last executing test programs: 2.111258033s ago: executing program 0 (id=1): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) write$FUSE_STATX(r1, &(0x7f0000000100)={0x130, 0x0, 0x0, {0x1, 0x7, 0x0, '\x00', {0x8, 0x7fffffff, 0x7, 0x10000, 0x0, 0xee00, 0x4000, '\x00', 0x6, 0x469e, 0x7fffffffffffffff, 0x232, {0x2b6f, 0xd6}, {0xffffffffffffff01, 0x10}, {0x317, 0x5}, {0xffffffffffff1111, 0x5}, 0x3, 0x0, 0x9, 0x4}}}, 0x130) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000240)={"5da3f36b54e5c2874b4e43733a141389", 0x0, 0x0, {0x4, 0x10001}, {0x4, 0x7fffffff}, 0x5, [0x8, 0x1, 0x9, 0x5, 0x0, 0xfffffffffffffff9, 0x8000000000000000, 0x5d6d, 0x81, 0x6, 0x2, 0x6e40, 0x6, 0x1, 0x8, 0x2]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000014c0), 0x42, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000003780), 0xd4ab, 0x2041) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) mount$fuse(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540), 0x80c019, &(0x7f0000001580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000001600)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000003640)={0x50, 0xfffffffffffffffe, r5, {0x7, 0x21, 0x0, 0xab180f2bb08e4e35, 0x20, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6}}, 0x50) mount$overlay(0x0, &(0x7f00000036c0)='./file0\x00', &(0x7f0000003700), 0x0, &(0x7f0000003740)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000004c0)={{r1}, r2, 0x4, @inherit={0x58, &(0x7f0000000440)={0x0, 0x2, 0x8, 0x3, {0x4, 0x4, 0x2, 0x5, 0x1}, [0x4, 0x3]}}, @subvolid=0x5}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYRES64=r6], 0x48}}, 0x4c0d2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 2.027202383s ago: executing program 3 (id=4): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000380)={0x1f, 0xffff, 0x3}, 0x6) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) socket$inet6_tcp(0xa, 0x1, 0x0) write(r0, &(0x7f00000003c0)="3f000000010003", 0x7) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=0x1, 0xe, 0x1, 0xfffffff7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0}, 0x40) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @private, @remote}, &(0x7f0000000300)=0xc) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000340)={0x2, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)={r4}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@ifindex=r3, r1, 0x1, 0x24, 0x0, @void, @void, @void, @value=r4, r2}, 0x20) 1.889209245s ago: executing program 0 (id=5): io_uring_setup(0x1, &(0x7f0000000300)={0x0, 0x0, 0x3800}) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xffffffff}, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000004c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4000000000000009, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000540)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x80}}}, &(0x7f0000000580)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f00000005c0)={0x0, 0x1460, 0x400, 0x2, 0x25d, 0x0, r0}, &(0x7f0000000640)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x181c, 0x40000, 0x2, 0x2ab, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f3e, 0x1, 0x9, 0x2b9, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cf2, 0x9449cbafb3216c47, 0x0, 0x102c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x200, 0x2, 0x21b}}], 0x4, &(0x7f00000008c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x1, 0x48a, 0x0, 0x0}}, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000100)=0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f00000009c0), 0x3e1001, 0x0) socket$packet(0x11, 0x3, 0x300) memfd_secret(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/power/resume', 0x149a82, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f0000000a40)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r8], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, 0x0, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r11, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x40040) sendmsg$NFC_CMD_START_POLL(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r11, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x48}]}, 0x24}}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000000)="767a919ca933786f8083f5ebb443935d1521f16db1d29d3f58ad0924ee75ac3c2cf5d44aba426ee5b190772343412ccbc43be6d2ef61e597c3e3fdaa0557a60c0194d520fbe217c39c89e806bb85a4f8e3992d4320655c4e2a3be88796b13ae5b506f824af78c8bb1df8aba0a518166571f0dabf6bd0a9529517cc3402fed4603214883e47937d182eb67123fba3650c48039ba66210ef25bc4f059432325f6db9f2720265f1064253fb3387cdf2abecfce62147dbde5f8324a541fb5acc", 0xbe, 0x8010, &(0x7f0000000940)=@nfc_llcp={0x27, r7, 0xffffffffffffffff, 0x2, 0x75, 0x1, "a70feebf0eed692bf9c2f6fa02c5daa32c3fcf9efc71f4e3c62b7ec3f96915c7ba9dc8495afc2a51fee60800747828a50c3d21afa59891dc6843e50253d6f8", 0xc}, 0x80) 1.888952878s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000001980)='./proc\x00', 0x157) mount(0x0, &(0x7f0000001b40)='./proc\x00', &(0x7f0000001b80)='proc\x00', 0x4000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket(0x11, 0x800000003, 0x0) r2 = semget(0x1, 0x4, 0x39c) semop(r2, &(0x7f00000004c0)=[{0x0, 0x8001, 0x1000}], 0x1) semop(r2, &(0x7f0000000500)=[{0x1, 0xbbdd, 0x1000}, {0x0, 0x9270, 0x1800}, {0x0, 0x6, 0x1800}], 0x3) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000540)=[0x6, 0x7fff]) bind(r1, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1000000000000145) r3 = openat(0xffffffffffffff9c, &(0x7f0000001bc0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) ioctl$RTC_WIE_OFF(r3, 0x7010) r4 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x8040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write$P9_RAUTH(r5, &(0x7f0000000680)={0x14, 0x67, 0x1, {0x40, 0x2, 0x5}}, 0x14) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r6) write(0xffffffffffffffff, &(0x7f0000000340)="050001", 0x3) sendmsg$NET_DM_CMD_START(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x1c, r7, 0x1, 0x0, 0x0, {0x2}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000040)="01005e00001652540012345608004600002c000100000102830bc0a80101e0000016", 0x22, 0x0, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="8b255c8651e9"}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r10, 0x1, 0xc, &(0x7f00000000c0)=""/118, &(0x7f0000000140)=0x76) write(r3, &(0x7f0000001c00)='27', 0x2) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000440)) 1.888513332s ago: executing program 3 (id=6): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@private, @dev, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', r1, 0x4, 0x8, 0xb, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}, @mcast1, 0x1, 0x8000, 0x5, 0x3}}) (async) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000180)={0x7, 0x1, {0x2, 0x0, 0x5, 0x2, 0x5}, 0x6}) (async) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000000200)=""/139, &(0x7f00000002c0)=0x8b) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000300)={0x35, 0x200, 0x7, 0x9, 0x0}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000380)=@sack_info={r3, 0x5, 0xbc63}, 0xc) (async) recvfrom$inet6(r0, &(0x7f00000003c0)=""/68, 0x44, 0x80000000, &(0x7f0000000440)={0xa, 0x4e22, 0x5, @mcast1, 0x3}, 0x1c) (async) r4 = dup2(r0, r0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r2, 0x4068aea3, &(0x7f0000000480)={0xdb, 0x0, 0x101}) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r4, 0x40046210, &(0x7f0000000500)=0x1) (async) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000540)) (async) syz_emit_ethernet(0x3c, &(0x7f0000000580)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @void, {@llc={0x4, {@llc={0x8e, 0xf0, "e5", "19c7a72018f036888579482031f881199b83e638323786c00cfdef55953569730757788853e94182fb9921"}}}}}, &(0x7f00000005c0)={0x1, 0x2, [0xb3c, 0x902, 0x30f, 0x6bb]}) ioctl$NBD_SET_SIZE(r2, 0xab02, 0x8) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000600)) (async) ioctl$XFS_IOC_FSGEOMETRY_V4(r2, 0x8070587c, &(0x7f0000000640)) getsockname(r2, &(0x7f00000006c0)=@nfc_llcp, &(0x7f0000000740)=0x80) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000780)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000007c0)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) (async) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) timer_delete(0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000880)=@sack_info={r3, 0x5, 0x66c}, &(0x7f00000008c0)=0xc) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r7, 0x4010e501, &(0x7f0000000900)={r4}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000001200)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) (async) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000001240)='./file0\x00', 0x50040, 0x0) (async) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000001280)=0x0) sendmmsg$unix(r7, &(0x7f0000002b80)=[{{&(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000d40)=[{&(0x7f00000009c0)="df000906a3dfd89d89e60ed60c3fb3fdf13692704867c0a73c19e5d136a49493b6131d35bf1eeeef83c0950c5cb167d209a658e34eb8b563a6788346d100885aba23d034b7c50adf", 0x48}, {&(0x7f0000000a40)="7ae4c3cb4f4dbce9e4f2ac27e19b153900d7e6bdc45658e25f607d85619da35bf275144b1cd41b6475d45f5403adbe02e73450fb65536a89d8d397f153f708056331f0ec351fb4165b3dbbb3ec237599451db9c0ad2c3d167293039ba16d8cdad2c61331bca924059d6d622858b6", 0x6e}, {&(0x7f0000000ac0)="38f395526ccdd51506d3a976068817acd8880f9d113735fa2c76551edc35b814ccaa1f0b020870ae720d774856c8e4f55849f9dd06d2ec49a232cdbb2513d9d6f592a24821cf92f417c52eb6f8f4443df8d358422755f0e100aa83802a26b9c4370cc9320b297ea53b2d07ecc103c005e926da1d18", 0x75}, {&(0x7f0000000b40)="67b89f078a06a7ce3f943827de0695ad798321296afdf10c99ba410b555345db4ed0e9b6a3cf0ed46f9f563aab1e77bb7a71cb5b67420f7226bcde438e5a", 0x3e}, {&(0x7f0000000b80)="9202169b3c559466532d2c098b5f7a6900bf0e3a6676518cd9036ae4255b74627170d0aca8be8f560804423e2067cf88ce8aa36db53d14beea1a6878857380f347356c37371863b86a2173cea96c0f", 0x4f}, {&(0x7f0000000c00)="7d0d06570f15ce512e155c42cc1527002f45520807f6440f5e", 0x19}, {&(0x7f0000000c40)="7cd88a7d250a2eccd85b61ae2f83f9a32cac87158d740bdded269f028c4be5e20e88f9b51d5deb2c257ca7849b8ad20d06b78b064d08a7392a906eec0002f2528866ffcf98333d91e8ddebc40e27bc9835cdc40ea434b26fabc28036215dbfef413f74c077fbe0508f2a537c5bb2bd0588c78f3ab484ab1230600e02210b5e59e8ba276d729db1a61b14229c47713d8fbf223b1808744d144516bb4f9556ac903d743d81", 0xa4}, {&(0x7f0000000d00)="48b246ce2536d2626fad331f646687beac48521533be8db459133a6c5195b71a23a352225852ff2704597bafaf25b8a6b6", 0x31}], 0x8, 0x0, 0x0, 0x4004000}}, {{&(0x7f0000000dc0)=@file={0x88ff3193752d511d, './file0\x00'}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000e40)="416fe2dbc73c10ee8c601133a5989e351663077bf8384bb539f8e3792e13", 0x1e}, {&(0x7f0000000e80)="388b77a09ba373ea911c0eda6c996c3630472983194fdda400585babb051834f70b0516bb25c61651911f9f1695fe714da61010dd51f5412b39f0cfe3838ed7fffbc1eabceeb525e92fcf6c716976a0b43450c656c18a8c8f4bb5d3df44a0991740c30e58ad5b74621cd9c9d2b45b11c4ef54532a9c8e80b03b8512a76fc3f5a933ea798985676dd27dd55a871f0e2caed2a27da0c3552fe6cf0d868c5b2eaf8f514450b8c7eff88467ef6033d6810e8315548ce6479ca460293208811d28fa8e32323f464c5ee9243a95c037177e27fcb470b1768c718dcd1d9bf3ccb3fb23466", 0xe1}, {&(0x7f0000000f80)="0f662791e1a4309082eead88422ff0162db3627b65647b17caf3139788d4d727a0f6da0c41fc25b74f7af75eafc22fe456d8b732d4ac85875fe01a5f7e65b360bb31b3950e", 0x45}], 0x3}}, {{&(0x7f0000001040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000011c0)=[{&(0x7f00000010c0)="475fde264a56c2fe1d78ddb5c5097ce128d99ac4aebf402c79c1bac4179259d281704a06ce67f747a922d758918a292a8ed1b7fb33eda668266f384b68a854434ddae3f37979f0b9531cc985a65962d6dad52a3f53c9ebec7c640a26b08ffcce5b8c7ce0147ea2123628b4f4296cb58b41ecdd0e29dbc3daa8c042f1d8776b0acd7976a92b5505b52ce76bbb4acf5195", 0x90}, {&(0x7f0000001180)="e002b5e0f0ce40013605", 0xa}], 0x2, &(0x7f0000002a40)=[@rights={{0x1c, 0x1, 0x1, [r8, 0xffffffffffffffff, r2]}}, @rights={{0x30, 0x1, 0x1, [r6, 0xffffffffffffffff, r2, 0xffffffffffffffff, r9, r6, r6, r0]}}, @rights={{0x24, 0x1, 0x1, [r4, r4, r2, r6, r10]}}, @cred={{0x1c, 0x1, 0x2, {r11}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r6, r4, r0, r4]}}, @rights={{0x20, 0x1, 0x1, [r4, r8, r0, r8]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x130, 0x4000000}}], 0x3, 0x0) 1.429878965s ago: executing program 2 (id=10): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/sda/device/scsi_disk/0:0:0:0/provisioning_mode\x00', 0x2, 0x0) write$eventfd(r0, &(0x7f00000003c0)=0x2, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000440)={0xf8f, 0x5, 0x4, 0x57dc20fd, 0x862}) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214044, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f0000000580)='./file0\x00', r1, 0xee01) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)={[{@workdir={'workdir', 0x3d, './sys/block/sda/device/scsi_disk/0:0:0:0/provisioning_mode'}, 0x3a}], [{@euid_eq={'euid', 0x3d, r1}}], 0x2f}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f0000000480)={r0, 0x2, 0xffffff9b, 0x1, 0x800}, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x20000010) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f0000000800)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/sda/device/scsi_disk/0:0:0:0/provisioning_mode\x00', 0x2, 0x0) (async) write$eventfd(r0, &(0x7f00000003c0)=0x2, 0x8) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000440)={0xf8f, 0x5, 0x4, 0x57dc20fd, 0x862}) (async) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214044, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x0) (async) chown(&(0x7f0000000580)='./file0\x00', r1, 0xee01) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)={[{@workdir={'workdir', 0x3d, './sys/block/sda/device/scsi_disk/0:0:0:0/provisioning_mode'}, 0x3a}], [{@euid_eq={'euid', 0x3d, r1}}], 0x2f}) (async) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f0000000480)={r0, 0x2, 0xffffff9b, 0x1, 0x800}, 0x1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) (async) sendmmsg$unix(r2, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x20000010) (async) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) (async) write(r3, &(0x7f0000000800)='1', 0x1) (async) 1.229824269s ago: executing program 2 (id=11): ioctl$DM_DEV_CREATE(0xffffffffffffffff, 0xc138fd03, &(0x7f00000012c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}, @uuid={'CRP-syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(0xffffffffffffffff, 0xc138fd09, &(0x7f0000001400)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0xa0011, 0x0, 0x0, @by_dev={r0}, [@raid={0x0, 0x48, 0x0, 0x70, 'raid\x00', {'raid1', 0x20, '3 64 write_mostly 1', 0x20, 0x1, [{0x20, @none, 0x20, @ram_num={'1:', 0x0}}]}}]}) 1.229439986s ago: executing program 2 (id=12): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_io_uring_setup(0xf03, &(0x7f00000001c0)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x5d, 0x4004, @fd=r0, 0x7ce8, &(0x7f0000002940)=[{&(0x7f0000000080)}, {&(0x7f0000000580)=""/151, 0x97}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/166, 0xa6}, {&(0x7f0000001700)=""/216, 0xd8}, {&(0x7f0000001800)=""/203, 0xcb}, {&(0x7f0000001900)=""/6, 0x6}, {&(0x7f0000001940)=""/4096, 0x1000}], 0x8, 0x7, 0x0, {0x2, 0x0, 0x7, '\x00', &(0x7f0000002a00)={0xdaa0, 0x9, 0x20, &(0x7f00000029c0)="748522677a7cca5821e2b3676d82ae17a6c030575a40e3e4e4f380f9b2c723ec", 0xc}, 0xd5c}}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x3e8, 0xf, 0x0, &(0x7f0000000540)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) (async) r6 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x143142) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000440)="e2feb5961b59", 0x6}], 0x1) 1.149694049s ago: executing program 2 (id=13): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004b2000/0x400000)=nil) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x3, {0x0, 0x0, 0x1}, 0xfd}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@deltaction={0x14, 0x31, 0x300, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xfd27c4eff795f0e1}, 0x480c5) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./trace\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./trace/error_log\x00', 0x20000, 0x4) read$FUSE(r3, &(0x7f0000000900)={0x2020}, 0x2020) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4001000010000100feffffbf000100000000000000000000000000000000000000000000000000000000ffffac1414bb000103944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000000a010101000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000000000000000000000001f00000000000000ff0100000000e8ff01000000fcffffff000000002abd7000043500000a0001fd2000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0004000000"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 1.019333221s ago: executing program 3 (id=14): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) bpf$PROG_LOAD(0x5, &(0x7f0000002240)={0x1d, 0x3, &(0x7f0000002300)=ANY=[@ANYBLOB="3efc012d78cd3657000000008100f6ff9400000000000000"], &(0x7f0000002340)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000002380)={'syz1\x00', {0x8, 0x6, 0x8, 0x9b99}, 0x3e, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0x10000, 0xfffffff7, 0xd, 0x0, 0x0, 0x3, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x9, 0x79, 0x4, 0x10080, 0x3c, 0x91, 0x129, 0x2, 0x5, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0x91a, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8aa, 0x2000006f, 0x8e, 0xd50, 0x7, 0xb, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffd, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x402, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x10001, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0xffff, 0x7ffffffe, 0x5, 0x4000007, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0x8, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0x3, 0x8, 0x97f7, 0x2, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa76f, 0x6, 0x3, 0xb, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x9, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x5c, 0x8004, 0x7fff, 0x3, 0x6, 0x12, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000004c00)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002a00)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000002a40), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x2, 0x7f619004, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000002a80)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000002ac0)=[@text32={0x20, &(0x7f0000002b00)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) mremap(&(0x7f00008d4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) set_mempolicy(0x6005, &(0x7f0000002a00)=0xfffffffffffffffd, 0x4) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002b80)='numa_maps\x00') read$FUSE(r9, &(0x7f0000002bc0)={0x2020}, 0x2020) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000002b40)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) dup(r1) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x210000000013, &(0x7f0000002180)=0x100000001, 0x4) 759.230442ms ago: executing program 3 (id=15): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740100001700010000000000000000007f000001000000000000000000000000000004d600000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ffffffff00210000000080000000008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000400000000000000000000000000000000000000000000000200000000000000000000000000000003000000000000000000020200000000f9ffffff02000000000000000000000044000500ffffffff000000000000000000000000000004d2330000000200000000000000000000000000000000000000000000000101050000080000010400000500000008001f0004000000"], 0x174}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = syz_open_dev$mtd(&(0x7f0000000080), 0x0, 0x101000) ioctl$OTPGETREGIONCOUNT(r1, 0x40044d0e, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaa9aaaaaaaabb86dc600a843500280601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a002000090780000040213128098cf093cc9cd7b8ec814f9bcfdfea9"], 0x0) 758.874257ms ago: executing program 3 (id=16): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002ac0)) socket(0x1e, 0x4, 0x0) userfaultfd(0x80001) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002d40)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000002d80)={0xea, 0x7, 0x8, 0x80000000000, 0xfffd, 0xfffffffffffff30f, 0x2000000000001}, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002500)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002580)={&(0x7f00000025c0)={0x78, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}]}, 0x78}}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000002300)={'filter\x00', 0xc9, "633c9f68061ef68557fc027359ab55b0b6822da613bde2079c4e1a4f17903339bde657c9174da32682bc0e343eb5207e4507125a70575d6b50403ec40f3279e9c515798dca5658e360baa417e0be37cd00e364042ddb4e5218764677361da2c87acba77f11e84264019b6986b32a95ed550169e4731c800d90c959f768ca5826ccdb72d3e2dc5de48cbf000cef8b9f04a6e58c83cdbe96ce5ca112c63b664031169f2dfbd71bb6fef28b9f427f48c1faf1501f6bc65ba61aabe4af24e55e5702dd23b4ca953ad41e16"}, &(0x7f0000002400)=0xed) r5 = dup(r1) read$FUSE(r5, &(0x7f00000001c0)={0x2020}, 0x2020) write$tun(r5, &(0x7f0000002200)=ANY=[], 0x68) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000026c0)=ANY=[@ANYBLOB="5c000000020603000000000000000000020000000c00078005001500533904270500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e657400000000"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000027c0)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x700, {0x2}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002840)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000002900)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000002980)={0x0, 0x1dcd6500}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000029c0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002ac0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002b00)={0xffffffffffffffff, 0x58, &(0x7f0000002b40)}, 0x10) r7 = io_uring_setup(0x1b7b, &(0x7f0000002bc0)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x0, 0x0, &(0x7f0000002d00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r7, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 49.416864ms ago: executing program 2 (id=17): mkdir(&(0x7f0000000240)='./my_configfs\x00', 0xff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000009060300000000000007000002000000340007800c000180080001407f0000010c001480080001400a010100060004404e2400000600054050640000050007000500000005000100060000000900020073797a31"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) mount(0x0, &(0x7f0000000280)='./my_configfs\x00', &(0x7f00000002c0)='configfs\x00', 0x0, 0x0) (async) mkdir(&(0x7f0000000300)='./my_configfs/dlm/cluster1\x00', 0x1ff) (async, rerun: 32) rmdir(&(0x7f0000000340)='./my_configfs/dlm/cluster1\x00') (rerun: 32) 0s ago: executing program 2 (id=18): r0 = syz_clone(0x100000, &(0x7f0000000000)="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", 0xc00, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000c00)=[{&(0x7f0000000c40)=""/115, 0x73}], 0x1, &(0x7f0000000cc0)=[{&(0x7f0000000d00)=""/12, 0xc}], 0x1, 0x0) setpriority(0x2, r0, 0x7d1) 0s ago: executing program 2 (id=19): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000000)={0x6, 'veth1_virt_wifi\x00', {0x7}, 0x7}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='./dev/sda1\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x149000, 0x19a) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000440)={0xa, 0x7fffffff, 0x3}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r1, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000003c0)={@remote, @empty, @val={@val={0x88a8, 0x6, 0x0, 0x2}, {0x8100, 0x6, 0x1}}, {@llc_tr={0x11, {@snap={0x55, 0x1, "d7", 'U-l', 0x15}}}}}, 0x0) kernel console output (not intermixed with test programs): [ 28.791500][ T43] audit: type=1400 audit(1794029766.067:115): avc: denied { siginh } for pid=5690 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 30.233634][ T43] audit: type=1400 audit(1794029767.507:116): avc: denied { write } for pid=5695 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 30.271694][ T43] audit: type=1400 audit(1794029767.547:117): avc: denied { write } for pid=5698 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 30.485937][ T43] audit: type=1400 audit(1794029767.757:118): avc: denied { write } for pid=5701 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 30.528785][ T43] audit: type=1400 audit(1794029767.797:119): avc: denied { write } for pid=5704 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:42215' (ED25519) to the list of known hosts. [ 30.608872][ T43] audit: type=1400 audit(1794029767.877:120): avc: denied { write } for pid=5708 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 30.632117][ T43] audit: type=1400 audit(1794029767.907:121): avc: denied { name_bind } for pid=5711 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 30.664881][ T43] audit: type=1400 audit(1794029767.937:122): avc: denied { write } for pid=5714 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 30.676845][ T43] audit: type=1400 audit(1794029767.947:123): avc: denied { execute } for pid=5713 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 30.677525][ T43] audit: type=1400 audit(1794029767.947:124): avc: denied { execute_no_trans } for pid=5713 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 30.905679][ T43] audit: type=1400 audit(1794029768.177:125): avc: denied { write } for pid=5717 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.662760][ T5713] cgroup: Unknown subsys name 'net' [ 32.824366][ T5713] cgroup: Unknown subsys name 'cpuset' [ 32.828947][ T5713] cgroup: Unknown subsys name 'rlimit' [ 33.055120][ T5768] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 33.717598][ T5713] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.187716][ T43] kauditd_printk_skb: 28 callbacks suppressed [ 37.187729][ T43] audit: type=1400 audit(1794029774.457:154): avc: denied { execmem } for pid=5776 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.337917][ T43] audit: type=1400 audit(1794029774.607:155): avc: denied { create } for pid=5780 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.339787][ T43] audit: type=1400 audit(1794029774.607:156): avc: denied { read write } for pid=5780 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.339813][ T43] audit: type=1400 audit(1794029774.607:157): avc: denied { open } for pid=5780 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.348408][ T43] audit: type=1400 audit(1794029774.617:158): avc: denied { ioctl } for pid=5783 comm="syz-executor" path="socket:[7423]" dev="sockfs" ino=7423 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.375693][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.377496][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.377983][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.378443][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.379298][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.380066][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.380587][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.380749][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.381458][ T5798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.381687][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.382493][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.383120][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.383335][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.383913][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.384026][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.384790][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.385071][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.385167][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.386116][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.386653][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.391193][ T43] audit: type=1400 audit(1794029774.667:159): avc: denied { read } for pid=5781 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.393793][ T43] audit: type=1400 audit(1794029774.667:160): avc: denied { open } for pid=5781 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.396077][ T43] audit: type=1400 audit(1794029774.667:161): avc: denied { mounton } for pid=5781 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 37.398318][ T43] audit: type=1400 audit(1794029774.667:162): avc: denied { module_request } for pid=5781 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 37.407756][ T43] audit: type=1400 audit(1794029774.677:164): avc: denied { mounton } for pid=5783 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 37.578086][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.578504][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.579139][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.581696][ T5783] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 37.584412][ T5780] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 37.637611][ T5782] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 37.666783][ T5781] infiniband rxe0: set active [ 37.668008][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.668437][ T5781] infiniband rxe0: added rxe_eth0 [ 37.675703][ T5781] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 37.675723][ T5781] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 37.675742][ T5781] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 37.696318][ T5781] RDS/IB: rxe0: added [ 37.696427][ T5781] smc: adding ib device rxe0 with port count 1 [ 37.696460][ T5781] smc: ib device rxe0 port 1 has no pnetid [ 37.700520][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.718960][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.836756][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.872188][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.872234][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.872297][ T5780] bridge_slave_0: entered allmulticast mode [ 37.873810][ T5780] bridge_slave_0: entered promiscuous mode [ 37.890200][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.890241][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.890295][ T5780] bridge_slave_1: entered allmulticast mode [ 37.890995][ T5780] bridge_slave_1: entered promiscuous mode [ 37.936636][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.938298][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.956294][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.974497][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.974564][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.974622][ T5783] bridge_slave_0: entered allmulticast mode [ 37.975373][ T5783] bridge_slave_0: entered promiscuous mode [ 37.977097][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.977154][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.977206][ T5783] bridge_slave_1: entered allmulticast mode [ 37.977884][ T5783] bridge_slave_1: entered promiscuous mode [ 37.998897][ T5780] team0: Port device team_slave_0 added [ 38.000409][ T5780] team0: Port device team_slave_1 added [ 38.009301][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.009364][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.009418][ T5782] bridge_slave_0: entered allmulticast mode [ 38.010336][ T5782] bridge_slave_0: entered promiscuous mode [ 38.029291][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.029394][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.029480][ T5782] bridge_slave_1: entered allmulticast mode [ 38.030519][ T5782] bridge_slave_1: entered promiscuous mode [ 38.032016][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.032029][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.032049][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.035805][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.038569][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.039103][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.039114][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.039259][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.075766][ T5783] team0: Port device team_slave_0 added [ 38.077582][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.079590][ T5783] team0: Port device team_slave_1 added [ 38.086879][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.114080][ T5780] hsr_slave_0: entered promiscuous mode [ 38.114561][ T5780] hsr_slave_1: entered promiscuous mode [ 38.115229][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.147823][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.147834][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.147845][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.148866][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.148873][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.148885][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.150959][ T5782] team0: Port device team_slave_0 added [ 38.162525][ T5782] team0: Port device team_slave_1 added [ 38.206059][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.206075][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.206093][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.209456][ T5783] hsr_slave_0: entered promiscuous mode [ 38.209877][ T5783] hsr_slave_1: entered promiscuous mode [ 38.210263][ T5783] debugfs: 'hsr0' already exists in 'hsr' [ 38.210272][ T5783] Cannot create hsr debugfs directory [ 38.214975][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.214988][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.215008][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.322821][ T5782] hsr_slave_0: entered promiscuous mode [ 38.323422][ T5782] hsr_slave_1: entered promiscuous mode [ 38.323763][ T5782] debugfs: 'hsr0' already exists in 'hsr' [ 38.323771][ T5782] Cannot create hsr debugfs directory [ 38.513280][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.518523][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.534323][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.539178][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.559125][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.563229][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.570310][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.576617][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.644681][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.650875][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.677686][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.681713][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.682211][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.686481][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.714365][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.717521][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.718142][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.718248][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.718333][ T5781] bridge_slave_0: entered allmulticast mode [ 38.719689][ T5781] bridge_slave_0: entered promiscuous mode [ 38.733156][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.733232][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.733368][ T5781] bridge_slave_1: entered allmulticast mode [ 38.734471][ T5781] bridge_slave_1: entered promiscuous mode [ 38.748793][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.749042][ T5780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.749522][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.749602][ T5780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.767719][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.782724][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.793571][ T5782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.796799][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.797352][ T5782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.799320][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.799776][ T5782] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.801912][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.817559][ T5782] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.820798][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.822286][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.822332][ T5783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.822433][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.822475][ T5783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.825136][ T5781] team0: Port device team_slave_0 added [ 38.826935][ T5781] team0: Port device team_slave_1 added [ 38.849257][ T208] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.850718][ T208] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.856279][ T208] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.856522][ T208] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.873099][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.873112][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.873128][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.874372][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.874384][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.874404][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.916783][ T5781] hsr_slave_0: entered promiscuous mode [ 38.917219][ T5781] hsr_slave_1: entered promiscuous mode [ 38.917557][ T5781] debugfs: 'hsr0' already exists in 'hsr' [ 38.917565][ T5781] Cannot create hsr debugfs directory [ 38.993921][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.069491][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.073856][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.087175][ T208] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.087222][ T208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.104688][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.106790][ T208] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.106873][ T208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.120069][ T5781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.126992][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.127793][ T5781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.130833][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.135357][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.141084][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.141169][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.142608][ T5781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.147490][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.148163][ T5781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.152096][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.168254][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.171952][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.171999][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.190721][ T417] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.190766][ T417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.203021][ T208] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.203099][ T208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.272350][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.284580][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.291201][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.291244][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.300619][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.300662][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.328331][ T5781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.447918][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.460830][ T5796] Bluetooth: hci2: command tx timeout [ 39.470646][ T5796] Bluetooth: hci1: command tx timeout [ 39.470716][ T5793] Bluetooth: hci0: command tx timeout [ 39.470750][ T5796] Bluetooth: hci3: command tx timeout [ 39.473673][ T5780] veth0_vlan: entered promiscuous mode [ 39.480047][ T5780] veth1_vlan: entered promiscuous mode [ 39.491018][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.493500][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.508470][ T5780] veth0_macvtap: entered promiscuous mode [ 39.515426][ T5780] veth1_macvtap: entered promiscuous mode [ 39.541817][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.542359][ T5782] veth0_vlan: entered promiscuous mode [ 39.544990][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.548115][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.550869][ T5782] veth1_vlan: entered promiscuous mode [ 39.579495][ T5783] veth0_vlan: entered promiscuous mode [ 39.598449][ T5783] veth1_vlan: entered promiscuous mode [ 39.602863][ T5782] veth0_macvtap: entered promiscuous mode [ 39.611039][ T5782] veth1_macvtap: entered promiscuous mode [ 39.641869][ T1179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.641883][ T1179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.644903][ T5781] veth0_vlan: entered promiscuous mode [ 39.647464][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.651625][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.667800][ T5783] veth0_macvtap: entered promiscuous mode [ 39.672918][ T5781] veth1_vlan: entered promiscuous mode [ 39.676527][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.676539][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.676672][ T5783] veth1_macvtap: entered promiscuous mode [ 39.689298][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.692590][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.710082][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.720824][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.721172][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.721244][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.721332][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.736147][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.736158][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.741703][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.756459][ T5781] veth0_macvtap: entered promiscuous mode [ 39.764367][ T5780] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.775336][ T5781] veth1_macvtap: entered promiscuous mode [ 39.792647][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.792660][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.809241][ T208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.809253][ T208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.816291][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.823922][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.838630][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.838648][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.873442][ T5635] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.873549][ T5635] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.873703][ T5635] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.873870][ T5635] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.873977][ T5635] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.874130][ T5635] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.902794][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.902807][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.923845][ T417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.923859][ T417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.933359][ T5635] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.933519][ T5635] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.933685][ T5635] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.933703][ T5635] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.938648][ T5944] overlayfs: statfs failed on './file0' [ 39.975852][ T5947] Bluetooth: MGMT ver 1.23 [ 40.043693][ T5959] netlink: 'syz.1.2': attribute type 4 has an invalid length. [ 40.097163][ T5965] qnx6: unable to set blocksize [ 40.155044][ T5966] ======================================================= [ 40.155044][ T5966] WARNING: The mand mount option has been deprecated and [ 40.155044][ T5966] and is ignored by this kernel. Remove the mand [ 40.155044][ T5966] option from the mount to silence this warning. [ 40.155044][ T5966] ======================================================= [ 40.445099][ T5982] overlayfs: failed to resolve './sys/block/sda/device/scsi_disk/0:0:0:0/provisioning_mode:euid=00000000000000016832': -2 [ 40.460630][ T5982] Console: switching to colour dummy device 80x25 [ 40.503722][ T5985] overlayfs: failed to resolve './sys/block/sda/device/scsi_disk/0:0:0:0/provisioning_mode:euid=00000000000000016832': -2 [ 41.115774][ T6005] netlink: 76 bytes leftover after parsing attributes in process `syz.3.15'. [ 41.540302][ T5793] Bluetooth: hci1: command tx timeout [ 41.540334][ T5793] Bluetooth: hci0: command tx timeout [ 41.540640][ T5793] Bluetooth: hci3: command tx timeout [ 41.540661][ T5793] Bluetooth: hci2: command tx timeout [ 41.946707][ T6019] BUG: Bad page state in process syz.2.19 pfn:5b476 [ 41.946727][ T6019] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5b476 [ 41.946744][ T6019] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 41.946767][ T6019] raw: 00fff00000000000 dead000000000040 ffff888024a5d000 0000000000000000 [ 41.946783][ T6019] raw: 0000000000000000 3fffffffffffffff 00000000ffffffff 0000000000000000 [ 41.946793][ T6019] page dumped because: page_pool leak [ 41.946802][ T6019] page_owner tracks the page as allocated [ 41.946808][ T6019] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6019, tgid 6018 (syz.2.19), ts 41946496043 [ 41.946834][ T6019] post_alloc_hook+0xfd/0x120 [ 41.946911][ T6019] get_page_from_freelist+0x112f/0x3640 [ 41.946938][ T6019] __alloc_frozen_pages_noprof+0x2ad/0x31e0 [ 41.946962][ T6019] alloc_pages_bulk_noprof+0x5f0/0x1480 [ 41.946987][ T6019] __page_pool_alloc_netmems_slow+0x178/0x930 [ 41.947017][ T6019] page_pool_alloc_netmems+0xc4/0x1a0 [ 41.947039][ T6019] page_pool_alloc_frag_netmem+0x20f/0x9c0 [ 41.947062][ T6019] skb_pp_cow_data+0x510/0x1130 [ 41.947084][ T6019] skb_cow_data_for_xdp+0x88/0xb0 [ 41.947108][ T6019] do_xdp_generic+0x571/0x12e0 [ 41.947124][ T6019] tun_get_user+0x1d21/0x3ee0 [ 41.947147][ T6019] tun_chr_write_iter+0xdc/0x200 [ 41.947170][ T6019] vfs_write+0x6af/0x1050 [ 41.947186][ T6019] ksys_write+0x12a/0x250 [ 41.947201][ T6019] do_syscall_64+0x123/0x790 [ 41.947220][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.947238][ T6019] page_owner free stack trace missing [ 41.947243][ T6019] Modules linked in: [ 41.947259][ T6019] CPU: 3 UID: 0 PID: 6019 Comm: syz.2.19 Not tainted syzkaller #0 PREEMPT(full) [ 41.947279][ T6019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.947289][ T6019] Call Trace: [ 41.947295][ T6019] [ 41.947303][ T6019] dump_stack_lvl+0x100/0x190 [ 41.947335][ T6019] bad_page.cold+0x58/0x6b [ 41.947363][ T6019] __free_frozen_pages+0x7e6/0x1110 [ 41.947404][ T6019] ? kasan_quarantine_put+0x104/0x240 [ 41.947421][ T6019] ? lockdep_hardirqs_on+0x7d/0x110 [ 41.947444][ T6019] page_frag_free+0x199/0x1f0 [ 41.947475][ T6019] __xdp_return+0x3b6/0x990 [ 41.947498][ T6019] bpf_xdp_adjust_tail+0x8a1/0xbb0 [ 41.947529][ T6019] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 41.947548][ T6019] bpf_prog_run_generic_xdp+0x5ff/0x1630 [ 41.947581][ T6019] do_xdp_generic+0x933/0x12e0 [ 41.947606][ T6019] ? __pfx_do_xdp_generic+0x10/0x10 [ 41.947625][ T6019] ? __lock_acquire+0x5c0/0x1f40 [ 41.947668][ T6019] tun_get_user+0x1d21/0x3ee0 [ 41.947702][ T6019] ? __lock_acquire+0x5c0/0x1f40 [ 41.947727][ T6019] ? __pfx_tun_get_user+0x10/0x10 [ 41.947755][ T6019] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 41.947782][ T6019] ? find_held_lock+0x2b/0x80 [ 41.947801][ T6019] ? tun_get+0x191/0x370 [ 41.947824][ T6019] ? tun_get+0x191/0x370 [ 41.947856][ T6019] tun_chr_write_iter+0xdc/0x200 [ 41.947886][ T6019] vfs_write+0x6af/0x1050 [ 41.947906][ T6019] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 41.947935][ T6019] ? __pfx_vfs_write+0x10/0x10 [ 41.947952][ T6019] ? find_held_lock+0x2b/0x80 [ 41.947988][ T6019] ksys_write+0x12a/0x250 [ 41.948014][ T6019] ? __pfx_ksys_write+0x10/0x10 [ 41.948045][ T6019] do_syscall_64+0x123/0x790 [ 41.948070][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.948089][ T6019] RIP: 0033:0x7fa2bb36034e [ 41.948104][ T6019] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 41.948120][ T6019] RSP: 002b:00007fa2bc274fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 41.948137][ T6019] RAX: ffffffffffffffda RBX: 00007fa2bc2756c0 RCX: 00007fa2bb36034e [ 41.948149][ T6019] RDX: 000000000000fdef RSI: 00002000000003c0 RDI: 00000000000000c8 [ 41.948159][ T6019] RBP: 00007fa2bb437b70 R08: 0000000000000000 R09: 0000000000000000 [ 41.948169][ T6019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.948179][ T6019] R13: 00007fa2bb626038 R14: 00007fa2bb625fa0 R15: 00007fff1b3979e8 [ 41.948204][ T6019] [ 41.948255][ T6019] Disabling lock debugging due to kernel taint [ 41.948264][ T6019] BUG: Bad page state in process syz.2.19 pfn:5b475 [ 41.948274][ T6019] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5b475 [ 41.948290][ T6019] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 41.948311][ T6019] raw: 00fff00000000000 dead000000000040 ffff888024a5d000 0000000000000000 [ 41.948327][ T6019] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 41.948336][ T6019] page dumped because: page_pool leak [ 41.948343][ T6019] page_owner tracks the page as allocated [ 41.948349][ T6019] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6019, tgid 6018 (syz.2.19), ts 41946480730 [ 41.948372][ T6019] post_alloc_hook+0xfd/0x120 [ 41.948394][ T6019] get_page_from_freelist+0x112f/0x3640 [ 41.948416][ T6019] __alloc_frozen_pages_noprof+0x2ad/0x31e0 [ 41.948438][ T6019] alloc_pages_bulk_noprof+0x5f0/0x1480 [ 41.948460][ T6019] __page_pool_alloc_netmems_slow+0x178/0x930 [ 41.948480][ T6019] page_pool_alloc_netmems+0xc4/0x1a0 [ 41.948499][ T6019] skb_pp_cow_data+0x96a/0x1130 [ 41.948518][ T6019] skb_cow_data_for_xdp+0x88/0xb0 [ 41.948536][ T6019] do_xdp_generic+0x571/0x12e0 [ 41.948550][ T6019] tun_get_user+0x1d21/0x3ee0 [ 41.948568][ T6019] tun_chr_write_iter+0xdc/0x200 [ 41.948586][ T6019] vfs_write+0x6af/0x1050 [ 41.948598][ T6019] ksys_write+0x12a/0x250 [ 41.948610][ T6019] do_syscall_64+0x123/0x790 [ 41.948626][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.948640][ T6019] page_owner free stack trace missing [ 41.948645][ T6019] Modules linked in: [ 41.948658][ T6019] CPU: 3 UID: 0 PID: 6019 Comm: syz.2.19 Tainted: G B syzkaller #0 PREEMPT(full) [ 41.948680][ T6019] Tainted: [B]=BAD_PAGE [ 41.948686][ T6019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.948694][ T6019] Call Trace: [ 41.948700][ T6019] [ 41.948706][ T6019] dump_stack_lvl+0x100/0x190 [ 41.948733][ T6019] bad_page.cold+0x58/0x6b [ 41.948757][ T6019] __free_frozen_pages+0x7e6/0x1110 [ 41.948778][ T6019] ? kasan_quarantine_put+0x104/0x240 [ 41.948794][ T6019] ? lockdep_hardirqs_on+0x7d/0x110 [ 41.948813][ T6019] page_frag_free+0x199/0x1f0 [ 41.948838][ T6019] __xdp_return+0x3b6/0x990 [ 41.948856][ T6019] bpf_xdp_adjust_tail+0x8a1/0xbb0 [ 41.948878][ T6019] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 41.948892][ T6019] bpf_prog_run_generic_xdp+0x5ff/0x1630 [ 41.948914][ T6019] do_xdp_generic+0x933/0x12e0 [ 41.948934][ T6019] ? __pfx_do_xdp_generic+0x10/0x10 [ 41.948950][ T6019] ? __lock_acquire+0x5c0/0x1f40 [ 41.948982][ T6019] tun_get_user+0x1d21/0x3ee0 [ 41.949016][ T6019] ? __lock_acquire+0x5c0/0x1f40 [ 41.949039][ T6019] ? __pfx_tun_get_user+0x10/0x10 [ 41.949061][ T6019] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 41.949081][ T6019] ? find_held_lock+0x2b/0x80 [ 41.949098][ T6019] ? tun_get+0x191/0x370 [ 41.949117][ T6019] ? tun_get+0x191/0x370 [ 41.949138][ T6019] tun_chr_write_iter+0xdc/0x200 [ 41.949159][ T6019] vfs_write+0x6af/0x1050 [ 41.949174][ T6019] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 41.949196][ T6019] ? __pfx_vfs_write+0x10/0x10 [ 41.949210][ T6019] ? find_held_lock+0x2b/0x80 [ 41.949232][ T6019] ksys_write+0x12a/0x250 [ 41.949246][ T6019] ? __pfx_ksys_write+0x10/0x10 [ 41.949263][ T6019] do_syscall_64+0x123/0x790 [ 41.949282][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.949329][ T6019] RIP: 0033:0x7fa2bb36034e [ 41.949343][ T6019] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 41.949358][ T6019] RSP: 002b:00007fa2bc274fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 41.949374][ T6019] RAX: ffffffffffffffda RBX: 00007fa2bc2756c0 RCX: 00007fa2bb36034e [ 41.949385][ T6019] RDX: 000000000000fdef RSI: 00002000000003c0 RDI: 00000000000000c8 [ 41.949396][ T6019] RBP: 00007fa2bb437b70 R08: 0000000000000000 R09: 0000000000000000 [ 41.949406][ T6019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.949414][ T6019] R13: 00007fa2bb626038 R14: 00007fa2bb625fa0 R15: 00007fff1b3979e8 [ 41.949429][ T6019] [ 41.949437][ T6019] BUG: Bad page state in process syz.2.19 pfn:5b474 [ 41.949447][ T6019] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5b474 [ 41.949461][ T6019] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 41.949481][ T6019] raw: 00fff00000000000 dead000000000040 ffff888024a5d000 0000000000000000 [ 41.949495][ T6019] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 41.949503][ T6019] page dumped because: page_pool leak [ 41.949510][ T6019] page_owner tracks the page as allocated [ 41.949515][ T6019] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6019, tgid 6018 (syz.2.19), ts 41946464411 [ 41.949537][ T6019] post_alloc_hook+0xfd/0x120 [ 41.949557][ T6019] get_page_from_freelist+0x112f/0x3640 [ 41.949577][ T6019] __alloc_frozen_pages_noprof+0x2ad/0x31e0 [ 41.949598][ T6019] alloc_pages_bulk_noprof+0x5f0/0x1480 [ 41.949619][ T6019] __page_pool_alloc_netmems_slow+0x178/0x930 [ 41.949639][ T6019] page_pool_alloc_netmems+0xc4/0x1a0 [ 41.949659][ T6019] skb_pp_cow_data+0x96a/0x1130 [ 41.949681][ T6019] skb_cow_data_for_xdp+0x88/0xb0 [ 41.949704][ T6019] do_xdp_generic+0x571/0x12e0 [ 41.949720][ T6019] tun_get_user+0x1d21/0x3ee0 [ 41.949743][ T6019] tun_chr_write_iter+0xdc/0x200 [ 41.949766][ T6019] vfs_write+0x6af/0x1050 [ 41.949780][ T6019] ksys_write+0x12a/0x250 [ 41.949795][ T6019] do_syscall_64+0x123/0x790 [ 41.949812][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.949823][ T6019] page_owner free stack trace missing [ 41.949827][ T6019] Modules linked in: [ 41.949836][ T6019] CPU: 3 UID: 0 PID: 6019 Comm: syz.2.19 Tainted: G B syzkaller #0 PREEMPT(full) [ 41.949854][ T6019] Tainted: [B]=BAD_PAGE [ 41.949860][ T6019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.949869][ T6019] Call Trace: [ 41.949875][ T6019] [ 41.949880][ T6019] dump_stack_lvl+0x100/0x190 [ 41.949907][ T6019] bad_page.cold+0x58/0x6b [ 41.949932][ T6019] __free_frozen_pages+0x7e6/0x1110 [ 41.949951][ T6019] ? kasan_quarantine_put+0x104/0x240 [ 41.949963][ T6019] ? lockdep_hardirqs_on+0x7d/0x110 [ 41.949980][ T6019] page_frag_free+0x199/0x1f0 [ 41.950009][ T6019] __xdp_return+0x3b6/0x990 [ 41.950033][ T6019] bpf_xdp_adjust_tail+0x8a1/0xbb0 [ 41.950054][ T6019] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 41.950068][ T6019] bpf_prog_run_generic_xdp+0x5ff/0x1630 [ 41.950090][ T6019] do_xdp_generic+0x933/0x12e0 [ 41.950108][ T6019] ? __pfx_do_xdp_generic+0x10/0x10 [ 41.950146][ T6019] ? __lock_acquire+0x5c0/0x1f40 [ 41.950177][ T6019] tun_get_user+0x1d21/0x3ee0 [ 41.950203][ T6019] ? __lock_acquire+0x5c0/0x1f40 [ 41.950223][ T6019] ? __pfx_tun_get_user+0x10/0x10 [ 41.950243][ T6019] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 41.950264][ T6019] ? find_held_lock+0x2b/0x80 [ 41.950280][ T6019] ? tun_get+0x191/0x370 [ 41.950298][ T6019] ? tun_get+0x191/0x370 [ 41.950317][ T6019] tun_chr_write_iter+0xdc/0x200 [ 41.950338][ T6019] vfs_write+0x6af/0x1050 [ 41.950353][ T6019] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 41.950375][ T6019] ? __pfx_vfs_write+0x10/0x10 [ 41.950388][ T6019] ? find_held_lock+0x2b/0x80 [ 41.950410][ T6019] ksys_write+0x12a/0x250 [ 41.950424][ T6019] ? __pfx_ksys_write+0x10/0x10 [ 41.950441][ T6019] do_syscall_64+0x123/0x790 [ 41.950459][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.950475][ T6019] RIP: 0033:0x7fa2bb36034e [ 41.950489][ T6019] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 41.950503][ T6019] RSP: 002b:00007fa2bc274fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 41.950518][ T6019] RAX: ffffffffffffffda RBX: 00007fa2bc2756c0 RCX: 00007fa2bb36034e [ 41.950527][ T6019] RDX: 000000000000fdef RSI: 00002000000003c0 RDI: 00000000000000c8 [ 41.950536][ T6019] RBP: 00007fa2bb437b70 R08: 0000000000000000 R09: 0000000000000000 [ 41.950544][ T6019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.950554][ T6019] R13: 00007fa2bb626038 R14: 00007fa2bb625fa0 R15: 00007fff1b3979e8 [ 41.950570][ T6019] [ 41.950662][ T6019] BUG: Bad page state in process syz.2.19 pfn:5b473 [ 41.950673][ T6019] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5b473 [ 41.950687][ T6019] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 41.950707][ T6019] raw: 00fff00000000000 dead000000000040 ffff888024a5d000 0000000000000000 [ 41.950722][ T6019] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 41.950731][ T6019] page dumped because: page_pool leak [ 41.950738][ T6019] page_owner tracks the page as allocated [ 41.950744][ T6019] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6019, tgid 6018 (syz.2.19), ts 41946448860 [ 41.950767][ T6019] post_alloc_hook+0xfd/0x120 [ 41.950788][ T6019] get_page_from_freelist+0x112f/0x3640 [ 41.950812][ T6019] __alloc_frozen_pages_noprof+0x2ad/0x31e0 [ 41.950835][ T6019] alloc_pages_bulk_noprof+0x5f0/0x1480 [ 41.950857][ T6019] __page_pool_alloc_netmems_slow+0x178/0x930 [ 41.950878][ T6019] page_pool_alloc_netmems+0xc4/0x1a0 [ 41.950897][ T6019] skb_pp_cow_data+0x96a/0x1130 [ 41.950918][ T6019] skb_cow_data_for_xdp+0x88/0xb0 [ 41.950938][ T6019] do_xdp_generic+0x571/0x12e0 [ 41.950954][ T6019] tun_get_user+0x1d21/0x3ee0 [ 41.950975][ T6019] tun_chr_write_iter+0xdc/0x200 [ 41.951003][ T6019] vfs_write+0x6af/0x1050 [ 41.951019][ T6019] ksys_write+0x12a/0x250 [ 41.951034][ T6019] do_syscall_64+0x123/0x790 [ 41.951050][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.951067][ T6019] page_owner free stack trace missing [ 41.951072][ T6019] Modules linked in: [ 41.951085][ T6019] CPU: 3 UID: 0 PID: 6019 Comm: syz.2.19 Tainted: G B syzkaller #0 PREEMPT(full) [ 41.951108][ T6019] Tainted: [B]=BAD_PAGE [ 41.951114][ T6019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.951124][ T6019] Call Trace: [ 41.951130][ T6019] [ 41.951137][ T6019] dump_stack_lvl+0x100/0x190 [ 41.951163][ T6019] bad_page.cold+0x58/0x6b [ 41.951190][ T6019] __free_frozen_pages+0x7e6/0x1110 [ 41.951209][ T6019] ? kasan_quarantine_put+0x104/0x240 [ 41.951225][ T6019] ? lockdep_hardirqs_on+0x7d/0x110 [ 41.951245][ T6019] page_frag_free+0x199/0x1f0 [ 41.951272][ T6019] __xdp_return+0x3b6/0x990 [ 41.951292][ T6019] bpf_xdp_adjust_tail+0x8a1/0xbb0 [ 41.951312][ T6019] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 41.951327][ T6019] bpf_prog_run_generic_xdp+0x5ff/0x1630 [ 41.951350][ T6019] do_xdp_generic+0x933/0x12e0 [ 41.951368][ T6019] ? __pfx_do_xdp_generic+0x10/0x10 [ 41.951385][ T6019] ? __lock_acquire+0x5c0/0x1f40 [ 41.951414][ T6019] tun_get_user+0x1d21/0x3ee0 [ 41.951441][ T6019] ? __lock_acquire+0x5c0/0x1f40 [ 41.951464][ T6019] ? __pfx_tun_get_user+0x10/0x10 [ 41.951488][ T6019] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 41.951508][ T6019] ? find_held_lock+0x2b/0x80 [ 41.951526][ T6019] ? tun_get+0x191/0x370 [ 41.951547][ T6019] ? tun_get+0x191/0x370 [ 41.951570][ T6019] tun_chr_write_iter+0xdc/0x200 [ 41.951594][ T6019] vfs_write+0x6af/0x1050 [ 41.951611][ T6019] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 41.951636][ T6019] ? __pfx_vfs_write+0x10/0x10 [ 41.951651][ T6019] ? find_held_lock+0x2b/0x80 [ 41.951674][ T6019] ksys_write+0x12a/0x250 [ 41.951689][ T6019] ? __pfx_ksys_write+0x10/0x10 [ 41.951708][ T6019] do_syscall_64+0x123/0x790 [ 41.951726][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.951742][ T6019] RIP: 0033:0x7fa2bb36034e [ 41.951756][ T6019] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 41.951772][ T6019] RSP: 002b:00007fa2bc274fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 41.951788][ T6019] RAX: ffffffffffffffda RBX: 00007fa2bc2756c0 RCX: 00007fa2bb36034e [ 41.951798][ T6019] RDX: 000000000000fdef RSI: 00002000000003c0 RDI: 00000000000000c8 [ 41.951809][ T6019] RBP: 00007fa2bb437b70 R08: 0000000000000000 R09: 0000000000000000 [ 41.951819][ T6019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.951827][ T6019] R13: 00007fa2bb626038 R14: 00007fa2bb625fa0 R15: 00007fff1b3979e8 [ 41.951844][ T6019] [ 41.951853][ T6019] BUG: Bad page state in process syz.2.19 pfn:5b472 [ 41.951862][ T6019] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5b472 [ 41.951877][ T6019] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 41.951896][ T6019] raw: 00fff00000000000 dead000000000040 ffff888024a5d000 0000000000000000 [ 41.951911][ T6019] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 41.951921][ T6019] page dumped because: page_pool leak [ 41.951928][ T6019] page_owner tracks the page as allocated [ 41.951933][ T6019] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6019, tgid 6018 (syz.2.19), ts 41946433011 [ 41.951954][ T6019] post_alloc_hook+0xfd/0x120 [ 41.951973][ T6019] get_page_from_freelist+0x112f/0x3640 [ 41.951992][ T6019] __alloc_frozen_pages_noprof+0x2ad/0x31e0 [ 41.952022][ T6019] alloc_pages_bulk_noprof+0x5f0/0x1480 [ 41.952043][ T6019] __page_pool_alloc_netmems_slow+0x178/0x930 [ 41.952062][ T6019] page_pool_alloc_netmems+0xc4/0x1a0 [ 41.952081][ T6019] skb_pp_cow_data+0x96a/0x1130 [ 41.952101][ T6019] skb_cow_data_for_xdp+0x88/0xb0 [ 41.952123][ T6019] do_xdp_generic+0x571/0x12e0 [ 41.952138][ T6019] tun_get_user+0x1d21/0x3ee0 [ 41.952158][ T6019] tun_chr_write_iter+0xdc/0x200 [ 41.952180][ T6019] vfs_write+0x6af/0x1050 [ 41.952196][ T6019] ksys_write+0x12a/0x250 [ 41.952214][ T6019] do_syscall_64+0x123/0x790 [ 41.952233][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.952249][ T6019] page_owner free stack trace missing [ 41.952254][ T6019] Modules linked in: [ 41.952267][ T6019] CPU: 3 UID: 0 PID: 6019 Comm: syz.2.19 Tainted: G B syzkaller #0 PREEMPT(full) [ 41.952290][ T6019] Tainted: [B]=BAD_PAGE [ 41.952296][ T6019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.952306][ T6019] Call Trace: [ 41.952312][ T6019] [ 41.952318][ T6019] dump_stack_lvl+0x100/0x190 [ 41.952345][ T6019] bad_page.cold+0x58/0x6b [ 41.952370][ T6019] __free_frozen_pages+0x7e6/0x1110 [ 41.952391][ T6019] ? kasan_quarantine_put+0x104/0x240 [ 41.952407][ T6019] ? lockdep_hardirqs_on+0x7d/0x110 [ 41.952426][ T6019] page_frag_free+0x199/0x1f0 [ 41.952449][ T6019] __xdp_return+0x3b6/0x990 [ 41.952468][ T6019] bpf_xdp_adjust_tail+0x8a1/0xbb0 [ 41.952488][ T6019] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 41.952501][ T6019] bpf_prog_run_generic_xdp+0x5ff/0x1630 [ 41.952524][ T6019] do_xdp_generic+0x933/0x12e0 [ 41.952542][ T6019] ? __pfx_do_xdp_generic+0x10/0x10 [ 41.952555][ T6019] ? __lock_acquire+0x5c0/0x1f40 [ 41.952580][ T6019] tun_get_user+0x1d21/0x3ee0 [ 41.952601][ T6019] ? __lock_acquire+0x5c0/0x1f40 [ 41.952618][ T6019] ? __pfx_tun_get_user+0x10/0x10 [ 41.952637][ T6019] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 41.952652][ T6019] ? find_held_lock+0x2b/0x80 [ 41.952666][ T6019] ? tun_get+0x191/0x370 [ 41.952681][ T6019] ? tun_get+0x191/0x370 [ 41.952699][ T6019] tun_chr_write_iter+0xdc/0x200 [ 41.952718][ T6019] vfs_write+0x6af/0x1050 [ 41.952733][ T6019] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 41.952759][ T6019] ? __pfx_vfs_write+0x10/0x10 [ 41.952774][ T6019] ? find_held_lock+0x2b/0x80 [ 41.952796][ T6019] ksys_write+0x12a/0x250 [ 41.952814][ T6019] ? __pfx_ksys_write+0x10/0x10 [ 41.952832][ T6019] do_syscall_64+0x123/0x790 [ 41.952849][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.952867][ T6019] RIP: 0033:0x7fa2bb36034e [ 41.952880][ T6019] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 41.952895][ T6019] RSP: 002b:00007fa2bc274fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 41.952912][ T6019] RAX: ffffffffffffffda RBX: 00007fa2bc2756c0 RCX: 00007fa2bb36034e [ 41.952923][ T6019] RDX: 000000000000fdef RSI: 00002000000003c0 RDI: 00000000000000c8 [ 41.952931][ T6019] RBP: 00007fa2bb437b70 R08: 0000000000000000 R09: 0000000000000000 [ 41.952942][ T6019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.952952][ T6019] R13: 00007fa2bb626038 R14: 00007fa2bb625fa0 R15: 00007fff1b3979e8 [ 41.952969][ T6019] [ 41.952977][ T6019] BUG: Bad page state in process syz.2.19 pfn:5b471 [ 41.952985][ T6019] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5b471 [ 41.953003][ T6019] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 41.953022][ T6019] raw: 00fff00000000000 dead000000000040 ffff888024a5d000 0000000000000000 [ 41.953037][ T6019] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 41.953046][ T6019] page dumped because: page_pool leak [ 41.953054][ T6019] page_owner tracks the page as allocated [ 41.953058][ T6019] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6019, tgid 6018 (syz.2.19), ts 41946416544 [ 41.953082][ T6019] post_alloc_hook+0xfd/0x120 [ 41.953101][ T6019] get_page_from_freelist+0x112f/0x3640 [ 41.953119][ T6019] __alloc_frozen_pages_noprof+0x2ad/0x31e0 [ 41.953140][ T6019] alloc_pages_bulk_noprof+0x5f0/0x1480 [ 41.953162][ T6019] __page_pool_alloc_netmems_slow+0x178/0x930 [ 41.953182][ T6019] page_pool_alloc_netmems+0xc4/0x1a0 [ 41.953201][ T6019] skb_pp_cow_data+0x96a/0x1130 [ 41.953220][ T6019] skb_cow_data_for_xdp+0x88/0xb0 [ 41.953237][ T6019] do_xdp_generic+0x571/0x12e0 [ 41.953250][ T6019] tun_get_user+0x1d21/0x3ee0 [ 41.953269][ T6019] tun_chr_write_iter+0xdc/0x200 [ 41.953288][ T6019] vfs_write+0x6af/0x1050 [ 41.953323][ T6019] ksys_write+0x12a/0x250 [ 41.953336][ T6019] do_syscall_64+0x123/0x790 [ 41.953350][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.953362][ T6019] page_owner free stack trace missing [ 41.953366][ T6019] Modules linked in: [ 41.953377][ T6019] CPU: 3 UID: 0 PID: 6019 Comm: syz.2.19 Tainted: G B syzkaller #0 PREEMPT(full) [ 41.953396][ T6019] Tainted: [B]=BAD_PAGE [ 41.953401][ T6019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.953409][ T6019] Call Trace: [ 41.953413][ T6019] [ 41.953419][ T6019] dump_stack_lvl+0x100/0x190 [ 41.953440][ T6019] bad_page.cold+0x58/0x6b [ 41.953460][ T6019] __free_frozen_pages+0x7e6/0x1110 [ 41.953477][ T6019] ? kasan_quarantine_put+0x104/0x240 [ 41.953490][ T6019] ? lockdep_hardirqs_on+0x7d/0x110 [ 41.953506][ T6019] page_frag_free+0x199/0x1f0 [ 41.953526][ T6019] __xdp_return+0x3b6/0x990 [ 41.953541][ T6019] bpf_xdp_adjust_tail+0x8a1/0xbb0 [ 41.953559][ T6019] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 41.953570][ T6019] bpf_prog_run_generic_xdp+0x5ff/0x1630 [ 41.953589][ T6019] do_xdp_generic+0x933/0x12e0 [ 41.953605][ T6019] ? __pfx_do_xdp_generic+0x10/0x10 [ 41.953621][ T6019] ? __lock_acquire+0x5c0/0x1f40 [ 41.953647][ T6019] tun_get_user+0x1d21/0x3ee0 [ 41.953669][ T6019] ? __lock_acquire+0x5c0/0x1f40 [ 41.953687][ T6019] ? __pfx_tun_get_user+0x10/0x10 [ 41.953707][ T6019] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 41.953724][ T6019] ? find_held_lock+0x2b/0x80 [ 41.953738][ T6019] ? tun_get+0x191/0x370 [ 41.953755][ T6019] ? tun_get+0x191/0x370 [ 41.953775][ T6019] tun_chr_write_iter+0xdc/0x200 [ 41.953796][ T6019] vfs_write+0x6af/0x1050 [ 41.953812][ T6019] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 41.953834][ T6019] ? __pfx_vfs_write+0x10/0x10 [ 41.953850][ T6019] ? find_held_lock+0x2b/0x80 [ 41.953871][ T6019] ksys_write+0x12a/0x250 [ 41.953888][ T6019] ? __pfx_ksys_write+0x10/0x10 [ 41.953907][ T6019] do_syscall_64+0x123/0x790 [ 41.953923][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.953940][ T6019] RIP: 0033:0x7fa2bb36034e [ 41.953953][ T6019] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 41.953968][ T6019] RSP: 002b:00007fa2bc274fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 41.953985][ T6019] RAX: ffffffffffffffda RBX: 00007fa2bc2756c0 RCX: 00007fa2bb36034e [ 41.954002][ T6019] RDX: 000000000000fdef RSI: 00002000000003c0 RDI: 00000000000000c8 [ 41.954013][ T6019] RBP: 00007fa2bb437b70 R08: 0000000000000000 R09: 0000000000000000 [ 41.954023][ T6019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.954033][ T6019] R13: 00007fa2bb626038 R14: 00007fa2bb625fa0 R15: 00007fff1b3979e8 [ 41.954045][ T6019] [ 41.954052][ T6019] BUG: Bad page state in process syz.2.19 pfn:5b470 [ 41.954059][ T6019] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5b470 [ 41.954070][ T6019] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 41.954085][ T6019] raw: 00fff00000000000 dead000000000040 ffff888024a5d000 0000000000000000 [ 41.954096][ T6019] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 41.954103][ T6019] page dumped because: page_pool leak [ 41.954109][ T6019] page_owner tracks the page as allocated [ 41.954112][ T6019] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6019, tgid 6018 (syz.2.19), ts 41946399717 [ 41.954129][ T6019] post_alloc_hook+0xfd/0x120 [ 41.954149][ T6019] get_page_from_freelist+0x112f/0x3640 [ 41.954166][ T6019] __alloc_frozen_pages_noprof+0x2ad/0x31e0 [ 41.954183][ T6019] alloc_pages_bulk_noprof+0x5f0/0x1480 [ 41.954202][ T6019] __page_pool_alloc_netmems_slow+0x178/0x930 [ 41.954222][ T6019] page_pool_alloc_netmems+0xc4/0x1a0 [ 41.954238][ T6019] skb_pp_cow_data+0x96a/0x1130 [ 41.954257][ T6019] skb_cow_data_for_xdp+0x88/0xb0 [ 41.954274][ T6019] do_xdp_generic+0x571/0x12e0 [ 41.954286][ T6019] tun_get_user+0x1d21/0x3ee0 [ 41.954302][ T6019] tun_chr_write_iter+0xdc/0x200 [ 41.954319][ T6019] vfs_write+0x6af/0x1050 [ 41.954331][ T6019] ksys_write+0x12a/0x250 [ 41.954343][ T6019] do_syscall_64+0x123/0x790 [ 41.954357][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.954370][ T6019] page_owner free stack trace missing [ 41.954374][ T6019] Modules linked in: [ 41.954384][ T6019] CPU: 3 UID: 0 PID: 6019 Comm: syz.2.19 Tainted: G B syzkaller #0 PREEMPT(full) [ 41.954404][ T6019] Tainted: [B]=BAD_PAGE [ 41.954409][ T6019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.954417][ T6019] Call Trace: [ 41.954421][ T6019] [ 41.954426][ T6019] dump_stack_lvl+0x100/0x190 [ 41.954448][ T6019] bad_page.cold+0x58/0x6b [ 41.954468][ T6019] __free_frozen_pages+0x7e6/0x1110 [ 41.954486][ T6019] ? kasan_quarantine_put+0x104/0x240 [ 41.954502][ T6019] ? lockdep_hardirqs_on+0x7d/0x110 [ 41.954518][ T6019] page_frag_free+0x199/0x1f0 [ 41.954543][ T6019] __xdp_return+0x3b6/0x990 [ 41.954560][ T6019] bpf_xdp_adjust_tail+0x8a1/0xbb0 [ 41.954581][ T6019] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 41.954596][ T6019] bpf_prog_run_generic_xdp+0x5ff/0x1630 [ 41.954619][ T6019] do_xdp_generic+0x933/0x12e0 [ 41.954637][ T6019] ? __pfx_do_xdp_generic+0x10/0x10 [ 41.954653][ T6019] ? __lock_acquire+0x5c0/0x1f40 [ 41.954682][ T6019] tun_get_user+0x1d21/0x3ee0 [ 41.954710][ T6019] ? __lock_acquire+0x5c0/0x1f40 [ 41.954732][ T6019] ? __pfx_tun_get_user+0x10/0x10 [ 41.954755][ T6019] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 41.954773][ T6019] ? find_held_lock+0x2b/0x80 [ 41.954787][ T6019] ? tun_get+0x191/0x370 [ 41.954805][ T6019] ? tun_get+0x191/0x370 [ 41.954824][ T6019] tun_chr_write_iter+0xdc/0x200 [ 41.954844][ T6019] vfs_write+0x6af/0x1050 [ 41.954861][ T6019] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 41.954881][ T6019] ? __pfx_vfs_write+0x10/0x10 [ 41.954895][ T6019] ? find_held_lock+0x2b/0x80 [ 41.954915][ T6019] ksys_write+0x12a/0x250 [ 41.954929][ T6019] ? __pfx_ksys_write+0x10/0x10 [ 41.954949][ T6019] do_syscall_64+0x123/0x790 [ 41.954970][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.954987][ T6019] RIP: 0033:0x7fa2bb36034e [ 41.955007][ T6019] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 41.955021][ T6019] RSP: 002b:00007fa2bc274fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 41.955036][ T6019] RAX: ffffffffffffffda RBX: 00007fa2bc2756c0 RCX: 00007fa2bb36034e [ 41.955048][ T6019] RDX: 000000000000fdef RSI: 00002000000003c0 RDI: 00000000000000c8 [ 41.955060][ T6019] RBP: 00007fa2bb437b70 R08: 0000000000000000 R09: 0000000000000000 [ 41.955069][ T6019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.955079][ T6019] R13: 00007fa2bb626038 R14: 00007fa2bb625fa0 R15: 00007fff1b3979e8 [ 41.955097][ T6019] [ 41.955105][ T6019] BUG: Bad page state in process syz.2.19 pfn:5b46f [ 41.955115][ T6019] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5b46f [ 41.955129][ T6019] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 41.955148][ T6019] raw: 00fff00000000000 dead000000000040 ffff888024a5d000 0000000000000000 [ 41.955162][ T6019] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 41.955171][ T6019] page dumped because: page_pool leak [ 41.955177][ T6019] page_owner tracks the page as allocated [ 41.955181][ T6019] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6019, tgid 6018 (syz.2.19), ts 41946383315 [ 41.955202][ T6019] post_alloc_hook+0xfd/0x120 [ 41.955223][ T6019] get_page_from_freelist+0x112f/0x3640 [ 41.955245][ T6019] __alloc_frozen_pages_noprof+0x2ad/0x31e0 [ 41.955268][ T6019] alloc_pages_bulk_noprof+0x5f0/0x1480 [ 41.955291][ T6019] __page_pool_alloc_netmems_slow+0x178/0x930 [ 41.955312][ T6019] page_pool_alloc_netmems+0xc4/0x1a0 [ 41.955331][ T6019] skb_pp_cow_data+0x96a/0x1130 [ 41.955352][ T6019] skb_cow_data_for_xdp+0x88/0xb0 [ 41.955373][ T6019] do_xdp_generic+0x571/0x12e0 [ 41.955388][ T6019] tun_get_user+0x1d21/0x3ee0 [ 41.955410][ T6019] tun_chr_write_iter+0xdc/0x200 [ 41.955430][ T6019] vfs_write+0x6af/0x1050 [ 41.955445][ T6019] ksys_write+0x12a/0x250 [ 41.955460][ T6019] do_syscall_64+0x123/0x790 [ 41.955477][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.955491][ T6019] page_owner free stack trace missing [ 41.955495][ T6019] Modules linked in: [ 41.955507][ T6019] CPU: 3 UID: 0 PID: 6019 Comm: syz.2.19 Tainted: G B syzkaller #0 PREEMPT(full) [ 41.955527][ T6019] Tainted: [B]=BAD_PAGE [ 41.955533][ T6019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.955541][ T6019] Call Trace: [ 41.955546][ T6019] [ 41.955552][ T6019] dump_stack_lvl+0x100/0x190 [ 41.955577][ T6019] bad_page.cold+0x58/0x6b [ 41.955603][ T6019] __free_frozen_pages+0x7e6/0x1110 [ 41.955624][ T6019] ? kasan_quarantine_put+0x104/0x240 [ 41.955639][ T6019] ? lockdep_hardirqs_on+0x7d/0x110 [ 41.955657][ T6019] page_frag_free+0x199/0x1f0 [ 41.955681][ T6019] __xdp_return+0x3b6/0x990 [ 41.955700][ T6019] bpf_xdp_adjust_tail+0x8a1/0xbb0 [ 41.955722][ T6019] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 41.955737][ T6019] bpf_prog_run_generic_xdp+0x5ff/0x1630 [ 41.955759][ T6019] do_xdp_generic+0x933/0x12e0 [ 41.955779][ T6019] ? __pfx_do_xdp_generic+0x10/0x10 [ 41.955796][ T6019] ? __lock_acquire+0x5c0/0x1f40 [ 41.955824][ T6019] tun_get_user+0x1d21/0x3ee0 [ 41.955846][ T6019] ? __lock_acquire+0x5c0/0x1f40 [ 41.955864][ T6019] ? __pfx_tun_get_user+0x10/0x10 [ 41.955883][ T6019] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 41.955899][ T6019] ? find_held_lock+0x2b/0x80 [ 41.955912][ T6019] ? tun_get+0x191/0x370 [ 41.955929][ T6019] ? tun_get+0x191/0x370 [ 41.955951][ T6019] tun_chr_write_iter+0xdc/0x200 [ 41.955976][ T6019] vfs_write+0x6af/0x1050 [ 41.956000][ T6019] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 41.956024][ T6019] ? __pfx_vfs_write+0x10/0x10 [ 41.956040][ T6019] ? find_held_lock+0x2b/0x80 [ 41.956060][ T6019] ksys_write+0x12a/0x250 [ 41.956075][ T6019] ? __pfx_ksys_write+0x10/0x10 [ 41.956095][ T6019] do_syscall_64+0x123/0x790 [ 41.956111][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.956125][ T6019] RIP: 0033:0x7fa2bb36034e [ 41.956135][ T6019] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 41.956148][ T6019] RSP: 002b:00007fa2bc274fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 41.956164][ T6019] RAX: ffffffffffffffda RBX: 00007fa2bc2756c0 RCX: 00007fa2bb36034e [ 41.956176][ T6019] RDX: 000000000000fdef RSI: 00002000000003c0 RDI: 00000000000000c8 [ 41.956185][ T6019] RBP: 00007fa2bb437b70 R08: 0000000000000000 R09: 0000000000000000 [ 41.956196][ T6019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.956207][ T6019] R13: 00007fa2bb626038 R14: 00007fa2bb625fa0 R15: 00007fff1b3979e8 [ 41.956223][ T6019] [ 41.956231][ T6019] BUG: Bad page state in process syz.2.19 pfn:5b46e [ 41.956241][ T6019] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5b46e [ 41.956255][ T6019] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 41.956274][ T6019] raw: 00fff00000000000 dead000000000040 ffff888024a5d000 0000000000000000 [ 41.956289][ T6019] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 41.956297][ T6019] page dumped because: page_pool leak [ 41.956303][ T6019] page_owner tracks the page as allocated [ 41.956308][ T6019] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6019, tgid 6018 (syz.2.19), ts 41946355985 [ 41.956328][ T6019] post_alloc_hook+0xfd/0x120 [ 41.956348][ T6019] get_page_from_freelist+0x112f/0x3640 [ 41.956371][ T6019] __alloc_frozen_pages_noprof+0x2ad/0x31e0 [ 41.956394][ T6019] alloc_pages_bulk_noprof+0x5f0/0x1480 [ 41.956414][ T6019] __page_pool_alloc_netmems_slow+0x178/0x930 [ 41.956433][ T6019] page_pool_alloc_netmems+0xc4/0x1a0 [ 41.956451][ T6019] skb_pp_cow_data+0x96a/0x1130 [ 41.956469][ T6019] skb_cow_data_for_xdp+0x88/0xb0 [ 41.956487][ T6019] do_xdp_generic+0x571/0x12e0 [ 41.956500][ T6019] tun_get_user+0x1d21/0x3ee0 [ 41.956518][ T6019] tun_chr_write_iter+0xdc/0x200 [ 41.956541][ T6019] vfs_write+0x6af/0x1050 [ 41.956555][ T6019] ksys_write+0x12a/0x250 [ 41.956569][ T6019] do_syscall_64+0x123/0x790 [ 41.956586][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.956600][ T6019] page_owner free stack trace missing [ 41.956604][ T6019] Modules linked in: [ 41.956615][ T6019] CPU: 3 UID: 0 PID: 6019 Comm: syz.2.19 Tainted: G B syzkaller #0 PREEMPT(full) [ 41.956636][ T6019] Tainted: [B]=BAD_PAGE [ 41.956641][ T6019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.956649][ T6019] Call Trace: [ 41.956654][ T6019] [ 41.956660][ T6019] dump_stack_lvl+0x100/0x190 [ 41.956686][ T6019] bad_page.cold+0x58/0x6b [ 41.956711][ T6019] __free_frozen_pages+0x7e6/0x1110 [ 41.956732][ T6019] ? kasan_quarantine_put+0x104/0x240 [ 41.956746][ T6019] ? lockdep_hardirqs_on+0x7d/0x110 [ 41.956763][ T6019] page_frag_free+0x199/0x1f0 [ 41.956787][ T6019] __xdp_return+0x3b6/0x990 [ 41.956803][ T6019] bpf_xdp_adjust_tail+0x8a1/0xbb0 [ 41.956825][ T6019] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 41.956854][ T6019] bpf_prog_run_generic_xdp+0x5ff/0x1630 [ 41.956878][ T6019] do_xdp_generic+0x933/0x12e0 [ 41.956898][ T6019] ? __pfx_do_xdp_generic+0x10/0x10 [ 41.956916][ T6019] ? __lock_acquire+0x5c0/0x1f40 [ 41.956946][ T6019] tun_get_user+0x1d21/0x3ee0 [ 41.956973][ T6019] ? __lock_acquire+0x5c0/0x1f40 [ 41.957002][ T6019] ? __pfx_tun_get_user+0x10/0x10 [ 41.957025][ T6019] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 41.957043][ T6019] ? find_held_lock+0x2b/0x80 [ 41.957059][ T6019] ? tun_get+0x191/0x370 [ 41.957077][ T6019] ? tun_get+0x191/0x370 [ 41.957098][ T6019] tun_chr_write_iter+0xdc/0x200 [ 41.957121][ T6019] vfs_write+0x6af/0x1050 [ 41.957137][ T6019] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 41.957159][ T6019] ? __pfx_vfs_write+0x10/0x10 [ 41.957174][ T6019] ? find_held_lock+0x2b/0x80 [ 41.957197][ T6019] ksys_write+0x12a/0x250 [ 41.957214][ T6019] ? __pfx_ksys_write+0x10/0x10 [ 41.957235][ T6019] do_syscall_64+0x123/0x790 [ 41.957547][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.957566][ T6019] RIP: 0033:0x7fa2bb36034e [ 41.957578][ T6019] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 41.957595][ T6019] RSP: 002b:00007fa2bc274fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 41.957609][ T6019] RAX: ffffffffffffffda RBX: 00007fa2bc2756c0 RCX: 00007fa2bb36034e [ 41.957619][ T6019] RDX: 000000000000fdef RSI: 00002000000003c0 RDI: 00000000000000c8 [ 41.957629][ T6019] RBP: 00007fa2bb437b70 R08: 0000000000000000 R09: 0000000000000000 [ 41.957639][ T6019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.957648][ T6019] R13: 00007fa2bb626038 R14: 00007fa2bb625fa0 R15: 00007fff1b3979e8 [ 41.957663][ T6019] [ 41.957670][ T6019] BUG: Bad page state in process syz.2.19 pfn:5b46d [ 41.957678][ T6019] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5b46d [ 41.957691][ T6019] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 41.957708][ T6019] raw: 00fff00000000000 dead000000000040 ffff888024a5d000 0000000000000000 [ 41.957723][ T6019] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 41.957733][ T6019] page dumped because: page_pool leak [ 41.957740][ T6019] page_owner tracks the page as allocated [ 41.957744][ T6019] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6019, tgid 6018 (syz.2.19), ts 41946329138 [ 41.957768][ T6019] post_alloc_hook+0xfd/0x120 [ 41.957787][ T6019] get_page_from_freelist+0x112f/0x3640 [ 41.957807][ T6019] __alloc_frozen_pages_noprof+0x2ad/0x31e0 [ 41.957827][ T6019] alloc_pages_bulk_noprof+0x5f0/0x1480 [ 41.957847][ T6019] __page_pool_alloc_netmems_slow+0x178/0x930 [ 41.957865][ T6019] page_pool_alloc_netmems+0xc4/0x1a0 [ 41.957882][ T6019] skb_pp_cow_data+0x96a/0x1130 [ 41.957903][ T6019] skb_cow_data_for_xdp+0x88/0xb0 [ 41.957925][ T6019] do_xdp_generic+0x571/0x12e0 [ 41.957941][ T6019] tun_get_user+0x1d21/0x3ee0 [ 41.957962][ T6019] tun_chr_write_iter+0xdc/0x200 [ 41.957984][ T6019] vfs_write+0x6af/0x1050 [ 41.958005][ T6019] ksys_write+0x12a/0x250 [ 41.958021][ T6019] do_syscall_64+0x123/0x790 [ 41.958037][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.958051][ T6019] page_owner free stack trace missing [ 41.958056][ T6019] Modules linked in: [ 41.958067][ T6019] CPU: 3 UID: 0 PID: 6019 Comm: syz.2.19 Tainted: G B syzkaller #0 PREEMPT(full) [ 41.958089][ T6019] Tainted: [B]=BAD_PAGE [ 41.958096][ T6019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.958105][ T6019] Call Trace: [ 41.958110][ T6019] [ 41.958116][ T6019] dump_stack_lvl+0x100/0x190 [ 41.958142][ T6019] bad_page.cold+0x58/0x6b [ 41.958165][ T6019] __free_frozen_pages+0x7e6/0x1110 [ 41.958184][ T6019] ? kasan_quarantine_put+0x104/0x240 [ 41.958198][ T6019] ? lockdep_hardirqs_on+0x7d/0x110 [ 41.958215][ T6019] page_frag_free+0x199/0x1f0 [ 41.958238][ T6019] __xdp_return+0x3b6/0x990 [ 41.958254][ T6019] bpf_xdp_adjust_tail+0x8a1/0xbb0 [ 41.958275][ T6019] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 41.958290][ T6019] bpf_prog_run_generic_xdp+0x5ff/0x1630 [ 41.958313][ T6019] do_xdp_generic+0x933/0x12e0 [ 41.958333][ T6019] ? __pfx_do_xdp_generic+0x10/0x10 [ 41.958348][ T6019] ? __lock_acquire+0x5c0/0x1f40 [ 41.958377][ T6019] tun_get_user+0x1d21/0x3ee0 [ 41.958401][ T6019] ? __lock_acquire+0x5c0/0x1f40 [ 41.958421][ T6019] ? __pfx_tun_get_user+0x10/0x10 [ 41.958443][ T6019] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 41.958464][ T6019] ? find_held_lock+0x2b/0x80 [ 41.958482][ T6019] ? tun_get+0x191/0x370 [ 41.958503][ T6019] ? tun_get+0x191/0x370 [ 41.958525][ T6019] tun_chr_write_iter+0xdc/0x200 [ 41.958547][ T6019] vfs_write+0x6af/0x1050 [ 41.958562][ T6019] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 41.958584][ T6019] ? __pfx_vfs_write+0x10/0x10 [ 41.958598][ T6019] ? find_held_lock+0x2b/0x80 [ 41.958619][ T6019] ksys_write+0x12a/0x250 [ 41.958635][ T6019] ? __pfx_ksys_write+0x10/0x10 [ 41.958656][ T6019] do_syscall_64+0x123/0x790 [ 41.958676][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.958694][ T6019] RIP: 0033:0x7fa2bb36034e [ 41.958705][ T6019] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 41.958719][ T6019] RSP: 002b:00007fa2bc274fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 41.958733][ T6019] RAX: ffffffffffffffda RBX: 00007fa2bc2756c0 RCX: 00007fa2bb36034e [ 41.958743][ T6019] RDX: 000000000000fdef RSI: 00002000000003c0 RDI: 00000000000000c8 [ 41.958752][ T6019] RBP: 00007fa2bb437b70 R08: 0000000000000000 R09: 0000000000000000 [ 41.958762][ T6019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.958770][ T6019] R13: 00007fa2bb626038 R14: 00007fa2bb625fa0 R15: 00007fff1b3979e8 [ 41.958785][ T6019] [ 41.958792][ T6019] BUG: Bad page state in process syz.2.19 pfn:5b46c [ 41.958800][ T6019] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5b46c [ 41.958814][ T6019] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 41.958833][ T6019] raw: 00fff00000000000 dead000000000040 ffff888024a5d000 0000000000000000 [ 41.958848][ T6019] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 41.958857][ T6019] page dumped because: page_pool leak [ 41.958865][ T6019] page_owner tracks the page as allocated [ 41.958870][ T6019] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6019, tgid 6018 (syz.2.19), ts 41946300794 [ 41.958889][ T6019] post_alloc_hook+0xfd/0x120 [ 41.958907][ T6019] get_page_from_freelist+0x112f/0x3640 [ 41.958926][ T6019] __alloc_frozen_pages_noprof+0x2ad/0x31e0 [ 41.958947][ T6019] alloc_pages_bulk_noprof+0x5f0/0x1480 [ 41.958967][ T6019] __page_pool_alloc_netmems_slow+0x178/0x930 [ 41.958986][ T6019] page_pool_alloc_netmems+0xc4/0x1a0 [ 41.959013][ T6019] skb_pp_cow_data+0x96a/0x1130 [ 41.959033][ T6019] skb_cow_data_for_xdp+0x88/0xb0 [ 41.959054][ T6019] do_xdp_generic+0x571/0x12e0 [ 41.959071][ T6019] tun_get_user+0x1d21/0x3ee0 [ 41.959092][ T6019] tun_chr_write_iter+0xdc/0x200 [ 41.959112][ T6019] vfs_write+0x6af/0x1050 [ 41.959125][ T6019] ksys_write+0x12a/0x250 [ 41.959138][ T6019] do_syscall_64+0x123/0x790 [ 41.959153][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.959167][ T6019] page_owner free stack trace missing [ 41.959172][ T6019] Modules linked in: [ 41.959183][ T6019] CPU: 3 UID: 0 PID: 6019 Comm: syz.2.19 Tainted: G B syzkaller #0 PREEMPT(full) [ 41.959207][ T6019] Tainted: [B]=BAD_PAGE [ 41.959212][ T6019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.959221][ T6019] Call Trace: [ 41.959226][ T6019] [ 41.959232][ T6019] dump_stack_lvl+0x100/0x190 [ 41.959257][ T6019] bad_page.cold+0x58/0x6b [ 41.959279][ T6019] __free_frozen_pages+0x7e6/0x1110 [ 41.959298][ T6019] ? kasan_quarantine_put+0x104/0x240 [ 41.959312][ T6019] ? lockdep_hardirqs_on+0x7d/0x110 [ 41.959329][ T6019] page_frag_free+0x199/0x1f0 [ 41.959352][ T6019] __xdp_return+0x3b6/0x990 [ 41.959371][ T6019] bpf_xdp_adjust_tail+0x8a1/0xbb0 [ 41.959392][ T6019] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 41.959406][ T6019] bpf_prog_run_generic_xdp+0x5ff/0x1630 [ 41.959429][ T6019] do_xdp_generic+0x933/0x12e0 [ 41.959447][ T6019] ? __pfx_do_xdp_generic+0x10/0x10 [ 41.959462][ T6019] ? __lock_acquire+0x5c0/0x1f40 [ 41.959490][ T6019] tun_get_user+0x1d21/0x3ee0 [ 41.959514][ T6019] ? __lock_acquire+0x5c0/0x1f40 [ 41.959534][ T6019] ? __pfx_tun_get_user+0x10/0x10 [ 41.959557][ T6019] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 41.959578][ T6019] ? find_held_lock+0x2b/0x80 [ 41.959595][ T6019] ? tun_get+0x191/0x370 [ 41.959616][ T6019] ? tun_get+0x191/0x370 [ 41.959637][ T6019] tun_chr_write_iter+0xdc/0x200 [ 41.959659][ T6019] vfs_write+0x6af/0x1050 [ 41.959674][ T6019] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 41.959696][ T6019] ? __pfx_vfs_write+0x10/0x10 [ 41.959710][ T6019] ? find_held_lock+0x2b/0x80 [ 41.959734][ T6019] ksys_write+0x12a/0x250 [ 41.959751][ T6019] ? __pfx_ksys_write+0x10/0x10 [ 41.959771][ T6019] do_syscall_64+0x123/0x790 [ 41.959792][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.959806][ T6019] RIP: 0033:0x7fa2bb36034e [ 41.959817][ T6019] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 41.959830][ T6019] RSP: 002b:00007fa2bc274fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 41.959844][ T6019] RAX: ffffffffffffffda RBX: 00007fa2bc2756c0 RCX: 00007fa2bb36034e [ 41.959853][ T6019] RDX: 000000000000fdef RSI: 00002000000003c0 RDI: 00000000000000c8 [ 41.959863][ T6019] RBP: 00007fa2bb437b70 R08: 0000000000000000 R09: 0000000000000000 [ 41.959871][ T6019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.959880][ T6019] R13: 00007fa2bb626038 R14: 00007fa2bb625fa0 R15: 00007fff1b3979e8 [ 41.959895][ T6019] [ 41.959902][ T6019] BUG: Bad page state in process syz.2.19 pfn:5b46b [ 41.959911][ T6019] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5b46b [ 41.959925][ T6019] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 41.959943][ T6019] raw: 00fff00000000000 dead000000000040 ffff888024a5d000 0000000000000000 [ 41.959958][ T6019] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 41.959967][ T6019] page dumped because: page_pool leak [ 41.959974][ T6019] page_owner tracks the page as allocated [ 41.959979][ T6019] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6019, tgid 6018 (syz.2.19), ts 41946272932 [ 41.960003][ T6019] post_alloc_hook+0xfd/0x120 [ 41.960020][ T6019] get_page_from_freelist+0x112f/0x3640 [ 41.960040][ T6019] __alloc_frozen_pages_noprof+0x2ad/0x31e0 [ 41.960060][ T6019] alloc_pages_bulk_noprof+0x5f0/0x1480 [ 41.960080][ T6019] __page_pool_alloc_netmems_slow+0x178/0x930 [ 41.960099][ T6019] page_pool_alloc_netmems+0xc4/0x1a0 [ 41.960180][ T6019] skb_pp_cow_data+0x96a/0x1130 [ 41.960203][ T6019] skb_cow_data_for_xdp+0x88/0xb0 [ 41.960223][ T6019] do_xdp_generic+0x571/0x12e0 [ 41.960237][ T6019] tun_get_user+0x1d21/0x3ee0 [ 41.960256][ T6019] tun_chr_write_iter+0xdc/0x200 [ 41.960275][ T6019] vfs_write+0x6af/0x1050 [ 41.960288][ T6019] ksys_write+0x12a/0x250 [ 41.960301][ T6019] do_syscall_64+0x123/0x790 [ 41.960316][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.960330][ T6019] page_owner free stack trace missing [ 41.960336][ T6019] Modules linked in: [ 41.960347][ T6019] CPU: 3 UID: 0 PID: 6019 Comm: syz.2.19 Tainted: G B syzkaller #0 PREEMPT(full) [ 41.960368][ T6019] Tainted: [B]=BAD_PAGE [ 41.960373][ T6019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.960382][ T6019] Call Trace: [ 41.960388][ T6019] [ 41.960395][ T6019] dump_stack_lvl+0x100/0x190 [ 41.960420][ T6019] bad_page.cold+0x58/0x6b [ 41.960445][ T6019] __free_frozen_pages+0x7e6/0x1110 [ 41.960464][ T6019] ? kasan_quarantine_put+0x104/0x240 [ 41.960478][ T6019] ? lockdep_hardirqs_on+0x7d/0x110 [ 41.960496][ T6019] page_frag_free+0x199/0x1f0 [ 41.960519][ T6019] __xdp_return+0x3b6/0x990 [ 41.960537][ T6019] bpf_xdp_adjust_tail+0x8a1/0xbb0 [ 41.960558][ T6019] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 41.960573][ T6019] bpf_prog_run_generic_xdp+0x5ff/0x1630 [ 41.960596][ T6019] do_xdp_generic+0x933/0x12e0 [ 41.960613][ T6019] ? __pfx_do_xdp_generic+0x10/0x10 [ 41.960628][ T6019] ? __lock_acquire+0x5c0/0x1f40 [ 41.960657][ T6019] tun_get_user+0x1d21/0x3ee0 [ 41.960681][ T6019] ? __lock_acquire+0x5c0/0x1f40 [ 41.960701][ T6019] ? __pfx_tun_get_user+0x10/0x10 [ 41.960722][ T6019] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 41.960740][ T6019] ? find_held_lock+0x2b/0x80 [ 41.960755][ T6019] ? tun_get+0x191/0x370 [ 41.960773][ T6019] ? tun_get+0x191/0x370 [ 41.960795][ T6019] tun_chr_write_iter+0xdc/0x200 [ 41.960817][ T6019] vfs_write+0x6af/0x1050 [ 41.960830][ T6019] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 41.960844][ T6019] ? __pfx_vfs_write+0x10/0x10 [ 41.960853][ T6019] ? find_held_lock+0x2b/0x80 [ 41.960867][ T6019] ksys_write+0x12a/0x250 [ 41.960876][ T6019] ? __pfx_ksys_write+0x10/0x10 [ 41.960887][ T6019] do_syscall_64+0x123/0x790 [ 41.960899][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.960908][ T6019] RIP: 0033:0x7fa2bb36034e [ 41.960915][ T6019] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 41.960924][ T6019] RSP: 002b:00007fa2bc274fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 41.960933][ T6019] RAX: ffffffffffffffda RBX: 00007fa2bc2756c0 RCX: 00007fa2bb36034e [ 41.960939][ T6019] RDX: 000000000000fdef RSI: 00002000000003c0 RDI: 00000000000000c8 [ 41.960945][ T6019] RBP: 00007fa2bb437b70 R08: 0000000000000000 R09: 0000000000000000 [ 41.960950][ T6019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.960956][ T6019] R13: 00007fa2bb626038 R14: 00007fa2bb625fa0 R15: 00007fff1b3979e8 [ 41.960965][ T6019] [ 42.988185][ T5960] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 43.000861][ T43] kauditd_printk_skb: 178 callbacks suppressed [ 43.000872][ T43] audit: type=1400 audit(1794029780.267:342): avc: denied { unmount } for pid=5783 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 43.620456][ T5793] Bluetooth: hci2: command tx timeout [ 43.620474][ T5793] Bluetooth: hci1: command tx timeout [ 43.620484][ T5793] Bluetooth: hci0: command tx timeout [ 43.620486][ T5786] Bluetooth: hci3: command tx timeout [ 45.700274][ T5786] Bluetooth: hci1: command tx timeout [ 45.700305][ T5786] Bluetooth: hci3: command tx timeout [ 45.700306][ T5792] Bluetooth: hci2: command tx timeout [ 45.700320][ T5786] Bluetooth: hci0: command tx timeout [ 49.396213][ T50] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.421868][ T43] audit: type=1400 audit(1794029786.697:343): avc: denied { write } for pid=6023 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.451362][ T43] audit: type=1400 audit(1794029786.727:344): avc: denied { write } for pid=6026 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 VM DIAGNOSIS: 05:36:19 Registers: info registers vcpu 0 CPU#0 RAX=ffffc90028490001 RBX=0000000000000001 RCX=ffffffff931e80de RDX=ffffc9002848f901 RSI=ffffc9002848f978 RDI=ffffc9002848f620 RBP=ffffc9002848f658 RSP=ffffc9002848f590 R8 =ffffffff931e80e2 R9 =0000000000000000 R10=ffffc9002848f610 R11=00000000000188d5 R12=ffffc9002848f660 R13=ffffc90028488000 R14=ffffc9002848f980 R15=ffffc9002848f644 RIP=ffffffff81bb58bf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f129c3bbc80 ffffffff 00c00000 GS =0000 ffff8880d4475000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa2bc274ff8 CR3=0000000027ef6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=0000000040200000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555f752dd600 0000555f752dd600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf47fed00 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 705f66706220205d 3931303654205b5d 3834353734392e31 342020205b203a6c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20000a2e20666920 616e000a33343036 3920363439312020 6f20202c2939312e ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64696774202c3931 303620646970202c 294e5241574f4e5f 5046475f5f7c4349 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4d4f54415f504647 2830323832783020 6b73616d5f706667 202c656c6261766f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d6e552065707974 6574617267696d20 2c3020726564726f 2061697620646574 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=8000000000000001 RBX=ffff88803f38eec0 RCX=ffffffff8267af7a RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000005 RBP=ffffea0000fce380 RSP=ffffc900016be5d0 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000003 R11=ffffffff8292b8b0 R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff820e64d8 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fa2bc2756c0 ffffffff 00c00000 GS =0000 ffff8880d4575000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000c00 CR3=0000000058623000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000054 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa2bc15d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff1b397ed6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff1b397ed6 00007fff1b397edc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa2bb4381ad ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa2bb4381e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa2bb43834b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa2bb4381d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa2bb5fa600 00007fa2bb5fa5e0 00007fa2bb5fa5e8 00007fa2bb5fa618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa2bb5fa5f8 00007fa2bb5fa5c8 00007fa2bb5fa600 00007fa2bb5fa5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000060 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffc90006680000 RBX=ffff88802c4fc000 RCX=0000000001000001 RDX=1ffff1100589fa8c RSI=ffffffff871b49ff RDI=0000000000000017 RBP=0000000000000080 RSP=ffffc90000658ec0 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff926aaa5f R11=ffffc90000658ff8 R12=ffff8880255e887c R13=dffffc0000000000 R14=ffff88802c4fd460 R15=0000000000000000 RIP=ffffffff871b4a27 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4675000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa2bc15da08 CR3=000000002942f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf3f137e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf3f137e6 00007ffcf3f137ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff4d94381ad ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff4d94381e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff4d943834b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff4d94381d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 317a797300020009 0000000500040005 0000000200050005 0000000600010005 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002000900000005 0004000500000002 0005000500000006 0001000527043953 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 161ed43a95cab423 dd02575ee524afe4 ab1aa65bc66b1f50 f1fac1487f429f8b ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f2feb61bd7fb2d9f 163140663bc612a1 5cce96becd838ce5 a6049f8bef0c00bf ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8ce45ddce2d372db cc2658ca68f759c9 900d801c73e46901 55ed952ab386699b ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 016442e8117fa7cb 7ac8a21d36774676 18524edb2d0464e3 00cd37bee017a4ba ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffc900016fecba RBX=dffffc0000000000 RCX=ffffc900016fecba RDX=1ffff920002dfd97 RSI=ffffffff82020ede RDI=ffffc900016fecb0 RBP=ffffc900016fecb0 RSP=ffffc900016feae8 R8 =0000000000000000 R9 =00000000000001f3 R10=ffffffff9cc7adc0 R11=0000000000019e05 R12=ffffc900016feb70 R13=ffffc900016feb90 R14=ffffc900016febd0 R15=ffffc900016febb0 RIP=ffffffff8bead2c1 RFL=00000802 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa2bc2756c0 ffffffff 00c00000 GS =0000 ffff8880d4775000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000200000010000 CR3=00000000293eb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff1b397ed6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff1b397ed6 00007fff1b397edc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa2bb4381ad ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa2bb4381e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa2bb43834b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa2bb4381d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa2bb5fa5f8 00007fa2bb5fa5c8 00007fa2bb5fa600 00007fa2bb5fa5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000060 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000