6, 0x8000, 0xc, 0x8, 0x37, 0x55, 0x4, 0x4, 0xefaf, 0x80000001, 0x4, 0x6, 0x0, 0x3, 0x1, 0x1, 0x9, 0xd25e, 0xc, 0x5a44, 0xd3, 0x3, 0x8, 0x6, 0x2, 0x4, 0x2d, 0xab, 0x6, 0xffff, 0x5, 0xb, 0x5, 0xffff6e32, 0x4, 0x800, 0xffff, 0x3, 0x1ff, 0x3da9, 0x6, 0x8, 0x2, 0x6, 0xf, 0x5, 0x78, 0x0, 0x7, 0x200000, 0xfff, 0x8001, 0x5, 0x1ff, 0x90000000, 0x7968a3e5, 0x5, 0x9, 0x7fff, 0x2, 0x81, 0x0, 0x100, 0x0, 0xfff, 0x6, 0x4, 0x10, 0x1ff, 0x7f, 0x9, 0x7, 0x10, 0x3, 0x3b, 0x2, 0xfffffff8, 0x9, 0x2, 0xffff7597, 0xc, 0x8, 0xfffffffb, 0x1, 0x2, 0xc, 0x9, 0x65c, 0xd, 0x7, 0x7, 0x5, 0x5, 0x2, 0x5, 0x0, 0x1, 0x0, 0x5, 0x9, 0x4, 0x1, 0x5, 0x8000, 0x1, 0x7, 0x21f, 0x24000000, 0x2, 0x8, 0x9, 0x4, 0x4bf, 0x1, 0x1, 0x6d9, 0x1, 0x0, 0x4, 0x0, 0x9]}]}, @TCA_RSVP_POLICE={0x80c, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x6, 0xc, 0x80, 0x40, 0x7, 0x1, 0x7ed, 0x9, 0x9, 0x34b, 0x5, 0x7ff, 0x400, 0x7a8d, 0x4, 0x74e8b26a, 0x81, 0x2, 0x3, 0x6, 0x3, 0x9, 0x9, 0x7, 0xf, 0x5279, 0x10000, 0x7, 0x4, 0x9, 0x1, 0x25, 0x81f, 0xf, 0x9, 0x8, 0x1, 0x80000000, 0x8, 0x5, 0xe, 0xd37, 0x7, 0x800, 0x4, 0x10, 0x2, 0x2, 0xffffffff, 0x8001, 0x6, 0x3, 0xee99, 0x474, 0x10000, 0x9, 0x9, 0x8cce, 0x100, 0x2, 0x4, 0x7, 0xffffffff, 0x0, 0x6, 0xfffffff8, 0x8, 0x2, 0x1, 0x7, 0x1, 0xac, 0x3, 0x9, 0xfffffffc, 0x80, 0x10, 0x7fff, 0x7, 0x4, 0x2, 0x101, 0x78b, 0x7ff, 0x8, 0x78000000, 0x101, 0xc, 0x5, 0x3, 0xf534, 0x4, 0x2, 0x4000, 0x14ac, 0x64ebc947, 0x10001, 0xacd, 0x6, 0x6, 0xfffffffd, 0x0, 0x4, 0x2c, 0x0, 0x5, 0x7, 0x13a6, 0xb9, 0x1, 0x8, 0x1, 0x6, 0x5, 0x8, 0x1, 0x0, 0x80000000, 0xf73, 0x10001, 0x5, 0x10001, 0x9, 0x7, 0x8fcf, 0x63165378, 0x9, 0x8, 0x6, 0x6, 0x3, 0xf33, 0x3, 0x9, 0x498, 0x6, 0x9, 0xffff41fd, 0x2, 0x8, 0x4, 0x6, 0x6, 0x4, 0x7, 0x200, 0x0, 0x1, 0xff, 0x9, 0x5, 0xfffffff8, 0x7, 0x5, 0x6, 0x4, 0x0, 0x9, 0x1, 0x6, 0x3, 0x14f4, 0x8, 0x6, 0x9, 0x954, 0xc, 0x7fffffff, 0xffffffff, 0x480000, 0x8, 0x7, 0x8, 0x4401, 0x6, 0xe6, 0x4, 0x9, 0x0, 0xffffffff, 0xe9, 0x32, 0xf1, 0x800, 0x20080, 0x9, 0x1, 0x976, 0x0, 0x7, 0x8, 0x9, 0xffffc69c, 0xbb2, 0x4, 0x3, 0x9, 0x7fff, 0x16, 0xd, 0x3, 0x6, 0x1, 0x1ff, 0x80000001, 0x7, 0xb, 0x3c0b, 0xffffffff, 0x4, 0x3caa, 0x100, 0x2, 0x1, 0xfffffff9, 0x4, 0xd6c7, 0xffffe53f, 0x99, 0x0, 0x3, 0x7, 0xf, 0x7701, 0x7, 0x7, 0xfff, 0x280, 0x2, 0xc12, 0x7, 0x9, 0x1, 0x3, 0x3, 0x40000000, 0xff, 0x4, 0x3ff, 0x8, 0xe2e4, 0xf, 0x5, 0x200, 0x9, 0x0, 0x9, 0x5, 0x0, 0x3, 0x8, 0x0, 0x401, 0x9, 0xff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x5, 0x100, 0xffffffff, 0x407, 0x8, 0xb8, 0x0, 0x80000000, 0x2, 0x1, 0x1, 0x9, 0x5, 0xffffff6a, 0xd09, 0x4, 0x3, 0x2, 0x6a, 0x6, 0x1, 0x9, 0x1, 0xfffffff8, 0x4, 0xde39, 0x2, 0x7f, 0x4837, 0x0, 0x92, 0x1, 0x8000000, 0x5, 0x9, 0x5, 0x9, 0x3, 0xffff, 0x81, 0x4, 0x8, 0x3ff, 0x3, 0xdac, 0x8, 0x7ff, 0x5, 0x634, 0x10001, 0x9, 0x4, 0x0, 0x1, 0x3, 0x5, 0x9, 0x400, 0x1, 0x86b0, 0x9, 0x4, 0x2, 0x6, 0x3, 0x101, 0xff, 0xc, 0x9, 0xfff, 0x2, 0x7, 0x4f0, 0x9, 0x80000001, 0x4, 0x0, 0x0, 0x4, 0xcab5, 0xed, 0x6, 0x7f, 0x40, 0x6, 0x9, 0x2, 0xb4, 0x7, 0x4, 0x7ff, 0xb2, 0x0, 0x5, 0x1, 0x7, 0xebe, 0x9, 0x2, 0x9, 0x0, 0x7, 0x6a, 0x680, 0x34a, 0x200, 0x4, 0x4d, 0x2, 0x1, 0x1, 0x3, 0x3, 0x6, 0x7, 0x2, 0x7fff, 0xf, 0xfe, 0x3, 0x9, 0x3, 0x6, 0x4, 0x800, 0xd9, 0xe, 0x1, 0xde2, 0x5, 0x1, 0x5d, 0xf17, 0x5, 0x6, 0x7, 0x9, 0x9, 0x2, 0x59, 0x1010, 0xd, 0x100, 0x680acdce, 0x9, 0x8, 0x2, 0x0, 0x7, 0xa41d, 0xb3, 0x40, 0x7, 0xffffff4a, 0x6, 0x0, 0x8, 0x6, 0x8, 0xa4, 0xd, 0x101, 0xfff, 0x78, 0x7, 0xb, 0x80000000, 0x8, 0x7f, 0xa, 0x7, 0x7, 0x8, 0x8b, 0x4, 0x1, 0x558, 0xc6f2, 0x7, 0x8, 0x3, 0x639, 0x6, 0x400, 0x10000, 0x9, 0xa05, 0x2, 0x4d58, 0x4, 0x6, 0x1, 0x9, 0x8, 0x5, 0x8000, 0xfffffff7, 0x3ff, 0x2, 0xb, 0x3, 0x9, 0x4a, 0x9, 0x7fff, 0x8, 0x1000, 0x6, 0x3, 0x9, 0x7c25, 0x6, 0x68, 0x9a0, 0x9, 0xfffffffe, 0x800a, 0xa60, 0x10001, 0xd76c, 0x9, 0x1, 0x6, 0xffff, 0x6e7, 0xad2, 0x1000, 0x40, 0x7, 0x65301570, 0x4, 0x7ff, 0xb676, 0x5, 0xe, 0x8, 0x3, 0x6340, 0x5, 0xa0f7, 0x6, 0x0, 0x1, 0x4, 0x8000, 0x40, 0x2, 0xefa2, 0x0, 0xf2c, 0xb, 0x8, 0x100, 0x8f3776d, 0x8]}]}]}}]}, 0x104c}, 0x1, 0x0, 0x0, 0x20044010}, 0x81) recvmmsg$unix(r3, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/4116, 0x1014}], 0x1}}], 0x1, 0x10000, 0x0) 18.498925137s ago: executing program 4 (id=752): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000100)) r1 = syz_io_uring_setup(0x4787, &(0x7f0000000140)={0x0, 0x3e1b, 0x20804, 0x3, 0x1e7}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000006400)=[{0x7, 0x1, 0x0, &(0x7f0000002500)=[{&(0x7f0000000240)=""/31, 0x1f}, {&(0x7f0000000280)=""/135, 0x87}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/48, 0x30}, {&(0x7f0000001380)=""/109, 0x6d}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/207, 0xcf}], &(0x7f0000002580)=[0x8000]}, {0x7, 0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000025c0)=""/8, 0x8}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/17, 0x11}, {&(0x7f0000003640)}, {&(0x7f0000003680)=""/215, 0xd7}, {&(0x7f0000003780)=""/83, 0x53}, {&(0x7f0000003800)=""/220, 0xdc}], &(0x7f0000003980)=[0x800, 0xe, 0xc, 0x7, 0x0, 0x0, 0x7, 0x3]}, {0x0, 0x1, 0x0, &(0x7f00000039c0), &(0x7f0000003a00)=[0x800, 0xffffffff, 0x3, 0x50, 0x1]}, {0x7, 0x0, 0x0, &(0x7f0000005e00)=[{&(0x7f0000003a40)=""/223, 0xdf}, {&(0x7f0000003b40)=""/144, 0x90}, {&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/33, 0x21}, {&(0x7f0000004c40)=""/4096, 0x1000}, {&(0x7f0000005c40)=""/210, 0xd2}, {&(0x7f0000005d40)=""/155, 0x9b}], &(0x7f0000005e80)=[0x8]}, {0x7, 0x0, 0x0, &(0x7f0000006340)=[{&(0x7f0000005ec0)=""/239, 0xef}, {&(0x7f0000005fc0)=""/45, 0x2d}, {&(0x7f0000006000)=""/224, 0xe0}, {&(0x7f0000006100)=""/17, 0x11}, {&(0x7f0000006140)=""/188, 0xbc}, {&(0x7f0000006200)=""/65, 0x41}, {&(0x7f0000006280)=""/129, 0x81}], &(0x7f00000063c0)=[0x4, 0x6, 0xab]}], 0x5) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r1, 0x21, &(0x7f00000064c0)={0x0, 0x304b, 0x2, 0x1, 0x1c4, 0x0, r1}, 0x1) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vm(r2, 0x4018aee2, &(0x7f0000006580)=@attr_other={0x0, 0x2, 0x5, &(0x7f0000006540)=0x7}) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f00000065c0)={0x4}) bind$isdn_base(r3, &(0x7f0000006600)={0x22, 0x3, 0x51, 0xf9, 0x4}, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x80010, r1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000006640)=0x0) r5 = epoll_create(0x0) kcmp$KCMP_EPOLL_TFD(r4, 0xffffffffffffffff, 0x7, r1, &(0x7f0000006680)={r5, r1, 0x80000000}) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000066c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0xef) close_range(r6, r3, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r6, 0x8915, &(0x7f0000006700)={'tunl0\x00'}) timer_create(0x2, &(0x7f0000006740)={0x0, 0x5, 0x2, @tid=r4}, &(0x7f0000006780)=0x0) clock_gettime(0x0, &(0x7f00000067c0)={0x0, 0x0}) timer_settime(r7, 0x1, &(0x7f0000006800)={{}, {r8, r9+60000000}}, &(0x7f0000006840)) write(r5, &(0x7f0000006880)="37eae31072b4b7312c586faab117399e6befae4fe3f6aa1308d14785a092b321dd91b9b0ca7056c5e25c2ccc785d67b5c67001ffb36be199a460ea1a7f333760f5f63ea82c73c066aa7faa53a96db3b57b57b59d2bef94c5763c42a47f4adcc04889045cf6a2782f8206d5046bf99f03f16b88370f1009b104ba219b191fafc27215c78c897e1b9e25119896aeb6ad121ac76ce6b611a5a1366962f69ada72ccd9e69939f28bd8c43138bbd3f52128e7bdd3cfae4d1d94847ecbd20f8c876d9bd80a39835124e2e27c354057d47325515347b23454ba76745aeeae65b09d13b53cc28792880201", 0xe7) socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000006a00)={{{@in=@private, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000006b00)=0xe8) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000006b40)=0x0) mount$overlay(0x0, &(0x7f0000006980)='./file0\x00', &(0x7f00000069c0), 0x4, &(0x7f0000006b80)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_on}, {@xino_auto}, {@redirect_dir_nofollow}, {@default_permissions}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@fowner_lt={'fowner<', r10}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@fowner_eq={'fowner', 0x3d, r11}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'tunl0\x00'}}, {@obj_user={'obj_user', 0x3d, '/selinux/status\x00'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@subj_role={'subj_role', 0x3d, 'tunl0\x00'}}]}) syz_emit_vhci(&(0x7f0000006c80)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_disconn_req={{0x6, 0x2, 0x4}, {0x625b, 0x3}}]}}, 0x11) socket(0x28, 0x2, 0x6) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000006cc0), 0x2, 0x0) 1.281242273s ago: executing program 2 (id=646): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14, 0x80000) recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/213, 0xd5, 0x101, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @empty}, 0x4}}, 0x80) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0xd85, 0x202) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xfd, 0x9, 0xa9, 0x3, 0x0, 0x2, 0x40000004}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x4, 0x0, 0x5e, 0x0, 0x3, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r3, @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800900010069706970000000000c0002800500090004000000"], 0x3c}, 0x1, 0x2}, 0x0) 1.281091859s ago: executing program 3 (id=754): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r1 = inotify_init1(0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_setup(0x29ea, &(0x7f0000000480)={0x0, 0x0, 0x2}) inotify_add_watch(r1, &(0x7f0000000080)='./file1\x00', 0x628) ftruncate(r0, 0x6000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000580)={0x110, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_PEERS={0xe0, 0x8, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1000}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00', 0x3}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x110}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) copy_file_range(r0, 0x0, r0, &(0x7f00000004c0)=0x100, 0x9, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x4, 0x7}, 0x90) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) 1.279408134s ago: executing program 4 (id=755): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x30]}}, &(0x7f0000000440)=""/182, 0x1b, 0xb6, 0x0, 0x6, 0x10000, @value}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYRES32=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='vlan0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) connect$inet(r6, &(0x7f0000000000)={0x2, 0xfffe, @local}, 0x10) mknod$loop(&(0x7f0000000100)='./file0\x00', 0xc000, 0x1) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1, 0x0, 0x400000}, 0x18) ioctl$KVM_GET_LAPIC(r5, 0x8400ae8e, &(0x7f0000000500)={"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"}) setitimer(0x0, 0x0, 0x0) 1.279012711s ago: executing program 0 (id=756): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) close_range(r0, 0xffffffffffffffff, 0x200000000000000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x8041}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000210001000000000000000000020000000000000000000000050019"], 0x24}}, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10040, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, r7}, 0xc) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) r9 = syz_open_dev$dri(&(0x7f0000002500), 0x2, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r9, 0x400464d1, &(0x7f0000000400)=0x8) accept4$ax25(r8, 0x0, 0x0, 0x800) 1.277931871s ago: executing program 3 (id=757): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271f, &(0x7f0000000040), &(0x7f0000000000)) 1.277447997s ago: executing program 3 (id=758): ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x8, 0x40, 0x204, 0x300}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440), 0x4200, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440), 0x4200, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.276157311s ago: executing program 4 (id=759): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, r2, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x2004c0c0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000125bd7000fddbdf251000000008000600", @ANYRES32=r5, @ANYBLOB="f68fb5bc3b24085b0f2cf6f1f9412a056983b682244607b1fff005000000000000000abb1449597ed18c6786c80363499c9a3800e9fb5365a7f6132ad6cca85e1ef761419055eba3fe66a9dac4f4dc53366a2bdf40b942d288314e574b2048eaa834af06aa4af2a5f6e8da1cdfe4"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r6, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 1.276000048s ago: executing program 0 (id=760): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d0800090002", 0x17}], 0x1}, 0x24044880) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="480d73d93d00"}) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 1.275246454s ago: executing program 2 (id=646): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14, 0x80000) recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/213, 0xd5, 0x101, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @empty}, 0x4}}, 0x80) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0xd85, 0x202) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xfd, 0x9, 0xa9, 0x3, 0x0, 0x2, 0x40000004}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x4, 0x0, 0x5e, 0x0, 0x3, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r3, @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800900010069706970000000000c0002800500090004000000"], 0x3c}, 0x1, 0x2}, 0x0) 1.275196075s ago: executing program 2 (id=646): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14, 0x80000) recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/213, 0xd5, 0x101, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @empty}, 0x4}}, 0x80) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0xd85, 0x202) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xfd, 0x9, 0xa9, 0x3, 0x0, 0x2, 0x40000004}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x4, 0x0, 0x5e, 0x0, 0x3, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r3, @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800900010069706970000000000c0002800500090004000000"], 0x3c}, 0x1, 0x2}, 0x0) 1.238033773s ago: executing program 0 (id=761): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000104280)={0x0, 0x0, "6baf34f8b5c35fc31c491d71b1cde272e43a6326c407d4cd784544b4334ffa58c936d38a8788b62397ff7ba40babd56ea25efb4cb5011164cdcd66531a8f6b364d9d4fd92fa9091e7f7e7485094cdc397ea19b201e649c58ff1d4aebc8801ed51d4f642e6f44a822fe8105651bd7e184fe27ee04eac074d89fbdc586cfb4303173c23e7ebcac0a6c1cba93ab609d3bde665175f4f7ee9f71547be6f4f6cc75a755feed98eb6159fd3e80fa432124ad9cefa4ef60f12aee2fcf7fdd56dfcbd14a26d43123b594fbc0a72b68783aff4e3005ff63b5e2b756ab34ff1220409fb2dd5bada8d22189c2268edfb546ae48c1573aed7c2f932d6e83526b7d11be7c7be4", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000105280)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000105480)={0x0, ""/256, 0x0}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000105680)={0x0, 0x0, "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", "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"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000106680)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000108680)={0xb, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r0}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x9, "6e611a98080d46"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000109680)={0x0, ""/256, 0x0}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000109880)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000010a880)={0x0, 0x0, "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", "443254d965773bac5fe64c229533a66d2e32f4bc74afc5b10126bcaac1b2bdeefa36bd81fc2ea1ca5605336617b61bf940380100f634801843c2678e721a7f5cb6bd0ce4f019643bc867449100c487caacdf43593099a30e1360a8c78c6ae3582c7cbdb954f52c5e4b004d23ff34b47fadd1bb7d206c16f975892b775cc42e3adb1f0d1c95eb97066156d4e567907a37220fcbe8ee021279c963f4510a4101c4d4d11b971343b9614c85d53800cdf3be315d87664b63e32dcdaf539bb7ae84f8a44c54f18c55f3e7c1f886bbf4b12be9ea9eb19787bc11f82a1ab35da99bb7072c7acd11331ee92f956685e72a2fa72dcc6c02a62460d0bec996e3c97f8e5cb5c8fc3d454d061d4cae96ed336f2955dfa1649b2cd46f6b54e89cfbf6b9e91569c89639d7c08cb1c1a97e7eabddb0e25ef83c8af7c0ff07878f6f8b3b2f82e47c71a57fe09e844c1286557566313b9ca187b1711ddbf74a0b7e69dc3fbcb72739197d12b76ba443aea2bf5eacf801655886fbef948973ffd4280f22f2b44a1dd28abc9a51637cdf368d7ca3dd81d08159726dd0ebb5712791717eb4cacc221b4748add95055d7452e0368375cca317fc17fecbcdb125e7b5811bfbfc61a3846880faca02e577cb4ee9221f0157fc137ab699594e0c01fd99e18b1fb85643f4f28c5e89ed8d8a40562458b886adea334d8adf2bdce70a99d0729a1225c1146787a900fa51c6258a0bb1579da16a11ec0ecf6a25d8dfefed96fa94113a4b1d734f2d20de4846ec19d28330558ed647a43ea987c139ed31f3f2dcfec60ae3586eb6583977b0462c0c1f4a843bdf206e0f5fab8aae958c5950e31954695e92ed379e1d3dc8bd79517a4aaf1ca8c72726325556b0d398767315644d55f691f5fb5ef608f447debc32b3e55d95c763aa9cf435e0b8cbc9086e39522f8f40a16f8002d38167e51c10419adf0f8b610b58f54edc8268b070aeaf9e5588eab2fc4c6ad8aac3e3ca511d13ebcc6585ee3befacfb8f459ca29c09b6e752978be994cd9adfb13cb77b229cb57263af4ec976216df76713891d18cdaeb1dcec63add92acdf6808aac98ad012290aea8cffda232a0504aad81876f08046866d6a691592c5261665384b94eae2f1e69a672ffd0855ddc01e9083a46c417fb9c742e76201881b827065668d46bcbd4fd49354d38bdedcb3b7d1853ea065327e8b8a8b0d3d806395bef7f5ef365ee2e1bdc88279041283b31b456e095f47006b8d47ecc0455c88ccedeba4e5fa1418f3ffc2530a47d04113e89d1a3c3eebcab2cec56597a5bd8e4cb5048a6c5a15d3f51b786d5b3c5195a1b4e9879c2cb94f242b59d5f6cc6cb68e0645384372ae2da88818ec5827c52c0611a82dd12f85d113e5d67b51980918a142b0f41c8d3d7ba403a51c9c1a1d5b076e809c62679bf3e998b8a9b764843126bf1f11e2276320192036fd96a7c42ca1e7f567a59d2e8e811baa4cc5f45c718d13577946ce6c3434188f5a7e9453fcd280facd2b5409bb90fe4b62b56247a50586072e5b7c1046e2ff53cb5141a5bdf32f632234feef5ac47876b6b1e5d2575743c776a2a0f905ed940465a2ae5b41508b615483ee3538528bffdc262bdc4776852829f37720e4289f929fda24bfa0736569ff43b9195346c2ec23023fcebba79680191e9efeadbf5b1183589e85b2880460ede332f024048b620e568910cb767591745f31435df916f5e5476830910bf9147fc0aaa405727de7810cb8ddb48c95552519945ac427ec424db5fa674d76adce6c85a370d29d9df7b032941b4a931dedd15e678148e3e14fc85e46b871f94d4b261bcc204979a7cc65c15d554ed9df239b7876dbeb55da7a8d0abfc41465e7de8139e23de25eadd629a658424f109df7acf7f7ac30f685eae3c5cb41be173d17d9ba36672d14a839305dfe210dc69ef9eef34627fa45517750d9dcead6022f5b3e6722e77f7358fe19f767d472a688d6f53f65e01bd2babbfce47c089c660609cc9535f6daab6a86f5a1633f4110d8cbf74500766828d917bfafe01c8173781cbeb983d17d384ae71ec0d8021b717ffa4f244215d1e1cc0ddb13690dc4e6bbe49ad4a631afea4003b62aa4f1fc7ff69ef979d4c3970535d0f2c9dcf9f09c2aaf9263055f0d92ec52daf37288b3037b373bc79b7666ee160a52ed8429bdff7da589fe17b6a6743cb74595cbfc46783f868e99caf9c8d29194258d868a5c60810df5cafd48efd12b56cc2514d8665616dbfb0e775de2e504ca7344c4b449bd903a5a1492ea95c8ae2ea24749fd687d364ef9001e56814e4ba6d0d8222bc2f5bb059e8b22d5a916ef9d3c45364d77ea59a8a20cd3571b9703b37dae4b64a6f2a156024a482170191e1c705e2c220e226d346549a67bd9daff35d8374620337173fb00f5355a3ae19e90c9a5813873c53befbf5fb289bf123daf89cd1c1a52a7d2d47d3d597a675de0a93407efb183490ee5d711f48a5a4e7ddfdddbe9446462e8f5e1b39327095af159d2329798a0871c43ce3062b21e68a470aa79792511b863681b6db7bf7bf1502561dcfd4f9f3290f204ba4275afbc6a22feadc55d08408cbe46393dcf6c45ba13a0dd6a3b17f2b6a6278925c26fdc13790cc68d614f132582619e7e4afb7fdcb4fc07600e4866ab6298c195dbcd7717778de800bbf6b5c85c6ac62168d0281ab1672e2e7104a218577d15670e2a84917da8fc094ab35fc9dbe28549b5b5c96e2d5ad5f09b7444e94e4df9f77917f50401e13ca0ea394c3a46ef9bb1d49082142f93d65853e7d26a62ee471d309f8b59ef6aa58f583aa3217956e24632fd181057a7f1a28ec1db7dc713e31e744c2118dd8db10f8b178a52db7a0c08cf36c4d57380401b2b543c2de03be229fc50e371b108b34e190b19a3dafc5202e0ea6950c230837b949791b2b38d5d8289a048fe2c38cbeac1365a162ac6abecf15ff0bf204ca39fc2dcffde86381afcd5d4a116acdc7dd65bd741a248092ce832545c2eee6c7e4f4165ca4b604afc15e538128a2fa281301d0ec60c3460b0783b4f092e5c0d58e54733363b57f534c0ea3b61bd3f3eeeb88ad185af0e217b5e56df55da5da3bcd56fa1c93bc4ea59e22b9bb993e2721e8a3a59057e4462dfe38d41c624a6492b390867709b34470ef23222db28e507b5011a48a3d709ed101cc6468f299634a0f30743944bc486293962ca01cb8e05f355488163327f115c058e8e6b3e893bbad31eae84beb7242188e1aa35faadaac7614e9cc8372ed5713d63deee733a568aebc2de46086339afdcc2f22718d9904c9dce3b69652ff0e7d7eae681f13233277c6e0b443fee3cbb364640ddd09dfb36e70325c5f4c039cc42062fc6fbe9de741577e2f48470796cde079bf9ccd967e5a461f9c83266ce02bb91d68937ec0c9fd0d0509eb810efa22528f7b92b2d0ad3b6ed87c0f4829033042c30f5745e1da929d07d872cd797463ecd32f3cee624301e2483c64c9c6368a3deab786e90e9d22cd2a104671706f8bbb004593eb18e49e730be30cc05fa6877c25b3d8c9013362706bd61fa551f541e464bd70cd1923eeaa6660c6f2e49d0dfee2b382f2564f68eca8d6bb17f7909d51c84926c20c5dca40d6ae8cbae53d5f51863be658d84021b4820072a2675f2a1ddef37dedee0e5e32665ffc05e457fe1d9da037fc0ca32db5faab93179120f5b240bff5e7fe343b394f85e20bafa448b6d0b155051de16613b3f53a630a262c892e9a177039d2d8d219086ce81c37b4cc870ebbcfd5ce37a3bf2ab7bc0c3508b5cdad4b66fb7f661062b66c97fbcdb948518b7da78d0a99693ec66472d9c8d08d9ce46a251dbf30401111fcf36038079922961e13b65747184eece279699794edcf035a710121aef3b98ad39c8c87e340aba33b54c0a74911a66fa87c239bb52b223187dcb7eccc1f88b6d6f1bd07dabfe9c2535af8e68ae8b70a1d059882cfc7aa7bf1ba143ee31e8cf0caf145f5c9617e3a838b64cfee50c7d051d13bc450817f48ca36d43861d63ebf811183691b9e86c19cd137ed3ed26bab1c446887ee1abdba69184b31f7b5cc2dc3943d5179dea8f4a889a3ab7616119b71644dc832535a205c3fa183f65fe0477817ba2dfc6a7815ddbcd8e89ef6c6798e908319f3e3ef089c54c4afab1b6a558da6ca79b3a72ddcb07ea9734646d4b6a55053af222d463e954d5afb8acbb59e12780f9df94389fc93081c5f16be6f5969048a2e188158cf63a48200ad56b4c2134f599550a24662821b4afe2ea3fd951be286beea62cc4e661c01fc06119db5a7c17f53ee782a898769a74a89c3e80b84407620e4bdef16b0c59e0ad8c3152bc3e34c22c0aa7f21650047370c1d2ec3724b50d1a0c9a70225ac700332fa33c490a177b34086354801cb7a36a8cdac5e64d316d55d704c078eb6052687a53322adf0d17676d0de40acbf57b42ea08c7745cb24cab34227cfc6a4d77dec4cc4ae465691ad19b89f3089348fd338886062f9df66e44bcb6de5f3bbcb372af556c28f72e87137918426f498f7e25595c6fd7d1ed7b03c046723c4beb2d4ac85dcb6b254f49c55f2deab33a32ec11f3ec0eff12cae3c2717dd916cdcdae5312fb6cc31753c4eeaaf80148f3962b9a46c716c8e1f84624b1e4f91d97d9ab11e915a6a3d07a04ff74bfe39e5e316ab6544e80228719a5fe17b6c94ae9528d79a9ae5e4fee4788dba1753fd3a672cd51317a007953d7ad1008fbdc9a26621e63ab5a7f2500ec334125c7ce266e643b914d959ec40c44d2cee62b7bd24b9a836463184735011daf1853742af52879c800f4eaf50384673a13e215cd00ab0fe4ac2aba157688bb0fe2c318cbb5b2b64c5ceb41d167f822af22e88f159775d7ce1a97747e1747d488272c29d0ac73ba90a0986a06306f7fad69bf54bed4f4fdaffa811c38a91aa70519ed4f90fad785a28face114e2b002d36ffa0232adae5272510ff8648f7bb4aaaa69f2dbb5e35c579ebf7a9456cc49f2022d9b82c6943d91dd50eb1ff134889481978fb000072f0d107f3580fba80a6d26d4d7a838740ee91771ad2fa7a281f83936b680facbae43f9609e44ee98902910f02d6b7a1bc67ca3bc7e9b346fec2cb7356f23fe4fd64509a385ab3d4e6bdada6de9ad2fe78e259dab28f01adc0283ba518ec4f26cc04220a3e3d08c3d632cfaf745df374e0827543246a73337469344bad52b1d041f7fa57e17f1392c96d51c7d343a257db2e97c00288bdc7f7356b7853d10314e19425bf55c5acb48b529602ceca1bb0cc5220af4cb94e53e86e71a76a45f8ac970409a024990945c6753393c6a4bfb484e64675bf7c67a4ccad36ef8ee0bc5f6ab86fbd715270286e9f867614852177196ce06f32ba28b84"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000010b880)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000010ba80)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8, "469bc44169ed3a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000010ca80)={0x4451, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x9, "fc4caa4a73709b"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f000010da80)={{0x0, 0x2, 0xa, 0x7, 0x3, 0x9, 0x7, 0x4, 0x0, 0xfffffffb, 0x0, 0xa249, 0xfffffffffffffff5, 0x5, 0x100000001}}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000010ea80)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000010ec80)={0x0, 0x0, "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", "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"}) r19 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r19, 0x5452, &(0x7f00000001c0)=0x1) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r19, 0xc0045516, &(0x7f0000000000)=0xffb) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r19, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00', 0x1000000}, 0x5, 0x0, 0x1, 0x0, 0xffffffffffffff8b, 0x6, 'syz0\x00', 0x0}) (async) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000010fc80)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000010fe80)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xf, "329a1e4aedb1c7"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000110e80)={0xd, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r0, r2}, {r3, r4}, {r6}, {0x0, r7}, {r9, r10}, {r11, r12}, {r13, r15}, {r16, r17}, {0x0, r18}, {0x0, r20}, {0x0, r21}], 0x6, "a3328fcce7980a"}) (async) r22 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r23 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r24 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x40080, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r24, 0x3b66, 0x3) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r23, 0x0) (async) write(r22, &(0x7f0000000380)="2cd889f03e14f3c3", 0x8) 1.236596375s ago: executing program 4 (id=762): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000890000000000000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000096000a00"], 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000104000000000008000008794ee0", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r7], 0x4c}}, 0x40000) (async) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000104000000000008000008794ee0", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r7], 0x4c}}, 0x40000) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@bridge_newneigh={0x38, 0x1c, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1c, 0x0, 0x0, r9, 0x80, 0x5f, 0x2}, [@NDA_PROTOCOL={0x5, 0xc, 0x9}, @NDA_LLADDR={0xa, 0x2, @remote}, @NDA_PORT={0x6, 0x6, 0x4e21}]}, 0x38}}, 0x4018080) 1.215409166s ago: executing program 3 (id=763): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000000, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') statx(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x200, &(0x7f0000000540)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x4c, r4, 0x815, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0xf}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000002) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 1.120669388s ago: executing program 0 (id=764): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x101, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x36, 0x1, 0x2, "09e4ffb97e3b4c00152258011a9285a5df0300080000f8000000000000000500", 0x41414770}) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, &(0x7f0000001740)={'xfrm0\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@allocspi={0x158, 0x16, 0x411, 0x0, 0x0, {{{@in6=@private2, @in=@private}, {@in6=@private1, 0x0, 0x33}, @in=@empty, {0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x8000000, 0x0, 0x0, 0x4}, 0x0, 0xfdffff00}, [@lifetime_val={0x24, 0x9, {0x7, 0x40002, 0x6, 0x9}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd26, 0x70bd29, 0x70bd2a, 0x70bd25, 0x9, [0xe]}}, @encap={0x1c, 0x4, {0x2, 0x4e20, 0x4e24, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x158}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_cmd={0xb, 0x0, 0x8, 0x4, 0x5, 0xd, 0x6, 0x7, 0x3, 0x50, 0xf, 0xfffffff9, 0x222, 0x0, 0xa, 0xb701, [0xcf, 0x59c]}}) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0x3, 0x3}, 0x6) getpeername$qrtr(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x1, 0x803, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x64, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}]}]}, 0x64}}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e0109220c"], 0x7) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f000071a000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$nl_generic(0x10, 0x3, 0x10) 154.296119ms ago: executing program 3 (id=765): r0 = memfd_secret(0x80000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x18, 0x0, &(0x7f0000002300)) fcntl$setlease(r0, 0x400, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r2, &(0x7f00000029c0)={0x658, 0x0, r3, [{{0x0, 0x2, 0x8001, 0x46, 0xff, 0x2, {0x6, 0xfa9, 0xfffffffffffffff9, 0xfff, 0x2, 0x3, 0x4, 0x0, 0xed07, 0xa000, 0x8, r4, 0x0, 0x55fd, 0x80000001}}, {0x0, 0x3, 0x6, 0x5, 'vcan0\x00'}}, {{0x6, 0x0, 0x5, 0xffffffffffffffc0, 0x3, 0x200, {0x3, 0x2, 0x5, 0xffffffffffffff01, 0xf, 0x7, 0xffff, 0x2, 0xfffffe01, 0x3000, 0x2, r4, r5, 0x5, 0x4c18}}, {0x0, 0x10001, 0x8, 0xb, '%pB \x00'}}, {{0x1, 0x0, 0xffffffff, 0x7, 0xf425, 0x2, {0x6, 0x7, 0x2, 0xf, 0xffffffffffffffff, 0x1, 0x2, 0x8, 0x9461, 0xe000, 0x7, r4, r5, 0x8000, 0x1ff8000}}, {0x1, 0xd0a9, 0xa, 0x9a5e, '/dev/cuse\x00'}}, {{0x6, 0x2, 0x5f, 0x4, 0x4, 0x1, {0x0, 0x7, 0x1000, 0xfffffffffffffff9, 0x8001, 0x0, 0x800, 0x80000000, 0xb83, 0xc000, 0x80000001, r4, r5, 0x28a, 0x7}}, {0x5, 0x4, 0x1, 0xa, '\x00'}}, {{0x5, 0x2, 0x8, 0x8001, 0xd, 0x6, {0x6, 0x184, 0x587, 0x8000, 0x8, 0x0, 0xffffffff, 0x6, 0x10, 0x2000, 0xb, r4, r5, 0x80000000, 0xb}}, {0x2, 0x8, 0x1, 0xa2, '('}}, {{0x2, 0x1, 0x9, 0x6, 0xfffffff8, 0x7fff, {0x5, 0x1, 0xc, 0xa, 0x6, 0x6, 0x3, 0x6, 0x7, 0x8000, 0x8, r4, r5, 0x5, 0x3}}, {0x3, 0x2, 0x1, 0x9, ','}}, {{0x6, 0x0, 0x5dd5, 0x3, 0x5, 0x81, {0x3, 0x100000001, 0x5, 0x2, 0x1, 0x2, 0x6, 0x69504f9e, 0x80000000, 0x2000, 0x6, r4, r5, 0x6, 0x5}}, {0x0, 0xfffffffffffffffc, 0x6, 0x4, '&\'.:&('}}, {{0x2, 0x1, 0x401, 0x5, 0x80, 0x4, {0x5, 0x404, 0x5, 0x4, 0x801, 0xff, 0x6, 0xd7a2, 0x7fff, 0x4000, 0x7f, 0x0, 0x0, 0x7fffffff, 0xc6}}, {0x4, 0x100000001, 0x4, 0xf4f, '\\--,'}}, {{0x5, 0x1, 0x7ff, 0x4, 0x3d, 0x7f, {0x6, 0x7, 0x5, 0x3, 0x59ec, 0x5, 0x4, 0xf6c, 0x80000000, 0x4000, 0x80, r4, r5, 0x6, 0x6a4a}}, {0x2, 0x54f, 0x8, 0x3ff, 'nl80211\x00'}}, {{0x5, 0x2, 0x2, 0x49f, 0x7fff, 0x65, {0x5, 0xbe4a, 0x707, 0x4b3, 0x0, 0x3, 0x10001, 0xfffff800, 0x6, 0x4000, 0x4b4cca3e, 0xee00, r5, 0x1, 0x62e2}}, {0x2, 0x101, 0x1, 0x3, '\xad'}}]}, 0x658) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/206, 0xce}], 0x1) close(r0) 149.965181ms ago: executing program 4 (id=766): ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000180)={0x0, 0x6, 0x5, &(0x7f0000000140)={0x2, "c39c75c9b12c2238191850bde79523173296c82e3e7dfdcf10beb58a051d8559b2"}}) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="38000000540001000100000000000000070000006cd032a405a01e6f97c797557d03747efa3917d16abd555ea6be16d696ec16f4daa32a6dca9d733eb09a2c16a0bed95804b0299a1575ecae2a1c6440110280ca31c3eb4a42542a66847d5a601490eac672f696a49f11835baac83bfbd460e067e1f5bfdec27c87c6239827c09e578fada81fa477c5796f4ddb831781c3fa17db4b6fe1b23493ca43b075f35c80c389d1cb3bf5e1", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="01010700ac1e000100000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000000c0)={'gretap0\x00', {0x2, 0x4e20, @empty}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x11, 0x0, &(0x7f0000002380)) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff}, 0x20000, 0x0, 0x4000007, 0x8, 0x101, 0x14, 0x0, 0x0, 0x0, 0x2000, {0x1, 0xed, 0x0, 0x0, 0x5}}}}]}, 0x78}}, 0x4080) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r5, 0x10c, 0x1, &(0x7f0000000340), &(0x7f0000000200)=0x4) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000402300000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000095000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6c) 124.96702ms ago: executing program 0 (id=767): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0xfffffeb2, &(0x7f0000000140)=[{&(0x7f0000000180)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}, {&(0x7f0000000040)="db908bb027627a4a549c"}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 0s ago: executing program 0 (id=768): r0 = socket$kcm(0x29, 0x2, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) connect$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, @any, 0x8}, 0xa) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000005200010000000000000000001c000015140001"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040014) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x1414, 0x1}, 0x10}}, 0x0) (async) connect$bt_l2cap(r2, &(0x7f0000000500)={0x1f, 0xfff9, @any, 0x0, 0x1}, 0xe) (async) sendmmsg$inet(r0, &(0x7f0000007ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="2a69c258ca", 0x5}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="730d923100", 0x5}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000340)={{0x2, 0x4e21, @remote}, {0x306}, 0x10, {0x2, 0x4e22, @remote}, 'wlan1\x00'}) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4d, 0x0, @wg=@data={0x4, 0x1200}}}}}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x52, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001e40), r4) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="05072cbd7000fddbdd2503000000c8bdf80e5d106d78e477467fa297f882b9b9169d526d373107b0743d2030a87b5a91f274446c957666"], 0x1e}, 0x1, 0x0, 0x0, 0x40440c0}, 0x44010) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) (async) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, &(0x7f0000000400)="640f1f4000f083930b00ddd9f9646667afb83f008ee866b9b40200000f32bad10466edf20ff0810a003e0f060f20e06635080000000f22e0", 0x38}], 0x1, 0x18, &(0x7f00000004c0)=[@dstype3], 0x1) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): 78.507713][ T838] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 78.511182][ T838] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.514769][ T838] usb 8-1: Product: syz [ 78.516405][ T838] usb 8-1: Manufacturer: syz [ 78.518309][ T838] usb 8-1: SerialNumber: syz [ 78.525886][ T838] usb 8-1: config 0 descriptor?? [ 78.602100][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 78.730881][ T7187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.319'. [ 78.749869][ T838] usb 8-1: USB disconnect, device number 2 [ 78.914186][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.329'. [ 79.106640][ T7236] netlink: 32 bytes leftover after parsing attributes in process `syz.0.334'. [ 79.351928][ T7254] kvm: kvm [7252]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000006) [ 79.359675][ T7254] hugetlbfs: Unknown parameter 'usrquota' [ 79.527177][ T24] usb 7-1: USB disconnect, device number 4 [ 79.843997][ T59] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 79.893952][ T6005] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 79.967831][ T7285] syz.1.350: attempt to access beyond end of device [ 79.967831][ T7285] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 79.971040][ T7284] ip6gretap1: entered promiscuous mode [ 79.976193][ T7285] (syz.1.350,7285,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 79.976766][ T7284] ip6gretap1: entered allmulticast mode [ 79.979699][ T7285] (syz.1.350,7285,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 79.984728][ T7285] (syz.1.350,7285,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 79.988212][ T7285] (syz.1.350,7285,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 79.995350][ T59] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 79.998180][ T59] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 80.001389][ T59] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 80.004480][ T59] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 80.007808][ T59] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 80.012575][ T59] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 80.015451][ T59] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 80.017939][ T59] usb 8-1: Product: syz [ 80.019260][ T59] usb 8-1: Manufacturer: syz [ 80.026718][ T59] cdc_wdm 8-1:1.0: skipping garbage [ 80.028395][ T59] cdc_wdm 8-1:1.0: skipping garbage [ 80.031802][ T59] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 80.034142][ T59] cdc_wdm 8-1:1.0: Unknown control protocol [ 80.043897][ T6005] usb 5-1: Using ep0 maxpacket: 16 [ 80.047802][ T6005] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.052288][ T6005] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.056595][ T6005] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 80.062112][ T6005] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 80.066528][ T6005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.072237][ T6005] usb 5-1: config 0 descriptor?? [ 80.080636][ T7289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.351'. [ 80.084464][ T7289] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 80.089388][ T7289] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 80.270156][ T7294] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.484749][ T6005] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 80.487058][ T6005] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 80.489262][ T6005] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 80.491423][ T6005] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 80.492355][ T7307] bad cache= option: none [ 80.492355][ T7307] [ 80.493588][ T6005] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 80.496819][ T7307] CIFS: VFS: bad cache= option: none [ 80.503336][ T6005] input: HID 0955:7214 Haptics as /devices/virtual/input/input8 [ 80.529050][ T6005] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 80.532729][ T6005] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 80.683566][ T6005] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 80.684072][ T24] usb 5-1: USB disconnect, device number 6 [ 80.687659][ T6005] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 80.701985][ T6005] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 80.706508][ T6005] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 80.730421][ T7312] bridge0: port 3(syz_tun) entered blocking state [ 80.733136][ T7312] bridge0: port 3(syz_tun) entered disabled state [ 80.739538][ T7312] syz_tun: entered allmulticast mode [ 80.750764][ T7312] syz_tun: entered promiscuous mode [ 80.755919][ T7312] bridge0: port 3(syz_tun) entered blocking state [ 80.759076][ T7312] bridge0: port 3(syz_tun) entered forwarding state [ 80.764276][ T838] usb 8-1: USB disconnect, device number 3 [ 80.776995][ T7310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4246 sclass=netlink_route_socket pid=7310 comm=syz.1.358 [ 80.790210][ T7312] vlan3: entered promiscuous mode [ 80.792375][ T7312] bridge0: entered promiscuous mode [ 81.037045][ T7336] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000004 [ 81.108044][ T7338] syz_tun: entered allmulticast mode [ 81.111458][ T7337] syz_tun: left allmulticast mode [ 81.141922][ T7344] bridge0: port 1(syz_tun) entered blocking state [ 81.144510][ T7344] bridge0: port 1(syz_tun) entered disabled state [ 81.147364][ T7344] syz_tun: entered allmulticast mode [ 81.150162][ T7344] syz_tun: entered promiscuous mode [ 81.153588][ T7344] bridge0: port 1(syz_tun) entered blocking state [ 81.155719][ T7344] bridge0: port 1(syz_tun) entered forwarding state [ 81.159438][ T838] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 81.172978][ T7344] vlan2: entered promiscuous mode [ 81.175834][ T7344] bridge0: entered promiscuous mode [ 81.315914][ T838] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 81.318692][ T838] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 81.322095][ T838] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 81.325820][ T838] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 81.329995][ T838] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 81.335739][ T838] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 81.338620][ T838] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 81.341190][ T838] usb 8-1: Product: syz [ 81.342550][ T838] usb 8-1: Manufacturer: syz [ 81.348919][ T838] cdc_wdm 8-1:1.0: skipping garbage [ 81.350649][ T838] cdc_wdm 8-1:1.0: skipping garbage [ 81.355986][ T838] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 81.356242][ T839] cfg80211: failed to load regulatory.db [ 81.358118][ T838] cdc_wdm 8-1:1.0: Unknown control protocol [ 81.485514][ T7366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7366 comm=syz.1.378 [ 81.540160][ T7373] overlayfs: overlapping lowerdir path [ 81.590383][ T7379] overlayfs: missing 'lowerdir' [ 81.632528][ T7382] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 81.640672][ T7382] CIFS mount error: No usable UNC path provided in device string! [ 81.640672][ T7382] [ 81.644154][ T7382] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 81.673112][ T7388] netlink: 'syz.2.386': attribute type 13 has an invalid length. [ 81.676954][ T7388] macvtap0: entered promiscuous mode [ 81.679831][ T7388] macvtap0: refused to change device tx_queue_len [ 81.722661][ T7392] loop6: detected capacity change from 0 to 524287999 [ 81.726123][ T7392] buffer_io_error: 7 callbacks suppressed [ 81.726138][ T7392] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.732610][ T7392] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.740669][ T7392] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.744005][ T7392] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.747219][ T7392] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.750450][ T7392] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.753586][ T7392] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.757515][ T7392] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.760585][ T7392] ldm_validate_partition_table(): Disk read failed. [ 81.762708][ T7392] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.765414][ T7392] Buffer I/O error on dev loop6, logical block 0, async page read [ 81.768250][ T7392] Dev loop6: unable to read RDB block 0 [ 81.770176][ T7392] loop6: unable to read partition table [ 81.771842][ T7392] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 81.886219][ T7399] __nla_validate_parse: 10 callbacks suppressed [ 81.886235][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.390'. [ 81.953778][ T838] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 81.982617][ T7399] vlan4: entered allmulticast mode [ 81.984630][ T7399] vlan1: entered allmulticast mode [ 81.986237][ T7399] veth0_vlan: entered allmulticast mode [ 82.101794][ T7411] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 82.104011][ T838] usb 5-1: Using ep0 maxpacket: 16 [ 82.109428][ T838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.115129][ T838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.118214][ T838] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 82.122284][ T838] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 82.125572][ T838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.129854][ T838] usb 5-1: config 0 descriptor?? [ 82.324774][ T7416] usb usb2: usbfs: process 7416 (syz.2.395) did not claim interface 0 before use [ 82.389558][ T838] usbhid 5-1:0.0: can't add hid device: -71 [ 82.392167][ T838] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 82.422572][ T838] usb 5-1: USB disconnect, device number 7 [ 82.446428][ T7428] overlay: Bad value for 'uuid' [ 82.448119][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 82.448127][ T40] audit: type=1400 audit(82.325:439): avc: denied { mounton } for pid=7427 comm="syz.2.398" path="/96/file0" dev="configfs" ino=3093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.465938][ T40] audit: type=1400 audit(82.335:440): avc: denied { read } for pid=7427 comm="syz.2.398" name="/" dev="configfs" ino=3093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.472620][ T40] audit: type=1400 audit(82.335:441): avc: denied { open } for pid=7427 comm="syz.2.398" path="/96/file0" dev="configfs" ino=3093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.483311][ T40] audit: type=1400 audit(82.335:442): avc: denied { watch watch_reads } for pid=7427 comm="syz.2.398" path="/96/file0" dev="configfs" ino=3093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.586556][ T7442] unknown channel width for channel at 909000KHz? [ 82.644679][ T7447] netlink: 20 bytes leftover after parsing attributes in process `syz.1.404'. [ 82.647547][ T7447] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 82.649988][ T7447] IPv6: NLM_F_CREATE should be set when creating new route [ 82.652327][ T7447] IPv6: NLM_F_CREATE should be set when creating new route [ 82.664337][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.718133][ T40] audit: type=1400 audit(82.595:443): avc: granted { setsecparam } for pid=7453 comm="syz.2.407" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 82.757206][ T40] audit: type=1400 audit(82.635:444): avc: denied { append } for pid=7459 comm="syz.1.409" name="event3" dev="devtmpfs" ino=1299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 82.972752][ T7473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 83.015855][ T7476] xt_SECMARK: invalid mode: 0 [ 83.165123][ T7478] netlink: 28 bytes leftover after parsing attributes in process `syz.1.415'. [ 83.170626][ T40] audit: type=1400 audit(83.045:445): avc: denied { write } for pid=7477 comm="syz.1.415" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 83.342170][ T40] audit: type=1400 audit(83.215:446): avc: denied { allowed } for pid=7483 comm="syz.0.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 83.349532][ T7484] autofs4:pid:7484:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 83.349565][ T40] audit: type=1400 audit(83.215:447): avc: denied { sqpoll } for pid=7483 comm="syz.0.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 83.359446][ T40] audit: type=1400 audit(83.215:448): avc: denied { read } for pid=7483 comm="syz.0.417" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 83.364078][ T5948] Bluetooth: hci2: command tx timeout [ 83.499176][ T7489] syz_tun: left allmulticast mode [ 83.501298][ T7489] syz_tun: left promiscuous mode [ 83.503501][ T7489] bridge0: port 1(syz_tun) entered disabled state [ 83.705473][ T7495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.421'. [ 83.714688][ T7495] netlink: 'syz.2.421': attribute type 1 has an invalid length. [ 83.719785][ T7495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.421'. [ 83.729909][ T7495] netlink: 'syz.2.421': attribute type 1 has an invalid length. [ 83.739860][ T7495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.421'. [ 83.743625][ T7495] netlink: 'syz.2.421': attribute type 1 has an invalid length. [ 83.847110][ T7498] tipc: Started in network mode [ 83.849368][ T7498] tipc: Node identity b6c5d661ad46, cluster identity 4711 [ 83.852469][ T7498] tipc: Enabled bearer , priority 0 [ 83.875181][ T10] usb 8-1: USB disconnect, device number 4 [ 83.911908][ T7497] tipc: Resetting bearer [ 83.956527][ T7501] overlayfs: overlapping lowerdir path [ 84.064150][ T1146] tipc: Subscription rejected, illegal request [ 84.083575][ T7508] netlink: 52 bytes leftover after parsing attributes in process `syz.2.424'. [ 84.867983][ T7497] tipc: Disabling bearer [ 85.139560][ T7525] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.429'. [ 85.264208][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.431'. [ 85.341566][ T7534] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 85.413780][ T10] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 85.579142][ T10] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 85.581871][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 85.587896][ T10] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 85.591648][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 85.596971][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 85.603605][ T10] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 85.613723][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 85.617148][ T10] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 85.620819][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 85.633406][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 85.642612][ T10] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 85.647243][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 85.650652][ T10] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 85.654377][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 85.657912][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 85.673952][ T10] usb 8-1: string descriptor 0 read error: -22 [ 85.676031][ T10] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 85.678945][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.706393][ T10] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 85.753206][ T6617] bridge0: port 3(syz_tun) entered disabled state [ 85.765256][ T6617] syz_tun (unregistering): left allmulticast mode [ 85.767361][ T6617] syz_tun (unregistering): left promiscuous mode [ 85.769675][ T6617] bridge0: port 3(syz_tun) entered disabled state [ 86.090289][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.178452][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.287982][ T5935] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.292875][ T5935] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.304135][ T5935] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.308690][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.311602][ T5935] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.315922][ T5935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.329717][ T7077] tipc: Subscription rejected, illegal request [ 86.436333][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.582648][ T7564] chnl_net:caif_netlink_parms(): no params data found [ 86.606321][ T61] bridge_slave_1: left allmulticast mode [ 86.608300][ T61] bridge_slave_1: left promiscuous mode [ 86.611706][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.620569][ T61] bridge_slave_0: left allmulticast mode [ 86.622374][ T61] bridge_slave_0: left promiscuous mode [ 86.625031][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.975008][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.982693][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.993790][ T61] bond0 (unregistering): Released all slaves [ 87.094210][ T7564] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.096493][ T7564] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.098783][ T7564] bridge_slave_0: entered allmulticast mode [ 87.101681][ T7564] bridge_slave_0: entered promiscuous mode [ 87.171396][ T7564] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.178227][ T7564] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.180540][ T7564] bridge_slave_1: entered allmulticast mode [ 87.191044][ T7564] bridge_slave_1: entered promiscuous mode [ 87.236935][ T7564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.287065][ T7564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.375884][ T7564] team0: Port device team_slave_0 added [ 87.384187][ T61] hsr_slave_0: left promiscuous mode [ 87.386958][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.389500][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.392812][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.396019][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.416988][ T61] veth1_macvtap: left promiscuous mode [ 87.419803][ T61] veth0_macvtap: left promiscuous mode [ 87.422181][ T61] veth1_vlan: left promiscuous mode [ 87.423985][ T61] veth0_vlan: left promiscuous mode [ 87.949327][ T40] kauditd_printk_skb: 990 callbacks suppressed [ 87.949339][ T40] audit: type=1400 audit(87.825:1439): avc: denied { read write } for pid=5934 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.962470][ T40] audit: type=1400 audit(87.825:1440): avc: denied { read write open } for pid=5934 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.971866][ T40] audit: type=1400 audit(87.825:1441): avc: denied { ioctl } for pid=5934 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.002206][ T40] audit: type=1400 audit(87.875:1442): avc: denied { create } for pid=7587 comm="syz.0.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.009132][ T40] audit: type=1400 audit(87.875:1443): avc: denied { getopt } for pid=7587 comm="syz.0.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.023777][ T40] audit: type=1400 audit(87.875:1444): avc: denied { connect } for pid=7587 comm="syz.0.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.031328][ T40] audit: type=1400 audit(87.875:1445): avc: denied { name_connect } for pid=7587 comm="syz.0.447" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 88.032715][ T61] team0 (unregistering): Port device team_slave_1 removed [ 88.053477][ T40] audit: type=1400 audit(87.925:1446): avc: denied { setopt } for pid=7587 comm="syz.0.447" lport=56260 faddr=fc02:: fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.080503][ T40] audit: type=1400 audit(87.955:1447): avc: denied { read write } for pid=5934 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.093485][ T61] team0 (unregistering): Port device team_slave_0 removed [ 88.093796][ T40] audit: type=1400 audit(87.965:1448): avc: denied { read write open } for pid=5934 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.395697][ T5948] Bluetooth: hci3: command tx timeout [ 88.681279][ T7564] team0: Port device team_slave_1 added [ 88.735176][ T7602] random: crng reseeded on system resumption [ 88.748552][ T7564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.751467][ T7564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.757535][ T7602] __nla_validate_parse: 4 callbacks suppressed [ 88.757546][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.451'. [ 88.766297][ T7564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.767667][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.451'. [ 88.775961][ T7564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.778368][ T7564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.789524][ T7564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.887932][ T7604] delete_channel: no stack [ 88.937772][ T7564] hsr_slave_0: entered promiscuous mode [ 88.941292][ T7564] hsr_slave_1: entered promiscuous mode [ 88.943587][ T7564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.950210][ T7564] Cannot create hsr debugfs directory [ 89.178687][ T7615] netlink: 52 bytes leftover after parsing attributes in process `syz.0.454'. [ 89.592035][ T7626] netlink: 56 bytes leftover after parsing attributes in process `syz.0.457'. [ 89.657397][ T7564] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.679836][ T7564] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.691667][ T7564] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.700595][ T7564] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.821044][ T7564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.847949][ T7564] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.858512][ T7077] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.860811][ T7077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.872026][ T7086] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.874917][ T7086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.234928][ T6005] usb 8-1: USB disconnect, device number 5 [ 90.252540][ T7564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.379314][ T7564] veth0_vlan: entered promiscuous mode [ 90.405698][ T7564] veth1_vlan: entered promiscuous mode [ 90.470344][ T7564] veth0_macvtap: entered promiscuous mode [ 90.481224][ T7564] veth1_macvtap: entered promiscuous mode [ 90.483841][ T5948] Bluetooth: hci3: command tx timeout [ 90.502356][ T7564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.511469][ T7564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.519723][ T7564] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.522530][ T7564] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.522557][ T7564] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.522571][ T7564] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.611263][ T7658] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 90.621005][ T1203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.623537][ T1203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.651972][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.655977][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.215711][ T7691] netlink: 36 bytes leftover after parsing attributes in process `syz.3.469'. [ 91.592497][ T7713] capability: warning: `syz.3.472' uses deprecated v2 capabilities in a way that may be insecure [ 91.695667][ T7718] bridge_slave_0: left allmulticast mode [ 91.697328][ T7718] bridge_slave_0: left promiscuous mode [ 91.699032][ T7718] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.707562][ T7718] bridge_slave_1: left allmulticast mode [ 91.709546][ T7718] bridge_slave_1: left promiscuous mode [ 91.712353][ T7718] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.720950][ T7718] bond0: (slave bond_slave_0): Releasing backup interface [ 91.729377][ T7718] bond0: (slave bond_slave_1): Releasing backup interface [ 91.735982][ T7718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.738131][ T7718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.741353][ T7718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.743616][ T7718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.835269][ T7723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.474'. [ 91.927738][ T7728] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 92.027066][ T7736] netlink: 16 bytes leftover after parsing attributes in process `syz.3.477'. [ 92.233483][ T7744] netlink: 36 bytes leftover after parsing attributes in process `syz.3.481'. [ 92.240258][ T7744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.481'. [ 92.246029][ T7744] netlink: 36 bytes leftover after parsing attributes in process `syz.3.481'. [ 92.265573][ T7744] binder: BINDER_SET_CONTEXT_MGR already set [ 92.268255][ T7744] binder: 7742:7744 ioctl 4018620d 200000000040 returned -16 [ 92.419328][ T7750] pim6reg1: entered promiscuous mode [ 92.421418][ T7750] pim6reg1: entered allmulticast mode [ 92.429831][ T7750] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 92.564220][ T5948] Bluetooth: hci3: command tx timeout [ 92.607519][ T7754] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 92.843888][ T6005] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 92.954052][ T40] kauditd_printk_skb: 2310 callbacks suppressed [ 92.954063][ T40] audit: type=1400 audit(348.830:3759): avc: denied { read write open } for pid=7564 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 92.968027][ T40] audit: type=1400 audit(348.830:3760): avc: denied { ioctl } for pid=7564 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 92.983834][ T6005] usb 8-1: device descriptor read/64, error -71 [ 93.027637][ T40] audit: type=1400 audit(348.900:3761): avc: denied { create } for pid=7767 comm="syz.2.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.038375][ T40] audit: type=1400 audit(348.900:3762): avc: denied { getopt } for pid=7767 comm="syz.2.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.052271][ T40] audit: type=1400 audit(348.920:3763): avc: denied { read write } for pid=7767 comm="syz.2.488" name="video1" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 93.059792][ T40] audit: type=1400 audit(348.920:3764): avc: denied { read write open } for pid=7767 comm="syz.2.488" path="/dev/video1" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 93.067545][ T40] audit: type=1400 audit(348.930:3765): avc: denied { ioctl } for pid=7767 comm="syz.2.488" path="/dev/video1" dev="devtmpfs" ino=957 ioctlcmd=0x5600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 93.075936][ T40] audit: type=1400 audit(348.930:3766): avc: denied { create } for pid=7767 comm="syz.2.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.082008][ T40] audit: type=1400 audit(348.930:3767): avc: denied { create } for pid=7767 comm="syz.2.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.088760][ T40] audit: type=1400 audit(348.930:3768): avc: denied { write } for pid=7767 comm="syz.2.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.223881][ T6005] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 93.353922][ T6005] usb 8-1: device descriptor read/64, error -71 [ 93.466631][ T6005] usb usb8-port1: attempt power cycle [ 93.803882][ T6005] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 93.825893][ T6005] usb 8-1: device descriptor read/8, error -71 [ 94.063843][ T6005] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 94.086753][ T6005] usb 8-1: device descriptor read/8, error -71 [ 94.195105][ T6005] usb usb8-port1: unable to enumerate USB device [ 95.340736][ T7825] program syz.2.506 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.554866][ T7827] Invalid logical block size (206) [ 97.566272][ T7850] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.687948][ T7850] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.781909][ T7850] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.880233][ T7850] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.979088][ T7850] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.991244][ T7850] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.005901][ T7850] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.018189][ T7850] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.054410][ T40] kauditd_printk_skb: 743 callbacks suppressed [ 98.054427][ T40] audit: type=1400 audit(353.930:4512): avc: denied { read write } for pid=7564 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.066948][ T40] audit: type=1400 audit(353.930:4513): avc: denied { read write open } for pid=7564 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.077398][ T40] audit: type=1400 audit(353.930:4514): avc: denied { ioctl } for pid=7564 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.137441][ T40] audit: type=1400 audit(354.010:4515): avc: denied { read } for pid=7854 comm="syz.2.515" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 98.144275][ T40] audit: type=1400 audit(354.010:4516): avc: denied { read open } for pid=7854 comm="syz.2.515" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 98.151653][ T40] audit: type=1400 audit(354.010:4517): avc: denied { ioctl } for pid=7854 comm="syz.2.515" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 98.165562][ T40] audit: type=1400 audit(354.040:4518): avc: denied { read write } for pid=7854 comm="syz.2.515" name="btrfs-control" dev="devtmpfs" ino=1336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 98.173016][ T40] audit: type=1400 audit(354.040:4519): avc: denied { read open } for pid=7854 comm="syz.2.515" path="/dev/btrfs-control" dev="devtmpfs" ino=1336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 98.181712][ T40] audit: type=1400 audit(354.040:4520): avc: denied { ioctl } for pid=7854 comm="syz.2.515" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 98.189553][ T40] audit: type=1400 audit(354.040:4521): avc: denied { create } for pid=7854 comm="syz.2.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.811183][ T7887] x_tables: duplicate underflow at hook 1 [ 99.199790][ T7901] __nla_validate_parse: 1 callbacks suppressed [ 99.199802][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.529'. [ 99.531495][ T7907] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_rx_wq": -EINTR [ 99.574389][ T7048] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 99.757356][ T7048] usb 5-1: too many configurations: 151, using maximum allowed: 8 [ 99.804050][ T7048] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 99.806959][ T7048] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 99.809529][ T7048] usb 5-1: Product: syz [ 99.810850][ T7048] usb 5-1: Manufacturer: syz [ 99.812316][ T7048] usb 5-1: SerialNumber: syz [ 99.819562][ T7048] usb 5-1: config 0 descriptor?? [ 100.037344][ T7904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.530'. [ 100.147382][ T34] usb 5-1: USB disconnect, device number 8 [ 100.678270][ T7947] loop6: detected capacity change from 0 to 524287999 [ 100.705149][ T5935] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 100.711002][ T5935] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 100.725995][ T5935] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 100.744496][ T5935] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 100.748938][ T5935] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 100.788184][ T7952] CIFS mount error: No usable UNC path provided in device string! [ 100.788184][ T7952] [ 100.791564][ T7952] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 101.092842][ T1203] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.096462][ T1203] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.100010][ T1203] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 101.195045][ T1203] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.198280][ T1203] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.201430][ T1203] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 101.277952][ T7949] chnl_net:caif_netlink_parms(): no params data found [ 101.305733][ T1203] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.308831][ T1203] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.312024][ T1203] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 101.413897][ T1203] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.417220][ T1203] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.420469][ T1203] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 101.465977][ T7949] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.468284][ T7949] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.470511][ T7949] bridge_slave_0: entered allmulticast mode [ 101.473282][ T7949] bridge_slave_0: entered promiscuous mode [ 101.479359][ T7949] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.481700][ T7949] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.484379][ T7949] bridge_slave_1: entered allmulticast mode [ 101.487142][ T7949] bridge_slave_1: entered promiscuous mode [ 101.526715][ T7949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.533065][ T7949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.546099][ T7988] zonefs (nbd3) ERROR: Not a zoned block device [ 101.575290][ T7949] team0: Port device team_slave_0 added [ 101.581953][ T7949] team0: Port device team_slave_1 added [ 101.615101][ T7949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.617541][ T7949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.625664][ T7949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.649072][ T7949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.651256][ T7949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.661010][ T7949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.679169][ T7921] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 101.749277][ T1203] bridge_slave_1: left allmulticast mode [ 101.751141][ T1203] bridge_slave_1: left promiscuous mode [ 101.753084][ T1203] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.757043][ T1203] bridge_slave_0: left allmulticast mode [ 101.758797][ T1203] bridge_slave_0: left promiscuous mode [ 101.760616][ T1203] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.855287][ T7921] usb 7-1: Using ep0 maxpacket: 8 [ 101.861969][ T7921] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 101.866326][ T7921] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 101.869496][ T7921] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 101.872686][ T7921] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.876989][ T7921] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 101.880147][ T7921] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.101111][ T1203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.108289][ T1203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.114411][ T1203] bond0 (unregistering): Released all slaves [ 102.121600][ T7921] usb 7-1: GET_CAPABILITIES returned 0 [ 102.122225][ T1203] bond1 (unregistering): Released all slaves [ 102.124022][ T7921] usbtmc 7-1:16.0: can't read capabilities [ 102.146907][ T7949] hsr_slave_0: entered promiscuous mode [ 102.149683][ T7949] hsr_slave_1: entered promiscuous mode [ 102.151917][ T7949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.156637][ T7949] Cannot create hsr debugfs directory [ 102.341789][ T6005] usb 7-1: USB disconnect, device number 5 [ 102.417524][ T7949] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.434999][ T7949] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.440718][ T7949] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.458032][ T7949] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.508017][ T1203] hsr_slave_0: left promiscuous mode [ 102.512034][ T1203] hsr_slave_1: left promiscuous mode [ 102.517806][ T1203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.520914][ T1203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.525993][ T1203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.529073][ T1203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.558878][ T1203] veth1_macvtap: left promiscuous mode [ 102.560960][ T1203] veth0_macvtap: left promiscuous mode [ 102.562746][ T1203] veth1_vlan: left promiscuous mode [ 102.564727][ T1203] veth0_vlan: left promiscuous mode [ 102.793903][ T5948] Bluetooth: hci4: command tx timeout [ 103.141324][ T40] kauditd_printk_skb: 1143 callbacks suppressed [ 103.141342][ T40] audit: type=1400 audit(359.010:5665): avc: denied { create } for pid=8019 comm="syz.3.554" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 103.153138][ T40] audit: type=1400 audit(359.020:5666): avc: denied { ioctl } for pid=8019 comm="syz.3.554" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=20233 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 103.163546][ T40] audit: type=1400 audit(359.020:5667): avc: denied { ioctl } for pid=8019 comm="syz.3.554" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=20233 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 103.174287][ T40] audit: type=1400 audit(359.020:5668): avc: denied { ioctl } for pid=8019 comm="syz.3.554" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=20233 ioctlcmd=0xaa08 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 103.186653][ T40] audit: type=1400 audit(359.040:5669): avc: denied { execute } for pid=8019 comm="syz.3.554" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=20234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 103.261093][ T1203] team0 (unregistering): Port device team_slave_1 removed [ 103.325814][ T1203] team0 (unregistering): Port device team_slave_0 removed [ 103.838058][ T40] audit: type=1400 audit(359.710:5670): avc: denied { read } for pid=7949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 103.844223][ T40] audit: type=1400 audit(359.710:5671): avc: denied { write } for pid=7949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 103.871167][ T40] audit: type=1400 audit(359.740:5672): avc: denied { read } for pid=7949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 103.879113][ T40] audit: type=1400 audit(359.750:5673): avc: denied { read } for pid=5649 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 103.905272][ T40] audit: type=1400 audit(359.750:5674): avc: denied { search } for pid=5649 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.021287][ T7949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.086957][ T7949] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.102043][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.104331][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.107694][ T8040] cgroup: fork rejected by pids controller in /syz0 [ 104.138028][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.140301][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.368652][ T8054] netlink: 68 bytes leftover after parsing attributes in process `syz.2.560'. [ 104.397060][ T8054] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=41 sclass=netlink_xfrm_socket pid=8054 comm=syz.2.560 [ 104.401705][ T8054] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=62 sclass=netlink_xfrm_socket pid=8054 comm=syz.2.560 [ 104.408094][ T8054] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=58 sclass=netlink_xfrm_socket pid=8054 comm=syz.2.560 [ 104.411884][ T8054] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=60 sclass=netlink_xfrm_socket pid=8054 comm=syz.2.560 [ 104.529262][ T8061] bridge1: entered promiscuous mode [ 104.636403][ T7077] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.680411][ T7949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.752215][ T7077] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.874515][ T5935] Bluetooth: hci4: command tx timeout [ 104.878475][ T5935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.887106][ T5935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.890750][ T5935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.892135][ T7077] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.898798][ T5935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.901559][ T5935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.931944][ T8075] ip6gretap1: entered promiscuous mode [ 104.934022][ T8075] ip6gretap1: entered allmulticast mode [ 104.985866][ T7077] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.494450][ T7077] bond0 (unregistering): Released all slaves [ 105.501298][ T7077] bond1 (unregistering): Released all slaves [ 105.520022][ T8072] chnl_net:caif_netlink_parms(): no params data found [ 105.523832][ T8093] mkiss: ax0: crc mode is auto. [ 105.611717][ T7077] tipc: Left network mode [ 105.696293][ T8072] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.698664][ T8072] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.700951][ T8072] bridge_slave_0: entered allmulticast mode [ 105.703771][ T8072] bridge_slave_0: entered promiscuous mode [ 105.712065][ T8072] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.715431][ T8072] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.718589][ T8072] bridge_slave_1: entered allmulticast mode [ 105.721414][ T8072] bridge_slave_1: entered promiscuous mode [ 105.797900][ T8072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.811548][ T8072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.898105][ T8072] team0: Port device team_slave_0 added [ 105.920863][ T8104] bridge2: entered allmulticast mode [ 105.987028][ T8072] team0: Port device team_slave_1 added [ 106.037221][ T7949] veth0_vlan: entered promiscuous mode [ 106.040352][ T8072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.043019][ T8072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.053764][ T8072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.094252][ T8072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.096873][ T8072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.113732][ T8072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.185846][ T7949] veth1_vlan: entered promiscuous mode [ 106.206290][ T7077] hsr_slave_0: left promiscuous mode [ 106.208401][ T7077] hsr_slave_1: left promiscuous mode [ 106.225959][ T7077] veth1_macvtap: left promiscuous mode [ 106.227693][ T7077] veth0_macvtap: left promiscuous mode [ 106.229400][ T7077] veth1_vlan: left promiscuous mode [ 106.231002][ T7077] veth0_vlan: left promiscuous mode [ 106.954844][ T5948] Bluetooth: hci0: command tx timeout [ 106.964066][ T5948] Bluetooth: hci4: command tx timeout [ 107.054984][ T8115] kAFS: No cell specified [ 107.311403][ T8072] hsr_slave_0: entered promiscuous mode [ 107.314754][ T8072] hsr_slave_1: entered promiscuous mode [ 107.316984][ T8072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.319386][ T8072] Cannot create hsr debugfs directory [ 107.506602][ T7949] veth0_macvtap: entered promiscuous mode [ 107.549565][ T7949] veth1_macvtap: entered promiscuous mode [ 107.608581][ T7949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.628504][ T7949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.647572][ T7949] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.650350][ T7949] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.653076][ T7949] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.659769][ T7949] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.766568][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.769060][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.803809][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.806480][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.889168][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.576'. [ 107.891927][ T8139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.576'. [ 107.894964][ T8139] netlink: 'syz.2.576': attribute type 13 has an invalid length. [ 108.043173][ T8072] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.049194][ T8072] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.059158][ T8072] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.069508][ T8072] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.143974][ T40] kauditd_printk_skb: 1501 callbacks suppressed [ 108.144034][ T40] audit: type=1400 audit(364.020:7176): avc: denied { search } for pid=8150 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.163808][ T40] audit: type=1400 audit(364.020:7177): avc: denied { search } for pid=8150 comm="rm" name="dhcpcd" dev="tmpfs" ino=1899 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.177262][ T40] audit: type=1400 audit(364.020:7178): avc: denied { search } for pid=8150 comm="rm" name="hook-state" dev="tmpfs" ino=1903 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.190956][ T40] audit: type=1400 audit(364.020:7179): avc: denied { getattr } for pid=8150 comm="rm" path="/run/dhcpcd/hook-state/resolv.conf.lapb7.link" dev="tmpfs" ino=3938 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 108.211836][ T40] audit: type=1400 audit(364.020:7180): avc: denied { search } for pid=8150 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.219843][ T40] audit: type=1400 audit(364.020:7181): avc: denied { search } for pid=8150 comm="rm" name="dhcpcd" dev="tmpfs" ino=1899 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.222731][ T8072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.227369][ T40] audit: type=1400 audit(364.020:7182): avc: denied { search } for pid=8150 comm="rm" name="hook-state" dev="tmpfs" ino=1903 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.236961][ T40] audit: type=1400 audit(364.020:7183): avc: denied { search } for pid=8150 comm="rm" name="hook-state" dev="tmpfs" ino=1903 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.243959][ T40] audit: type=1400 audit(364.020:7184): avc: denied { remove_name search } for pid=8150 comm="rm" name="resolv.conf.lapb7.link" dev="tmpfs" ino=3938 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.251437][ T40] audit: type=1400 audit(364.020:7185): avc: denied { unlink } for pid=8150 comm="rm" name="resolv.conf.lapb7.link" dev="tmpfs" ino=3938 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 108.262278][ T8072] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.273127][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.275421][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.292827][ T8162] Bluetooth: MGMT ver 1.23 [ 108.301297][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.303539][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.553419][ T6020] libceph: connect (1)[b::]:6789 error -101 [ 108.556202][ T6020] libceph: mon0 (1)[b::]:6789 connect error [ 108.585629][ T8176] 9pnet: Unknown protocol version 9p2000.u66Èݾaá×Ôso„¨JÌ@UpÈ&—Ø¥œ‡4$®û<ðÛ£ïªø‡¤w±«~¦ÁÞùÛ5äDÁï6ÆÏBÍéK».’:]¡»Ù«†|ÕP7Õ¡(óßñ…­]¼\FªÁB0פø³mkÆ;JÍ0›v—´!¦b¸0µÎZ³ÿ€€C}÷ªl®š]¶¨ò¥>÷ÖÆ®¬v¸:Flt©Í¼Þ…ãÑL :G£kôd‚܈â_L¥¯ªñkÝu*åwŽœû¥|š âJÕnŽ·!èÊ”ñ1̘à;4¶¡Û@€6-äï!]ZA®°ÇB¢cjů…8γX^ùܨ}õ[ª –; [ 108.595226][ T8178] trusted_key: encrypted_key: insufficient parameters specified [ 108.685913][ T8072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.751732][ T8072] veth0_vlan: entered promiscuous mode [ 108.767829][ T8072] veth1_vlan: entered promiscuous mode [ 108.829442][ T8072] veth0_macvtap: entered promiscuous mode [ 108.835624][ T6020] libceph: connect (1)[b::]:6789 error -101 [ 108.837652][ T6020] libceph: mon0 (1)[b::]:6789 connect error [ 108.849324][ T8072] veth1_macvtap: entered promiscuous mode [ 108.885908][ T8072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.904461][ T8072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.915129][ T8072] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.921377][ T8072] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.927672][ T8072] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.934066][ T8072] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.980842][ T8197] tipc: Started in network mode [ 108.982923][ T8197] tipc: Node identity 4, cluster identity 4711 [ 108.985970][ T8197] tipc: Node number set to 4 [ 109.033991][ T5935] Bluetooth: hci0: command tx timeout [ 109.034223][ T5948] Bluetooth: hci4: command tx timeout [ 109.051684][ T1203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.055302][ T1203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.096086][ T8199] netlink: 32 bytes leftover after parsing attributes in process `syz.4.586'. [ 109.097913][ T1203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.101792][ T1203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.336857][ T8171] ceph: No mds server is up or the cluster is laggy [ 109.353719][ T7048] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 109.356167][ T6020] libceph: connect (1)[b::]:6789 error -101 [ 109.358204][ T6020] libceph: mon0 (1)[b::]:6789 connect error [ 109.454313][ T8211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.588'. [ 109.468316][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.589'. [ 109.534970][ T7048] usb 9-1: Using ep0 maxpacket: 8 [ 109.554294][ T7048] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 109.556926][ T7048] usb 9-1: config 0 has no interface number 0 [ 109.559137][ T7048] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 109.562822][ T7048] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 109.571447][ T7048] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.582401][ T7048] usb 9-1: config 0 descriptor?? [ 109.601213][ T7048] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 109.702833][ T8226] netlink: 36 bytes leftover after parsing attributes in process `syz.2.593'. [ 109.710727][ T8226] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.713798][ T8226] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.986012][ T8234] netlink: 'syz.2.596': attribute type 5 has an invalid length. [ 110.268637][ T8259] xt_l2tp: missing protocol rule (udp|l2tpip) [ 110.275801][ T8259] netlink: 'syz.0.600': attribute type 11 has an invalid length. [ 110.296776][ T8262] afs: Unknown parameter 'Pyn' [ 110.484531][ T8269] netlink: 24 bytes leftover after parsing attributes in process `syz.0.603'. [ 110.493568][ T8269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 110.562016][ T8274] netlink: 16 bytes leftover after parsing attributes in process `syz.0.603'. [ 110.577033][ T8275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.667433][ T8281] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.608' sets config #0 [ 110.671738][ T8280] usb 1-1: USB disconnect, device number 2 [ 110.832057][ T8287] vim2m vim2m.0: vidioc_s_fmt queue busy [ 110.887962][ T6020] usb 9-1: USB disconnect, device number 2 [ 111.074031][ T5932] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 111.113794][ T5948] Bluetooth: hci0: command tx timeout [ 111.213790][ T5932] usb 7-1: device descriptor read/64, error -71 [ 111.454698][ T5932] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 111.583873][ T5932] usb 7-1: device descriptor read/64, error -71 [ 111.693924][ T5932] usb usb7-port1: attempt power cycle [ 112.033903][ T5932] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 112.057177][ T5932] usb 7-1: device descriptor read/8, error -71 [ 112.293898][ T5932] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 112.315661][ T5932] usb 7-1: device descriptor read/8, error -71 [ 112.427308][ T5932] usb usb7-port1: unable to enumerate USB device [ 112.497262][ T8322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.615'. [ 112.588967][ T8327] syz.3.617: attempt to access beyond end of device [ 112.588967][ T8327] loop3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 112.594084][ T8327] MINIX-fs: unable to read superblock [ 112.677594][ T8329] netlink: 'syz.3.618': attribute type 10 has an invalid length. [ 112.680831][ T8329] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 112.906724][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.621'. [ 112.910205][ T8341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.621'. [ 112.913609][ T8341] netlink: 'syz.3.621': attribute type 18 has an invalid length. [ 112.992778][ T8348] netlink: 'syz.3.623': attribute type 1 has an invalid length. [ 113.019365][ T8348] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.045640][ T8348] veth3: entered promiscuous mode [ 113.051089][ T8348] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 113.155926][ T40] kauditd_printk_skb: 2097 callbacks suppressed [ 113.155944][ T40] audit: type=1400 audit(369.030:9283): avc: denied { create } for pid=8354 comm="syz.3.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.166276][ T40] audit: type=1400 audit(369.030:9284): avc: denied { create } for pid=8354 comm="syz.3.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 113.172388][ T40] audit: type=1400 audit(369.030:9285): avc: denied { create } for pid=8354 comm="syz.3.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 113.181403][ T40] audit: type=1400 audit(369.030:9286): avc: denied { write } for pid=8354 comm="syz.3.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 113.189745][ T40] audit: type=1400 audit(369.030:9287): avc: denied { read } for pid=8354 comm="syz.3.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 113.197521][ T40] audit: type=1400 audit(369.030:9288): avc: denied { read } for pid=8354 comm="syz.3.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 113.205467][ T40] audit: type=1400 audit(369.040:9289): avc: denied { write } for pid=8354 comm="syz.3.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 113.205609][ T5948] Bluetooth: hci0: command tx timeout [ 113.212054][ T40] audit: type=1400 audit(369.040:9290): avc: denied { write } for pid=8354 comm="syz.3.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 113.212084][ T40] audit: type=1400 audit(369.040:9291): avc: denied { write } for pid=8354 comm="syz.3.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 113.212106][ T40] audit: type=1400 audit(369.040:9292): avc: denied { write } for pid=8354 comm="syz.3.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 113.292460][ T8363] mmap: syz.3.625 (8363) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 113.570873][ T8369] syz.4.627: attempt to access beyond end of device [ 113.570873][ T8369] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 113.576470][ T8369] exFAT-fs (nbd4): unable to read boot sector [ 113.578513][ T8369] exFAT-fs (nbd4): failed to read boot sector [ 113.580324][ T8369] exFAT-fs (nbd4): failed to recognize exfat type [ 113.634941][ T8369] netlink: 28 bytes leftover after parsing attributes in process `syz.4.627'. [ 113.933520][ T8381] hugetlbfs: Unknown parameter 'B' [ 114.034241][ T8384] netlink: 'syz.2.632': attribute type 11 has an invalid length. [ 114.056233][ T8384] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 114.173888][ T8391] xt_hashlimit: size too large, truncated to 1048576 [ 114.273616][ T8399] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 114.675716][ T8418] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 114.680864][ T8419] afs: Bad value for 'source' [ 114.846965][ T13] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.958538][ T13] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.083108][ T13] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.115502][ T5935] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.123021][ T5935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.126136][ T5935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.129295][ T5935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.131910][ T5935] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.138269][ T8437] kAFS: Can only specify source 'none' with -o dyn [ 115.238808][ T13] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.469073][ T8436] chnl_net:caif_netlink_parms(): no params data found [ 115.481702][ T13] bridge_slave_1: left allmulticast mode [ 115.488781][ T13] bridge_slave_1: left promiscuous mode [ 115.493540][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.525593][ T13] bridge_slave_0: left allmulticast mode [ 115.528173][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.896235][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.900891][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.905208][ T13] bond0 (unregistering): Released all slaves [ 115.987834][ T13] tipc: Left network mode [ 116.087763][ T8469] ipvlan2: entered promiscuous mode [ 116.092565][ T8469] bridge0: port 3(ipvlan2) entered blocking state [ 116.099490][ T8469] bridge0: port 3(ipvlan2) entered disabled state [ 116.102341][ T8469] ipvlan2: entered allmulticast mode [ 116.107856][ T8469] bridge0: entered allmulticast mode [ 116.111678][ T8469] ipvlan2: left allmulticast mode [ 116.116273][ T8469] bridge0: left allmulticast mode [ 116.193753][ T8436] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.196703][ T8436] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.199597][ T8436] bridge_slave_0: entered allmulticast mode [ 116.202483][ T8436] bridge_slave_0: entered promiscuous mode [ 116.221918][ T8436] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.225559][ T8436] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.227877][ T8436] bridge_slave_1: entered allmulticast mode [ 116.230574][ T8436] bridge_slave_1: entered promiscuous mode [ 116.439977][ T8486] geneve2: entered promiscuous mode [ 116.442241][ T8486] geneve2: entered allmulticast mode [ 116.452376][ T8436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.475821][ T8436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.623366][ T8436] team0: Port device team_slave_0 added [ 116.628301][ T8499] tmpfs: Bad value for 'mpol' [ 116.635067][ T13] hsr_slave_0: left promiscuous mode [ 116.641105][ T13] hsr_slave_1: left promiscuous mode [ 116.643540][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.646405][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.649331][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.651700][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.678648][ T13] veth1_macvtap: left promiscuous mode [ 116.680436][ T13] veth0_macvtap: left promiscuous mode [ 116.682200][ T13] veth1_vlan: left promiscuous mode [ 116.687909][ T8504] 9pnet_fd: Insufficient options for proto=fd [ 116.693835][ T13] veth0_vlan: left promiscuous mode [ 116.695408][ T8504] __nla_validate_parse: 3 callbacks suppressed [ 116.695422][ T8504] netlink: 444 bytes leftover after parsing attributes in process `syz.4.661'. [ 116.755156][ T8509] netlink: 16 bytes leftover after parsing attributes in process `syz.0.663'. [ 116.759578][ T8510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.663'. [ 116.878695][ T8512] netlink: 'syz.3.665': attribute type 10 has an invalid length. [ 117.204812][ T5948] Bluetooth: hci2: command tx timeout [ 117.373594][ T13] team0 (unregistering): Port device team_slave_1 removed [ 117.437687][ T13] team0 (unregistering): Port device team_slave_0 removed [ 117.948823][ T8496] netlink: 24 bytes leftover after parsing attributes in process `syz.4.661'. [ 117.952060][ T8496] netlink: 24 bytes leftover after parsing attributes in process `syz.4.661'. [ 117.957654][ T8436] team0: Port device team_slave_1 added [ 118.091818][ T8512] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 118.129892][ T8527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.667'. [ 118.177039][ T40] kauditd_printk_skb: 1265 callbacks suppressed [ 118.177054][ T40] audit: type=1400 audit(374.050:10558): avc: denied { recv } for pid=5846 comm="syz-executor" saddr=127.0.0.1 src=45488 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 118.187731][ T40] audit: type=1400 audit(374.050:10559): avc: denied { recv } for pid=5845 comm="sshd-session" saddr=10.0.2.2 src=41508 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 118.196989][ T40] audit: type=1400 audit(374.060:10560): avc: denied { read write } for pid=5931 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.204350][ T40] audit: type=1400 audit(374.070:10561): avc: denied { read write open } for pid=5931 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.211938][ T40] audit: type=1400 audit(374.070:10562): avc: denied { ioctl } for pid=5931 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.220069][ T40] audit: type=1400 audit(374.070:10563): avc: denied { create } for pid=8522 comm="syz.0.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.227459][ T40] audit: type=1400 audit(374.070:10564): avc: denied { write } for pid=8522 comm="syz.0.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.234770][ T40] audit: type=1400 audit(374.090:10565): avc: denied { read write } for pid=7949 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.242031][ T40] audit: type=1400 audit(374.090:10566): avc: denied { read write open } for pid=7949 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.250252][ T40] audit: type=1400 audit(374.090:10567): avc: denied { ioctl } for pid=7949 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.292273][ T8436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.296089][ T8436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.308474][ T8436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.330200][ T8436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.333115][ T8436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.344139][ T8436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.441695][ T8436] hsr_slave_0: entered promiscuous mode [ 118.454077][ T8436] hsr_slave_1: entered promiscuous mode [ 118.456429][ T8436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.459441][ T8436] Cannot create hsr debugfs directory [ 118.492956][ T8549] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 118.549022][ T8549] netlink: 'syz.4.672': attribute type 4 has an invalid length. [ 118.646786][ T8554] netlink: 16 bytes leftover after parsing attributes in process `syz.3.670'. [ 119.024903][ T59] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 119.234989][ T59] usb 8-1: unable to get BOS descriptor or descriptor too short [ 119.256565][ T8588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=8588 comm=syz.0.678 [ 119.261544][ T59] usb 8-1: config 8 has an invalid interface number: 135 but max is 0 [ 119.270650][ T59] usb 8-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 119.275922][ T5948] Bluetooth: hci2: command tx timeout [ 119.288523][ T59] usb 8-1: config 8 has no interface number 0 [ 119.291116][ T59] usb 8-1: config 8 interface 135 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 8 [ 119.295441][ T59] usb 8-1: config 8 interface 135 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 16 [ 119.299417][ T59] usb 8-1: config 8 interface 135 altsetting 8 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 119.304267][ T59] usb 8-1: config 8 interface 135 altsetting 8 endpoint 0x82 has invalid maxpacket 26904, setting to 1024 [ 119.309107][ T59] usb 8-1: config 8 interface 135 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 1024 [ 119.313252][ T59] usb 8-1: config 8 interface 135 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 119.317599][ T59] usb 8-1: config 8 interface 135 altsetting 8 endpoint 0x9 has invalid wMaxPacketSize 0 [ 119.321672][ T59] usb 8-1: config 8 interface 135 altsetting 8 bulk endpoint 0x9 has invalid maxpacket 0 [ 119.325786][ T59] usb 8-1: config 8 interface 135 has no altsetting 0 [ 119.343211][ T59] usb 8-1: New USB device found, idVendor=1199, idProduct=0027, bcdDevice=4f.58 [ 119.347044][ T59] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.350186][ T59] usb 8-1: Product: syz [ 119.351903][ T59] usb 8-1: Manufacturer: syz [ 119.354097][ T59] usb 8-1: SerialNumber: syz [ 119.367247][ T8543] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 119.372201][ T8543] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 119.380499][ T8543] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 119.408714][ T8436] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 119.415290][ T8436] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 119.425497][ T8436] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 119.435232][ T8436] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 119.615059][ T8436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.648377][ T8436] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.662555][ T7076] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.664909][ T7076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.681277][ T7076] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.683587][ T7076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.985478][ T8603] program syz.0.679 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.124147][ T8613] bridge_slave_0: left allmulticast mode [ 120.126022][ T8613] bridge_slave_0: left promiscuous mode [ 120.128030][ T8613] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.128779][ T59] sierra 8-1:8.135: Sierra USB modem converter detected [ 120.150194][ T59] usb 8-1: Sierra USB modem converter now attached to ttyUSB0 [ 120.165532][ T8613] bridge_slave_1: left allmulticast mode [ 120.167788][ T8613] bridge_slave_1: left promiscuous mode [ 120.182506][ T8613] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.203042][ T59] usb 8-1: Sierra USB modem converter now attached to ttyUSB1 [ 120.215645][ T59] usb 8-1: USB disconnect, device number 10 [ 120.227750][ T59] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 120.233190][ T8613] bond0: (slave bond_slave_0): Releasing backup interface [ 120.246986][ T59] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 120.251730][ T59] sierra 8-1:8.135: device disconnected [ 120.267887][ T8613] bond0: (slave bond_slave_1): Releasing backup interface [ 120.295166][ T8613] team0: Port device team_slave_0 removed [ 120.310844][ T8613] team0: Port device team_slave_1 removed [ 120.313896][ T8613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.316900][ T8613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.325051][ T8613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.328018][ T8613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.432520][ T8436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.507499][ T8617] ipvlan2: entered promiscuous mode [ 120.509627][ T8617] bridge0: port 1(ipvlan2) entered blocking state [ 120.511670][ T8617] bridge0: port 1(ipvlan2) entered disabled state [ 120.515252][ T8617] ipvlan2: entered allmulticast mode [ 120.517406][ T8617] bridge0: entered allmulticast mode [ 120.520043][ T8617] ipvlan2: left allmulticast mode [ 120.521609][ T8617] bridge0: left allmulticast mode [ 120.569402][ T8436] veth0_vlan: entered promiscuous mode [ 120.598023][ T8436] veth1_vlan: entered promiscuous mode [ 120.628555][ T8629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8629 comm=syz.0.685 [ 120.666175][ T8436] veth0_macvtap: entered promiscuous mode [ 120.676211][ T8436] veth1_macvtap: entered promiscuous mode [ 120.706713][ T8436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.720823][ T8436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.746853][ T8436] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.750519][ T8436] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.756219][ T8436] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.759842][ T8436] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.866937][ T8637] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.688'. [ 120.890749][ T7076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.903836][ T7076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.921340][ T7076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.924040][ T7076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.287448][ T8654] netlink: 44 bytes leftover after parsing attributes in process `syz.0.693'. [ 121.287649][ T8658] netlink: 44 bytes leftover after parsing attributes in process `syz.0.693'. [ 121.768005][ T8666] kvm: apic: phys broadcast and lowest prio [ 121.773966][ T8666] kvm: apic: phys broadcast and lowest prio [ 121.775976][ T8666] kvm: apic: phys broadcast and lowest prio [ 121.778042][ T8666] kvm: apic: phys broadcast and lowest prio [ 121.780389][ T8666] kvm: apic: phys broadcast and lowest prio [ 121.783121][ T8666] kvm: apic: phys broadcast and lowest prio [ 121.785893][ T8666] kvm: apic: phys broadcast and lowest prio [ 121.788422][ T8666] kvm: apic: phys broadcast and lowest prio [ 121.790817][ T8666] kvm: apic: phys broadcast and lowest prio [ 121.792776][ T8666] kvm: apic: phys broadcast and lowest prio [ 121.794991][ T8666] kvm: apic: phys broadcast and lowest prio [ 121.797013][ T8666] kvm: apic: phys broadcast and lowest prio [ 121.799114][ T8666] kvm: apic: phys broadcast and lowest prio [ 121.801105][ T8666] kvm: apic: phys broadcast and lowest prio [ 121.803023][ T8666] kvm: apic: phys broadcast and lowest prio [ 121.805001][ T8666] kvm: apic: phys broadcast and lowest prio [ 121.806963][ T8666] kvm: apic: phys broadcast and lowest prio [ 121.808925][ T8666] kvm: apic: phys broadcast and lowest prio [ 121.810795][ T8666] kvm: apic: phys broadcast and lowest prio [ 121.812795][ T8666] kvm: apic: phys broadcast and lowest prio [ 121.814760][ T8666] kvm: apic: phys broadcast and lowest prio [ 121.816686][ T8666] kvm: apic: phys broadcast and lowest prio [ 122.088381][ T1146] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.115627][ T8673] kvm: emulating exchange as write [ 122.296982][ T8683] ip6tnl1: entered allmulticast mode [ 122.303206][ T5935] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 122.312612][ T5935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 122.318706][ T6020] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 122.323512][ T5935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 122.327980][ T5935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 122.331807][ T5935] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 122.369625][ T8686] netlink: 'syz.3.702': attribute type 10 has an invalid length. [ 122.373095][ T8686] macvlan0: entered promiscuous mode [ 122.375196][ T8686] macvlan0: entered allmulticast mode [ 122.381411][ T8686] veth1_vlan: entered allmulticast mode [ 122.386995][ T8686] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 122.479276][ T6020] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.493920][ T6020] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.497931][ T6020] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 122.503100][ T6020] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.516937][ T6020] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.528407][ T6020] usb 9-1: config 0 descriptor?? [ 122.592233][ T8681] chnl_net:caif_netlink_parms(): no params data found [ 122.825287][ T8681] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.827799][ T8681] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.830881][ T8681] bridge_slave_0: entered allmulticast mode [ 122.833568][ T8681] bridge_slave_0: entered promiscuous mode [ 122.836288][ T8706] syz_tun: entered allmulticast mode [ 122.839714][ T8706] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 122.839896][ T8681] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.842496][ T8706] mroute: pending queue full, dropping entries [ 122.846020][ T8681] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.849051][ T8681] bridge_slave_1: entered allmulticast mode [ 122.851756][ T8681] bridge_slave_1: entered promiscuous mode [ 122.855141][ T8703] syz_tun: left allmulticast mode [ 122.894493][ T8681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.900095][ T8681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.967168][ T6020] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 122.970732][ T6020] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 122.988444][ T8681] team0: Port device team_slave_0 added [ 122.995514][ T6020] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 122.998453][ T8681] team0: Port device team_slave_1 added [ 123.080331][ T8681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.087070][ T8681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.101565][ T8681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.114998][ T8681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.117968][ T8681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.134038][ T8681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.176823][ T8670] __nla_validate_parse: 2 callbacks suppressed [ 123.176838][ T8670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.698'. [ 123.191855][ T8717] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.196698][ T8717] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.199942][ T8717] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.203420][ T8717] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.213421][ T40] kauditd_printk_skb: 2007 callbacks suppressed [ 123.213435][ T40] audit: type=1400 audit(379.080:12575): avc: denied { create } for pid=8718 comm="syz.3.709" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 123.227204][ T40] audit: type=1400 audit(379.100:12576): avc: denied { recv } for pid=5649 comm="dhcpcd" saddr=127.0.0.1 src=45488 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 123.242655][ T40] audit: type=1400 audit(379.110:12577): avc: denied { read } for pid=8718 comm="syz.3.709" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 123.252238][ T40] audit: type=1400 audit(379.110:12578): avc: denied { read open } for pid=8718 comm="syz.3.709" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 123.262007][ T40] audit: type=1400 audit(379.120:12579): avc: denied { read } for pid=8718 comm="syz.3.709" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 123.273077][ T40] audit: type=1400 audit(379.120:12580): avc: denied { read open } for pid=8718 comm="syz.3.709" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 123.278374][ T1146] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.285301][ T40] audit: type=1400 audit(379.120:12581): avc: denied { ioctl } for pid=8718 comm="syz.3.709" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 123.296531][ T40] audit: type=1400 audit(379.120:12582): avc: denied { ioctl } for pid=8718 comm="syz.3.709" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64a1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 123.306654][ T40] audit: type=1400 audit(379.120:12583): avc: denied { ioctl } for pid=8718 comm="syz.3.709" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64ce scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 123.328483][ T40] audit: type=1400 audit(379.120:12584): avc: denied { ioctl } for pid=8718 comm="syz.3.709" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x642d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 123.353933][ T838] usb 9-1: USB disconnect, device number 3 [ 123.354954][ T8681] hsr_slave_0: entered promiscuous mode [ 123.359396][ T8681] hsr_slave_1: entered promiscuous mode [ 123.361929][ T8681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.370155][ T8681] Cannot create hsr debugfs directory [ 123.527449][ T8732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.712'. [ 123.547388][ T1146] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.599204][ T8733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.660040][ T1146] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.907557][ T1146] bridge_slave_1: left allmulticast mode [ 123.910206][ T1146] bridge_slave_1: left promiscuous mode [ 123.912712][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.941426][ T1146] bridge_slave_0: left allmulticast mode [ 123.944975][ T1146] bridge_slave_0: left promiscuous mode [ 123.947706][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.357738][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.364013][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.369192][ T1146] bond0 (unregistering): Released all slaves [ 124.404434][ T5935] Bluetooth: hci2: command tx timeout [ 124.508103][ T8762] ip6gretap1: entered promiscuous mode [ 124.509878][ T8762] ip6gretap1: entered allmulticast mode [ 124.808300][ T1146] hsr_slave_0: left promiscuous mode [ 124.814564][ T8776] block device autoloading is deprecated and will be removed. [ 124.817651][ T1146] hsr_slave_1: left promiscuous mode [ 124.820036][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.830125][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.838220][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.841447][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.897429][ T1146] veth1_macvtap: left promiscuous mode [ 124.899611][ T1146] veth0_macvtap: left promiscuous mode [ 124.901431][ T1146] veth1_vlan: left promiscuous mode [ 124.906653][ T1146] veth0_vlan: left promiscuous mode [ 125.012926][ T8794] tmpfs: Bad value for 'mpol' [ 125.019357][ T8793] netlink: 'syz.3.729': attribute type 2 has an invalid length. [ 125.021617][ T8793] netlink: 784 bytes leftover after parsing attributes in process `syz.3.729'. [ 125.629466][ T8803] openvswitch: netlink: Duplicate or invalid key (type 0). [ 125.643229][ T8803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.684435][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 125.784950][ T1146] team0 (unregistering): Port device team_slave_0 removed [ 126.445763][ T8681] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 126.466544][ T8681] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 126.485590][ T5935] Bluetooth: hci2: command tx timeout [ 126.492138][ T8681] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 126.516355][ T8681] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 126.689261][ T8681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.735854][ T8681] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.754963][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.757762][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.762151][ T61] Bluetooth: hci3: Frame reassembly failed (-84) [ 126.798038][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.801163][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.253341][ T8681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.348123][ T8681] veth0_vlan: entered promiscuous mode [ 127.391711][ T8681] veth1_vlan: entered promiscuous mode [ 127.448447][ T8681] veth0_macvtap: entered promiscuous mode [ 127.457381][ T8681] veth1_macvtap: entered promiscuous mode [ 127.487866][ T8681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.506288][ T8681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.529300][ T8681] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.532190][ T8681] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.542305][ T8681] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.549986][ T8681] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.688253][ T8861] syz.3.741: attempt to access beyond end of device [ 127.688253][ T8861] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 127.692322][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.692668][ T8861] syz.3.741: attempt to access beyond end of device [ 127.692668][ T8861] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 127.698310][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.717228][ T8861] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 127.721400][ T8861] syz.3.741: attempt to access beyond end of device [ 127.721400][ T8861] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 127.745810][ T8861] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 127.749549][ T8861] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 127.751809][ T8861] UDF-fs: Scanning with blocksize 512 failed [ 127.755810][ T8861] syz.3.741: attempt to access beyond end of device [ 127.755810][ T8861] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 127.760095][ T8861] syz.3.741: attempt to access beyond end of device [ 127.760095][ T8861] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 127.764556][ T8861] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 127.765666][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.769042][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.774987][ T8861] syz.3.741: attempt to access beyond end of device [ 127.774987][ T8861] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 127.803622][ T8861] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 127.811804][ T8861] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 127.814244][ T8861] UDF-fs: Scanning with blocksize 1024 failed [ 127.816435][ T8861] syz.3.741: attempt to access beyond end of device [ 127.816435][ T8861] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 127.821150][ T8861] syz.3.741: attempt to access beyond end of device [ 127.821150][ T8861] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 127.827217][ T8861] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 127.830424][ T8861] syz.3.741: attempt to access beyond end of device [ 127.830424][ T8861] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 127.836298][ T8861] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 127.839495][ T8861] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 127.842218][ T8861] UDF-fs: Scanning with blocksize 2048 failed [ 127.845258][ T8861] syz.3.741: attempt to access beyond end of device [ 127.845258][ T8861] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 127.850052][ T8861] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 127.853331][ T8861] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 127.856884][ T8861] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 127.860032][ T8861] UDF-fs: Scanning with blocksize 4096 failed [ 127.862587][ T8861] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 128.216201][ T40] kauditd_printk_skb: 2170 callbacks suppressed [ 128.216213][ T40] audit: type=1400 audit(384.090:14755): avc: denied { search } for pid=8876 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.225703][ T40] audit: type=1400 audit(384.090:14756): avc: denied { search } for pid=8876 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1899 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.232521][ T40] audit: type=1400 audit(384.090:14757): avc: denied { search } for pid=8876 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1903 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.246280][ T40] audit: type=1400 audit(384.090:14758): avc: denied { read open } for pid=8876 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1904 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.263305][ T40] audit: type=1400 audit(384.090:14759): avc: denied { getattr } for pid=8876 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1904 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.265227][ T8876] audit: audit_backlog=65 > audit_backlog_limit=64 [ 128.272795][ T8879] audit: audit_backlog=65 > audit_backlog_limit=64 [ 128.274671][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 128.274702][ C1] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 128.274710][ C1] audit: backlog limit exceeded [ 128.291592][ T8879] netlink: 'syz.3.745': attribute type 1 has an invalid length. [ 128.793966][ T5948] Bluetooth: hci3: command 0xfc11 tx timeout [ 128.794861][ T5935] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 129.262181][ T1146] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.271034][ T8913] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 129.659115][ T5948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 129.668416][ T5948] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 129.673362][ T5948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 129.686322][ T5948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 129.689156][ T5948] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 129.933320][ T8935] chnl_net:caif_netlink_parms(): no params data found [ 130.036668][ T8935] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.039598][ T8935] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.042276][ T8935] bridge_slave_0: entered allmulticast mode [ 130.045859][ T8935] bridge_slave_0: entered promiscuous mode [ 130.050494][ T8935] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.052738][ T8935] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.055003][ T8935] bridge_slave_1: entered allmulticast mode [ 130.057587][ T8935] bridge_slave_1: entered promiscuous mode [ 130.106407][ T8935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.112070][ T8935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.152186][ T8935] team0: Port device team_slave_0 added [ 130.157200][ T8935] team0: Port device team_slave_1 added [ 130.192190][ T8935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.195649][ T8935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.203776][ T8935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.209062][ T8935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.211212][ T8935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.221619][ T8935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.270901][ T8935] hsr_slave_0: entered promiscuous mode [ 130.273202][ T8935] hsr_slave_1: entered promiscuous mode [ 130.275389][ T8935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.277755][ T8935] Cannot create hsr debugfs directory [ 130.613032][ T1146] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.955575][ T1146] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.017580][ T1146] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.116302][ T1146] bridge_slave_1: left allmulticast mode [ 131.118276][ T1146] bridge_slave_1: left promiscuous mode [ 131.120096][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.126918][ T1146] bridge_slave_0: left allmulticast mode [ 131.129009][ T1146] bridge_slave_0: left promiscuous mode [ 131.131350][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.399048][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.403186][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.407740][ T1146] bond0 (unregistering): Released all slaves [ 131.754129][ T5935] Bluetooth: hci2: command tx timeout [ 131.818587][ T1146] hsr_slave_0: left promiscuous mode [ 131.821560][ T1146] hsr_slave_1: left promiscuous mode [ 131.827364][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.830415][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.846497][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.849579][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.886307][ T1146] veth1_macvtap: left promiscuous mode [ 131.888098][ T1146] veth0_macvtap: left promiscuous mode [ 131.889852][ T1146] veth1_vlan: left promiscuous mode [ 131.891480][ T1146] veth0_vlan: left promiscuous mode [ 132.510284][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 132.558024][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.560672][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.597642][ T1146] team0 (unregistering): Port device team_slave_0 removed [ 133.223842][ T40] kauditd_printk_skb: 1536 callbacks suppressed [ 133.223858][ T40] audit: type=1400 audit(389.100:16250): avc: denied { read } for pid=8935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 133.226292][ T8935] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 133.250107][ T8935] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 133.261364][ T8935] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 133.271340][ T40] audit: type=1400 audit(389.140:16251): avc: denied { search } for pid=8961 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.273909][ T8935] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 133.279492][ T40] audit: type=1400 audit(389.140:16252): avc: denied { search } for pid=8961 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1899 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.291235][ T40] audit: type=1400 audit(389.140:16253): avc: denied { search } for pid=8961 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1903 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.300256][ T40] audit: type=1400 audit(389.140:16254): avc: denied { search } for pid=8961 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1904 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.307500][ T40] audit: type=1400 audit(389.170:16255): avc: denied { search } for pid=8962 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.316006][ T40] audit: type=1400 audit(389.170:16256): avc: denied { search } for pid=8962 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1899 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.322921][ T40] audit: type=1400 audit(389.170:16257): avc: denied { search } for pid=8962 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1903 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.326738][ T8962] audit: audit_backlog=65 > audit_backlog_limit=64 [ 133.332986][ T40] audit: type=1400 audit(389.170:16258): avc: denied { create } for pid=8935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 133.418535][ T8935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.438130][ T8935] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.447703][ T7076] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.449949][ T7076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.458860][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.461043][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.835807][ T5935] Bluetooth: hci2: command tx timeout [ 133.908211][ T8935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.978621][ T8935] veth0_vlan: entered promiscuous mode [ 133.992879][ T8935] veth1_vlan: entered promiscuous mode [ 134.054540][ T8935] veth0_macvtap: entered promiscuous mode [ 134.068565][ T8935] veth1_macvtap: entered promiscuous mode [ 134.101419][ T8935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.115848][ T8935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.128201][ T8935] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.131869][ T8935] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.136588][ T8935] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.140063][ T8935] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.250712][ T7077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.253414][ T7077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.286244][ T7077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.289535][ T7077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.849307][ T1146] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.595847][ T5948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 136.602710][ T5948] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 136.609120][ T5948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 136.615619][ T5948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 136.619320][ T5948] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 136.913378][ T8977] chnl_net:caif_netlink_parms(): no params data found [ 137.054740][ T8977] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.056938][ T8977] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.059312][ T8977] bridge_slave_0: entered allmulticast mode [ 137.063404][ T8977] bridge_slave_0: entered promiscuous mode [ 137.076070][ T8977] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.079114][ T8977] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.082092][ T8977] bridge_slave_1: entered allmulticast mode [ 137.087094][ T8977] bridge_slave_1: entered promiscuous mode [ 137.150505][ T8977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.157540][ T8977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.196812][ T8977] team0: Port device team_slave_0 added [ 137.201826][ T8977] team0: Port device team_slave_1 added [ 137.241230][ T8977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.243508][ T8977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.251734][ T8977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.257298][ T8977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.259646][ T8977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.269413][ T8977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.314838][ T8977] hsr_slave_0: entered promiscuous mode [ 137.317687][ T8977] hsr_slave_1: entered promiscuous mode [ 137.319986][ T8977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.322298][ T8977] Cannot create hsr debugfs directory [ 137.426417][ T1146] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.499293][ T1146] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.591453][ T1146] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.752271][ T1146] bridge_slave_1: left allmulticast mode [ 137.756249][ T1146] bridge_slave_1: left promiscuous mode [ 137.759015][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.765784][ T1146] bridge_slave_0: left allmulticast mode [ 137.768036][ T1146] bridge_slave_0: left promiscuous mode [ 137.770542][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.081012][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.088702][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.093916][ T1146] bond0 (unregistering): Released all slaves [ 138.252710][ T40] kauditd_printk_skb: 455 callbacks suppressed [ 138.252723][ T40] audit: type=1400 audit(394.120:16661): avc: denied { search } for pid=8985 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.319396][ T40] audit: type=1400 audit(394.190:16662): avc: denied { search } for pid=8986 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.326287][ T40] audit: type=1400 audit(394.190:16663): avc: denied { search } for pid=8986 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1899 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.333343][ T40] audit: type=1400 audit(394.190:16664): avc: denied { search } for pid=8986 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1903 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.345655][ T40] audit: type=1400 audit(394.190:16665): avc: denied { search } for pid=8986 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1904 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.357547][ T40] audit: type=1400 audit(394.230:16666): avc: denied { search } for pid=8987 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.364270][ T40] audit: type=1400 audit(394.230:16667): avc: denied { search } for pid=8987 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1899 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.371519][ T40] audit: type=1400 audit(394.230:16668): avc: denied { search } for pid=8987 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1903 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.380280][ T40] audit: type=1400 audit(394.230:16669): avc: denied { read open } for pid=8987 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1904 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.389116][ T40] audit: type=1400 audit(394.230:16670): avc: denied { getattr } for pid=8987 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1904 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.475818][ T1146] hsr_slave_0: left promiscuous mode [ 138.481105][ T1146] hsr_slave_1: left promiscuous mode [ 138.484530][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.487606][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.491512][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.497187][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.535773][ T1146] veth1_macvtap: left promiscuous mode [ 138.538235][ T1146] veth0_macvtap: left promiscuous mode [ 138.540649][ T1146] veth1_vlan: left promiscuous mode [ 138.542944][ T1146] veth0_vlan: left promiscuous mode [ 138.724468][ T5948] Bluetooth: hci2: command tx timeout [ 139.375026][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 139.467958][ T1146] team0 (unregistering): Port device team_slave_0 removed [ 140.307180][ T8977] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 140.312694][ T8977] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 140.319683][ T8977] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 140.326361][ T8977] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 140.482054][ T8977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.502281][ T8977] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.514708][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.517797][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.530402][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.532999][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.795643][ T5948] Bluetooth: hci2: command tx timeout [ 140.928046][ T8977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.983292][ T8977] veth0_vlan: entered promiscuous mode [ 140.994807][ T8977] veth1_vlan: entered promiscuous mode [ 141.032768][ T8977] veth0_macvtap: entered promiscuous mode [ 141.041582][ T8977] veth1_macvtap: entered promiscuous mode [ 141.063458][ T8977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.074814][ T8977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.082750][ T8977] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.085890][ T8977] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.088648][ T8977] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.091308][ T8977] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.178074][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.180974][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.215774][ T7076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.218511][ T7076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.016878][ T1146] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.572264][ T40] kauditd_printk_skb: 725 callbacks suppressed [ 143.572277][ T40] audit: type=1400 audit(399.440:17396): avc: denied { execute } for pid=9006 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 143.582085][ T40] audit: type=1400 audit(399.450:17397): avc: denied { execute_no_trans } for pid=9006 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 143.593346][ T40] audit: type=1400 audit(399.450:17398): avc: denied { execute } for pid=9006 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 143.602633][ T40] audit: type=1400 audit(399.470:17399): avc: denied { execmem } for pid=9006 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 143.721607][ T40] audit: type=1400 audit(399.590:17400): avc: denied { create } for pid=9007 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 143.729525][ T40] audit: type=1400 audit(399.590:17401): avc: denied { read write } for pid=9007 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 143.732949][ T5935] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 143.739014][ T40] audit: type=1400 audit(399.590:17402): avc: denied { read write open } for pid=9007 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 143.744025][ T5935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 143.752094][ T40] audit: type=1400 audit(399.600:17403): avc: denied { ioctl } for pid=9007 comm="syz-executor" path="socket:[31010]" dev="sockfs" ino=31010 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 143.756949][ T5935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 143.770604][ T5935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 143.776229][ T5935] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 143.780629][ T40] audit: type=1400 audit(399.650:17404): avc: denied { ioctl } for pid=9007 comm="syz-executor" path="socket:[31010]" dev="sockfs" ino=31010 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 143.791139][ T40] audit: type=1400 audit(399.650:17405): avc: denied { read } for pid=9007 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 143.940428][ T9007] chnl_net:caif_netlink_parms(): no params data found [ 144.022522][ T9007] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.025451][ T9007] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.028759][ T9007] bridge_slave_0: entered allmulticast mode [ 144.031512][ T9007] bridge_slave_0: entered promiscuous mode [ 144.037276][ T9007] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.039562][ T9007] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.041876][ T9007] bridge_slave_1: entered allmulticast mode [ 144.045214][ T9007] bridge_slave_1: entered promiscuous mode [ 144.082296][ T9007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.088086][ T9007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.127404][ T9007] team0: Port device team_slave_0 added [ 144.131830][ T9007] team0: Port device team_slave_1 added [ 144.166787][ T9007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.169005][ T9007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.179203][ T9007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.188547][ T9007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.190728][ T9007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.201726][ T9007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.250460][ T9007] hsr_slave_0: entered promiscuous mode [ 144.252722][ T9007] hsr_slave_1: entered promiscuous mode [ 144.254851][ T9007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.257214][ T9007] Cannot create hsr debugfs directory [ 144.562641][ T1146] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.625079][ T1146] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.739298][ T1146] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.909623][ T1146] bridge_slave_1: left allmulticast mode [ 144.912088][ T1146] bridge_slave_1: left promiscuous mode [ 144.918194][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.925081][ T1146] bridge_slave_0: left allmulticast mode [ 144.926885][ T1146] bridge_slave_0: left promiscuous mode [ 144.928852][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.192018][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.199488][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.204967][ T1146] bond0 (unregistering): Released all slaves [ 145.609060][ T1146] hsr_slave_0: left promiscuous mode [ 145.612331][ T1146] hsr_slave_1: left promiscuous mode [ 145.617317][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.620024][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.623711][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.626460][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.648439][ T1146] veth1_macvtap: left promiscuous mode [ 145.650244][ T1146] veth0_macvtap: left promiscuous mode [ 145.652035][ T1146] veth1_vlan: left promiscuous mode [ 145.654011][ T1146] veth0_vlan: left promiscuous mode [ 145.838971][ T5935] Bluetooth: hci2: command tx timeout [ 146.482722][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 146.573409][ T9033] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 146.587059][ T1146] team0 (unregistering): Port device team_slave_0 removed [ 147.227725][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.762'. [ 147.240249][ T9031] syz_tun: entered promiscuous mode [ 147.247780][ T9031] syz_tun: left promiscuous mode [ 147.303955][ T9032] syz_tun: entered promiscuous mode [ 147.310317][ T9032] syz_tun: left promiscuous mode [ 147.415744][ T9007] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 147.430735][ T9007] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 147.439399][ T9007] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 147.446294][ T9007] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 147.552119][ T9052] netlink: 'syz.0.767': attribute type 2 has an invalid length. [ 147.601512][ T9053] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.766'. [ 147.701427][ T9057] BUG: Bad page state in process syz.0.768 pfn:479a3 [ 147.705110][ T9057] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x1244 pfn:0x479a3 [ 147.708438][ T9007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.710761][ T9057] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 147.715840][ T9057] raw: 00fff00000000000 dead000000000040 ffff888022cb9000 0000000000000000 [ 147.719757][ T9057] raw: 0000000000001244 3ffffffffffffffe 00000000ffffffff 0000000000000000 [ 147.723502][ T9057] page dumped because: page_pool leak [ 147.725850][ T9057] page_owner tracks the page as allocated [ 147.728547][ T9057] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8901, tgid 8899 (syz.0.750), ts 129080402068, free_ts 129076945571 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 147.735578][ T9057] post_alloc_hook+0x1c0/0x230 [ 147.737821][ T9057] get_page_from_freelist+0x1321/0x3890 [ 147.740213][ T9057] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 147.742737][ T9057] alloc_pages_bulk_noprof+0x71c/0x1410 [ 147.745142][ T9057] __page_pool_alloc_pages_slow+0x193/0xc30 [ 147.747666][ T9057] page_pool_alloc_netmems+0xc4/0x190 [ 147.749455][ T9007] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.750144][ T9057] page_pool_alloc_frag_netmem+0x219/0x9c0 [ 147.754979][ T9057] skb_pp_cow_data+0x237/0xff0 [ 147.757098][ T9057] skb_cow_data_for_xdp+0x88/0xb0 [ 147.759488][ T9057] do_xdp_generic+0x530/0x1320 [ 147.761656][ T9057] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 147.764680][ T9057] __netif_receive_skb_one_core+0xb0/0x1e0 [ 147.767432][ T9057] __netif_receive_skb+0x1d/0x160 [ 147.769747][ T9057] netif_receive_skb+0x137/0x7b0 [ 147.771923][ T9057] tun_rx_batched.isra.0+0x3ee/0x740 [ 147.774322][ T9057] tun_get_user+0x28a2/0x3b80 [ 147.776433][ T9057] page last free pid 23 tgid 23 stack trace: [ 147.778944][ T9057] __free_frozen_pages+0x7fe/0x1180 [ 147.781116][ T9057] tdp_mmu_free_sp_rcu_callback+0x61/0xb0 [ 147.783487][ T9057] rcu_core+0x799/0x14e0 [ 147.783945][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.785308][ T9057] handle_softirqs+0x216/0x8e0 [ 147.787517][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.789583][ T9057] run_ksoftirqd+0x3a/0x60 [ 147.794362][ T9057] smpboot_thread_fn+0x3f4/0xae0 [ 147.796783][ T9057] kthread+0x3c2/0x780 [ 147.798640][ T9057] ret_from_fork+0x5d4/0x6f0 [ 147.800633][ T9057] ret_from_fork_asm+0x1a/0x30 [ 147.802656][ T9057] Modules linked in: [ 147.804424][ T9057] CPU: 2 UID: 0 PID: 9057 Comm: syz.0.768 Not tainted 6.16.0-rc2-syzkaller-00071-g74b4cc9b8780 #0 PREEMPT(full) [ 147.804448][ T9057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 147.804459][ T9057] Call Trace: [ 147.804465][ T9057] [ 147.804472][ T9057] dump_stack_lvl+0x16c/0x1f0 [ 147.804501][ T9057] bad_page+0xcf/0x220 [ 147.804527][ T9057] ? __pfx_bad_page+0x10/0x10 [ 147.804551][ T9057] ? page_bad_reason+0x9d/0x1f0 [ 147.804577][ T9057] __free_frozen_pages+0x824/0x1180 [ 147.804599][ T9057] ? mark_held_locks+0x49/0x80 [ 147.804626][ T9057] page_frag_free+0x27f/0x2e0 [ 147.804649][ T9057] __xdp_return+0x38e/0xa90 [ 147.804667][ T9057] ? kmem_cache_free+0x2d1/0x4d0 [ 147.804690][ T9057] bpf_xdp_adjust_tail+0xa11/0xfd0 [ 147.804723][ T9057] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 147.804739][ T9057] bpf_prog_run_generic_xdp+0x626/0x1530 [ 147.804777][ T9057] do_xdp_generic+0x8e6/0x1320 [ 147.804803][ T9057] ? __pfx_do_xdp_generic+0x10/0x10 [ 147.804851][ T9057] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 147.804888][ T9057] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 147.804910][ T9057] ? __skb_flow_dissect+0x11b2/0x7d90 [ 147.804933][ T9057] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 147.804965][ T9057] ? __pfx___skb_flow_dissect+0x10/0x10 [ 147.804984][ T9057] ? do_user_addr_fault+0x829/0x1370 [ 147.805015][ T9057] ? do_user_addr_fault+0x843/0x1370 [ 147.805042][ T9057] ? __lock_acquire+0x622/0x1c90 [ 147.805074][ T9057] __netif_receive_skb_one_core+0xb0/0x1e0 [ 147.805098][ T9057] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 147.805123][ T9057] ? lock_acquire+0x179/0x350 [ 147.805157][ T9057] __netif_receive_skb+0x1d/0x160 [ 147.805181][ T9057] netif_receive_skb+0x137/0x7b0 [ 147.805204][ T9057] ? __pfx_netif_receive_skb+0x10/0x10 [ 147.805228][ T9057] ? __pfx__copy_from_iter+0x10/0x10 [ 147.805260][ T9057] tun_rx_batched.isra.0+0x3ee/0x740 [ 147.805290][ T9057] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 147.805321][ T9057] ? tun_get_user+0x1c0d/0x3b80 [ 147.805345][ T9057] ? rcu_is_watching+0x12/0xc0 [ 147.805372][ T9057] tun_get_user+0x28a2/0x3b80 [ 147.805408][ T9057] ? __pfx_tun_get_user+0x10/0x10 [ 147.805433][ T9057] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 147.805466][ T9057] ? find_held_lock+0x2b/0x80 [ 147.805488][ T9057] ? tun_get+0x191/0x370 [ 147.805518][ T9057] tun_chr_write_iter+0xdc/0x210 [ 147.805546][ T9057] vfs_write+0x6c4/0x1150 [ 147.805569][ T9057] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 147.805598][ T9057] ? __pfx_vfs_write+0x10/0x10 [ 147.805617][ T9057] ? find_held_lock+0x2b/0x80 [ 147.805663][ T9057] ksys_write+0x12a/0x250 [ 147.805684][ T9057] ? __pfx_ksys_write+0x10/0x10 [ 147.805715][ T9057] do_syscall_64+0xcd/0x4c0 [ 147.805744][ T9057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.805762][ T9057] RIP: 0033:0x7f1861d8d3df [ 147.805776][ T9057] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 147.805793][ T9057] RSP: 002b:00007f1862bd7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 147.805810][ T9057] RAX: ffffffffffffffda RBX: 00007f1861fb6080 RCX: 00007f1861d8d3df [ 147.805821][ T9057] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 147.805832][ T9057] RBP: 00007f1861e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 147.805843][ T9057] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 147.805853][ T9057] R13: 0000000000000000 R14: 00007f1861fb6080 R15: 00007fff02bf8518 [ 147.805886][ T9057] [ 147.805894][ T9057] Disabling lock debugging due to kernel taint [ 147.923787][ T5935] Bluetooth: hci2: command tx timeout [ 147.924848][ T9057] BUG: Bad page state in process syz.0.768 pfn:4f7c3 [ 147.946207][ T9057] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4f7c3 [ 147.949610][ T9057] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 147.952169][ T9057] raw: 00fff00000000000 dead000000000040 ffff888022cb9000 0000000000000000 [ 147.955091][ T9057] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 147.957808][ T9057] page dumped because: page_pool leak [ 147.959500][ T9057] page_owner tracks the page as allocated [ 147.961306][ T9057] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9057, tgid 9055 (syz.0.768), ts 147701316718, free_ts 143080227770 [ 147.966600][ T9057] post_alloc_hook+0x1c0/0x230 [ 147.968158][ T9057] get_page_from_freelist+0x1321/0x3890 [ 147.969921][ T9057] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 147.971798][ T9057] alloc_pages_bulk_noprof+0x71c/0x1410 [ 147.973748][ T9057] __page_pool_alloc_pages_slow+0x193/0xc30 [ 147.975810][ T9057] page_pool_alloc_netmems+0xc4/0x190 [ 147.977720][ T9057] skb_pp_cow_data+0x7c0/0xff0 [ 147.979183][ T9057] skb_cow_data_for_xdp+0x88/0xb0 [ 147.980776][ T9057] do_xdp_generic+0x530/0x1320 [ 147.982292][ T9057] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 147.984506][ T9057] __netif_receive_skb_one_core+0xb0/0x1e0 [ 147.986351][ T9057] __netif_receive_skb+0x1d/0x160 [ 147.987983][ T9057] netif_receive_skb+0x137/0x7b0 [ 147.989594][ T9057] tun_rx_batched.isra.0+0x3ee/0x740 [ 147.991263][ T9057] tun_get_user+0x28a2/0x3b80 [ 147.992771][ T9057] tun_chr_write_iter+0xdc/0x210 [ 147.994392][ T9057] page last free pid 838 tgid 838 stack trace: [ 147.996319][ T9057] __free_frozen_pages+0x7fe/0x1180 [ 147.998017][ T9057] kasan_depopulate_vmalloc_pte+0x5f/0x80 [ 147.999823][ T9057] __apply_to_page_range+0xa8f/0x1350 [ 148.001584][ T9057] kasan_release_vmalloc+0xd1/0xe0 [ 148.003265][ T9057] purge_vmap_node+0x1c4/0xa30 [ 148.004911][ T9057] __purge_vmap_area_lazy+0xa06/0xc60 [ 148.006622][ T9057] drain_vmap_area_work+0x27/0x40 [ 148.008228][ T9057] process_one_work+0x9cc/0x1b70 [ 148.009808][ T9057] worker_thread+0x6c8/0xf10 [ 148.011322][ T9057] kthread+0x3c2/0x780 [ 148.012634][ T9057] ret_from_fork+0x5d4/0x6f0 [ 148.014239][ T9057] ret_from_fork_asm+0x1a/0x30 [ 148.015759][ T9057] Modules linked in: [ 148.017086][ T9057] CPU: 2 UID: 0 PID: 9057 Comm: syz.0.768 Tainted: G B 6.16.0-rc2-syzkaller-00071-g74b4cc9b8780 #0 PREEMPT(full) [ 148.017104][ T9057] Tainted: [B]=BAD_PAGE [ 148.017108][ T9057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 148.017115][ T9057] Call Trace: [ 148.017119][ T9057] [ 148.017123][ T9057] dump_stack_lvl+0x16c/0x1f0 [ 148.017142][ T9057] bad_page+0xcf/0x220 [ 148.017158][ T9057] ? __pfx_bad_page+0x10/0x10 [ 148.017173][ T9057] ? page_bad_reason+0x9d/0x1f0 [ 148.017189][ T9057] __free_frozen_pages+0x824/0x1180 [ 148.017201][ T9057] ? mark_held_locks+0x49/0x80 [ 148.017218][ T9057] page_frag_free+0x27f/0x2e0 [ 148.017234][ T9057] __xdp_return+0x38e/0xa90 [ 148.017245][ T9057] ? kmem_cache_free+0x2d1/0x4d0 [ 148.017259][ T9057] bpf_xdp_adjust_tail+0xa11/0xfd0 [ 148.017274][ T9057] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 148.017283][ T9057] bpf_prog_run_generic_xdp+0x626/0x1530 [ 148.017300][ T9057] do_xdp_generic+0x8e6/0x1320 [ 148.017315][ T9057] ? __pfx_do_xdp_generic+0x10/0x10 [ 148.017334][ T9057] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 148.017351][ T9057] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 148.017365][ T9057] ? __skb_flow_dissect+0x11b2/0x7d90 [ 148.017392][ T9057] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 148.017409][ T9057] ? __pfx___skb_flow_dissect+0x10/0x10 [ 148.017421][ T9057] ? do_user_addr_fault+0x829/0x1370 [ 148.017439][ T9057] ? do_user_addr_fault+0x843/0x1370 [ 148.017455][ T9057] ? __lock_acquire+0x622/0x1c90 [ 148.017472][ T9057] __netif_receive_skb_one_core+0xb0/0x1e0 [ 148.017487][ T9057] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 148.017502][ T9057] ? lock_acquire+0x179/0x350 [ 148.017520][ T9057] __netif_receive_skb+0x1d/0x160 [ 148.017534][ T9057] netif_receive_skb+0x137/0x7b0 [ 148.017548][ T9057] ? __pfx_netif_receive_skb+0x10/0x10 [ 148.017562][ T9057] ? __pfx__copy_from_iter+0x10/0x10 [ 148.017579][ T9057] tun_rx_batched.isra.0+0x3ee/0x740 [ 148.017608][ T9057] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 148.017625][ T9057] ? tun_get_user+0x1c0d/0x3b80 [ 148.017640][ T9057] ? rcu_is_watching+0x12/0xc0 [ 148.017654][ T9057] tun_get_user+0x28a2/0x3b80 [ 148.017672][ T9057] ? __pfx_tun_get_user+0x10/0x10 [ 148.017688][ T9057] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 148.017705][ T9057] ? find_held_lock+0x2b/0x80 [ 148.017718][ T9057] ? tun_get+0x191/0x370 [ 148.017733][ T9057] tun_chr_write_iter+0xdc/0x210 [ 148.017749][ T9057] vfs_write+0x6c4/0x1150 [ 148.017764][ T9057] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 148.017780][ T9057] ? __pfx_vfs_write+0x10/0x10 [ 148.017793][ T9057] ? find_held_lock+0x2b/0x80 [ 148.017809][ T9057] ksys_write+0x12a/0x250 [ 148.017822][ T9057] ? __pfx_ksys_write+0x10/0x10 [ 148.017837][ T9057] do_syscall_64+0xcd/0x4c0 [ 148.017854][ T9057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.017866][ T9057] RIP: 0033:0x7f1861d8d3df [ 148.017875][ T9057] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 148.017885][ T9057] RSP: 002b:00007f1862bd7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 148.017896][ T9057] RAX: ffffffffffffffda RBX: 00007f1861fb6080 RCX: 00007f1861d8d3df [ 148.017903][ T9057] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 148.017909][ T9057] RBP: 00007f1861e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 148.017915][ T9057] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 148.017922][ T9057] R13: 0000000000000000 R14: 00007f1861fb6080 R15: 00007fff02bf8518 [ 148.017931][ T9057] [ 148.017939][ T9057] BUG: Bad page state in process syz.0.768 pfn:4f7c4 [ 148.130950][ T9057] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4f7c4 [ 148.133800][ T9057] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 148.136007][ T9057] raw: 00fff00000000000 dead000000000040 ffff888022cb9000 0000000000000000 [ 148.138714][ T9057] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 148.141389][ T9057] page dumped because: page_pool leak [ 148.143079][ T9057] page_owner tracks the page as allocated [ 148.144989][ T9057] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9057, tgid 9055 (syz.0.768), ts 147701303984, free_ts 143080239336 [ 148.150189][ T9057] post_alloc_hook+0x1c0/0x230 [ 148.151711][ T9057] get_page_from_freelist+0x1321/0x3890 [ 148.153459][ T9057] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 148.155843][ T9057] alloc_pages_bulk_noprof+0x71c/0x1410 [ 148.157615][ T9057] __page_pool_alloc_pages_slow+0x193/0xc30 [ 148.159467][ T9057] page_pool_alloc_netmems+0xc4/0x190 [ 148.161158][ T9057] skb_pp_cow_data+0x7c0/0xff0 [ 148.162669][ T9057] skb_cow_data_for_xdp+0x88/0xb0 [ 148.164395][ T9057] do_xdp_generic+0x530/0x1320 [ 148.165908][ T9057] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 148.168032][ T9057] __netif_receive_skb_one_core+0xb0/0x1e0 [ 148.169881][ T9057] __netif_receive_skb+0x1d/0x160 [ 148.171484][ T9057] netif_receive_skb+0x137/0x7b0 [ 148.173060][ T9057] tun_rx_batched.isra.0+0x3ee/0x740 [ 148.174808][ T9057] tun_get_user+0x28a2/0x3b80 [ 148.176405][ T9057] tun_chr_write_iter+0xdc/0x210 [ 148.178009][ T9057] page last free pid 838 tgid 838 stack trace: [ 148.179944][ T9057] __free_frozen_pages+0x7fe/0x1180 [ 148.181597][ T9057] kasan_depopulate_vmalloc_pte+0x5f/0x80 [ 148.183320][ T9057] __apply_to_page_range+0xa8f/0x1350 [ 148.185562][ T9057] kasan_release_vmalloc+0xd1/0xe0 [ 148.187366][ T9057] purge_vmap_node+0x1c4/0xa30 [ 148.188897][ T9057] __purge_vmap_area_lazy+0xa06/0xc60 [ 148.190580][ T9057] drain_vmap_area_work+0x27/0x40 [ 148.192251][ T9057] process_one_work+0x9cc/0x1b70 [ 148.193945][ T9057] worker_thread+0x6c8/0xf10 [ 148.195473][ T9057] kthread+0x3c2/0x780 [ 148.196787][ T9057] ret_from_fork+0x5d4/0x6f0 [ 148.198301][ T9057] ret_from_fork_asm+0x1a/0x30 [ 148.199862][ T9057] Modules linked in: [ 148.201187][ T9057] CPU: 2 UID: 0 PID: 9057 Comm: syz.0.768 Tainted: G B 6.16.0-rc2-syzkaller-00071-g74b4cc9b8780 #0 PREEMPT(full) [ 148.201204][ T9057] Tainted: [B]=BAD_PAGE [ 148.201208][ T9057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 148.201214][ T9057] Call Trace: [ 148.201219][ T9057] [ 148.201223][ T9057] dump_stack_lvl+0x16c/0x1f0 [ 148.201241][ T9057] bad_page+0xcf/0x220 [ 148.201257][ T9057] ? __pfx_bad_page+0x10/0x10 [ 148.201272][ T9057] ? page_bad_reason+0x9d/0x1f0 [ 148.201288][ T9057] __free_frozen_pages+0x824/0x1180 [ 148.201300][ T9057] ? mark_held_locks+0x49/0x80 [ 148.201316][ T9057] page_frag_free+0x27f/0x2e0 [ 148.201331][ T9057] __xdp_return+0x38e/0xa90 [ 148.201342][ T9057] ? kmem_cache_free+0x2d1/0x4d0 [ 148.201356][ T9057] bpf_xdp_adjust_tail+0xa11/0xfd0 [ 148.201371][ T9057] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 148.201379][ T9057] bpf_prog_run_generic_xdp+0x626/0x1530 [ 148.201396][ T9057] do_xdp_generic+0x8e6/0x1320 [ 148.201410][ T9057] ? __pfx_do_xdp_generic+0x10/0x10 [ 148.201429][ T9057] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 148.201445][ T9057] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 148.201458][ T9057] ? __skb_flow_dissect+0x11b2/0x7d90 [ 148.201470][ T9057] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 148.201487][ T9057] ? __pfx___skb_flow_dissect+0x10/0x10 [ 148.201498][ T9057] ? do_user_addr_fault+0x829/0x1370 [ 148.201515][ T9057] ? do_user_addr_fault+0x843/0x1370 [ 148.201577][ T9057] ? __lock_acquire+0x622/0x1c90 [ 148.201597][ T9057] __netif_receive_skb_one_core+0xb0/0x1e0 [ 148.201628][ T9057] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 148.201642][ T9057] ? lock_acquire+0x179/0x350 [ 148.201660][ T9057] __netif_receive_skb+0x1d/0x160 [ 148.201674][ T9057] netif_receive_skb+0x137/0x7b0 [ 148.201687][ T9057] ? __pfx_netif_receive_skb+0x10/0x10 [ 148.201701][ T9057] ? __pfx__copy_from_iter+0x10/0x10 [ 148.201718][ T9057] tun_rx_batched.isra.0+0x3ee/0x740 [ 148.201734][ T9057] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 148.201749][ T9057] ? tun_get_user+0x1c0d/0x3b80 [ 148.201764][ T9057] ? rcu_is_watching+0x12/0xc0 [ 148.201778][ T9057] tun_get_user+0x28a2/0x3b80 [ 148.201795][ T9057] ? __pfx_tun_get_user+0x10/0x10 [ 148.201810][ T9057] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 148.201828][ T9057] ? find_held_lock+0x2b/0x80 [ 148.201840][ T9057] ? tun_get+0x191/0x370 [ 148.201855][ T9057] tun_chr_write_iter+0xdc/0x210 [ 148.201870][ T9057] vfs_write+0x6c4/0x1150 [ 148.201883][ T9057] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 148.201900][ T9057] ? __pfx_vfs_write+0x10/0x10 [ 148.201911][ T9057] ? find_held_lock+0x2b/0x80 [ 148.201927][ T9057] ksys_write+0x12a/0x250 [ 148.201940][ T9057] ? __pfx_ksys_write+0x10/0x10 [ 148.201955][ T9057] do_syscall_64+0xcd/0x4c0 [ 148.201972][ T9057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.201983][ T9057] RIP: 0033:0x7f1861d8d3df [ 148.201993][ T9057] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 148.202003][ T9057] RSP: 002b:00007f1862bd7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 148.202013][ T9057] RAX: ffffffffffffffda RBX: 00007f1861fb6080 RCX: 00007f1861d8d3df [ 148.202020][ T9057] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 148.202027][ T9057] RBP: 00007f1861e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 148.202033][ T9057] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 148.202039][ T9057] R13: 0000000000000000 R14: 00007f1861fb6080 R15: 00007fff02bf8518 [ 148.202049][ T9057] [ 148.202056][ T9057] BUG: Bad page state in process syz.0.768 pfn:4f7c5 [ 148.322010][ T9057] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4f7c5 [ 148.324950][ T9057] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 148.327205][ T9057] raw: 00fff00000000000 dead000000000040 ffff888022cb9000 0000000000000000 [ 148.329900][ T9057] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 148.332752][ T9057] page dumped because: page_pool leak [ 148.334583][ T9057] page_owner tracks the page as allocated [ 148.336374][ T9057] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9057, tgid 9055 (syz.0.768), ts 147701291141, free_ts 143080251265 [ 148.341824][ T9057] post_alloc_hook+0x1c0/0x230 [ 148.343417][ T9057] get_page_from_freelist+0x1321/0x3890 [ 148.345227][ T9057] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 148.347099][ T9057] alloc_pages_bulk_noprof+0x71c/0x1410 [ 148.348848][ T9057] __page_pool_alloc_pages_slow+0x193/0xc30 [ 148.350700][ T9057] page_pool_alloc_netmems+0xc4/0x190 [ 148.352387][ T9057] skb_pp_cow_data+0x7c0/0xff0 [ 148.353954][ T9057] skb_cow_data_for_xdp+0x88/0xb0 [ 148.355545][ T9057] do_xdp_generic+0x530/0x1320 [ 148.357077][ T9057] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 148.359196][ T9057] __netif_receive_skb_one_core+0xb0/0x1e0 [ 148.361046][ T9057] __netif_receive_skb+0x1d/0x160 [ 148.362642][ T9057] netif_receive_skb+0x137/0x7b0 [ 148.364260][ T9057] tun_rx_batched.isra.0+0x3ee/0x740 [ 148.365945][ T9057] tun_get_user+0x28a2/0x3b80 [ 148.367470][ T9057] tun_chr_write_iter+0xdc/0x210 [ 148.369055][ T9057] page last free pid 838 tgid 838 stack trace: [ 148.370978][ T9057] __free_frozen_pages+0x7fe/0x1180 [ 148.372623][ T9057] kasan_depopulate_vmalloc_pte+0x5f/0x80 [ 148.374451][ T9057] __apply_to_page_range+0xa8f/0x1350 [ 148.376127][ T9057] kasan_release_vmalloc+0xd1/0xe0 [ 148.377779][ T9057] purge_vmap_node+0x1c4/0xa30 [ 148.379292][ T9057] __purge_vmap_area_lazy+0xa06/0xc60 [ 148.380985][ T9057] drain_vmap_area_work+0x27/0x40 [ 148.382572][ T9057] process_one_work+0x9cc/0x1b70 [ 148.384187][ T9057] worker_thread+0x6c8/0xf10 [ 148.385660][ T9057] kthread+0x3c2/0x780 [ 148.386983][ T9057] ret_from_fork+0x5d4/0x6f0 [ 148.388465][ T9057] ret_from_fork_asm+0x1a/0x30 [ 148.389974][ T9057] Modules linked in: [ 148.391225][ T9057] CPU: 2 UID: 0 PID: 9057 Comm: syz.0.768 Tainted: G B 6.16.0-rc2-syzkaller-00071-g74b4cc9b8780 #0 PREEMPT(full) [ 148.391242][ T9057] Tainted: [B]=BAD_PAGE [ 148.391246][ T9057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 148.391253][ T9057] Call Trace: [ 148.391257][ T9057] [ 148.391261][ T9057] dump_stack_lvl+0x16c/0x1f0 [ 148.391279][ T9057] bad_page+0xcf/0x220 [ 148.391294][ T9057] ? __pfx_bad_page+0x10/0x10 [ 148.391309][ T9057] ? page_bad_reason+0x9d/0x1f0 [ 148.391324][ T9057] __free_frozen_pages+0x824/0x1180 [ 148.391335][ T9057] ? mark_held_locks+0x49/0x80 [ 148.391352][ T9057] page_frag_free+0x27f/0x2e0 [ 148.391367][ T9057] __xdp_return+0x38e/0xa90 [ 148.391378][ T9057] ? kmem_cache_free+0x2d1/0x4d0 [ 148.391392][ T9057] bpf_xdp_adjust_tail+0xa11/0xfd0 [ 148.391406][ T9057] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 148.391415][ T9057] bpf_prog_run_generic_xdp+0x626/0x1530 [ 148.391432][ T9057] do_xdp_generic+0x8e6/0x1320 [ 148.391446][ T9057] ? __pfx_do_xdp_generic+0x10/0x10 [ 148.391465][ T9057] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 148.391482][ T9057] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 148.391494][ T9057] ? __skb_flow_dissect+0x11b2/0x7d90 [ 148.391507][ T9057] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 148.391527][ T9057] ? __pfx___skb_flow_dissect+0x10/0x10 [ 148.391539][ T9057] ? do_user_addr_fault+0x829/0x1370 [ 148.391555][ T9057] ? do_user_addr_fault+0x843/0x1370 [ 148.391571][ T9057] ? __lock_acquire+0x622/0x1c90 [ 148.391587][ T9057] __netif_receive_skb_one_core+0xb0/0x1e0 [ 148.391602][ T9057] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 148.391616][ T9057] ? lock_acquire+0x179/0x350 [ 148.391634][ T9057] __netif_receive_skb+0x1d/0x160 [ 148.391648][ T9057] netif_receive_skb+0x137/0x7b0 [ 148.391661][ T9057] ? __pfx_netif_receive_skb+0x10/0x10 [ 148.391675][ T9057] ? __pfx__copy_from_iter+0x10/0x10 [ 148.391692][ T9057] tun_rx_batched.isra.0+0x3ee/0x740 [ 148.391708][ T9057] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 148.391723][ T9057] ? tun_get_user+0x1c0d/0x3b80 [ 148.391738][ T9057] ? rcu_is_watching+0x12/0xc0 [ 148.391752][ T9057] tun_get_user+0x28a2/0x3b80 [ 148.391770][ T9057] ? __pfx_tun_get_user+0x10/0x10 [ 148.391785][ T9057] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 148.391802][ T9057] ? find_held_lock+0x2b/0x80 [ 148.391814][ T9057] ? tun_get+0x191/0x370 [ 148.391829][ T9057] tun_chr_write_iter+0xdc/0x210 [ 148.391845][ T9057] vfs_write+0x6c4/0x1150 [ 148.391858][ T9057] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 148.391874][ T9057] ? __pfx_vfs_write+0x10/0x10 [ 148.391886][ T9057] ? find_held_lock+0x2b/0x80 [ 148.391902][ T9057] ksys_write+0x12a/0x250 [ 148.391914][ T9057] ? __pfx_ksys_write+0x10/0x10 [ 148.391929][ T9057] do_syscall_64+0xcd/0x4c0 [ 148.391945][ T9057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.391956][ T9057] RIP: 0033:0x7f1861d8d3df [ 148.391964][ T9057] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 148.391975][ T9057] RSP: 002b:00007f1862bd7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 148.391985][ T9057] RAX: ffffffffffffffda RBX: 00007f1861fb6080 RCX: 00007f1861d8d3df [ 148.391992][ T9057] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 148.391998][ T9057] RBP: 00007f1861e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 148.392004][ T9057] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 148.392010][ T9057] R13: 0000000000000000 R14: 00007f1861fb6080 R15: 00007fff02bf8518 [ 148.392020][ T9057] [ 148.392026][ T9057] BUG: Bad page state in process syz.0.768 pfn:4f7c6 [ 148.505162][ T9057] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4f7c6 [ 148.507824][ T9057] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 148.509974][ T9057] raw: 00fff00000000000 dead000000000040 ffff888022cb9000 0000000000000000 [ 148.512635][ T9057] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 148.515336][ T9057] page dumped because: page_pool leak [ 148.517067][ T9057] page_owner tracks the page as allocated [ 148.518859][ T9057] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9057, tgid 9055 (syz.0.768), ts 147701279216, free_ts 143080265005 [ 148.524019][ T9057] post_alloc_hook+0x1c0/0x230 [ 148.525540][ T9057] get_page_from_freelist+0x1321/0x3890 [ 148.527238][ T9057] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 148.529063][ T9057] alloc_pages_bulk_noprof+0x71c/0x1410 [ 148.530851][ T9057] __page_pool_alloc_pages_slow+0x193/0xc30 [ 148.532733][ T9057] page_pool_alloc_netmems+0xc4/0x190 [ 148.534473][ T9057] skb_pp_cow_data+0x7c0/0xff0 [ 148.535986][ T9057] skb_cow_data_for_xdp+0x88/0xb0 [ 148.537590][ T9057] do_xdp_generic+0x530/0x1320 [ 148.539114][ T9057] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 148.541181][ T9057] __netif_receive_skb_one_core+0xb0/0x1e0 [ 148.542970][ T9057] __netif_receive_skb+0x1d/0x160 [ 148.544549][ T9057] netif_receive_skb+0x137/0x7b0 [ 148.546390][ T9057] tun_rx_batched.isra.0+0x3ee/0x740 [ 148.548112][ T9057] tun_get_user+0x28a2/0x3b80 [ 148.549580][ T9057] tun_chr_write_iter+0xdc/0x210 [ 148.551136][ T9057] page last free pid 838 tgid 838 stack trace: [ 148.553038][ T9057] __free_frozen_pages+0x7fe/0x1180 [ 148.554673][ T9057] kasan_depopulate_vmalloc_pte+0x5f/0x80 [ 148.556591][ T9057] __apply_to_page_range+0xa8f/0x1350 [ 148.558322][ T9057] kasan_release_vmalloc+0xd1/0xe0 [ 148.559992][ T9057] purge_vmap_node+0x1c4/0xa30 [ 148.561545][ T9057] __purge_vmap_area_lazy+0xa06/0xc60 [ 148.563245][ T9057] drain_vmap_area_work+0x27/0x40 [ 148.564931][ T9057] process_one_work+0x9cc/0x1b70 [ 148.566411][ T9057] worker_thread+0x6c8/0xf10 [ 148.567871][ T9057] kthread+0x3c2/0x780 [ 148.569191][ T9057] ret_from_fork+0x5d4/0x6f0 [ 148.570623][ T9057] ret_from_fork_asm+0x1a/0x30 [ 148.572113][ T9057] Modules linked in: [ 148.573350][ T9057] CPU: 2 UID: 0 PID: 9057 Comm: syz.0.768 Tainted: G B 6.16.0-rc2-syzkaller-00071-g74b4cc9b8780 #0 PREEMPT(full) [ 148.573368][ T9057] Tainted: [B]=BAD_PAGE [ 148.573371][ T9057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 148.573378][ T9057] Call Trace: [ 148.573383][ T9057] [ 148.573387][ T9057] dump_stack_lvl+0x16c/0x1f0 [ 148.573405][ T9057] bad_page+0xcf/0x220 [ 148.573421][ T9057] ? __pfx_bad_page+0x10/0x10 [ 148.573436][ T9057] ? page_bad_reason+0x9d/0x1f0 [ 148.573451][ T9057] __free_frozen_pages+0x824/0x1180 [ 148.573463][ T9057] ? mark_held_locks+0x49/0x80 [ 148.573480][ T9057] page_frag_free+0x27f/0x2e0 [ 148.573495][ T9057] __xdp_return+0x38e/0xa90 [ 148.573511][ T9057] ? kmem_cache_free+0x2d1/0x4d0 [ 148.573525][ T9057] bpf_xdp_adjust_tail+0xa11/0xfd0 [ 148.573539][ T9057] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 148.573548][ T9057] bpf_prog_run_generic_xdp+0x626/0x1530 [ 148.573565][ T9057] do_xdp_generic+0x8e6/0x1320 [ 148.573579][ T9057] ? __pfx_do_xdp_generic+0x10/0x10 [ 148.573598][ T9057] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 148.573614][ T9057] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 148.573626][ T9057] ? __skb_flow_dissect+0x11b2/0x7d90 [ 148.573649][ T9057] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 148.573668][ T9057] ? __pfx___skb_flow_dissect+0x10/0x10 [ 148.573680][ T9057] ? do_user_addr_fault+0x829/0x1370 [ 148.573697][ T9057] ? do_user_addr_fault+0x843/0x1370 [ 148.573712][ T9057] ? __lock_acquire+0x622/0x1c90 [ 148.573729][ T9057] __netif_receive_skb_one_core+0xb0/0x1e0 [ 148.573744][ T9057] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 148.573758][ T9057] ? lock_acquire+0x179/0x350 [ 148.573776][ T9057] __netif_receive_skb+0x1d/0x160 [ 148.573790][ T9057] netif_receive_skb+0x137/0x7b0 [ 148.573804][ T9057] ? __pfx_netif_receive_skb+0x10/0x10 [ 148.573817][ T9057] ? __pfx__copy_from_iter+0x10/0x10 [ 148.573835][ T9057] tun_rx_batched.isra.0+0x3ee/0x740 [ 148.573850][ T9057] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 148.573867][ T9057] ? tun_get_user+0x1c0d/0x3b80 [ 148.573881][ T9057] ? rcu_is_watching+0x12/0xc0 [ 148.573895][ T9057] tun_get_user+0x28a2/0x3b80 [ 148.573913][ T9057] ? __pfx_tun_get_user+0x10/0x10 [ 148.573928][ T9057] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 148.573945][ T9057] ? find_held_lock+0x2b/0x80 [ 148.573957][ T9057] ? tun_get+0x191/0x370 [ 148.573972][ T9057] tun_chr_write_iter+0xdc/0x210 [ 148.573988][ T9057] vfs_write+0x6c4/0x1150 [ 148.574001][ T9057] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 148.574018][ T9057] ? __pfx_vfs_write+0x10/0x10 [ 148.574030][ T9057] ? find_held_lock+0x2b/0x80 [ 148.574046][ T9057] ksys_write+0x12a/0x250 [ 148.574058][ T9057] ? __pfx_ksys_write+0x10/0x10 [ 148.574073][ T9057] do_syscall_64+0xcd/0x4c0 [ 148.574090][ T9057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.574101][ T9057] RIP: 0033:0x7f1861d8d3df [ 148.574110][ T9057] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 148.574121][ T9057] RSP: 002b:00007f1862bd7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 148.574131][ T9057] RAX: ffffffffffffffda RBX: 00007f1861fb6080 RCX: 00007f1861d8d3df [ 148.574138][ T9057] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 148.574144][ T9057] RBP: 00007f1861e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 148.574150][ T9057] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 148.574156][ T9057] R13: 0000000000000000 R14: 00007f1861fb6080 R15: 00007fff02bf8518 [ 148.574166][ T9057] [ 148.684514][ T9057] BUG: Bad page state in process syz.0.768 pfn:4f7c7 [ 148.686632][ T9057] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4f7c7 [ 148.689427][ T9057] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 148.691672][ T9057] raw: 00fff00000000000 dead000000000040 ffff888022cb9000 0000000000000000 [ 148.694398][ T9057] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 148.697102][ T9057] page dumped because: page_pool leak [ 148.698850][ T9057] page_owner tracks the page as allocated [ 148.700638][ T9057] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9057, tgid 9055 (syz.0.768), ts 147701259179, free_ts 143080276820 [ 148.705821][ T9057] post_alloc_hook+0x1c0/0x230 [ 148.707345][ T9057] get_page_from_freelist+0x1321/0x3890 [ 148.709095][ T9057] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 148.710954][ T9057] alloc_pages_bulk_noprof+0x71c/0x1410 [ 148.712705][ T9057] __page_pool_alloc_pages_slow+0x193/0xc30 [ 148.714603][ T9057] page_pool_alloc_netmems+0xc4/0x190 [ 148.716291][ T9057] skb_pp_cow_data+0x7c0/0xff0 [ 148.717750][ T9057] skb_cow_data_for_xdp+0x88/0xb0 [ 148.719324][ T9057] do_xdp_generic+0x530/0x1320 [ 148.720832][ T9057] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 148.722896][ T9057] __netif_receive_skb_one_core+0xb0/0x1e0 [ 148.724771][ T9057] __netif_receive_skb+0x1d/0x160 [ 148.726380][ T9057] netif_receive_skb+0x137/0x7b0 [ 148.727982][ T9057] tun_rx_batched.isra.0+0x3ee/0x740 [ 148.729674][ T9057] tun_get_user+0x28a2/0x3b80 [ 148.731169][ T9057] tun_chr_write_iter+0xdc/0x210 [ 148.732743][ T9057] page last free pid 838 tgid 838 stack trace: [ 148.734745][ T9057] __free_frozen_pages+0x7fe/0x1180 [ 148.736405][ T9057] kasan_depopulate_vmalloc_pte+0x5f/0x80 [ 148.738252][ T9057] __apply_to_page_range+0xa8f/0x1350 [ 148.739957][ T9057] kasan_release_vmalloc+0xd1/0xe0 [ 148.741585][ T9057] purge_vmap_node+0x1c4/0xa30 [ 148.743109][ T9057] __purge_vmap_area_lazy+0xa06/0xc60 [ 148.744845][ T9057] drain_vmap_area_work+0x27/0x40 [ 148.746437][ T9057] process_one_work+0x9cc/0x1b70 [ 148.748022][ T9057] worker_thread+0x6c8/0xf10 [ 148.749498][ T9057] kthread+0x3c2/0x780 [ 148.750796][ T9057] ret_from_fork+0x5d4/0x6f0 [ 148.752268][ T9057] ret_from_fork_asm+0x1a/0x30 [ 148.753849][ T9057] Modules linked in: [ 148.755104][ T9057] CPU: 2 UID: 0 PID: 9057 Comm: syz.0.768 Tainted: G B 6.16.0-rc2-syzkaller-00071-g74b4cc9b8780 #0 PREEMPT(full) [ 148.755121][ T9057] Tainted: [B]=BAD_PAGE [ 148.755124][ T9057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 148.755131][ T9057] Call Trace: [ 148.755135][ T9057] [ 148.755139][ T9057] dump_stack_lvl+0x16c/0x1f0 [ 148.755157][ T9057] bad_page+0xcf/0x220 [ 148.755172][ T9057] ? __pfx_bad_page+0x10/0x10 [ 148.755187][ T9057] ? page_bad_reason+0x9d/0x1f0 [ 148.755202][ T9057] __free_frozen_pages+0x824/0x1180 [ 148.755214][ T9057] ? mark_held_locks+0x49/0x80 [ 148.755231][ T9057] page_frag_free+0x27f/0x2e0 [ 148.755245][ T9057] __xdp_return+0x38e/0xa90 [ 148.755256][ T9057] ? kmem_cache_free+0x2d1/0x4d0 [ 148.755269][ T9057] bpf_xdp_adjust_tail+0xa11/0xfd0 [ 148.755284][ T9057] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 148.755292][ T9057] bpf_prog_run_generic_xdp+0x626/0x1530 [ 148.755310][ T9057] do_xdp_generic+0x8e6/0x1320 [ 148.755324][ T9057] ? __pfx_do_xdp_generic+0x10/0x10 [ 148.755343][ T9057] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 148.755359][ T9057] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 148.755371][ T9057] ? __skb_flow_dissect+0x11b2/0x7d90 [ 148.755384][ T9057] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 148.755401][ T9057] ? __pfx___skb_flow_dissect+0x10/0x10 [ 148.755413][ T9057] ? do_user_addr_fault+0x829/0x1370 [ 148.755429][ T9057] ? do_user_addr_fault+0x843/0x1370 [ 148.755444][ T9057] ? __lock_acquire+0x622/0x1c90 [ 148.755461][ T9057] __netif_receive_skb_one_core+0xb0/0x1e0 [ 148.755475][ T9057] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 148.755490][ T9057] ? lock_acquire+0x179/0x350 [ 148.755508][ T9057] __netif_receive_skb+0x1d/0x160 [ 148.755521][ T9057] netif_receive_skb+0x137/0x7b0 [ 148.755535][ T9057] ? __pfx_netif_receive_skb+0x10/0x10 [ 148.755548][ T9057] ? __pfx__copy_from_iter+0x10/0x10 [ 148.755569][ T9057] tun_rx_batched.isra.0+0x3ee/0x740 [ 148.755584][ T9057] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 148.755600][ T9057] ? tun_get_user+0x1c0d/0x3b80 [ 148.755614][ T9057] ? rcu_is_watching+0x12/0xc0 [ 148.755628][ T9057] tun_get_user+0x28a2/0x3b80 [ 148.755646][ T9057] ? __pfx_tun_get_user+0x10/0x10 [ 148.755661][ T9057] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 148.755678][ T9057] ? find_held_lock+0x2b/0x80 [ 148.755690][ T9057] ? tun_get+0x191/0x370 [ 148.755705][ T9057] tun_chr_write_iter+0xdc/0x210 [ 148.755720][ T9057] vfs_write+0x6c4/0x1150 [ 148.755734][ T9057] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 148.755750][ T9057] ? __pfx_vfs_write+0x10/0x10 [ 148.755762][ T9057] ? find_held_lock+0x2b/0x80 [ 148.755778][ T9057] ksys_write+0x12a/0x250 [ 148.755790][ T9057] ? __pfx_ksys_write+0x10/0x10 [ 148.755805][ T9057] do_syscall_64+0xcd/0x4c0 [ 148.755821][ T9057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.755832][ T9057] RIP: 0033:0x7f1861d8d3df [ 148.755840][ T9057] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 148.755851][ T9057] RSP: 002b:00007f1862bd7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 148.755861][ T9057] RAX: ffffffffffffffda RBX: 00007f1861fb6080 RCX: 00007f1861d8d3df [ 148.755867][ T9057] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 148.755874][ T9057] RBP: 00007f1861e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 148.755880][ T9057] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 148.755886][ T9057] R13: 0000000000000000 R14: 00007f1861fb6080 R15: 00007fff02bf8518 [ 148.755895][ T9057] [ 148.755902][ T9057] BUG: Bad page state in process syz.0.768 pfn:566f0 [ 148.868239][ T9057] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880566f0000 pfn:0x566f0 [ 148.871304][ T9057] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 148.873487][ T9057] raw: 00fff00000000000 dead000000000040 ffff888022cb9000 0000000000000000 [ 148.876243][ T9057] raw: ffff8880566f0000 0000000000000001 00000000ffffffff 0000000000000000 [ 148.878852][ T9057] page dumped because: page_pool leak [ 148.880502][ T9057] page_owner tracks the page as allocated [ 148.882252][ T9057] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9057, tgid 9055 (syz.0.768), ts 147701247110, free_ts 143080288707 [ 148.887485][ T9057] post_alloc_hook+0x1c0/0x230 [ 148.889021][ T9057] get_page_from_freelist+0x1321/0x3890 [ 148.890765][ T9057] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 148.892642][ T9057] alloc_pages_bulk_noprof+0x71c/0x1410 [ 148.894431][ T9057] __page_pool_alloc_pages_slow+0x193/0xc30 [ 148.896335][ T9057] page_pool_alloc_netmems+0xc4/0x190 [ 148.898036][ T9057] skb_pp_cow_data+0x7c0/0xff0 [ 148.899549][ T9057] skb_cow_data_for_xdp+0x88/0xb0 [ 148.901145][ T9057] do_xdp_generic+0x530/0x1320 [ 148.902659][ T9057] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 148.904827][ T9057] __netif_receive_skb_one_core+0xb0/0x1e0 [ 148.906676][ T9057] __netif_receive_skb+0x1d/0x160 [ 148.908250][ T9057] netif_receive_skb+0x137/0x7b0 [ 148.909814][ T9057] tun_rx_batched.isra.0+0x3ee/0x740 [ 148.911507][ T9057] tun_get_user+0x28a2/0x3b80 [ 148.912974][ T9057] tun_chr_write_iter+0xdc/0x210 [ 148.914564][ T9057] page last free pid 838 tgid 838 stack trace: [ 148.916453][ T9057] __free_frozen_pages+0x7fe/0x1180 [ 148.918105][ T9057] kasan_depopulate_vmalloc_pte+0x5f/0x80 [ 148.919886][ T9057] __apply_to_page_range+0xa8f/0x1350 [ 148.921541][ T9057] kasan_release_vmalloc+0xd1/0xe0 [ 148.923117][ T9057] purge_vmap_node+0x1c4/0xa30 [ 148.924669][ T9057] __purge_vmap_area_lazy+0xa06/0xc60 [ 148.926332][ T9057] drain_vmap_area_work+0x27/0x40 [ 148.927931][ T9057] process_one_work+0x9cc/0x1b70 [ 148.929483][ T9057] worker_thread+0x6c8/0xf10 [ 148.930935][ T9057] kthread+0x3c2/0x780 [ 148.932231][ T9057] ret_from_fork+0x5d4/0x6f0 [ 148.933740][ T9057] ret_from_fork_asm+0x1a/0x30 [ 148.935260][ T9057] Modules linked in: [ 148.936516][ T9057] CPU: 2 UID: 0 PID: 9057 Comm: syz.0.768 Tainted: G B 6.16.0-rc2-syzkaller-00071-g74b4cc9b8780 #0 PREEMPT(full) [ 148.936532][ T9057] Tainted: [B]=BAD_PAGE [ 148.936536][ T9057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 148.936542][ T9057] Call Trace: [ 148.936546][ T9057] [ 148.936550][ T9057] dump_stack_lvl+0x16c/0x1f0 [ 148.936572][ T9057] bad_page+0xcf/0x220 [ 148.936586][ T9057] ? __pfx_bad_page+0x10/0x10 [ 148.936602][ T9057] ? page_bad_reason+0x9d/0x1f0 [ 148.936617][ T9057] __free_frozen_pages+0x824/0x1180 [ 148.936629][ T9057] ? mark_held_locks+0x49/0x80 [ 148.936645][ T9057] page_frag_free+0x27f/0x2e0 [ 148.936660][ T9057] __xdp_return+0x38e/0xa90 [ 148.936671][ T9057] ? kmem_cache_free+0x2d1/0x4d0 [ 148.936684][ T9057] bpf_xdp_adjust_tail+0xa11/0xfd0 [ 148.936699][ T9057] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 148.936708][ T9057] bpf_prog_run_generic_xdp+0x626/0x1530 [ 148.936725][ T9057] do_xdp_generic+0x8e6/0x1320 [ 148.936739][ T9057] ? __pfx_do_xdp_generic+0x10/0x10 [ 148.936758][ T9057] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 148.936774][ T9057] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 148.936787][ T9057] ? __skb_flow_dissect+0x11b2/0x7d90 [ 148.936799][ T9057] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 148.936816][ T9057] ? __pfx___skb_flow_dissect+0x10/0x10 [ 148.936827][ T9057] ? do_user_addr_fault+0x829/0x1370 [ 148.936844][ T9057] ? do_user_addr_fault+0x843/0x1370 [ 148.936859][ T9057] ? __lock_acquire+0x622/0x1c90 [ 148.936876][ T9057] __netif_receive_skb_one_core+0xb0/0x1e0 [ 148.936890][ T9057] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 148.936905][ T9057] ? lock_acquire+0x179/0x350 [ 148.936922][ T9057] __netif_receive_skb+0x1d/0x160 [ 148.936936][ T9057] netif_receive_skb+0x137/0x7b0 [ 148.936949][ T9057] ? __pfx_netif_receive_skb+0x10/0x10 [ 148.936963][ T9057] ? __pfx__copy_from_iter+0x10/0x10 [ 148.936980][ T9057] tun_rx_batched.isra.0+0x3ee/0x740 [ 148.936995][ T9057] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 148.937011][ T9057] ? tun_get_user+0x1c0d/0x3b80 [ 148.937026][ T9057] ? rcu_is_watching+0x12/0xc0 [ 148.937039][ T9057] tun_get_user+0x28a2/0x3b80 [ 148.937057][ T9057] ? __pfx_tun_get_user+0x10/0x10 [ 148.937072][ T9057] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 148.937089][ T9057] ? find_held_lock+0x2b/0x80 [ 148.937101][ T9057] ? tun_get+0x191/0x370 [ 148.937116][ T9057] tun_chr_write_iter+0xdc/0x210 [ 148.937131][ T9057] vfs_write+0x6c4/0x1150 [ 148.937145][ T9057] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 148.937161][ T9057] ? __pfx_vfs_write+0x10/0x10 [ 148.937173][ T9057] ? find_held_lock+0x2b/0x80 [ 148.937188][ T9057] ksys_write+0x12a/0x250 [ 148.937201][ T9057] ? __pfx_ksys_write+0x10/0x10 [ 148.937215][ T9057] do_syscall_64+0xcd/0x4c0 [ 148.937232][ T9057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.937243][ T9057] RIP: 0033:0x7f1861d8d3df [ 148.937251][ T9057] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 148.937262][ T9057] RSP: 002b:00007f1862bd7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 148.937271][ T9057] RAX: ffffffffffffffda RBX: 00007f1861fb6080 RCX: 00007f1861d8d3df [ 148.937278][ T9057] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 148.937284][ T9057] RBP: 00007f1861e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 148.937290][ T9057] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 148.937296][ T9057] R13: 0000000000000000 R14: 00007f1861fb6080 R15: 00007fff02bf8518 [ 148.937306][ T9057] [ 148.937312][ T9057] BUG: Bad page state in process syz.0.768 pfn:566f1 [ 149.049867][ T9057] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x566f1 [ 149.052968][ T9057] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 149.055212][ T9057] raw: 00fff00000000000 dead000000000040 ffff888022cb9000 0000000000000000 [ 149.057894][ T9057] raw: ffffffffffffffff 0000000000000001 00000000ffffffff 0000000000000000 [ 149.060562][ T9057] page dumped because: page_pool leak [ 149.062249][ T9057] page_owner tracks the page as allocated [ 149.064081][ T9057] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9057, tgid 9055 (syz.0.768), ts 147701233828, free_ts 143080300311 [ 149.069296][ T9057] post_alloc_hook+0x1c0/0x230 [ 149.070819][ T9057] get_page_from_freelist+0x1321/0x3890 [ 149.072565][ T9057] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 149.074471][ T9057] alloc_pages_bulk_noprof+0x71c/0x1410 [ 149.076203][ T9057] __page_pool_alloc_pages_slow+0x193/0xc30 [ 149.078085][ T9057] page_pool_alloc_netmems+0xc4/0x190 [ 149.079766][ T9057] skb_pp_cow_data+0x7c0/0xff0 [ 149.081274][ T9057] skb_cow_data_for_xdp+0x88/0xb0 [ 149.082854][ T9057] do_xdp_generic+0x530/0x1320 [ 149.084427][ T9057] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 149.086534][ T9057] __netif_receive_skb_one_core+0xb0/0x1e0 [ 149.088411][ T9057] __netif_receive_skb+0x1d/0x160 [ 149.090004][ T9057] netif_receive_skb+0x137/0x7b0 [ 149.091558][ T9057] tun_rx_batched.isra.0+0x3ee/0x740 [ 149.093222][ T9057] tun_get_user+0x28a2/0x3b80 [ 149.094764][ T9057] tun_chr_write_iter+0xdc/0x210 [ 149.096332][ T9057] page last free pid 838 tgid 838 stack trace: [ 149.098272][ T9057] __free_frozen_pages+0x7fe/0x1180 [ 149.099916][ T9057] kasan_depopulate_vmalloc_pte+0x5f/0x80 [ 149.101712][ T9057] __apply_to_page_range+0xa8f/0x1350 [ 149.103396][ T9057] kasan_release_vmalloc+0xd1/0xe0 [ 149.105066][ T9057] purge_vmap_node+0x1c4/0xa30 [ 149.106582][ T9057] __purge_vmap_area_lazy+0xa06/0xc60 [ 149.108294][ T9057] drain_vmap_area_work+0x27/0x40 [ 149.109907][ T9057] process_one_work+0x9cc/0x1b70 [ 149.111467][ T9057] worker_thread+0x6c8/0xf10 [ 149.112940][ T9057] kthread+0x3c2/0x780 [ 149.114283][ T9057] ret_from_fork+0x5d4/0x6f0 [ 149.115753][ T9057] ret_from_fork_asm+0x1a/0x30 [ 149.117320][ T9057] Modules linked in: [ 149.118588][ T9057] CPU: 2 UID: 0 PID: 9057 Comm: syz.0.768 Tainted: G B 6.16.0-rc2-syzkaller-00071-g74b4cc9b8780 #0 PREEMPT(full) [ 149.118605][ T9057] Tainted: [B]=BAD_PAGE [ 149.118609][ T9057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.118616][ T9057] Call Trace: [ 149.118620][ T9057] [ 149.118624][ T9057] dump_stack_lvl+0x16c/0x1f0 [ 149.118641][ T9057] bad_page+0xcf/0x220 [ 149.118657][ T9057] ? __pfx_bad_page+0x10/0x10 [ 149.118672][ T9057] ? page_bad_reason+0x9d/0x1f0 [ 149.118687][ T9057] __free_frozen_pages+0x824/0x1180 [ 149.118699][ T9057] ? mark_held_locks+0x49/0x80 [ 149.118716][ T9057] page_frag_free+0x27f/0x2e0 [ 149.118730][ T9057] __xdp_return+0x38e/0xa90 [ 149.118742][ T9057] ? kmem_cache_free+0x2d1/0x4d0 [ 149.118757][ T9057] bpf_xdp_adjust_tail+0xa11/0xfd0 [ 149.118772][ T9057] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 149.118781][ T9057] bpf_prog_run_generic_xdp+0x626/0x1530 [ 149.118798][ T9057] do_xdp_generic+0x8e6/0x1320 [ 149.118812][ T9057] ? __pfx_do_xdp_generic+0x10/0x10 [ 149.118830][ T9057] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 149.118847][ T9057] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 149.118859][ T9057] ? __skb_flow_dissect+0x11b2/0x7d90 [ 149.118872][ T9057] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 149.118889][ T9057] ? __pfx___skb_flow_dissect+0x10/0x10 [ 149.118900][ T9057] ? do_user_addr_fault+0x829/0x1370 [ 149.118916][ T9057] ? do_user_addr_fault+0x843/0x1370 [ 149.118932][ T9057] ? __lock_acquire+0x622/0x1c90 [ 149.118949][ T9057] __netif_receive_skb_one_core+0xb0/0x1e0 [ 149.118963][ T9057] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 149.118978][ T9057] ? lock_acquire+0x179/0x350 [ 149.118995][ T9057] __netif_receive_skb+0x1d/0x160 [ 149.119009][ T9057] netif_receive_skb+0x137/0x7b0 [ 149.119022][ T9057] ? __pfx_netif_receive_skb+0x10/0x10 [ 149.119036][ T9057] ? __pfx__copy_from_iter+0x10/0x10 [ 149.119053][ T9057] tun_rx_batched.isra.0+0x3ee/0x740 [ 149.119069][ T9057] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 149.119085][ T9057] ? tun_get_user+0x1c0d/0x3b80 [ 149.119099][ T9057] ? rcu_is_watching+0x12/0xc0 [ 149.119114][ T9057] tun_get_user+0x28a2/0x3b80 [ 149.119131][ T9057] ? __pfx_tun_get_user+0x10/0x10 [ 149.119146][ T9057] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 149.119163][ T9057] ? find_held_lock+0x2b/0x80 [ 149.119175][ T9057] ? tun_get+0x191/0x370 [ 149.119190][ T9057] tun_chr_write_iter+0xdc/0x210 [ 149.119206][ T9057] vfs_write+0x6c4/0x1150 [ 149.119220][ T9057] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 149.119236][ T9057] ? __pfx_vfs_write+0x10/0x10 [ 149.119248][ T9057] ? find_held_lock+0x2b/0x80 [ 149.119263][ T9057] ksys_write+0x12a/0x250 [ 149.119276][ T9057] ? __pfx_ksys_write+0x10/0x10 [ 149.119290][ T9057] do_syscall_64+0xcd/0x4c0 [ 149.119307][ T9057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.119318][ T9057] RIP: 0033:0x7f1861d8d3df [ 149.119327][ T9057] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 149.119338][ T9057] RSP: 002b:00007f1862bd7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 149.119348][ T9057] RAX: ffffffffffffffda RBX: 00007f1861fb6080 RCX: 00007f1861d8d3df [ 149.119354][ T9057] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 149.119361][ T9057] RBP: 00007f1861e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 149.119367][ T9057] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 149.119373][ T9057] R13: 0000000000000000 R14: 00007f1861fb6080 R15: 00007fff02bf8518 [ 149.119382][ T9057] [ 149.119389][ T9057] BUG: Bad page state in process syz.0.768 pfn:566f2 [ 149.142792][ T40] kauditd_printk_skb: 875 callbacks suppressed [ 149.142802][ T40] audit: type=1400 audit(405.010:18281): avc: denied { read } for pid=5329 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 149.144010][ T9057] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x566f2 [ 149.146123][ T40] audit: type=1400 audit(405.010:18282): avc: denied { search } for pid=5329 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.147478][ T9057] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 149.149386][ T40] audit: type=1400 audit(405.010:18283): avc: denied { append } for pid=5329 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 149.150892][ T9057] raw: 00fff00000000000 dead000000000040 ffff888022cb9000 0000000000000000 [ 149.153044][ T40] audit: type=1400 audit(405.010:18284): avc: denied { append open } for pid=5329 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 149.155260][ T9057] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 149.157076][ T40] audit: type=1400 audit(405.010:18285): avc: denied { getattr } for pid=5329 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 149.158779][ T9057] page dumped because: page_pool leak [ 149.281132][ T9057] page_owner tracks the page as allocated [ 149.282903][ T9057] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9057, tgid 9055 (syz.0.768), ts 147701221392, free_ts 143080311905 [ 149.288182][ T9057] post_alloc_hook+0x1c0/0x230 [ 149.289752][ T9057] get_page_from_freelist+0x1321/0x3890 [ 149.291484][ T9057] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 149.293345][ T9057] alloc_pages_bulk_noprof+0x71c/0x1410 [ 149.295139][ T9057] __page_pool_alloc_pages_slow+0x193/0xc30 [ 149.297019][ T9057] page_pool_alloc_netmems+0xc4/0x190 [ 149.298744][ T9057] skb_pp_cow_data+0x7c0/0xff0 [ 149.300246][ T9057] skb_cow_data_for_xdp+0x88/0xb0 [ 149.301854][ T9057] do_xdp_generic+0x530/0x1320 [ 149.303362][ T9057] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 149.305527][ T9057] __netif_receive_skb_one_core+0xb0/0x1e0 [ 149.307373][ T9057] __netif_receive_skb+0x1d/0x160 [ 149.308972][ T9057] netif_receive_skb+0x137/0x7b0 [ 149.310535][ T9057] tun_rx_batched.isra.0+0x3ee/0x740 [ 149.312194][ T9057] tun_get_user+0x28a2/0x3b80 [ 149.313725][ T9057] tun_chr_write_iter+0xdc/0x210 [ 149.315284][ T9057] page last free pid 838 tgid 838 stack trace: [ 149.317213][ T9057] __free_frozen_pages+0x7fe/0x1180 [ 149.318859][ T9057] kasan_depopulate_vmalloc_pte+0x5f/0x80 [ 149.320644][ T9057] __apply_to_page_range+0xa8f/0x1350 [ 149.322325][ T9057] kasan_release_vmalloc+0xd1/0xe0 [ 149.323985][ T9057] purge_vmap_node+0x1c4/0xa30 [ 149.325538][ T9057] __purge_vmap_area_lazy+0xa06/0xc60 [ 149.327237][ T9057] drain_vmap_area_work+0x27/0x40 [ 149.328856][ T9057] process_one_work+0x9cc/0x1b70 [ 149.330416][ T9057] worker_thread+0x6c8/0xf10 [ 149.331879][ T9057] kthread+0x3c2/0x780 [ 149.333182][ T9057] ret_from_fork+0x5d4/0x6f0 [ 149.334685][ T9057] ret_from_fork_asm+0x1a/0x30 [ 149.336198][ T9057] Modules linked in: [ 149.337475][ T9057] CPU: 2 UID: 0 PID: 9057 Comm: syz.0.768 Tainted: G B 6.16.0-rc2-syzkaller-00071-g74b4cc9b8780 #0 PREEMPT(full) [ 149.337492][ T9057] Tainted: [B]=BAD_PAGE [ 149.337495][ T9057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.337502][ T9057] Call Trace: [ 149.337507][ T9057] [ 149.337512][ T9057] dump_stack_lvl+0x16c/0x1f0 [ 149.337533][ T9057] bad_page+0xcf/0x220 [ 149.337548][ T9057] ? __pfx_bad_page+0x10/0x10 [ 149.337563][ T9057] ? page_bad_reason+0x9d/0x1f0 [ 149.337579][ T9057] __free_frozen_pages+0x824/0x1180 [ 149.337591][ T9057] ? mark_held_locks+0x49/0x80 [ 149.337607][ T9057] page_frag_free+0x27f/0x2e0 [ 149.337622][ T9057] __xdp_return+0x38e/0xa90 [ 149.337633][ T9057] ? kmem_cache_free+0x2d1/0x4d0 [ 149.337647][ T9057] bpf_xdp_adjust_tail+0xa11/0xfd0 [ 149.337662][ T9057] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 149.337670][ T9057] bpf_prog_run_generic_xdp+0x626/0x1530 [ 149.337688][ T9057] do_xdp_generic+0x8e6/0x1320 [ 149.337702][ T9057] ? __pfx_do_xdp_generic+0x10/0x10 [ 149.337720][ T9057] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 149.337737][ T9057] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 149.337750][ T9057] ? __skb_flow_dissect+0x11b2/0x7d90 [ 149.337762][ T9057] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 149.337779][ T9057] ? __pfx___skb_flow_dissect+0x10/0x10 [ 149.337790][ T9057] ? do_user_addr_fault+0x829/0x1370 [ 149.337807][ T9057] ? do_user_addr_fault+0x843/0x1370 [ 149.337822][ T9057] ? __lock_acquire+0x622/0x1c90 [ 149.337839][ T9057] __netif_receive_skb_one_core+0xb0/0x1e0 [ 149.337854][ T9057] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 149.337868][ T9057] ? lock_acquire+0x179/0x350 [ 149.337886][ T9057] __netif_receive_skb+0x1d/0x160 [ 149.337899][ T9057] netif_receive_skb+0x137/0x7b0 [ 149.337912][ T9057] ? __pfx_netif_receive_skb+0x10/0x10 [ 149.337926][ T9057] ? __pfx__copy_from_iter+0x10/0x10 [ 149.337943][ T9057] tun_rx_batched.isra.0+0x3ee/0x740 [ 149.337958][ T9057] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 149.337974][ T9057] ? tun_get_user+0x1c0d/0x3b80 [ 149.337989][ T9057] ? rcu_is_watching+0x12/0xc0 [ 149.338002][ T9057] tun_get_user+0x28a2/0x3b80 [ 149.338020][ T9057] ? __pfx_tun_get_user+0x10/0x10 [ 149.338034][ T9057] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 149.338051][ T9057] ? find_held_lock+0x2b/0x80 [ 149.338063][ T9057] ? tun_get+0x191/0x370 [ 149.338078][ T9057] tun_chr_write_iter+0xdc/0x210 [ 149.338094][ T9057] vfs_write+0x6c4/0x1150 [ 149.338107][ T9057] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 149.338123][ T9057] ? __pfx_vfs_write+0x10/0x10 [ 149.338135][ T9057] ? find_held_lock+0x2b/0x80 [ 149.338150][ T9057] ksys_write+0x12a/0x250 [ 149.338163][ T9057] ? __pfx_ksys_write+0x10/0x10 [ 149.338177][ T9057] do_syscall_64+0xcd/0x4c0 [ 149.338194][ T9057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.338205][ T9057] RIP: 0033:0x7f1861d8d3df [ 149.338213][ T9057] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 149.338224][ T9057] RSP: 002b:00007f1862bd7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 149.338234][ T9057] RAX: ffffffffffffffda RBX: 00007f1861fb6080 RCX: 00007f1861d8d3df [ 149.338240][ T9057] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 149.338247][ T9057] RBP: 00007f1861e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 149.338253][ T9057] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 149.338259][ T9057] R13: 0000000000000000 R14: 00007f1861fb6080 R15: 00007fff02bf8518 [ 149.338268][ T9057] [ 149.338274][ T9057] BUG: Bad page state in process syz.0.768 pfn:566f3 [ 149.448031][ T9057] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x566f3 [ 149.450698][ T9057] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 149.452812][ T9057] raw: 00fff00000000000 dead000000000040 ffff888022cb9000 0000000000000000 [ 149.455421][ T9057] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 149.458003][ T9057] page dumped because: page_pool leak [ 149.459681][ T9057] page_owner tracks the page as allocated [ 149.461501][ T9057] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9057, tgid 9055 (syz.0.768), ts 147701209091, free_ts 143080323843 [ 149.466698][ T9057] post_alloc_hook+0x1c0/0x230 [ 149.468202][ T9057] get_page_from_freelist+0x1321/0x3890 [ 149.469858][ T9057] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 149.471624][ T9057] alloc_pages_bulk_noprof+0x71c/0x1410 [ 149.473268][ T9057] __page_pool_alloc_pages_slow+0x193/0xc30 [ 149.475071][ T9057] page_pool_alloc_netmems+0xc4/0x190 [ 149.476733][ T9057] skb_pp_cow_data+0x7c0/0xff0 [ 149.478237][ T9057] skb_cow_data_for_xdp+0x88/0xb0 [ 149.479779][ T9057] do_xdp_generic+0x530/0x1320 [ 149.481229][ T9057] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 149.483255][ T9057] __netif_receive_skb_one_core+0xb0/0x1e0 [ 149.485099][ T9057] __netif_receive_skb+0x1d/0x160 [ 149.486632][ T9057] netif_receive_skb+0x137/0x7b0 [ 149.488137][ T9057] tun_rx_batched.isra.0+0x3ee/0x740 [ 149.489707][ T9057] tun_get_user+0x28a2/0x3b80 [ 149.491109][ T9057] tun_chr_write_iter+0xdc/0x210 [ 149.492704][ T9057] page last free pid 838 tgid 838 stack trace: [ 149.494534][ T9057] __free_frozen_pages+0x7fe/0x1180 [ 149.496092][ T9057] kasan_depopulate_vmalloc_pte+0x5f/0x80 [ 149.497876][ T9057] __apply_to_page_range+0xa8f/0x1350 [ 149.499488][ T9057] kasan_release_vmalloc+0xd1/0xe0 [ 149.501021][ T9057] purge_vmap_node+0x1c4/0xa30 [ 149.502467][ T9057] __purge_vmap_area_lazy+0xa06/0xc60 [ 149.504157][ T9057] drain_vmap_area_work+0x27/0x40 [ 149.505712][ T9057] process_one_work+0x9cc/0x1b70 [ 149.507261][ T9057] worker_thread+0x6c8/0xf10 [ 149.508695][ T9057] kthread+0x3c2/0x780 [ 149.509935][ T9057] ret_from_fork+0x5d4/0x6f0 [ 149.511371][ T9057] ret_from_fork_asm+0x1a/0x30 [ 149.512885][ T9057] Modules linked in: [ 149.514145][ T9057] CPU: 2 UID: 0 PID: 9057 Comm: syz.0.768 Tainted: G B 6.16.0-rc2-syzkaller-00071-g74b4cc9b8780 #0 PREEMPT(full) [ 149.514163][ T9057] Tainted: [B]=BAD_PAGE [ 149.514166][ T9057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.514173][ T9057] Call Trace: [ 149.514177][ T9057] [ 149.514181][ T9057] dump_stack_lvl+0x16c/0x1f0 [ 149.514199][ T9057] bad_page+0xcf/0x220 [ 149.514214][ T9057] ? __pfx_bad_page+0x10/0x10 [ 149.514230][ T9057] ? page_bad_reason+0x9d/0x1f0 [ 149.514245][ T9057] __free_frozen_pages+0x824/0x1180 [ 149.514257][ T9057] ? mark_held_locks+0x49/0x80 [ 149.514273][ T9057] page_frag_free+0x27f/0x2e0 [ 149.514288][ T9057] __xdp_return+0x38e/0xa90 [ 149.514300][ T9057] ? kmem_cache_free+0x2d1/0x4d0 [ 149.514314][ T9057] bpf_xdp_adjust_tail+0xa11/0xfd0 [ 149.514328][ T9057] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 149.514337][ T9057] bpf_prog_run_generic_xdp+0x626/0x1530 [ 149.514354][ T9057] do_xdp_generic+0x8e6/0x1320 [ 149.514368][ T9057] ? __pfx_do_xdp_generic+0x10/0x10 [ 149.514387][ T9057] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 149.514403][ T9057] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 149.514416][ T9057] ? __skb_flow_dissect+0x11b2/0x7d90 [ 149.514428][ T9057] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 149.514444][ T9057] ? __pfx___skb_flow_dissect+0x10/0x10 [ 149.514456][ T9057] ? do_user_addr_fault+0x829/0x1370 [ 149.514473][ T9057] ? do_user_addr_fault+0x843/0x1370 [ 149.514488][ T9057] ? __lock_acquire+0x622/0x1c90 [ 149.514505][ T9057] __netif_receive_skb_one_core+0xb0/0x1e0 [ 149.514523][ T9057] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 149.514538][ T9057] ? lock_acquire+0x179/0x350 [ 149.514555][ T9057] __netif_receive_skb+0x1d/0x160 [ 149.514569][ T9057] netif_receive_skb+0x137/0x7b0 [ 149.514582][ T9057] ? __pfx_netif_receive_skb+0x10/0x10 [ 149.514596][ T9057] ? __pfx__copy_from_iter+0x10/0x10 [ 149.514613][ T9057] tun_rx_batched.isra.0+0x3ee/0x740 [ 149.514630][ T9057] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 149.514645][ T9057] ? tun_get_user+0x1c0d/0x3b80 [ 149.514660][ T9057] ? rcu_is_watching+0x12/0xc0 [ 149.514674][ T9057] tun_get_user+0x28a2/0x3b80 [ 149.514692][ T9057] ? __pfx_tun_get_user+0x10/0x10 [ 149.514706][ T9057] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 149.514723][ T9057] ? find_held_lock+0x2b/0x80 [ 149.514735][ T9057] ? tun_get+0x191/0x370 [ 149.514750][ T9057] tun_chr_write_iter+0xdc/0x210 [ 149.514766][ T9057] vfs_write+0x6c4/0x1150 [ 149.514779][ T9057] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 149.514795][ T9057] ? __pfx_vfs_write+0x10/0x10 [ 149.514807][ T9057] ? find_held_lock+0x2b/0x80 [ 149.514823][ T9057] ksys_write+0x12a/0x250 [ 149.514835][ T9057] ? __pfx_ksys_write+0x10/0x10 [ 149.514850][ T9057] do_syscall_64+0xcd/0x4c0 [ 149.514867][ T9057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.514878][ T9057] RIP: 0033:0x7f1861d8d3df [ 149.514888][ T9057] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 149.514899][ T9057] RSP: 002b:00007f1862bd7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 149.514909][ T9057] RAX: ffffffffffffffda RBX: 00007f1861fb6080 RCX: 00007f1861d8d3df [ 149.514915][ T9057] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 149.514922][ T9057] RBP: 00007f1861e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 149.514928][ T9057] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 149.514934][ T9057] R13: 0000000000000000 R14: 00007f1861fb6080 R15: 00007fff02bf8518 [ 149.514943][ T9057] [ 149.514950][ T9057] BUG: Bad page state in process syz.0.768 pfn:566f4 [ 149.625942][ T9057] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x566f4 [ 149.628695][ T9057] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 149.630896][ T9057] raw: 00fff00000000000 dead000000000040 ffff888022cb9000 0000000000000000 [ 149.633553][ T9057] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 149.636258][ T9057] page dumped because: page_pool leak [ 149.637992][ T9057] page_owner tracks the page as allocated [ 149.639766][ T9057] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9057, tgid 9055 (syz.0.768), ts 147701197705, free_ts 143080335706 [ 149.645019][ T9057] post_alloc_hook+0x1c0/0x230 [ 149.646540][ T9057] get_page_from_freelist+0x1321/0x3890 [ 149.648293][ T9057] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 149.650173][ T9057] alloc_pages_bulk_noprof+0x71c/0x1410 [ 149.651911][ T9057] __page_pool_alloc_pages_slow+0x193/0xc30 [ 149.653828][ T9057] page_pool_alloc_netmems+0xc4/0x190 [ 149.655521][ T9057] skb_pp_cow_data+0x7c0/0xff0 [ 149.657078][ T9057] skb_cow_data_for_xdp+0x88/0xb0 [ 149.658682][ T9057] do_xdp_generic+0x530/0x1320 [ 149.660198][ T9057] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 149.662297][ T9057] __netif_receive_skb_one_core+0xb0/0x1e0 [ 149.664177][ T9057] __netif_receive_skb+0x1d/0x160 [ 149.665766][ T9057] netif_receive_skb+0x137/0x7b0 [ 149.667346][ T9057] tun_rx_batched.isra.0+0x3ee/0x740 [ 149.669015][ T9057] tun_get_user+0x28a2/0x3b80 [ 149.670501][ T9057] tun_chr_write_iter+0xdc/0x210 [ 149.672066][ T9057] page last free pid 838 tgid 838 stack trace: [ 149.674051][ T9057] __free_frozen_pages+0x7fe/0x1180 [ 149.675683][ T9057] kasan_depopulate_vmalloc_pte+0x5f/0x80 [ 149.677519][ T9057] __apply_to_page_range+0xa8f/0x1350 [ 149.679205][ T9057] kasan_release_vmalloc+0xd1/0xe0 [ 149.680821][ T9057] purge_vmap_node+0x1c4/0xa30 [ 149.682330][ T9057] __purge_vmap_area_lazy+0xa06/0xc60 [ 149.684099][ T9057] drain_vmap_area_work+0x27/0x40 [ 149.685700][ T9057] process_one_work+0x9cc/0x1b70 [ 149.687264][ T9057] worker_thread+0x6c8/0xf10 [ 149.688753][ T9057] kthread+0x3c2/0x780 [ 149.690046][ T9057] ret_from_fork+0x5d4/0x6f0 [ 149.691515][ T9057] ret_from_fork_asm+0x1a/0x30 [ 149.693030][ T9057] Modules linked in: [ 149.694332][ T9057] CPU: 2 UID: 0 PID: 9057 Comm: syz.0.768 Tainted: G B 6.16.0-rc2-syzkaller-00071-g74b4cc9b8780 #0 PREEMPT(full) [ 149.694349][ T9057] Tainted: [B]=BAD_PAGE [ 149.694353][ T9057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.694360][ T9057] Call Trace: [ 149.694364][ T9057] [ 149.694368][ T9057] dump_stack_lvl+0x16c/0x1f0 [ 149.694386][ T9057] bad_page+0xcf/0x220 [ 149.694401][ T9057] ? __pfx_bad_page+0x10/0x10 [ 149.694416][ T9057] ? page_bad_reason+0x9d/0x1f0 [ 149.694431][ T9057] __free_frozen_pages+0x824/0x1180 [ 149.694443][ T9057] ? mark_held_locks+0x49/0x80 [ 149.694460][ T9057] page_frag_free+0x27f/0x2e0 [ 149.694475][ T9057] __xdp_return+0x38e/0xa90 [ 149.694489][ T9057] ? kmem_cache_free+0x2d1/0x4d0 [ 149.694503][ T9057] bpf_xdp_adjust_tail+0xa11/0xfd0 [ 149.694517][ T9057] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 149.694525][ T9057] bpf_prog_run_generic_xdp+0x626/0x1530 [ 149.694543][ T9057] do_xdp_generic+0x8e6/0x1320 [ 149.694556][ T9057] ? __pfx_do_xdp_generic+0x10/0x10 [ 149.694575][ T9057] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 149.694591][ T9057] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 149.694604][ T9057] ? __skb_flow_dissect+0x11b2/0x7d90 [ 149.694617][ T9057] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 149.694633][ T9057] ? __pfx___skb_flow_dissect+0x10/0x10 [ 149.694644][ T9057] ? do_user_addr_fault+0x829/0x1370 [ 149.694661][ T9057] ? do_user_addr_fault+0x843/0x1370 [ 149.694676][ T9057] ? __lock_acquire+0x622/0x1c90 [ 149.694693][ T9057] __netif_receive_skb_one_core+0xb0/0x1e0 [ 149.694708][ T9057] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 149.694722][ T9057] ? lock_acquire+0x179/0x350 [ 149.694739][ T9057] __netif_receive_skb+0x1d/0x160 [ 149.694753][ T9057] netif_receive_skb+0x137/0x7b0 [ 149.694766][ T9057] ? __pfx_netif_receive_skb+0x10/0x10 [ 149.694780][ T9057] ? __pfx__copy_from_iter+0x10/0x10 [ 149.694796][ T9057] tun_rx_batched.isra.0+0x3ee/0x740 [ 149.694812][ T9057] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 149.694828][ T9057] ? tun_get_user+0x1c0d/0x3b80 [ 149.694843][ T9057] ? rcu_is_watching+0x12/0xc0 [ 149.694857][ T9057] tun_get_user+0x28a2/0x3b80 [ 149.694874][ T9057] ? __pfx_tun_get_user+0x10/0x10 [ 149.694889][ T9057] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 149.694905][ T9057] ? find_held_lock+0x2b/0x80 [ 149.694917][ T9057] ? tun_get+0x191/0x370 [ 149.694932][ T9057] tun_chr_write_iter+0xdc/0x210 [ 149.694948][ T9057] vfs_write+0x6c4/0x1150 [ 149.694961][ T9057] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 149.694983][ T9057] ? __pfx_vfs_write+0x10/0x10 [ 149.694995][ T9057] ? find_held_lock+0x2b/0x80 [ 149.695011][ T9057] ksys_write+0x12a/0x250 [ 149.695023][ T9057] ? __pfx_ksys_write+0x10/0x10 [ 149.695038][ T9057] do_syscall_64+0xcd/0x4c0 [ 149.695055][ T9057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.695066][ T9057] RIP: 0033:0x7f1861d8d3df [ 149.695077][ T9057] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 149.695091][ T9057] RSP: 002b:00007f1862bd7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 149.695101][ T9057] RAX: ffffffffffffffda RBX: 00007f1861fb6080 RCX: 00007f1861d8d3df [ 149.695108][ T9057] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 149.695114][ T9057] RBP: 00007f1861e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 149.695120][ T9057] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 149.695128][ T9057] R13: 0000000000000000 R14: 00007f1861fb6080 R15: 00007fff02bf8518 [ 149.695138][ T9057] [ 149.695145][ T9057] BUG: Bad page state in process syz.0.768 pfn:566f5 [ 149.807258][ T9057] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x566f5 [ 149.809971][ T9057] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 149.812179][ T9057] raw: 00fff00000000000 dead000000000040 ffff888022cb9000 0000000000000000 [ 149.814892][ T9057] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 149.817595][ T9057] page dumped because: page_pool leak [ 149.819272][ T9057] page_owner tracks the page as allocated [ 149.821085][ T9057] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9057, tgid 9055 (syz.0.768), ts 147701185694, free_ts 143080347445 [ 149.826287][ T9057] post_alloc_hook+0x1c0/0x230 [ 149.827813][ T9057] get_page_from_freelist+0x1321/0x3890 [ 149.829517][ T9057] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 149.831366][ T9057] alloc_pages_bulk_noprof+0x71c/0x1410 [ 149.833109][ T9057] __page_pool_alloc_pages_slow+0x193/0xc30 [ 149.835003][ T9057] page_pool_alloc_netmems+0xc4/0x190 [ 149.836694][ T9057] skb_pp_cow_data+0x7c0/0xff0 [ 149.838236][ T9057] skb_cow_data_for_xdp+0x88/0xb0 [ 149.839828][ T9057] do_xdp_generic+0x530/0x1320 [ 149.841353][ T9057] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 149.843455][ T9057] __netif_receive_skb_one_core+0xb0/0x1e0 [ 149.845352][ T9057] __netif_receive_skb+0x1d/0x160 [ 149.846969][ T9057] netif_receive_skb+0x137/0x7b0 [ 149.848542][ T9057] tun_rx_batched.isra.0+0x3ee/0x740 [ 149.850206][ T9057] tun_get_user+0x28a2/0x3b80 [ 149.851708][ T9057] tun_chr_write_iter+0xdc/0x210 [ 149.853284][ T9057] page last free pid 838 tgid 838 stack trace: [ 149.855266][ T9057] __free_frozen_pages+0x7fe/0x1180 [ 149.856942][ T9057] kasan_depopulate_vmalloc_pte+0x5f/0x80 [ 149.858745][ T9057] __apply_to_page_range+0xa8f/0x1350 [ 149.860434][ T9057] kasan_release_vmalloc+0xd1/0xe0 [ 149.862046][ T9057] purge_vmap_node+0x1c4/0xa30 [ 149.863560][ T9057] __purge_vmap_area_lazy+0xa06/0xc60 [ 149.865307][ T9057] drain_vmap_area_work+0x27/0x40 [ 149.866917][ T9057] process_one_work+0x9cc/0x1b70 [ 149.868486][ T9057] worker_thread+0x6c8/0xf10 [ 149.869948][ T9057] kthread+0x3c2/0x780 [ 149.871236][ T9057] ret_from_fork+0x5d4/0x6f0 [ 149.872756][ T9057] ret_from_fork_asm+0x1a/0x30 [ 149.874349][ T9057] Modules linked in: [ 149.875593][ T9057] CPU: 2 UID: 0 PID: 9057 Comm: syz.0.768 Tainted: G B 6.16.0-rc2-syzkaller-00071-g74b4cc9b8780 #0 PREEMPT(full) [ 149.875610][ T9057] Tainted: [B]=BAD_PAGE [ 149.875613][ T9057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.875620][ T9057] Call Trace: [ 149.875625][ T9057] [ 149.875629][ T9057] dump_stack_lvl+0x16c/0x1f0 [ 149.875647][ T9057] bad_page+0xcf/0x220 [ 149.875662][ T9057] ? __pfx_bad_page+0x10/0x10 [ 149.875677][ T9057] ? page_bad_reason+0x9d/0x1f0 [ 149.875692][ T9057] __free_frozen_pages+0x824/0x1180 [ 149.875704][ T9057] ? mark_held_locks+0x49/0x80 [ 149.875721][ T9057] page_frag_free+0x27f/0x2e0 [ 149.875736][ T9057] __xdp_return+0x38e/0xa90 [ 149.875747][ T9057] ? kmem_cache_free+0x2d1/0x4d0 [ 149.875760][ T9057] bpf_xdp_adjust_tail+0xa11/0xfd0 [ 149.875775][ T9057] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 149.875783][ T9057] bpf_prog_run_generic_xdp+0x626/0x1530 [ 149.875801][ T9057] do_xdp_generic+0x8e6/0x1320 [ 149.875815][ T9057] ? __pfx_do_xdp_generic+0x10/0x10 [ 149.875834][ T9057] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 149.875850][ T9057] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 149.875863][ T9057] ? __skb_flow_dissect+0x11b2/0x7d90 [ 149.875876][ T9057] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 149.875892][ T9057] ? __pfx___skb_flow_dissect+0x10/0x10 [ 149.875904][ T9057] ? do_user_addr_fault+0x829/0x1370 [ 149.875920][ T9057] ? do_user_addr_fault+0x843/0x1370 [ 149.875936][ T9057] ? __lock_acquire+0x622/0x1c90 [ 149.875952][ T9057] __netif_receive_skb_one_core+0xb0/0x1e0 [ 149.875966][ T9057] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 149.875981][ T9057] ? lock_acquire+0x179/0x350 [ 149.875999][ T9057] __netif_receive_skb+0x1d/0x160 [ 149.876012][ T9057] netif_receive_skb+0x137/0x7b0 [ 149.876025][ T9057] ? __pfx_netif_receive_skb+0x10/0x10 [ 149.876039][ T9057] ? __pfx__copy_from_iter+0x10/0x10 [ 149.876056][ T9057] tun_rx_batched.isra.0+0x3ee/0x740 [ 149.876072][ T9057] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 149.876088][ T9057] ? tun_get_user+0x1c0d/0x3b80 [ 149.876103][ T9057] ? rcu_is_watching+0x12/0xc0 [ 149.876116][ T9057] tun_get_user+0x28a2/0x3b80 [ 149.876134][ T9057] ? __pfx_tun_get_user+0x10/0x10 [ 149.876148][ T9057] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 149.876165][ T9057] ? find_held_lock+0x2b/0x80 [ 149.876177][ T9057] ? tun_get+0x191/0x370 [ 149.876192][ T9057] tun_chr_write_iter+0xdc/0x210 [ 149.876208][ T9057] vfs_write+0x6c4/0x1150 [ 149.876222][ T9057] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 149.876238][ T9057] ? __pfx_vfs_write+0x10/0x10 [ 149.876250][ T9057] ? find_held_lock+0x2b/0x80 [ 149.876265][ T9057] ksys_write+0x12a/0x250 [ 149.876278][ T9057] ? __pfx_ksys_write+0x10/0x10 [ 149.876292][ T9057] do_syscall_64+0xcd/0x4c0 [ 149.876324][ T9057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.876336][ T9057] RIP: 0033:0x7f1861d8d3df [ 149.876345][ T9057] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 149.876356][ T9057] RSP: 002b:00007f1862bd7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 149.876366][ T9057] RAX: ffffffffffffffda RBX: 00007f1861fb6080 RCX: 00007f1861d8d3df [ 149.876372][ T9057] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 149.876378][ T9057] RBP: 00007f1861e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 149.876384][ T9057] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 149.876391][ T9057] R13: 0000000000000000 R14: 00007f1861fb6080 R15: 00007fff02bf8518 [ 149.876400][ T9057] [ 149.993992][ T5935] Bluetooth: hci2: command tx timeout [ 150.246487][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.408004][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.459222][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.518455][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.606763][ T40] audit: type=1400 audit(406.480:18286): avc: denied { read } for pid=5649 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 150.613060][ T40] audit: type=1400 audit(406.480:18287): avc: denied { read } for pid=5649 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 150.810857][ T61] bond0 (unregistering): Released all slaves [ 150.819758][ T40] audit: type=1400 audit(406.690:18288): avc: denied { read } for pid=5649 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 150.827301][ T40] audit: type=1400 audit(406.690:18289): avc: denied { read } for pid=5649 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 150.833551][ T40] audit: type=1400 audit(406.690:18290): avc: denied { search } for pid=5649 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.123636][ T61] hsr_slave_0: left promiscuous mode [ 151.127160][ T61] hsr_slave_1: left promiscuous mode [ 151.130737][ T61] veth1_macvtap: left promiscuous mode [ 151.132470][ T61] veth0_macvtap: left promiscuous mode [ 151.134240][ T61] veth1_vlan: left promiscuous mode [ 151.135891][ T61] veth0_vlan: left promiscuous mode [ 152.336884][ T61] bridge_slave_1: left allmulticast mode [ 152.338825][ T61] bridge_slave_1: left promiscuous mode [ 152.340746][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.344806][ T61] bridge_slave_0: left allmulticast mode [ 152.346641][ T61] bridge_slave_0: left promiscuous mode [ 152.348707][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.470946][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.475649][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.479277][ T61] bond0 (unregistering): Released all slaves [ 152.597596][ T61] hsr_slave_0: left promiscuous mode [ 152.600360][ T61] hsr_slave_1: left promiscuous mode [ 152.602289][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.605871][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.633805][ T59] SELinux: failure in sel_netif_sid_slow(), invalid network interface (16) [ 152.729583][ T61] team0 (unregistering): Port device team_slave_1 removed [ 152.760938][ T61] team0 (unregistering): Port device team_slave_0 removed [ 154.166121][ T40] kauditd_printk_skb: 3283 callbacks suppressed [ 154.166138][ T40] audit: type=1400 audit(410.040:21574): avc: denied { search } for pid=9123 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.179835][ T40] audit: type=1400 audit(410.040:21575): avc: denied { read } for pid=5649 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 154.188407][ T40] audit: type=1400 audit(410.040:21576): avc: denied { read } for pid=5649 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 154.197251][ T40] audit: type=1400 audit(410.050:21577): avc: denied { search } for pid=5649 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.205685][ T40] audit: type=1400 audit(410.050:21578): avc: denied { search } for pid=5649 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.214145][ T40] audit: type=1400 audit(410.050:21579): avc: denied { search } for pid=5649 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.221151][ T40] audit: type=1400 audit(410.050:21580): avc: denied { read } for pid=5649 comm="dhcpcd" name="n164" dev="tmpfs" ino=4483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 154.228035][ T40] audit: type=1400 audit(410.050:21581): avc: denied { read open } for pid=5649 comm="dhcpcd" path="/run/udev/data/n164" dev="tmpfs" ino=4483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 154.235878][ T40] audit: type=1400 audit(410.050:21582): avc: denied { getattr } for pid=5649 comm="dhcpcd" path="/run/udev/data/n164" dev="tmpfs" ino=4483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 154.245140][ T40] audit: type=1400 audit(410.080:21583): avc: denied { search } for pid=9124 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 VM DIAGNOSIS: 10:54:14 Registers: info registers vcpu 0 CPU#0 RAX=ffff88805cf02294 RBX=0000000000000004 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff88805cf0229c RBP=ffffc9000fccedd8 RSP=ffffc9000fccece0 R8 =0000000000000004 R9 =0000000000000004 R10=ffff88805cf0229c R11=0000000000000001 R12=ffff8880330dcb40 R13=0000000000000009 R14=0000000000000009 R15=ffffc9000fccedd8 RIP=ffffffff850cd5f7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555593b1b500 ffffffff 00c00000 GS =0000 ffff8880d6753000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c30530b CR3=000000005cfd7000 CR4=00352ef0 DR0=0000000000003280 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000041041040 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000001 0000000f00000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5db611ae7 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5db611adf ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5db611b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5db611b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5db611b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5db611b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5db611bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5db611c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c6c255b20642523 00202c0028732520 3e2d205d736d756c 6c255b2064252300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4949005b05410006 000509000d560005 1b08055d56485049 49005b0541000600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffffffff8e5c4880 RCX=ffffffff848f8337 RDX=ffff888025730000 RSI=ffffffff848f822a RDI=ffffffff8e5c4880 RBP=0000000000000001 RSP=ffffc90004cef408 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffffff848f822a R13=ffffffff9af33608 R14=00000000000001d6 R15=0000000000000001 RIP=ffffffff81987635 RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f3b97f95300 ffffffff 00c00000 GS =0000 ffff8880d6853000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0674f7a286 CR3=0000000033534000 CR4=00352ef0 DR0=0000000000003380 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000308 0000001000000000 0000000000000000 0000000000000014 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33537974742f7665 642f01ffffffffff ffffffe90800033c 00000c6d00000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00181000060274b8 02800402d0860800 010800060126949c 1422cc3f2eabed55 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d8ade3c29137616 55e6260802a20312 020002a0030e0800 0298031ffffffffe ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800029003620800 0288030a08000280 0301800402d0b408 0001000000080606 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0127820002000704 0800018003000400 50c9800800000401 c7100008004aaa00 ZMM24=e727822fe727822f e727822fe727822f e727822fe727822f e727822fe727822f e727822fe727822f e727822fe727822f e727822fe727822f e727822fe727822f ZMM25=3ca3ef193ca3ef19 3ca3ef193ca3ef19 3ca3ef193ca3ef19 3ca3ef193ca3ef19 3ca3ef193ca3ef19 3ca3ef193ca3ef19 3ca3ef193ca3ef19 3ca3ef193ca3ef19 ZMM26=6b5d6c146b5d6c14 6b5d6c146b5d6c14 6b5d6c146b5d6c14 6b5d6c146b5d6c14 6b5d6c146b5d6c14 6b5d6c146b5d6c14 6b5d6c146b5d6c14 6b5d6c146b5d6c14 ZMM27=6f58fda66f58fda6 6f58fda66f58fda6 6f58fda66f58fda6 6f58fda66f58fda6 6f58fda66f58fda6 6f58fda66f58fda6 6f58fda66f58fda6 6f58fda66f58fda6 ZMM28=000000400000003f 0000003e0000003d 0000003c0000003b 0000003a00000039 0000003800000037 0000003600000035 0000003400000033 0000003200000031 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=3f0400003f040000 3f0400003f040000 3f0400003f040000 3f0400003f040000 3f0400003f040000 3f0400003f040000 3f0400003f040000 3f0400003f040000 info registers vcpu 2 CPU#2 RAX=000000000000003a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b8495 RDI=ffffffff9b089360 RBP=ffffffff9b089320 RSP=ffffc9000342ea80 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=000000000000003a R14=ffffffff9b089320 R15=ffffffff855b8430 RIP=ffffffff855b84bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f1862bd76c0 ffffffff 00c00000 GS =0000 ffff8880d6953000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000020000000f000 CR3=00000000448c7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f12337866d651cb6 88905f0fad0af555 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6792737f0645413a 60f7458661d51fd7 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8c0d3d50aede4007 d60e2e0c3ae73572 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a162d857097fd3c3 58f92819cc097b9e ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000c480 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9e16aaaa6bf48600 00005aa600000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 aa00000001428300 bc62b1007b767e00 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6483de1600005aa6 aaaaaaaa5aa65cb2 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005aa600005aa6 74b5a800aaaaaa00 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3829ec1f82d518b1 3c39fda615da7565 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b8d6423b2fde8eab 405ddd273a0f8f6d ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000004000 RBX=ffffffff9034d1c0 RCX=1ffffffff1c84ea5 RDX=fffffbfff2069a39 RSI=0000000000000008 RDI=0000000000000000 RBP=ffff888024d24880 RSP=ffffc900065f79b8 R8 =0000000000000000 R9 =fffffbfff2069a38 R10=ffffffff9034d1c7 R11=0000000000000001 R12=ffffed1005247910 R13=ffff88802923c880 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff81978347 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1862bb5f98 CR3=00000000509a0000 CR4=00352ef0 DR0=0000000000003399 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce0046b70 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2c61811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2c61811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2c61811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2c61811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2c61811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2c61811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000f0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000f0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000