last executing test programs: 2.89652611s ago: executing program 3 (id=361): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x5, 0x0, 0xffe4}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 2.83967027s ago: executing program 3 (id=364): r0 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000280)='.\x00', 0x25000001) inotify_rm_watch(r1, r2) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r0, 0x82000000) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) ioctl$I2C_PEC(r3, 0x708, 0x40) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x7, &(0x7f00000000c0)={0x0, "af5405a7b1818f4a097d9a9f2996a3177cef40e38b874823e38090260074bf2cb6"}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x48, 0x32, 0xffff, 0x70bd27, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_police={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x48}}, 0x0) 2.723489509s ago: executing program 3 (id=368): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a00000000000000fe8000000000000000000000000000bb000000000a"], 0xe0}}, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = socket(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0xc, @mcast1, 0x8}, 0x7f) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x1, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x80000000}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0xc850}, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000280)) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r10, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r10, &(0x7f00000007c0)=[{{&(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10, 0x0}}], 0x1, 0x4000000) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r11, 0x303, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) 2.619788981s ago: executing program 3 (id=370): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000280)={0x3c, r1, 0x809, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x808}, 0x40) 2.560172037s ago: executing program 3 (id=371): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x192}}, 0x20}}, 0xfcffffff) 2.559881848s ago: executing program 3 (id=372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000080), 0x12) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vxcan1\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_read(r5, 0x1, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(r5, &(0x7f0000000680)={0x2c, &(0x7f0000000240)={0x0, 0x24, 0xf6, {0xf6, 0x21, "32adeedc14877d2d047d173aad209f0da5bcab5459e4c728bb35c7c0a0eca282e1ab6bb3f8f26bdc540fa967eb4773cecafb914b15388209089b545e2225c8c50cbe315a56ca9ee28edd2031eb91568dd034349e2a5386610a592631640a008ec0f5aef4381c9950e29db103122b8e7a6a976208d22478b81214099fee6f9de1afaa337dbffc594a70cdc5a0fae8ea4caf3e41cad6176621910bc9dfad802cc77567d89b1d988fa3aa21e74a0e5c797fe59ea903fa8c0758479903aa3f8f43e5225bc2a1339a4fcf23413e95f42738ce6be677204b59bdabdff91238a0577eec4b7da075a6de63f2fc87bbba2496f3479ec4ebfe"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}, &(0x7f0000000480)={0x0, 0xf, 0xca, {0x5, 0xf, 0xca, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x81, 0xc43}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xc, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "1b269907cfb12b0bd36015ecb371363d"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d77ef4b214ecdd0ba639d717b49e7059"}, @generic={0x82, 0x10, 0x2, "574d29cad532483d631d52ff600d9e694e77c0d77884a92902333300bb6ac18ceebc9d136c4040ed0ce0ddc6ccb80b5096ab8adaa5c07a0c71f0b54bcccfc3040a0b66004b2f176de34b699b358df16398f6127886c4fc131ebcd00cbda4b44666930caa6e1e86ccab3dc82f293437ae34403c1e7d6880155cd2cc869ecf4f"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xde, 0x8, 0xffff}]}}, &(0x7f0000000580)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x18, 0xf, 0x80, "a20e3e47", "49f06d4d"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf7, 0x0, 0xc6, 0x9c, 0x2, 0x8000, 0xa215}}}, &(0x7f0000000c80)={0x84, &(0x7f0000000840)={0x40, 0x12, 0xea, "f2ee53dc57d57cb5469acce7bac15444b81c88938ac56ee6ccec1177b132f0f3916810fd040af48241b9091c466a2bb4cc935291ee7aa7ce856653d804f5201c75dc944c2e05a58bd8773cabec7529bd349d9b3e5c810cd89d03f8a2355eec6155893d9f47556a2af6829f57d013abc96862ae1631e75e87273c174e38b885638033906c99ac6511d9de6b2bf33c9568ee3546b557bbb7d34e0d90095cb15b5826943dbecb31e82053e2540ddd3ba94a6407aa12f67a79beb8128669cee64c0065bd9c44ee972502579ca3e481a0f2de6289f8fb6270293bb9123e6e66c3cfd793e841a797032215a977"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x14}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x160, 0x2}}, &(0x7f0000000980)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "9469"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @local}, &(0x7f0000000b40)={0x40, 0x19, 0x2, 'N:'}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0xf9}, &(0x7f0000000c40)={0x40, 0x21, 0x1, 0x5}}) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x15, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r8, 0xc010640c, &(0x7f0000000040)={0x10}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000040000000000000002000000b7080000050000000000000000000000b5080000040000007b8af0ff10000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b30000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r10, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r11 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r11, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f00000009c0)={r9, r12}, 0xc) r13 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000514ff4)={0x10, 0x0, 0x3, 0x2ffffffff}, 0xc) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext4\x00', 0x200000, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_vlan={0x54, 0x14, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x6, 0x2, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa5a}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x84}, 0x8000) 1.508187851s ago: executing program 1 (id=400): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0}, {0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001d00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0xd, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x10, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x7}, @TCA_U32_ACT={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x20000800) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffbd, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000200)=ANY=[], 0x8) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000280)={0x73}, 0x8) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x18, 0x5a, 0x1, 0x0, 0x0, {}, [@nested={0x4, 0x5}]}, 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/207, 0xcf}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000100)=""/40, 0x28}, {&(0x7f0000002580)=""/214, 0xd6}], 0x5, &(0x7f0000002b40)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000002680)=@nfc_llcp, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)=""/36, 0x24}], 0x1}, 0x5}], 0x2, 0x40, 0x0) sendmmsg(r6, &(0x7f0000002b00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @mcast1}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r8, 0x1, 0x70bd2b, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0xfffffffa, @l2={'eth', 0x3a, 'gre0\x00'}}}}}, 0x34}}, 0x8044) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r8, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008810}, 0x0) 1.378984712s ago: executing program 1 (id=401): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="9800000000000000000000000000000018010000202070250000000000202020c31ad8ff41000000bfa100000000000007010000f8ffffffb702000008000000b70000000000000001000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x2c}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x60, r5, 0x1, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xb}, @device_b, @device_a, @initial, {0x7, 0xb49}}, @val, @val, @void, @val={0x2d, 0x1a, {0x1000, 0x2, 0x5, 0x0, {0xf, 0x2, 0x0, 0xf, 0x0, 0x1, 0x1, 0x2}, 0xe, 0x9}}, @val={0x72, 0x6}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be60}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000001c0)=r7, 0x4) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0x7, @pix={0x4, 0x6, 0x31363553, 0x0, 0xff800000, 0x50, 0x1, 0x3, 0x0, 0x3, 0x0, 0x1}}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x8000, 0x0, 0x0, 0x4, 0x65f40}) 1.323936841s ago: executing program 0 (id=404): r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x42049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/9, 0x9}}], 0x1, 0x10022, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xac242, 0x0) setresuid(0x0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x14) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc02c5625, &(0x7f0000000140)={0x80f0f000, 0x2, "9a555c14c966e134d198b9aaaa7da80f8e4fa888dece6ffdb507a3c83e58e128", 0x0, 0x0, 0x0, 0x0, 0x3, 0x100, 0x0, 0x0, [0x1]}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000e280)={0x2020}, 0x2020) 1.038626183s ago: executing program 1 (id=410): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r2, 0xfffffffffffffc01, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000040)=0xffffffff) tee(r1, r2, 0x60000000000, 0x0) syz_open_pts(r1, 0x80801) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00b100", @ANYRES16=r4, @ANYBLOB="310428bd7000000000001600000018000180140002006e657464657673696d3000000000000005000400f30000000500020001000000"], 0x3c}}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x2400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0xb, 0x6576, 0xdbbd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000002b000b001900000000ffffff8c000008000003000c0002004c9f18564f53f677bf092e2ed7fb6e368e97a9b180aad5fe5172a18c2cbab42fcb8272e563db62779d6f1534680b83e8c1939079280cc691d06c377e", @ANYRES32=r6, @ANYBLOB], 0x2c}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000002200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) pipe2(&(0x7f0000001040), 0x0) (async) pipe2(&(0x7f0000000240), 0x0) (async) tee(r1, r2, 0xfffffffffffffc01, 0x0) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000040)=0xffffffff) (async) tee(r1, r2, 0x60000000000, 0x0) (async) syz_open_pts(r1, 0x80801) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00b100", @ANYRES16=r4, @ANYBLOB="310428bd7000000000001600000018000180140002006e657464657673696d3000000000000005000400f30000000500020001000000"], 0x3c}}, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x2400, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0xb, 0x6576, 0xdbbd}) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000002b000b001900000000ffffff8c000008000003000c0002004c9f18564f53f677bf092e2ed7fb6e368e97a9b180aad5fe5172a18c2cbab42fcb8272e563db62779d6f1534680b83e8c1939079280cc691d06c377e", @ANYRES32=r6, @ANYBLOB], 0x2c}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000002200), 0xffffffffffffffff) (async) 899.625925ms ago: executing program 2 (id=412): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000300), 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f00000001000010027bd7000fddbdf250000000000000000000000000000000000000000000000000000ffffe00000020000fff720000001020000343b000000cd513cf3bf58ff9498376156073202e12dd38fea5d24a6ef171f93e4b8162db16e9e0e3d045de1ccc0f35631cad71d30a1072f557c24cdf65ad5d944b30c92", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414bb000000000000000000000000000004d56c000000fe8000000000000000000000000000b419000000000000000400000000000000000000a1bb000000000000000000000003000000000000000000000200000000000000000000000009000000000000000000000000000000040000000000000000000040000000fcffffffffffffff40000000fcffffff0000000000000000000000000a000301e000000000000000c58ce42dc6dedd1e29bb219f", @ANYRES16=r0], 0xf0}, 0x1, 0x0, 0x0, 0x801}, 0xc850) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a00)={0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f000000a600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000014000000000000000100000001"], 0x30, 0x4080}}], 0x1, 0x880) r4 = io_uring_setup(0x67bb, &(0x7f0000000280)={0x0, 0x0, 0x2}) io_uring_enter(r4, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000080)=0xffffffff, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000340)=ANY=[@ANYBLOB="76b9d857d56d0110817d3d5c3c0f0eba49a564111069d83a5cc87f1ae53c202d9cfd0003c4015e77d3a41d5dfde5f4bc3738f2ebacdcd495b11ca49cd296297be0e98e44ffcb858e66175f04d48f43eb177c1a961a7a43bbc018768f9b64284fb3dcb85bb8888d6c3e89feffcd", @ANYRES16=r6, @ANYBLOB="030c0000000002000000340000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x8850}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r11, @ANYBLOB="040013000a00060006cdc845d253d6b67743ce67f75a34220802050000060012000000000004008100ed91809f740d0424d776007d1f31c0ce53d11b680b5fc1100da0d246bfa8724e2aff2654f73225de92c4bc58e9462b5af5ebd8c007125b6709f77625583ea3997c68cedaba2e3c01ecd8e8256dc2284c1d12f152b898be6ca12de55ee07e92ed7b0a44b6a2cda5b46b140886fd8dc4ebb0f502e7335406c35d9b38505186fb4a2413b74800"/188], 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRESOCT=r7, @ANYBLOB="ad432bbd700000000d00010000"], 0x14}}, 0x0) write$binfmt_elf64(r7, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"/1890], 0x762) close(r7) r12 = socket(0x2, 0x5, 0x2) userfaultfd(0x1) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x7}]}}]}, 0x3c}}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 899.40405ms ago: executing program 1 (id=413): r0 = socket(0x10, 0x3, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed5100000000000000010000000000000800", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x7, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000000c0)={"3c2486910284ed8b3431d4c5d5fbf514fd00", r4, 0xffffffffffffffff}) close(0x3) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000001c0)={"f9f450a25cab005573eba0f49dd9bb26eb4b4bc39c8500bbda4e052be780eef7", r5}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r6, 0x1, &(0x7f0000000200)={&(0x7f0000000240)=""/204, 0xcc}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0xdc, 0x24, 0x1, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0x1}, {0x7, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x7}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}, @TCA_STAB={0x90, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd3, 0x8, 0xc, 0x6, 0x1, 0x800, 0x5, 0x4}}, {0xc, 0x2, [0x3, 0x1, 0x0, 0x80]}}, {{0x1c, 0x1, {0x66, 0xc0, 0x401, 0xc, 0x1, 0x2, 0x6, 0x7}}, {0x12, 0x2, [0x1000, 0x71, 0x8, 0x7, 0x1203, 0x1, 0xff]}}, {{0x1c, 0x1, {0x6, 0xba, 0x5, 0x8, 0x0, 0xd3d6, 0xfffffffb, 0x9}}, {0x16, 0x2, [0x8000, 0x8001, 0x2c, 0x177, 0x6, 0x9, 0x1, 0x1, 0x4]}}]}, @qdisc_kind_options=@q_atm={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0xdc}, 0x1, 0x0, 0x0, 0x400c0}, 0x44080) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000480)={'\x00', 0x9, 0x3, 0x1, 0x5, 0x7, 0xffffffffffffffff}) ptrace$getregset(0x4204, r7, 0x4, &(0x7f0000000180)={&(0x7f0000000500)=""/92, 0x5c}) 839.699716ms ago: executing program 1 (id=414): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) syz_clone3(&(0x7f0000000080)={0x2001080, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) add_key$user(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="0f78990c21471a7d", 0x8, r1) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async, rerun: 32) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000002880)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="fc4406008e199ae0898c7a8988823619badd4fe626289574f86d0809dc46543a7397ceafd65272d076683d2908aba612c0421a489cbc57359748ade403033388d7b8", 0x42}, {&(0x7f00000048c0)="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", 0x82f}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x4815) (async) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=""/122, 0x7a}, {&(0x7f00000028c0)=""/4096, 0x1000}], 0x2}, 0x40000000) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) (async) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) (async, rerun: 64) bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) (async, rerun: 64) listen(r5, 0x0) (async, rerun: 32) listen(r4, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 836.947245ms ago: executing program 0 (id=415): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000001f00000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 836.699033ms ago: executing program 2 (id=416): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000180)={0x1}) 836.460436ms ago: executing program 1 (id=417): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x104, &(0x7f0000000140)=0xe, 0x0, 0x4) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x60e82, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@alu={0x4, 0x0, 0x8, 0x9, 0x8, 0xfffffffffffffff8, 0x8}, @ldst={0x3, 0x3, 0x1569a51527794dcb, 0x0, 0x1, 0x1, 0xfffffffffffffff0}, @alu={0x4, 0x0, 0x5, 0x7, 0x6, 0xffffffffffffffe0, 0x8}]}, &(0x7f0000000580)='syzkaller\x00', 0x4, 0x34, &(0x7f00000005c0)=""/52, 0x41100, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x2, 0x2, 0xffffffff, 0x5}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f00000006c0)=[{0x4, 0x4, 0x4}, {0x4, 0x5, 0xd, 0x8}, {0x2, 0x4, 0x6, 0x4}, {0x1, 0x3, 0x2, 0x7}, {0x3, 0x4, 0x8, 0xc}, {0x2, 0x1, 0x2, 0x1}, {0x5, 0x2, 0x4, 0x5}, {0x1, 0x2, 0x0, 0x2}], 0x10, 0x7, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) unlinkat$binderfs_device(0xffffffffffffff9c, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) mkdir(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="0300ff", 0x3}]) write$cgroup_int(r0, 0x0, 0x0) 816.466563ms ago: executing program 0 (id=418): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd00f0ff", 0x24) 769.335399ms ago: executing program 0 (id=419): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000a00)=0x4, 0x4) sendmmsg(r0, &(0x7f0000002340)=[{{&(0x7f0000000480)=@ieee802154={0x24, @short={0x2, 0x1}}, 0x80, 0x0}}], 0x1, 0x20044000) syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x4c0180) 769.020587ms ago: executing program 2 (id=420): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000001e0001000003000000000000020000000100000000001f00080001"], 0x24}}, 0x0) 767.047778ms ago: executing program 0 (id=421): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) (async) bind$alg(r3, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x13) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION(r4, 0x79f, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)) (async) r7 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2c, 0x2, r6, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) io_uring_enter(r7, 0x27e2, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CAP_MEMORY_FAULT_INFO(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) 699.722151ms ago: executing program 2 (id=422): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000400)={r3, r2}) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/kcm\x00') lseek(r4, 0x2000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r5) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000000, &(0x7f00000000c0)={[{@verity_off}, {@userxattr}, {@index_on}, {@nfs_export_off}, {@redirect_dir_follow}, {@verity_off}], [{@dont_hash}, {@pcr={'pcr', 0x3d, 0x12}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@fowner_gt={'fowner>', r5}}, {@pcr={'pcr', 0x3d, 0x1f}}, {@appraise}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_role={'obj_role', 0x3d, '\x00'}}]}) 639.795715ms ago: executing program 2 (id=423): r0 = socket(0x15, 0x5, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}}) read$FUSE(r1, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0xffffffffffffffbf, 0x4000000, 0x0, '\x00', {0x7ff, 0x1, 0xae2, 0x802, r2, 0x0, 0x6000, '\x00', 0x1, 0x4, 0xb4e7, 0x320d3873, {0x8003, 0x403}, {0x4000000000006}, {0x2000000ae7, 0x8000004}, {0xf, 0x7}, 0x408000, 0x7, 0xaa, 0x3}}}}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100"]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x8, 0x1}, {0x0, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0x0, 0xffff1000, 0xc, 0x2, 0x3, 0x10, 0x6, 0x0, 0x1, 0x0, 0x4}, {0x8080000, 0x10000, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x0, 0xa, 0x0, 0x80, 0xf9, 0x0, 0x7, 0x3a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x2, 0x400}, {}, 0xddf8ffdb, 0x0, 0x0, 0x100, 0x8, 0x8000, 0x3000, [0x0, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x6, 0x1, {0xffffffffffffffff}, {0xee00}, 0x4, 0x84c}) setresuid(r2, r6, r7) getsockopt(r0, 0x200000000114, 0x271b, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 639.591851ms ago: executing program 0 (id=424): r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x42049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/9, 0x9}}], 0x1, 0x10022, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xac242, 0x0) setresuid(0x0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x14) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc02c5625, &(0x7f0000000140)={0x80f0f000, 0x2, "9a555c14c966e134d198b9aaaa7da80f8e4fa888dece6ffdb507a3c83e58e128", 0x0, 0x0, 0x0, 0x0, 0x3, 0x100, 0x0, 0x0, [0x1]}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000e280)={0x2020}, 0x2020) 0s ago: executing program 2 (id=425): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@getnexthop={0x1c, 0x6a, 0x401, 0xfffffdfe, 0x25dfdbfc, {}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) mount$binderfs(0x0, &(0x7f0000000700)='./binderfs\x00', 0x0, 0x20, &(0x7f0000000780)=ANY=[@ANYBLOB='stats=global']) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) (async) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000400007010000000003000000047c0000040012800c00018008400200", @ANYRES32=0xee00, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) kernel console output (not intermixed with test programs): [ 38.120203][ T40] audit: type=1400 audit(1750466898.569:60): avc: denied { rlimitinh } for pid=5837 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.126319][ T40] audit: type=1400 audit(1750466898.569:61): avc: denied { siginh } for pid=5837 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:30510' (ED25519) to the list of known hosts. [ 40.189024][ T40] audit: type=1400 audit(1750466900.659:62): avc: denied { name_bind } for pid=5850 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.210326][ T40] audit: type=1400 audit(1750466900.679:63): avc: denied { write } for pid=5851 comm="sh" path="pipe:[1873]" dev="pipefs" ino=1873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 40.223112][ T40] audit: type=1400 audit(1750466900.689:64): avc: denied { execute } for pid=5851 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.232178][ T40] audit: type=1400 audit(1750466900.689:65): avc: denied { execute_no_trans } for pid=5851 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.322865][ T40] audit: type=1400 audit(1750466902.789:66): avc: denied { mounton } for pid=5851 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.325873][ T5851] cgroup: Unknown subsys name 'net' [ 42.502268][ T5851] cgroup: Unknown subsys name 'cpuset' [ 42.509650][ T5851] cgroup: Unknown subsys name 'rlimit' [ 42.753598][ T5880] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.453840][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.011084][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 47.011101][ T40] audit: type=1400 audit(1750466907.479:80): avc: denied { execmem } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.246287][ T40] audit: type=1400 audit(1750466907.709:81): avc: denied { create } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.263124][ T40] audit: type=1400 audit(1750466907.709:82): avc: denied { read write } for pid=5935 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.273347][ T40] audit: type=1400 audit(1750466907.709:83): avc: denied { open } for pid=5935 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.283010][ T40] audit: type=1400 audit(1750466907.729:84): avc: denied { ioctl } for pid=5935 comm="syz-executor" path="socket:[5636]" dev="sockfs" ino=5636 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.291960][ T5938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.295607][ T5938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.298047][ T5938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.312822][ T5947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.312955][ T5942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.316729][ T5947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.318392][ T5942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.321145][ T5947] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.322978][ T5942] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.325195][ T5947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.327724][ T5942] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.331812][ T5942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.332669][ T5947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.334502][ T5942] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.339761][ T5942] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.347724][ T40] audit: type=1400 audit(1750466907.809:85): avc: denied { read } for pid=5935 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.354293][ T40] audit: type=1400 audit(1750466907.809:86): avc: denied { open } for pid=5935 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.359905][ T5946] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.361126][ T5949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.362877][ T40] audit: type=1400 audit(1750466907.809:87): avc: denied { mounton } for pid=5935 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.365360][ T5946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.368283][ T5949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.374040][ T5946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.528119][ T40] audit: type=1400 audit(1750466907.999:88): avc: denied { module_request } for pid=5935 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.591291][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 47.711559][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 47.775978][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 47.781629][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.785301][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.789960][ T5935] bridge_slave_0: entered allmulticast mode [ 47.795151][ T5935] bridge_slave_0: entered promiscuous mode [ 47.800935][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.804089][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.806983][ T5935] bridge_slave_1: entered allmulticast mode [ 47.811634][ T5935] bridge_slave_1: entered promiscuous mode [ 47.942373][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.952018][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.059689][ T5935] team0: Port device team_slave_0 added [ 48.111841][ T5935] team0: Port device team_slave_1 added [ 48.194501][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.196818][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.199766][ T5939] bridge_slave_0: entered allmulticast mode [ 48.202389][ T5939] bridge_slave_0: entered promiscuous mode [ 48.205580][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.208106][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.210322][ T5944] bridge_slave_0: entered allmulticast mode [ 48.212905][ T5944] bridge_slave_0: entered promiscuous mode [ 48.220965][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.223181][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.233854][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.239244][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.241462][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.249359][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.257881][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.260596][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.262904][ T5939] bridge_slave_1: entered allmulticast mode [ 48.265511][ T5939] bridge_slave_1: entered promiscuous mode [ 48.285234][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.287457][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.290171][ T5944] bridge_slave_1: entered allmulticast mode [ 48.292834][ T5944] bridge_slave_1: entered promiscuous mode [ 48.295352][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 48.359804][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.371294][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.426288][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.466071][ T5935] hsr_slave_0: entered promiscuous mode [ 48.469664][ T5935] hsr_slave_1: entered promiscuous mode [ 48.474672][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.496765][ T5939] team0: Port device team_slave_0 added [ 48.536191][ T5939] team0: Port device team_slave_1 added [ 48.565773][ T5944] team0: Port device team_slave_0 added [ 48.571574][ T5944] team0: Port device team_slave_1 added [ 48.742046][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.744904][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.754684][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.760910][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.763861][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.774717][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.780286][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.783252][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.793926][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.821856][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.824721][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.827159][ T5943] bridge_slave_0: entered allmulticast mode [ 48.831322][ T5943] bridge_slave_0: entered promiscuous mode [ 48.841349][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.844297][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.854675][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.871470][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.874549][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.877511][ T5943] bridge_slave_1: entered allmulticast mode [ 48.881627][ T5943] bridge_slave_1: entered promiscuous mode [ 48.939082][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.947021][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.002991][ T5943] team0: Port device team_slave_0 added [ 49.061031][ T5939] hsr_slave_0: entered promiscuous mode [ 49.063415][ T5939] hsr_slave_1: entered promiscuous mode [ 49.065548][ T5939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.069119][ T5939] Cannot create hsr debugfs directory [ 49.078888][ T5943] team0: Port device team_slave_1 added [ 49.114884][ T5944] hsr_slave_0: entered promiscuous mode [ 49.118339][ T5944] hsr_slave_1: entered promiscuous mode [ 49.121245][ T5944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.124422][ T5944] Cannot create hsr debugfs directory [ 49.230493][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.232848][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.241092][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.284423][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.287311][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.298221][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.419645][ T5946] Bluetooth: hci1: command tx timeout [ 49.419654][ T5938] Bluetooth: hci2: command tx timeout [ 49.420107][ T5938] Bluetooth: hci0: command tx timeout [ 49.420323][ T63] Bluetooth: hci3: command tx timeout [ 49.470722][ T5943] hsr_slave_0: entered promiscuous mode [ 49.473466][ T5943] hsr_slave_1: entered promiscuous mode [ 49.475612][ T5943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.478684][ T5943] Cannot create hsr debugfs directory [ 49.567525][ T5935] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.575330][ T5935] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.605087][ T5935] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.615793][ T5935] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.702169][ T5939] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.709030][ T5939] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.713902][ T5939] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.718496][ T5939] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.771338][ T5944] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.780790][ T5944] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.786863][ T5944] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.793464][ T5944] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.862862][ T5943] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.870031][ T5943] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.877530][ T5943] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.884709][ T5943] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.934865][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.979670][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.994786][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.000875][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.003393][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.010556][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.013222][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.039097][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.048326][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.066520][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.073464][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.076527][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.089352][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.092442][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.131312][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.136105][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.151615][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.154644][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.179651][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.182588][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.191682][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.193054][ T40] audit: type=1400 audit(1750466910.659:89): avc: denied { sys_module } for pid=5935 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 50.194678][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.218975][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.221904][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.290949][ T5943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.319734][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.351608][ T5935] veth0_vlan: entered promiscuous mode [ 50.359219][ T5935] veth1_vlan: entered promiscuous mode [ 50.382285][ T5935] veth0_macvtap: entered promiscuous mode [ 50.387248][ T5935] veth1_macvtap: entered promiscuous mode [ 50.392614][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.405310][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.418043][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.422929][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.435135][ T5935] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.439471][ T5935] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.442939][ T5935] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.445600][ T5935] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.500572][ T5939] veth0_vlan: entered promiscuous mode [ 50.517929][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.521652][ T5939] veth1_vlan: entered promiscuous mode [ 50.522815][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.526027][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.550723][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.554022][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.562110][ T5944] veth0_vlan: entered promiscuous mode [ 50.573442][ T5944] veth1_vlan: entered promiscuous mode [ 50.581818][ T5939] veth0_macvtap: entered promiscuous mode [ 50.591070][ T5939] veth1_macvtap: entered promiscuous mode [ 50.598330][ T5943] veth0_vlan: entered promiscuous mode [ 50.604887][ T5935] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.606446][ T5943] veth1_vlan: entered promiscuous mode [ 50.616512][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.630087][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.644145][ T5944] veth0_macvtap: entered promiscuous mode [ 50.646996][ T5939] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.651255][ T5939] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.654468][ T5939] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.657444][ T5939] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.662669][ T5943] veth0_macvtap: entered promiscuous mode [ 50.669297][ T5944] veth1_macvtap: entered promiscuous mode [ 50.675144][ T5943] veth1_macvtap: entered promiscuous mode [ 50.705115][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.711722][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.722719][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.730072][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.739645][ T5944] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.743245][ T5944] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.746780][ T5944] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.751531][ T5944] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.760982][ T5943] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.764403][ T5943] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.768088][ T5943] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.771457][ T5943] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.778766][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.781898][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.804800][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.807303][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.848241][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.851161][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.855014][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.857858][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.880668][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.883213][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.899347][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.901865][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.087007][ T6044] pim6reg: entered allmulticast mode [ 51.089638][ T6044] pim6reg: left allmulticast mode [ 51.104022][ T6046] No control pipe specified [ 51.350530][ T6061] block device autoloading is deprecated and will be removed. [ 51.497761][ T5938] Bluetooth: hci0: command tx timeout [ 51.500331][ T5938] Bluetooth: hci1: command tx timeout [ 51.500676][ T5946] Bluetooth: hci3: command tx timeout [ 51.502585][ T5938] Bluetooth: hci2: command tx timeout [ 51.727768][ T6004] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 51.890248][ T6004] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 51.894675][ T6004] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 51.906270][ T6004] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 51.917426][ T6004] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 51.921877][ T6004] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 51.927795][ T6004] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 51.930916][ T6004] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 51.936631][ T6004] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 51.946916][ T6004] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 51.952526][ T6004] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 51.958755][ T6004] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 51.961083][ T6004] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 51.964654][ T6004] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 51.969696][ T6004] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 51.974642][ T6004] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 51.984036][ T6004] usb 8-1: string descriptor 0 read error: -22 [ 51.986077][ T6004] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 51.989061][ T6004] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.994418][ T6087] vxcan0: tx address claim with different name [ 52.010195][ T6004] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 52.019988][ T6091] dummy0: entered promiscuous mode [ 52.066469][ T40] kauditd_printk_skb: 86 callbacks suppressed [ 52.066482][ T40] audit: type=1400 audit(1750466912.529:176): avc: denied { map_read map_write } for pid=6094 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 52.115061][ T40] audit: type=1400 audit(1750466912.579:177): avc: denied { create } for pid=6096 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.148122][ T40] audit: type=1400 audit(1750466912.619:178): avc: denied { create } for pid=6098 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 52.151842][ T6099] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 52.159955][ T40] audit: type=1400 audit(1750466912.629:179): avc: denied { read write } for pid=6100 comm="syz.1.22" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 52.163585][ T6101] Invalid logical block size (2) [ 52.167111][ T40] audit: type=1400 audit(1750466912.629:180): avc: denied { open } for pid=6100 comm="syz.1.22" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 52.176585][ T40] audit: type=1400 audit(1750466912.639:181): avc: denied { getopt } for pid=6100 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 52.204316][ T40] audit: type=1400 audit(1750466912.669:182): avc: denied { connect } for pid=6068 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 52.212884][ T40] audit: type=1400 audit(1750466912.669:183): avc: denied { setopt } for pid=6098 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.221751][ T40] audit: type=1400 audit(1750466912.669:184): avc: denied { read write } for pid=6098 comm="syz.0.21" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 52.233525][ T40] audit: type=1400 audit(1750466912.669:185): avc: denied { open } for pid=6098 comm="syz.0.21" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 52.253336][ T6005] usb 8-1: USB disconnect, device number 2 [ 52.262100][ T6106] ufs: You didn't specify the type of your ufs filesystem [ 52.262100][ T6106] [ 52.262100][ T6106] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 52.262100][ T6106] [ 52.262100][ T6106] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 52.266391][ T6107] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21'. [ 52.275408][ T6106] ufs: ufstype=old is supported read-only [ 52.281226][ T6107] Zero length message leads to an empty skb [ 52.282201][ T6106] ufs: ufs_fill_super(): bad magic number [ 52.339010][ T6102] Process accounting resumed [ 52.994521][ T6145] Bluetooth: MGMT ver 1.23 [ 52.997045][ T6142] ntfs3(sr0): Primary boot signature is not NTFS. [ 52.999539][ T6142] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 53.178791][ T1124] sr 2:0:0:0: [sr0] tag#22 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 53.183064][ T1124] sr 2:0:0:0: [sr0] tag#22 Sense Key : Illegal Request [current] [ 53.186396][ T1124] sr 2:0:0:0: [sr0] tag#22 Add. Sense: Invalid command operation code [ 53.190007][ T1124] sr 2:0:0:0: [sr0] tag#22 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 53.193605][ T1124] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 53.198379][ T1124] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 53.293479][ T6157] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.294023][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.39'. [ 53.305387][ T6159] netlink: 'syz.0.39': attribute type 30 has an invalid length. [ 53.309243][ T6159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39'. [ 53.317431][ T6157] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.323457][ T6157] bond0: (slave bond1): Enslaving as an active interface with an up link [ 53.578746][ T5946] Bluetooth: hci3: command tx timeout [ 53.578911][ T5938] Bluetooth: hci1: command tx timeout [ 53.581048][ T5946] Bluetooth: hci0: command tx timeout [ 53.583429][ T5949] Bluetooth: hci2: command tx timeout [ 53.626355][ T6182] binder_alloc: binder_alloc_mmap_handler: 6181 200000ffd000-200001000000 already mapped failed -16 [ 53.630455][ T6182] binder_alloc: binder_alloc_mmap_handler: 6181 200000ffd000-200001000000 already mapped failed -16 [ 53.634274][ T6182] binder_alloc: binder_alloc_mmap_handler: 6181 200000ffd000-200001000000 already mapped failed -16 [ 53.638680][ T6182] binder_alloc: binder_alloc_mmap_handler: 6181 200000ffd000-200001000000 already mapped failed -16 [ 53.642572][ T6182] binder_alloc: binder_alloc_mmap_handler: 6181 200000ffd000-200001000000 already mapped failed -16 [ 53.646227][ T6182] binder_alloc: binder_alloc_mmap_handler: 6181 200000ffd000-200001000000 already mapped failed -16 [ 53.651213][ T6182] binder_alloc: binder_alloc_mmap_handler: 6181 200000ffd000-200001000000 already mapped failed -16 [ 53.656739][ T6182] binder_alloc: binder_alloc_mmap_handler: 6181 200000ffd000-200001000000 already mapped failed -16 [ 53.663196][ T6182] binder_alloc: binder_alloc_mmap_handler: 6181 200000ffd000-200001000000 already mapped failed -16 [ 53.792805][ T6192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 53.799858][ T6192] netlink: 28 bytes leftover after parsing attributes in process `syz.3.51'. [ 53.803520][ T6192] netlink: 28 bytes leftover after parsing attributes in process `syz.3.51'. [ 53.809849][ T6193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 53.822926][ T6197] fuse: Unknown parameter 'grou00000000000000000000' [ 54.130538][ T6222] netlink: 36 bytes leftover after parsing attributes in process `syz.3.59'. [ 54.152033][ T6217] warning: `syz.3.59' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 54.192060][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.63'. [ 54.239361][ T6170] delete_channel: no stack [ 54.269642][ T6270] netlink: 24 bytes leftover after parsing attributes in process `syz.0.67'. [ 54.273662][ T6270] ======================================================= [ 54.273662][ T6270] WARNING: The mand mount option has been deprecated and [ 54.273662][ T6270] and is ignored by this kernel. Remove the mand [ 54.273662][ T6270] option from the mount to silence this warning. [ 54.273662][ T6270] ======================================================= [ 54.288681][ T6270] nfs: Bad value for 'source' [ 54.296208][ T6272] netlink: 236 bytes leftover after parsing attributes in process `syz.3.68'. [ 54.340132][ T6279] FAULT_INJECTION: forcing a failure. [ 54.340132][ T6279] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 54.344200][ T6279] CPU: 3 UID: 0 PID: 6279 Comm: syz.3.70 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 54.344216][ T6279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.344222][ T6279] Call Trace: [ 54.344226][ T6279] [ 54.344231][ T6279] dump_stack_lvl+0x16c/0x1f0 [ 54.344251][ T6279] should_fail_ex+0x512/0x640 [ 54.344268][ T6279] _copy_from_user+0x2e/0xd0 [ 54.344285][ T6279] copy_msghdr_from_user+0x98/0x160 [ 54.344302][ T6279] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 54.344324][ T6279] ___sys_sendmsg+0xfe/0x1d0 [ 54.344340][ T6279] ? __pfx____sys_sendmsg+0x10/0x10 [ 54.344354][ T6279] ? __lock_acquire+0x622/0x1c90 [ 54.344387][ T6279] __sys_sendmsg+0x16d/0x220 [ 54.344404][ T6279] ? __pfx___sys_sendmsg+0x10/0x10 [ 54.344432][ T6279] do_syscall_64+0xcd/0x4c0 [ 54.344451][ T6279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.344462][ T6279] RIP: 0033:0x7f3bf6b8e929 [ 54.344470][ T6279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.344481][ T6279] RSP: 002b:00007f3bf7a10038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.344491][ T6279] RAX: ffffffffffffffda RBX: 00007f3bf6db5fa0 RCX: 00007f3bf6b8e929 [ 54.344497][ T6279] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 54.344503][ T6279] RBP: 00007f3bf7a10090 R08: 0000000000000000 R09: 0000000000000000 [ 54.344509][ T6279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.344515][ T6279] R13: 0000000000000000 R14: 00007f3bf6db5fa0 R15: 00007ffcf69f25c8 [ 54.344528][ T6279] [ 54.371091][ T6281] netlink: 236 bytes leftover after parsing attributes in process `syz.0.71'. [ 54.394787][ T6284] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.539685][ T6304] PKCS8: Unsupported PKCS#8 version [ 54.660132][ T6317] capability: warning: `syz.0.84' uses 32-bit capabilities (legacy support in use) [ 54.696510][ T6323] dummy0: entered promiscuous mode [ 54.710541][ T6324] pimreg: entered allmulticast mode [ 54.855402][ T6334] tmpfs: Cannot change global quota limit on remount [ 54.926643][ T6341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6341 comm=syz.0.95 [ 54.930812][ T6341] netlink: 'syz.0.95': attribute type 1 has an invalid length. [ 54.937374][ T6341] geneve2: entered allmulticast mode [ 55.082325][ T6352] SELinux: Context unconfined is not valid (left unmapped). [ 55.149676][ T6350] process 'syz.3.97' launched './file0' with NULL argv: empty string added [ 55.171137][ T6358] fuse: Bad value for 'user_id' [ 55.173065][ T6358] fuse: Bad value for 'user_id' [ 55.183505][ T6358] syz.0.101 uses obsolete (PF_INET,SOCK_PACKET) [ 55.204736][ T6361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.209227][ T6361] batadv_slave_0: entered promiscuous mode [ 55.254816][ T6363] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 55.540762][ T6403] FAULT_INJECTION: forcing a failure. [ 55.540762][ T6403] name failslab, interval 1, probability 0, space 0, times 1 [ 55.545778][ T6403] CPU: 3 UID: 0 PID: 6403 Comm: syz.0.115 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 55.545802][ T6403] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.545812][ T6403] Call Trace: [ 55.545818][ T6403] [ 55.545825][ T6403] dump_stack_lvl+0x16c/0x1f0 [ 55.545856][ T6403] should_fail_ex+0x512/0x640 [ 55.545880][ T6403] should_failslab+0xc2/0x120 [ 55.545902][ T6403] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 55.545923][ T6403] ? skb_clone+0x190/0x3f0 [ 55.545950][ T6403] skb_clone+0x190/0x3f0 [ 55.545974][ T6403] netlink_deliver_tap+0xabd/0xd30 [ 55.545995][ T6403] netlink_unicast+0x5df/0x7f0 [ 55.546014][ T6403] ? __pfx_netlink_unicast+0x10/0x10 [ 55.546073][ T6403] netlink_sendmsg+0x8d1/0xdd0 [ 55.546094][ T6403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.546119][ T6403] ____sys_sendmsg+0xa95/0xc70 [ 55.546161][ T6403] ? copy_msghdr_from_user+0x10a/0x160 [ 55.546182][ T6403] ? __pfx_____sys_sendmsg+0x10/0x10 [ 55.546210][ T6403] ___sys_sendmsg+0x134/0x1d0 [ 55.546234][ T6403] ? __pfx____sys_sendmsg+0x10/0x10 [ 55.546254][ T6403] ? __lock_acquire+0x622/0x1c90 [ 55.546309][ T6403] __sys_sendmsg+0x16d/0x220 [ 55.546332][ T6403] ? __pfx___sys_sendmsg+0x10/0x10 [ 55.546370][ T6403] do_syscall_64+0xcd/0x4c0 [ 55.546395][ T6403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.546412][ T6403] RIP: 0033:0x7f83fe58e929 [ 55.546425][ T6403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.546439][ T6403] RSP: 002b:00007f83ff31c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.546455][ T6403] RAX: ffffffffffffffda RBX: 00007f83fe7b5fa0 RCX: 00007f83fe58e929 [ 55.546465][ T6403] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 55.546474][ T6403] RBP: 00007f83ff31c090 R08: 0000000000000000 R09: 0000000000000000 [ 55.546483][ T6403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.546492][ T6403] R13: 0000000000000000 R14: 00007f83fe7b5fa0 R15: 00007fff016661a8 [ 55.546514][ T6403] [ 55.661140][ T5949] Bluetooth: hci2: command tx timeout [ 55.662946][ T5949] Bluetooth: hci1: command tx timeout [ 55.664653][ T5949] Bluetooth: hci3: command tx timeout [ 55.668157][ T63] Bluetooth: hci0: command tx timeout [ 55.686190][ T6407] pim6reg: entered allmulticast mode [ 55.691295][ T6407] pim6reg: left allmulticast mode [ 56.204491][ T6437] Mount JFS Failure: -22 [ 56.268906][ T6445] pim6reg: entered allmulticast mode [ 56.278137][ T6445] pim6reg: left allmulticast mode [ 56.325514][ T6443] kvm: kvm [6441]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x3631202020202020 [ 56.487782][ T6459] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.823993][ T6491] capability: warning: `syz.3.142' uses deprecated v2 capabilities in a way that may be insecure [ 56.995967][ T6506] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 57.000038][ T6506] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 57.198773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.267384][ T6517] Invalid option length (11496) for dns_resolver key [ 57.307731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 57.307880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 57.437747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 57.512719][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 57.615168][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 57.620449][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.647844][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.704514][ T6519] xt_socket: unknown flags 0x50 [ 57.717848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 57.723314][ T40] kauditd_printk_skb: 138 callbacks suppressed [ 57.723325][ T40] audit: type=1400 audit(1750466918.189:324): avc: denied { read } for pid=6515 comm="syz.1.152" name="qrtr-tun" dev="devtmpfs" ino=1334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.800514][ T40] audit: type=1400 audit(1750466918.209:325): avc: denied { open } for pid=6515 comm="syz.1.152" path="/dev/qrtr-tun" dev="devtmpfs" ino=1334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.819960][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 57.846196][ T40] audit: type=1400 audit(1750466918.209:326): avc: denied { connect } for pid=6515 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 58.027252][ T40] audit: type=1400 audit(1750466918.219:327): avc: denied { write } for pid=6515 comm="syz.1.152" path="socket:[12361]" dev="sockfs" ino=12361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 58.349693][ T6521] fuse: Unknown parameter 'fä' [ 58.504358][ T40] audit: type=1400 audit(1750466918.819:328): avc: denied { map } for pid=6520 comm="syz.0.153" path="/proc/108/numa_maps" dev="proc" ino=12366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 58.524931][ T40] audit: type=1400 audit(1750466918.819:329): avc: denied { execute } for pid=6520 comm="syz.0.153" path="/proc/108/numa_maps" dev="proc" ino=12366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 58.545219][ T40] audit: type=1400 audit(1750466918.819:330): avc: denied { ioctl } for pid=6520 comm="syz.0.153" path="/dev/iommu" dev="devtmpfs" ino=632 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.577820][ T40] audit: type=1400 audit(1750466918.969:331): avc: denied { create } for pid=6528 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.653420][ T6535] pim6reg: entered allmulticast mode [ 58.656032][ T6535] pim6reg: left allmulticast mode [ 58.702859][ T40] audit: type=1400 audit(1750466919.159:332): avc: denied { getopt } for pid=6536 comm="syz.0.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.759327][ T6537] could not allocate digest TFM handle sha3-224-ce [ 58.762428][ T6538] could not allocate digest TFM handle sha3-224-ce [ 58.834015][ T6548] __nla_validate_parse: 14 callbacks suppressed [ 58.834028][ T6548] netlink: 236 bytes leftover after parsing attributes in process `syz.0.161'. [ 58.920086][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'. [ 58.923558][ T6557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.166'. [ 59.071665][ T6578] program syz.3.168 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.075467][ T6583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.079354][ T6583] batadv_slave_0: entered promiscuous mode [ 59.085866][ T40] audit: type=1400 audit(1750466919.549:333): avc: denied { append } for pid=6577 comm="syz.3.168" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 59.175535][ T6597] fuse: Unknown parameter 'ÿ' [ 59.216934][ T6600] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 59.298114][ T6616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 59.620492][ T6633] netlink: 'syz.3.191': attribute type 1 has an invalid length. [ 59.801410][ T6642] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 59.817247][ T6642] netlink: 72 bytes leftover after parsing attributes in process `syz.3.193'. [ 59.921393][ T6653] netlink: 'syz.0.197': attribute type 2 has an invalid length. [ 60.106410][ T6661] fuse: Invalid rootmode [ 60.486884][ T6688] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 60.497049][ T6688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 60.644325][ T6691] fuse: Invalid rootmode [ 60.710127][ T6693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.211'. [ 60.713762][ T6693] netlink: 'syz.0.211': attribute type 7 has an invalid length. [ 60.726495][ T6693] netlink: 'syz.0.211': attribute type 8 has an invalid length. [ 60.729957][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.211'. [ 61.043914][ T6003] IPVS: starting estimator thread 0... [ 61.137803][ T6712] IPVS: using max 42 ests per chain, 100800 per kthread [ 61.164310][ T6718] syz.1.222: attempt to access beyond end of device [ 61.164310][ T6718] loop1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 61.170793][ T6718] MINIX-fs: unable to read superblock [ 61.291572][ T6734] netlink: 20 bytes leftover after parsing attributes in process `syz.1.227'. [ 61.295309][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'. [ 61.359326][ T6740] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 61.361472][ T6740] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 61.376877][ T6740] vhci_hcd vhci_hcd.0: Device attached [ 61.413479][ T6737] netlink: 'syz.2.228': attribute type 4 has an invalid length. [ 61.531447][ T6741] vhci_hcd: connection closed [ 61.537295][ T6231] vhci_hcd: stop threads [ 61.537649][ T6754] netlink: 'syz.3.233': attribute type 10 has an invalid length. [ 61.537757][ T6231] vhci_hcd: release socket [ 61.538588][ T6231] vhci_hcd: disconnect device [ 61.539350][ T6754] hsr_slave_0: left promiscuous mode [ 61.540440][ T6754] hsr_slave_1: left promiscuous mode [ 61.577691][ T10] vhci_hcd: vhci_device speed not set [ 61.615560][ T6762] dummy0: entered promiscuous mode [ 61.652428][ T6764] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 61.826806][ T6781] IPv6: NLM_F_CREATE should be specified when creating new route [ 62.281282][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.247'. [ 62.294866][ T6803] block device autoloading is deprecated and will be removed. [ 62.298813][ T6803] syz.3.243: attempt to access beyond end of device [ 62.298813][ T6803] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 62.436910][ T6811] netlink: 144 bytes leftover after parsing attributes in process `syz.2.250'. [ 62.745489][ T6829] x_tables: duplicate underflow at hook 2 [ 62.859522][ T6834] fuse: Unknown parameter 'use00000000000000000000' [ 62.924903][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 62.924914][ T40] audit: type=1400 audit(1750466923.389:369): avc: denied { ioctl } for pid=6841 comm="syz.1.263" path="pid:[4026532875]" dev="nsfs" ino=4026532875 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.931968][ T6845] nfs: Unknown parameter '¯j“É-®j¢”Ö' [ 62.942337][ T40] audit: type=1400 audit(1750466923.399:370): avc: denied { bind } for pid=6844 comm="syz.2.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.004889][ T40] audit: type=1400 audit(1750466923.469:371): avc: denied { ioctl } for pid=6852 comm="syz.1.267" path="socket:[12777]" dev="sockfs" ino=12777 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 63.015072][ T40] audit: type=1400 audit(1750466923.479:372): avc: denied { read } for pid=6844 comm="syz.2.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.061531][ T6858] netlink: 'syz.2.268': attribute type 1 has an invalid length. [ 63.088562][ T6860] binder: 6859:6860 ioctl c0306201 200000000080 returned -14 [ 63.128820][ T6867] fuse: Unknown parameter 'use00000000000000000000' [ 63.160602][ T40] audit: type=1400 audit(1750466923.629:373): avc: denied { create } for pid=6868 comm="syz.2.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 63.169040][ T40] audit: type=1400 audit(1750466923.629:374): avc: denied { connect } for pid=6868 comm="syz.2.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 63.254519][ T40] audit: type=1400 audit(1750466923.719:375): avc: denied { read } for pid=6873 comm="syz.1.274" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 63.263578][ T40] audit: type=1400 audit(1750466923.729:376): avc: denied { open } for pid=6873 comm="syz.1.274" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 63.289726][ T6875] openvswitch: netlink: Key type 12304 is out of range max 32 [ 63.643290][ T6897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.655898][ T6897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.252877][ T6902] fuse: Bad value for 'fd' [ 65.339927][ T6874] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 65.339977][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 66.235429][ T6874] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 66.241697][ T6874] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 66.245236][ T6874] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 66.247820][ T6874] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 66.251007][ T6874] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 66.253576][ T6874] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 66.255588][ T6874] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 66.258869][ T6874] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 66.261282][ T6874] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 66.263280][ T6874] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 66.265978][ T6874] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 66.268760][ T6887] syz.3.275: attempt to access beyond end of device [ 66.268760][ T6887] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 66.387501][ T40] audit: type=1400 audit(1750466926.849:377): avc: denied { ioctl } for pid=6908 comm="syz.3.284" path="socket:[14630]" dev="sockfs" ino=14630 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 66.415068][ T6923] netlink: 'syz.1.289': attribute type 2 has an invalid length. [ 66.492008][ T6930] __nla_validate_parse: 3 callbacks suppressed [ 66.492024][ T6930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.289'. [ 66.509934][ T6932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32280 sclass=netlink_route_socket pid=6932 comm=syz.3.292 [ 66.561028][ T6935] netlink: 20 bytes leftover after parsing attributes in process `syz.2.290'. [ 66.892132][ T6967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.301'. [ 66.895626][ T40] audit: type=1400 audit(1750466927.359:378): avc: denied { write } for pid=6966 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 66.922459][ T6973] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 67.098042][ T6990] fuse: Unknown parameter 'user_i00000000000000000000' [ 67.214633][ T6999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.228626][ T6999] batadv_slave_0: entered promiscuous mode [ 67.268930][ T7009] syzkaller1: entered promiscuous mode [ 67.271386][ T7009] syzkaller1: entered allmulticast mode [ 67.282323][ T7009] syzkaller1: left promiscuous mode [ 67.288996][ T7009] syzkaller1: left allmulticast mode [ 67.354771][ T7023] SELinux: policydb string does not match my string SE Linux [ 67.357487][ T7023] SELinux: failed to load policy [ 67.394661][ T7027] xt_hashlimit: size too large, truncated to 1048576 [ 67.409310][ T7029] netlink: 'syz.2.319': attribute type 5 has an invalid length. [ 67.417714][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 67.559299][ T7051] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 67.562297][ T7051] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 67.592928][ T7058] sp0: Synchronizing with TNC [ 67.623665][ T7057] netlink: 48 bytes leftover after parsing attributes in process `syz.2.328'. [ 67.714931][ T7073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.332'. [ 67.988206][ T7116] netlink: 236 bytes leftover after parsing attributes in process `syz.3.346'. [ 68.015984][ T7120] fuse: Unknown parameter 'user_id00000000000000000000' [ 68.036490][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.349'. [ 68.039421][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.349'. [ 68.042166][ T7122] netlink: 24 bytes leftover after parsing attributes in process `syz.1.349'. [ 68.052988][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 68.052998][ T40] audit: type=1400 audit(67.930:392): avc: denied { read } for pid=7124 comm="syz.2.351" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.060499][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'. [ 68.064504][ T40] audit: type=1400 audit(67.930:393): avc: denied { open } for pid=7124 comm="syz.2.351" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.065753][ T7126] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 68.078600][ T7126] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 68.082726][ T7126] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 68.101089][ T7134] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 68.104482][ T7134] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 68.115432][ T40] audit: type=1400 audit(67.990:394): avc: denied { setopt } for pid=7137 comm="syz.2.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.177327][ T40] audit: type=1400 audit(68.050:395): avc: denied { mounton } for pid=7146 comm="syz.0.358" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 68.198204][ T40] audit: type=1400 audit(68.080:396): avc: denied { unmount } for pid=5943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.206779][ T7151] fuse: Unknown parameter 'user_id00000000000000000000' [ 68.225764][ T7153] netlink: 'syz.0.360': attribute type 2 has an invalid length. [ 68.229521][ T7153] netlink: 'syz.0.360': attribute type 4 has an invalid length. [ 68.297723][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 68.299751][ T5949] Bluetooth: hci3: command 0x0c1a tx timeout [ 68.299894][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 68.310886][ T7169] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 68.314193][ T7169] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 68.320226][ T7171] FAULT_INJECTION: forcing a failure. [ 68.320226][ T7171] name failslab, interval 1, probability 0, space 0, times 0 [ 68.325309][ T7171] CPU: 0 UID: 0 PID: 7171 Comm: syz.1.366 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 68.325331][ T7171] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.325341][ T7171] Call Trace: [ 68.325347][ T7171] [ 68.325354][ T7171] dump_stack_lvl+0x16c/0x1f0 [ 68.325393][ T7171] should_fail_ex+0x512/0x640 [ 68.325416][ T7171] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 68.325441][ T7171] should_failslab+0xc2/0x120 [ 68.325465][ T7171] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 68.325487][ T7171] ? __alloc_skb+0x2b2/0x380 [ 68.325519][ T7171] __alloc_skb+0x2b2/0x380 [ 68.325542][ T7171] ? __pfx___alloc_skb+0x10/0x10 [ 68.325564][ T7171] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 68.325586][ T7171] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 68.325615][ T7171] netlink_alloc_large_skb+0x69/0x130 [ 68.325635][ T7171] netlink_sendmsg+0x6a1/0xdd0 [ 68.325657][ T7171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.325684][ T7171] ____sys_sendmsg+0xa95/0xc70 [ 68.325703][ T7171] ? copy_msghdr_from_user+0x10a/0x160 [ 68.325727][ T7171] ? __pfx_____sys_sendmsg+0x10/0x10 [ 68.325756][ T7171] ___sys_sendmsg+0x134/0x1d0 [ 68.325781][ T7171] ? __pfx____sys_sendmsg+0x10/0x10 [ 68.325801][ T7171] ? __lock_acquire+0x622/0x1c90 [ 68.325855][ T7171] __sys_sendmsg+0x16d/0x220 [ 68.325880][ T7171] ? __pfx___sys_sendmsg+0x10/0x10 [ 68.325920][ T7171] do_syscall_64+0xcd/0x4c0 [ 68.325947][ T7171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.325965][ T7171] RIP: 0033:0x7f1d1b38e929 [ 68.325979][ T7171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.325995][ T7171] RSP: 002b:00007f1d1c10f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.326036][ T7171] RAX: ffffffffffffffda RBX: 00007f1d1b5b5fa0 RCX: 00007f1d1b38e929 [ 68.326047][ T7171] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 0000000000000004 [ 68.326057][ T7171] RBP: 00007f1d1c10f090 R08: 0000000000000000 R09: 0000000000000000 [ 68.326067][ T7171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.326076][ T7171] R13: 0000000000000000 R14: 00007f1d1b5b5fa0 R15: 00007fffa5e09ee8 [ 68.326099][ T7171] [ 68.411991][ C0] vkms_vblank_simulate: vblank timer overrun [ 68.427308][ T7175] IPv6: NLM_F_CREATE should be specified when creating new route [ 68.445141][ T40] audit: type=1400 audit(68.320:397): avc: denied { write } for pid=7173 comm="syz.3.368" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.512889][ T40] audit: type=1400 audit(68.390:398): avc: denied { write } for pid=7178 comm="syz.1.369" name="file1" dev="9p" ino=35913839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.528627][ T7181] trusted_key: encrypted_key: insufficient parameters specified [ 68.591393][ T40] audit: type=1400 audit(68.470:399): avc: denied { bind } for pid=7186 comm="syz.3.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 68.827775][ T838] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 68.902113][ T7201] FAULT_INJECTION: forcing a failure. [ 68.902113][ T7201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.906230][ T7201] CPU: 3 UID: 0 PID: 7201 Comm: syz.0.379 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 68.906245][ T7201] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.906251][ T7201] Call Trace: [ 68.906255][ T7201] [ 68.906260][ T7201] dump_stack_lvl+0x16c/0x1f0 [ 68.906279][ T7201] should_fail_ex+0x512/0x640 [ 68.906296][ T7201] _copy_from_iter+0x29f/0x16f0 [ 68.906313][ T7201] ? __alloc_skb+0x200/0x380 [ 68.906328][ T7201] ? __pfx__copy_from_iter+0x10/0x10 [ 68.906342][ T7201] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 68.906357][ T7201] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 68.906376][ T7201] netlink_sendmsg+0x829/0xdd0 [ 68.906390][ T7201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.906406][ T7201] ____sys_sendmsg+0xa95/0xc70 [ 68.906418][ T7201] ? copy_msghdr_from_user+0x10a/0x160 [ 68.906433][ T7201] ? __pfx_____sys_sendmsg+0x10/0x10 [ 68.906451][ T7201] ___sys_sendmsg+0x134/0x1d0 [ 68.906471][ T7201] ? __pfx____sys_sendmsg+0x10/0x10 [ 68.906485][ T7201] ? __lock_acquire+0x622/0x1c90 [ 68.906518][ T7201] __sys_sendmsg+0x16d/0x220 [ 68.906534][ T7201] ? __pfx___sys_sendmsg+0x10/0x10 [ 68.906558][ T7201] do_syscall_64+0xcd/0x4c0 [ 68.906575][ T7201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.906586][ T7201] RIP: 0033:0x7f83fe58e929 [ 68.906595][ T7201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.906605][ T7201] RSP: 002b:00007f83ff31c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.906614][ T7201] RAX: ffffffffffffffda RBX: 00007f83fe7b5fa0 RCX: 00007f83fe58e929 [ 68.906621][ T7201] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 0000000000000004 [ 68.906627][ T7201] RBP: 00007f83ff31c090 R08: 0000000000000000 R09: 0000000000000000 [ 68.906633][ T7201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.906639][ T7201] R13: 0000000000000000 R14: 00007f83fe7b5fa0 R15: 00007fff016661a8 [ 68.906652][ T7201] [ 68.991356][ T838] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 68.994293][ T838] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.999386][ T838] usb 8-1: Product: syz [ 69.000870][ T838] usb 8-1: Manufacturer: syz [ 69.002336][ T838] usb 8-1: SerialNumber: syz [ 69.010093][ T838] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 69.025698][ T40] audit: type=1400 audit(68.900:400): avc: denied { firmware_load } for pid=6006 comm="kworker/1:4" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 69.030142][ T7205] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 69.038295][ T7205] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 69.044011][ T6006] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 69.115202][ T7212] syz.2.383: attempt to access beyond end of device [ 69.115202][ T7212] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 69.120511][ T7212] syz.2.383: attempt to access beyond end of device [ 69.120511][ T7212] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 69.132283][ T7212] Cannot find add_set index 4 as target [ 69.376606][ T7230] xt_hashlimit: size too large, truncated to 1048576 [ 69.427441][ T40] audit: type=1400 audit(69.300:401): avc: denied { connect } for pid=7229 comm="syz.2.391" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.498831][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 69.574122][ T7246] netlink: 'syz.1.398': attribute type 10 has an invalid length. [ 69.590417][ T7246] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 69.656068][ T7252] tipc: Started in network mode [ 69.656084][ T7252] tipc: Node identity , cluster identity 4711 [ 69.656097][ T7252] tipc: Failed to obtain node identity [ 69.656118][ T7252] tipc: Enabling of bearer rejected, failed to enable media [ 69.772011][ T7255] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 69.906509][ T7269] syzkaller1: entered promiscuous mode [ 69.906523][ T7269] syzkaller1: entered allmulticast mode [ 70.026581][ T7274] binder: 7273:7274 ioctl c0306201 200000000640 returned -22 [ 70.068689][ T6006] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 70.071435][ T6006] ath9k_htc: Failed to initialize the device [ 70.102428][ T6006] usb 8-1: ath9k_htc: USB layer deinitialized [ 70.311225][ T7314] syz.3.372: attempt to access beyond end of device [ 70.311225][ T7314] nbd3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 70.315671][ T7314] EXT4-fs (nbd3): unable to read superblock [ 70.378287][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 70.387897][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 70.389771][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 71.101311][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.103497][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.118205][ T7375] binder: Binderfs stats mode cannot be changed during a remount [ 71.153555][ T1424] ================================================================== [ 71.156075][ T1424] BUG: KASAN: slab-use-after-free in handle_tx+0x5dc/0x630 [ 71.158370][ T1424] Read of size 1 at addr ffff888036ce7490 by task aoe_tx0/1424 [ 71.162152][ T1424] [ 71.163286][ T1424] CPU: 2 UID: 0 PID: 1424 Comm: aoe_tx0 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 71.163300][ T1424] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.163307][ T1424] Call Trace: [ 71.163311][ T1424] [ 71.163315][ T1424] dump_stack_lvl+0x116/0x1f0 [ 71.163333][ T1424] print_report+0xcd/0x680 [ 71.163349][ T1424] ? __virt_addr_valid+0x81/0x610 [ 71.163361][ T1424] ? __phys_addr+0xe8/0x180 [ 71.163373][ T1424] ? handle_tx+0x5dc/0x630 [ 71.163387][ T1424] kasan_report+0xe0/0x110 [ 71.163402][ T1424] ? handle_tx+0x5dc/0x630 [ 71.163418][ T1424] handle_tx+0x5dc/0x630 [ 71.163436][ T1424] dev_hard_start_xmit+0x97/0x740 [ 71.163450][ T1424] __dev_queue_xmit+0x7eb/0x43e0 [ 71.163464][ T1424] ? lockdep_hardirqs_on+0x7c/0x110 [ 71.163480][ T1424] ? rcu_is_watching+0x12/0xc0 [ 71.163494][ T1424] ? __pfx___dev_queue_xmit+0x10/0x10 [ 71.163507][ T1424] ? rcu_is_watching+0x12/0xc0 [ 71.163520][ T1424] ? __lock_acquire+0xb8a/0x1c90 [ 71.163536][ T1424] ? __lock_acquire+0xb8a/0x1c90 [ 71.163553][ T1424] ? do_raw_spin_lock+0x12c/0x2b0 [ 71.163565][ T1424] ? find_held_lock+0x2b/0x80 [ 71.163577][ T1424] ? skb_dequeue+0x126/0x180 [ 71.163588][ T1424] ? find_held_lock+0x2b/0x80 [ 71.163600][ T1424] ? rcu_is_watching+0x12/0xc0 [ 71.163614][ T1424] tx+0xcc/0x190 [ 71.163623][ T1424] ? __pfx_tx+0x10/0x10 [ 71.163631][ T1424] kthread+0x1e1/0x3e0 [ 71.163646][ T1424] ? find_held_lock+0x2b/0x80 [ 71.163658][ T1424] ? __pfx_kthread+0x10/0x10 [ 71.163673][ T1424] ? __pfx_default_wake_function+0x10/0x10 [ 71.163686][ T1424] ? lockdep_hardirqs_on+0x7c/0x110 [ 71.163701][ T1424] ? __kthread_parkme+0x19e/0x250 [ 71.163716][ T1424] ? __pfx_kthread+0x10/0x10 [ 71.163731][ T1424] kthread+0x3c2/0x780 [ 71.163740][ T1424] ? __pfx_kthread+0x10/0x10 [ 71.163749][ T1424] ? rcu_is_watching+0x12/0xc0 [ 71.163761][ T1424] ? __pfx_kthread+0x10/0x10 [ 71.163770][ T1424] ret_from_fork+0x5d4/0x6f0 [ 71.163786][ T1424] ? __pfx_kthread+0x10/0x10 [ 71.163795][ T1424] ret_from_fork_asm+0x1a/0x30 [ 71.163809][ T1424] [ 71.163812][ T1424] [ 71.179694][ T7376] netlink: 'syz.2.425': attribute type 1 has an invalid length. [ 71.180013][ T1424] Allocated by task 7347: [ 71.180021][ T1424] kasan_save_stack+0x33/0x60 [ 71.180036][ T1424] kasan_save_track+0x14/0x30 [ 71.235641][ T1424] __kasan_kmalloc+0xaa/0xb0 [ 71.237100][ T1424] alloc_tty_struct+0x96/0x8c0 [ 71.238617][ T1424] tty_init_dev.part.0+0x1e/0x500 [ 71.240232][ T1424] tty_open+0xa50/0xf90 [ 71.241602][ T1424] chrdev_open+0x234/0x6a0 [ 71.243034][ T1424] do_dentry_open+0x744/0x1c10 [ 71.244549][ T1424] vfs_open+0x82/0x3f0 [ 71.245839][ T1424] path_openat+0x1de4/0x2cb0 [ 71.247300][ T1424] do_filp_open+0x20b/0x470 [ 71.248729][ T1424] do_sys_openat2+0x11b/0x1d0 [ 71.250215][ T1424] __x64_sys_openat+0x174/0x210 [ 71.251770][ T1424] do_syscall_64+0xcd/0x4c0 [ 71.253215][ T1424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.255067][ T1424] [ 71.255836][ T1424] Freed by task 838: [ 71.257044][ T1424] kasan_save_stack+0x33/0x60 [ 71.258584][ T1424] kasan_save_track+0x14/0x30 [ 71.260179][ T1424] kasan_save_free_info+0x3b/0x60 [ 71.262157][ T1424] __kasan_slab_free+0x51/0x70 [ 71.264040][ T1424] kfree+0x2b4/0x4d0 [ 71.265579][ T1424] process_one_work+0x9cc/0x1b70 [ 71.267531][ T1424] worker_thread+0x6c8/0xf10 [ 71.269334][ T1424] kthread+0x3c2/0x780 [ 71.270944][ T1424] ret_from_fork+0x5d4/0x6f0 [ 71.272803][ T1424] ret_from_fork_asm+0x1a/0x30 [ 71.274651][ T1424] [ 71.275593][ T1424] Last potentially related work creation: [ 71.277747][ T1424] kasan_save_stack+0x33/0x60 [ 71.279573][ T1424] kasan_record_aux_stack+0xa7/0xc0 [ 71.281577][ T1424] insert_work+0x36/0x230 [ 71.283252][ T1424] __queue_work+0x97e/0x10f0 [ 71.285064][ T1424] queue_work_on+0x1a4/0x1f0 [ 71.286672][ T1424] release_tty+0x4de/0x5d0 [ 71.288086][ T1424] tty_release_struct+0xb7/0xe0 [ 71.289627][ T1424] tty_release+0xe2d/0x1430 [ 71.291333][ T1424] __fput+0x3ff/0xb70 [ 71.292910][ T1424] task_work_run+0x150/0x240 [ 71.294739][ T1424] exit_to_user_mode_loop+0xeb/0x110 [ 71.296541][ T1424] do_syscall_64+0x3f6/0x4c0 [ 71.298029][ T1424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.299894][ T1424] [ 71.300676][ T1424] The buggy address belongs to the object at ffff888036ce7000 [ 71.300676][ T1424] which belongs to the cache kmalloc-cg-2k of size 2048 [ 71.305067][ T1424] The buggy address is located 1168 bytes inside of [ 71.305067][ T1424] freed 2048-byte region [ffff888036ce7000, ffff888036ce7800) [ 71.309328][ T1424] [ 71.310125][ T1424] The buggy address belongs to the physical page: [ 71.312135][ T1424] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x36ce0 [ 71.314831][ T1424] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 71.317429][ T1424] memcg:ffff88805479df01 [ 71.318772][ T1424] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 71.321339][ T1424] page_type: f5(slab) [ 71.322944][ T1424] raw: 00fff00000000040 ffff88801b84c140 dead000000000100 dead000000000122 [ 71.326281][ T1424] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff88805479df01 [ 71.329786][ T1424] head: 00fff00000000040 ffff88801b84c140 dead000000000100 dead000000000122 [ 71.333232][ T1424] head: 0000000000000000 0000000000080008 00000000f5000000 ffff88805479df01 [ 71.335975][ T1424] head: 00fff00000000003 ffffea0000db3801 00000000ffffffff 00000000ffffffff [ 71.338695][ T1424] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 71.341389][ T1424] page dumped because: kasan: bad access detected [ 71.343442][ T1424] page_owner tracks the page as allocated [ 71.345209][ T1424] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6127, tgid 6126 (syz.1.31), ts 52786077448, free_ts 52445689756 [ 71.354802][ T1424] post_alloc_hook+0x1c0/0x230 [ 71.356383][ T1424] get_page_from_freelist+0x1321/0x3890 [ 71.358531][ T1424] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 71.360519][ T1424] alloc_pages_mpol+0x1fb/0x550 [ 71.362673][ T1424] new_slab+0x23b/0x330 [ 71.364658][ T1424] ___slab_alloc+0xd9c/0x1940 [ 71.366986][ T1424] __slab_alloc.constprop.0+0x56/0xb0 [ 71.369154][ T1424] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 71.371198][ T1424] kmemdup_noprof+0x29/0x60 [ 71.372652][ T1424] neigh_sysctl_register+0xb2/0x670 [ 71.374316][ T1424] devinet_sysctl_register+0xb6/0x200 [ 71.376005][ T1424] inetdev_init+0x2b8/0x5a0 [ 71.377433][ T1424] inetdev_event+0xc5f/0x18a0 [ 71.379024][ T1424] notifier_call_chain+0xb9/0x410 [ 71.380633][ T1424] call_netdevice_notifiers_info+0xbe/0x140 [ 71.382526][ T1424] register_netdevice+0x182e/0x2270 [ 71.384175][ T1424] page last free pid 5939 tgid 5939 stack trace: [ 71.386181][ T1424] __free_frozen_pages+0x7fe/0x1180 [ 71.387833][ T1424] qlist_free_all+0x4d/0x120 [ 71.389306][ T1424] kasan_quarantine_reduce+0x195/0x1e0 [ 71.391031][ T1424] __kasan_slab_alloc+0x69/0x90 [ 71.392601][ T1424] kmem_cache_alloc_lru_noprof+0x1d0/0x3b0 [ 71.394438][ T1424] sock_alloc_inode+0x25/0x1c0 [ 71.395953][ T1424] alloc_inode+0x61/0x240 [ 71.397335][ T1424] sock_alloc+0x40/0x280 [ 71.398699][ T1424] __sock_create+0xc1/0x8d0 [ 71.400308][ T1424] __sys_socket+0x14d/0x260 [ 71.401802][ T1424] __x64_sys_socket+0x72/0xb0 [ 71.403335][ T1424] do_syscall_64+0xcd/0x4c0 [ 71.404791][ T1424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.406676][ T1424] [ 71.407466][ T1424] Memory state around the buggy address: [ 71.409243][ T1424] ffff888036ce7380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.411804][ T1424] ffff888036ce7400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.414324][ T1424] >ffff888036ce7480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.416824][ T1424] ^ [ 71.418315][ T1424] ffff888036ce7500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.420938][ T1424] ffff888036ce7580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.423458][ T1424] ================================================================== [ 71.426323][ T1424] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 71.428590][ T1424] CPU: 2 UID: 0 PID: 1424 Comm: aoe_tx0 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 71.432244][ T1424] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.435588][ T1424] Call Trace: [ 71.436661][ T1424] [ 71.437616][ T1424] dump_stack_lvl+0x3d/0x1f0 [ 71.439103][ T1424] panic+0x71c/0x800 [ 71.440365][ T1424] ? __pfx_panic+0x10/0x10 [ 71.441804][ T1424] ? irqentry_exit+0x3b/0x90 [ 71.443381][ T1424] ? lockdep_hardirqs_on+0x7c/0x110 [ 71.445435][ T1424] ? handle_tx+0x5dc/0x630 [ 71.447214][ T1424] ? check_panic_on_warn+0x1f/0xb0 [ 71.449241][ T1424] ? handle_tx+0x5dc/0x630 [ 71.451019][ T1424] check_panic_on_warn+0xab/0xb0 [ 71.452744][ T1424] end_report+0x107/0x170 [ 71.454154][ T1424] kasan_report+0xee/0x110 [ 71.455659][ T1424] ? handle_tx+0x5dc/0x630 [ 71.457090][ T1424] handle_tx+0x5dc/0x630 [ 71.458472][ T1424] dev_hard_start_xmit+0x97/0x740 [ 71.460073][ T1424] __dev_queue_xmit+0x7eb/0x43e0 [ 71.461662][ T1424] ? lockdep_hardirqs_on+0x7c/0x110 [ 71.463329][ T1424] ? rcu_is_watching+0x12/0xc0 [ 71.464851][ T1424] ? __pfx___dev_queue_xmit+0x10/0x10 [ 71.466565][ T1424] ? rcu_is_watching+0x12/0xc0 [ 71.468093][ T1424] ? __lock_acquire+0xb8a/0x1c90 [ 71.469679][ T1424] ? __lock_acquire+0xb8a/0x1c90 [ 71.471291][ T1424] ? do_raw_spin_lock+0x12c/0x2b0 [ 71.472909][ T1424] ? find_held_lock+0x2b/0x80 [ 71.474422][ T1424] ? skb_dequeue+0x126/0x180 [ 71.475898][ T1424] ? find_held_lock+0x2b/0x80 [ 71.477403][ T1424] ? rcu_is_watching+0x12/0xc0 [ 71.478952][ T1424] tx+0xcc/0x190 [ 71.480110][ T1424] ? __pfx_tx+0x10/0x10 [ 71.481493][ T1424] kthread+0x1e1/0x3e0 [ 71.483011][ T1424] ? find_held_lock+0x2b/0x80 [ 71.484874][ T1424] ? __pfx_kthread+0x10/0x10 [ 71.486816][ T1424] ? __pfx_default_wake_function+0x10/0x10 [ 71.489166][ T1424] ? lockdep_hardirqs_on+0x7c/0x110 [ 71.491232][ T1424] ? __kthread_parkme+0x19e/0x250 [ 71.493061][ T1424] ? __pfx_kthread+0x10/0x10 [ 71.494560][ T1424] kthread+0x3c2/0x780 [ 71.495895][ T1424] ? __pfx_kthread+0x10/0x10 [ 71.497398][ T1424] ? rcu_is_watching+0x12/0xc0 [ 71.498949][ T1424] ? __pfx_kthread+0x10/0x10 [ 71.500494][ T1424] ret_from_fork+0x5d4/0x6f0 [ 71.502020][ T1424] ? __pfx_kthread+0x10/0x10 [ 71.503488][ T1424] ret_from_fork_asm+0x1a/0x30 [ 71.505057][ T1424] [ 71.506752][ T1424] Kernel Offset: disabled [ 71.508132][ T1424] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:48:51 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff93d3d088 RBX=0000000000065c42 RCX=000000003b52fc51 RDX=938c34170fa2dc56 RSI=00000000edeefcb8 RDI=ffff888055262f80 RBP=ffff888055262440 RSP=ffffc9002093f678 R8 =938c34170fa2dc56 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000001 R12=ffff888055262f30 R13=ffff888055262f80 R14=00000000f781cfbf R15=0000000000000002 RIP=ffffffff819862fa RFL=00000807 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555a280500 ffffffff 00c00000 GS =0000 ffff8880d6753000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000032000 CR3=0000000059dee000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3bf6c11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3bf6c11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3bf6c11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3bf6c11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3bf6c11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3bf6c11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000095 000000b300000085 00000008000005b7 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000231800000008 000002b7fffffff0 0000040700000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000010700000000 0000a1bf00000010 fff08a7b00000004 000008b500000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 77a915220397a741 e893d7cfc3666e3e 12b93b297062fbf8 8962def2a081e4a3 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9c57022597ee449c bd65004ce6ce6986 12b8be797af612aa 07644aa93bdd0d54 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e25320e831cbbe3d 9426585bb15c0990 0d4ed3b7bb57b546 35ee68953cf32b6b ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ded91165ac996c90 33806385b8384e17 3c27875ee73116ae 6268c9ab13d0579f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffffea0000d5d5c0 RCX=00000000e753f3f5 RDX=ffffffff822b6114 RSI=ffffffff8c1578e0 RDI=ffffffff8c157920 RBP=ffff88807ffd7400 RSP=ffffc90021bef4a0 R8 =88fc01ed9af92abf R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=00000000ffffffff R13=0000000000000012 R14=0000000000000000 R15=ffffea0000d5d5c0 RIP=ffffffff8b8023a8 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6853000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2155db2d58 CR3=000000002588e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d1b411b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d1b411b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d1b411b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d1b411b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d1b411bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d1b411c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d1b584488 00007f1d1b584480 00007f1d1b584478 00007f1d1b584450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d1c0ed100 00007f1d1b584440 00007f1d1b580004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d1b584498 00007f1d1b584490 00007f1d1b584488 00007f1d1b584480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000078 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b8b95 RDI=ffffffff9b087320 RBP=ffffffff9b0872e0 RSP=ffffc90006ecf458 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000078 R14=ffffffff9b0872e0 R15=ffffffff855b8b30 RIP=ffffffff855b8bbf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6953000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007eff40a6a286 CR3=0000000059dee000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3bf6c11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3bf6c11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3bf6c11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3bf6c11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3bf6c11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3bf6c11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000095 000000b300000085 00000008000005b7 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000231800000008 000002b7fffffff0 0000040700000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000010700000000 0000a1bf00000010 fff08a7b00000004 000008b500000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 77a915220397a741 e893d7cfc3666e3e 12b93b297062fbf8 8962def2a081e4a3 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9c57022597ee449c bd65004ce6ce6986 12b8be797af612aa 07644aa93bdd0d54 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e25320e831cbbe3d 9426585bb15c0990 0d4ed3b7bb57b546 35ee68953cf32b6b ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ded91165ac996c90 33806385b8384e17 3c27875ee73116ae 6268c9ab13d0579f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88801b8428c0 RCX=ffff88801b8428c0 RDX=ffffea0000cc8380 RSI=ffffffff816c9838 RDI=0000000000000007 RBP=ffff88803320ed80 RSP=ffffc9000dedfc60 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff888029bb3400 R13=0000000000000000 R14=ffffc9000dedfc98 R15=ffff888055a99520 RIP=ffffffff822306f8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007eff40815c80 ffffffff 00c00000 GS =0000 ffff8880d6a53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055addba63a21 CR3=0000000031ea7000 CR4=00352ef0 DR0=0000000000000002 DR1=000000000000004a DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000811 Opmask01=000000000000001c Opmask02=000000000000001f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100008781 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 68642f62696c2f87 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100008781 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ff00ff ffff0000000000ff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000ff0000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003231 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 74736f682d30332f 736b6f6f682d6463 706368642f646370 6368642f62696c2f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5b5c4047021f1c00 5c44404047024b4c 5f4c474b004b4c5f 4c474b004d464300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055addba6b0b8 0000000000000000 000000000000000f 000055addb00873d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055addba65918 0000000000000000 000000000000000f 0000000000875d81 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000