last executing test programs: 3.104230215s ago: executing program 1 (id=571): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f014, 0x105}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000001040)={0x9000001d}) read(r3, &(0x7f0000002e00)=""/4088, 0xff8) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000015c0)=@assoc_value={0x0, 0xfc36}, 0x8) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x80, &(0x7f0000001480)=[{&(0x7f00000001c0)="d6eba706674926807edc4e199baddb3421504fb7cfbc6bb4dffe9cb15675a75d8d62f29f8b14eff28acdb1986e1440dd0adad9626292a947e8f2f756f0926b3bce380ff59b93390097b38fd3477e4718531fe7251d24deafede73a73b1782931810559a8315479c0d1433514176eaf85f0354039cea49c62662d6bf1af03e5c184771bb22982900182cfee35737768a62ecda8b3a46c2200d08e2cf3bedf1ed0719dab1a241086", 0xa7}, {0x0}, {&(0x7f0000000400)="5e07f3aabc183b887378da7fcacb", 0xe}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="b5818efc48c5c9f9e3eadd7c06f0ff760579fff5", 0x14}], 0x5, &(0x7f0000001500)=[{0x40, 0x116, 0x69b, "4d4f0bcd02f3a5bc1d2af9566473ebb1de91d92f142a164a0791d16445366c9d39f9be7b45c0bdace05ecc50d814"}], 0x40}, 0x8800) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r6, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_SET_CLOCK(r6, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) 2.7858626s ago: executing program 3 (id=574): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f014, 0x105}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000001040)={0x9000001d}) read(r3, &(0x7f0000002e00)=""/4088, 0xff8) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x80, &(0x7f0000001480)=[{&(0x7f00000001c0)="d6eba706674926807edc4e199baddb3421504fb7cfbc6bb4dffe9cb15675a75d8d62f29f8b14eff28acdb1986e1440dd0adad9626292a947e8f2f756f0926b3bce380ff59b93390097b38fd3477e4718531fe7251d24deafede73a73b1782931810559a8315479c0d1433514176eaf85f0354039cea49c62662d6bf1af03e5c184771bb22982900182cfee35737768a62ecda8", 0x93}, {0x0}, {&(0x7f0000000400)="5e07f3aabc183b887378da7fcacb", 0xe}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="b5818efc48c5c9f9e3eadd7c06f0ff760579fff5", 0x14}], 0x5, &(0x7f0000001500)=[{0x48, 0x116, 0x69b, "4d4f0bcd02f3a5bc1d2af9566473ebb1de91d92f142a164a0791d16445366c9d39f9be7b45c0bdace05ecc50d81480a9f8"}], 0x48}, 0x8800) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r6, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_SET_CLOCK(r6, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) 2.595679541s ago: executing program 0 (id=576): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005e00010200"/18, @ANYRES32, @ANYBLOB="d21ca5"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="510003000000", 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x4d032, 0xffffffffffffffff, 0x0) gettid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, r6}, [@IFA_TARGET_NETNSID={0x8}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5889}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8000103}]}, 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x8080) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) rt_sigqueueinfo(r3, 0x2a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f0000000400000008000000b263000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x48) r8 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r8, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0x2, 0xce21, 0x0, @remote, 0x1}}, 0x24) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000002000000000000000000000000000000006c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000480003006c7a7300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400736861312d61736d00"/312], 0x180}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) 2.148114153s ago: executing program 1 (id=580): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800ebf50000000000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) accept$alg(r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="ef", 0xffe3}], 0x1, 0x0, 0x0, 0x20000000}, 0xa}], 0x420, 0x0) flock(0xffffffffffffffff, 0x0) setuid(0x0) mkdir(&(0x7f0000000600)='./file1\x00', 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000a00)='./file1\x00', &(0x7f0000000000)='affs\x00', 0x180042, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000046682d562c3163534e830000ac12a8b52f0d7086e274aa97a91fa46cdcefe7534fde04cace652b4c498a446290f93bce3177127ebc0c24e7e718c0b1da96d9c9fa8e95810000007cb9806b9641bb5a0124c1a1eae02533d551ea74d77602fab0ffc0a054efb9481ba4bf71fd681cb4a7dbe2f50747fcb93a0661f8889baa4958ff45d0961803846e520f882536fdad77614bdd2b6b19a7ead5ca28d9f56159ed73935ee196838e2d856a0d2f5564fa"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 1.805895521s ago: executing program 3 (id=581): r0 = epoll_create(0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = dup2(r0, r1) close_range(r2, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) eventfd2(0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @int={0x0, 0x0, 0x0, 0x1, 0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x4e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r10, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r7], 0x4}}, 0x0) sendfile(r9, r8, 0x0, 0x100000002) 1.805490166s ago: executing program 3 (id=582): socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_setup(0x35cd, &(0x7f0000000180)={0x0, 0x0, 0x400}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x9, 0x7, 0x49446392, 0x0, 0x4, 0x4, 0xe}, 0x1c) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) close(0xffffffffffffffff) memfd_secret(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x4a202) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x11, &(0x7f00000002c0)={0x10000, 0x100008e}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) getpgid(0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x102) r4 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000300)='vcan0\x00') write$6lowpan_control(r4, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:11 0', 0x1b) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB], 0x22) syz_emit_vhci(0x0, 0x7) 1.44563074s ago: executing program 2 (id=583): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) 1.385211478s ago: executing program 0 (id=584): r0 = epoll_create(0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = dup2(r0, r1) close_range(r2, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) eventfd2(0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @int={0x0, 0x0, 0x0, 0x1, 0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x4e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300", @ANYRES16=r6], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r10, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r7], 0x4}}, 0x0) sendfile(r9, r8, 0x0, 0x100000002) 1.384812583s ago: executing program 2 (id=585): socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000300), 0xd) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = io_uring_setup(0x21e9, &(0x7f0000002400)={0x0, 0xffffffbc, 0x0, 0x2, 0x176}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d2434b35bca8c0b78d2afff6d70d2025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38) ioctl$NS_GET_OWNER_UID(r2, 0xb704, 0x0) sendfile(r1, r2, &(0x7f0000000100), 0x100000000010001) write(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000000)) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB="0000000000000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = getpgid(r5) tkill(r8, 0x3f) 1.384432265s ago: executing program 0 (id=586): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000800)) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r6 = dup(r5) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000170a01010000000000efffffff00ffff0800010073597a310000000005a4b11cb6cd512712aa39fe2cb6aaaeb2e2f39c253c2558bb47c2822b2eade7382bb9eb8b"], 0x20}}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff05000500", 0x2c}, {&(0x7f00000019c0)="06bb", 0x2}], 0x2}, 0x0) 1.189314451s ago: executing program 2 (id=587): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000", @ANYRES32=r2], 0x24}}, 0x0) 1.178394397s ago: executing program 1 (id=588): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, 0x0, 0x0) 1.177823545s ago: executing program 2 (id=589): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f014, 0x105}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000001040)={0x9000001d}) read(r3, &(0x7f0000002e00)=""/4088, 0xff8) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x80, &(0x7f0000001480)=[{&(0x7f00000001c0)="d6eba706674926807edc4e199baddb3421504fb7cfbc6bb4dffe9cb15675a75d8d62f29f8b14eff28acdb1986e1440dd0adad9626292a947e8f2f756f0926b3bce380ff59b93390097b38fd3477e4718531fe7251d24deafede73a73b1782931810559a8315479c0d1433514176eaf85f0354039cea49c62662d6bf1af03e5c184771bb22982900182cfee35737768a62ecda8", 0x93}, {0x0}, {&(0x7f0000000400)="5e07f3aabc183b887378da7fcacb", 0xe}, {&(0x7f0000000440)="8f5e65c21340f9f22988ba2140b1523a784c7637a21c88b7e08676ed2058898eee74d65ae71535187c7a372e133cca4a4458d8f6e5719b0c91dde2150b5972c1d612b8b447a760bb342372a4ac1e7badffc1b0586d90e441760b9648fed58b80ecb5b5ca0ebe6b3ca0090d301035eb67d9f8baecbffcf29eb440ab83b9479f3dff33fa7d5e6850f709b760c3c8d33c78cafcce99638a0b3e567213e6b7981b83ce0cedf9301abe498cc776db1189b079cbca69355440057f782ffe42e6ea77b83dfc098fc98ad07aec975f13310d019415fb60c473f92d5730275dddea9df2b69c7db18a4f0c3e5fe9e6602ee52f59d6433e0b37af2fe85ae8503d1337d690d0e27e0f5ce59acc8af547c9b43e437ae4ef5c0618667f63f9c2b7b4ade020cf23ab16f8915bb3a339aca6a30606017e482e0fa80328eaeecef0e915799f736bb2a4e1d155408ba49e2b246f38a3fc17921515c42304dd347b01e24127909699ac7993f95297b0ac4033d9bb2fab222b6ce5d1f4cd3144b485cc400e78a1693620729ea7c1dc7797a769255fc2896cdc33df2b829493fbbe70fee1931dabd09942823336cfab5491b81000d62a695f2e87ba90fae0b493cc153da0e3ef0cb26463e62c8a38ecfbc837cd4f2778177d13c00bb5f329b94016ab8c96c4857476b6ae12f78f2e65fc6fa2ce668881510fde9db0f523b85aa60e37242b89d59e81f049661730b994e6be2561d445951fb44554ca7cac06f35fefb15a3531576eba05565d8eb1db670fc3a31c2cf0da76653a477b8e34b055facc4664c67463af565487132df0324e1f6b11a11272e824aed173a64e9ee991c9ff1c79aaee3b4ae1bca6f07bd8d764fed05e03bb0382d8e3d012f8efca9b6e1f688dc6a9c7dc8735b01ae0bb2bdbe2665c31ff046f21b56bb47b784a948c32778428854c3b6b1bfb2db34697dfca3cf3b6f39370863f3c277d9803328ca460909608c4a749d5fff4e01a3c705a089f1fcf6c1f4bd0f425f8193e5ba1184934df997c7878d3e0bfb7bb12f3063252920a371f63ec598d59b1ef81abe191f3b9713bc514e24d401a6d92acaa9eee54d219ef9aff9b069b5f4ffbbb14d04c84fa9966375460162b80966d8350d40b7590c4d9dc49b94863646f4e1b52bd5324d49567f4ca7a0ada78691bd6c52d1983bc935ab52dc5f55a92092d98c51e659f61377a5362df25aabeb47eb3f2b5aa84845d53f464425e2c7fc4c6ac02f7933e57c7f79315b869e4a3a8067c28f180264f115914336aafcddd067edf2988bf53c6d1354c1a157d0f94201e585c4a9fd518d716af4df584df67328d43c90abae4a8716eb7d5d59816d6d6d3f72cfc8423540cd0cae17fd6f5f72b61c5eb303d8c4c53a59cad2dc4715d5b188bdc0362f4c1cb8703a2d83a5c4c9cea9a3e769bc54d507a3501f60a055ef2f371b4e1b03d484a294bc6eb0cb69f48f44d3da47ea3e89e2e2d3be28b134dc4b3e1e89e083980c2d133877bd82da99457793844fdc5b5a67066730e3fbcd91b1d6113e1ecb9214437355a53fb5cea5606cccce9e57329cbcb7fe1b79b93dc835393aff5d8f986205cdb28a774445e040849309ebb9ee3730fad29959acce7841b233ab4d3fa4e1a6a14bf0593e049ddf0820a5ca2d6201b57bddba8cd5f24328d910c19bb0e7331e3d75e8cfda2bd6594c4a6fb33309f17f3905a3c30cfc024d97ebea1e11ee278cf7273d95871f9a7e9cce6f698f242bc999774a85b5e2ba7454281160c20f3a985a5a01c4e79dd11d791d5718f956c45f40c4fdd4356587a4f31321e40d8b803440ea68736472cdb8bf6a3418510cddf52edf20fc00cab806231bd97ad1dc3b70b4d780bd7b00b67030e8301e83d181a3e4aac5a5c98e464a64a806a968fcfecc6d452cc9b986dc89cc842a4d5a52a5c094c18a89316c97d03b06abb3db88c1866ca1ae752fae3d73f6763fc7ad293ed57b13b3ed3f5dbcc87591e3b134c63bd50586772f9ff3c359f6de08ed9a78fb50e358fcae00b4964b4b6b023e05e6a7ad18482d002606851cb52af72b91d45ed8545b68436bc563c19867a507fb78ef30c57d2b869b09487d0db7652df39e6da0be52adcbdfb19002312be671ce7049bd1cd0224763964a9866fcb406ad2f229f59fba1e2be399fc6a33db7546a86c82f54202d4bcab89e6be183bed02e94a27bb19e33e9d0d1e00d2b7f22764da1d9ea9346dc805b8380d454d62fb24fa716853b87b3c7d340b23f3e012e6f5a909a01de022e7b7a835cffee4c11b30e4e04a22c7cb5dd1f98b613951aaf2e21def54a7d038245e335ebeca4055e95e2556bb45a1ada5fba0bf96b927056c36fa946420de2c146b7c893245c09e1c00c9f2d423c466a62ed21a5997b24fcc47faebc7ea69888a26cb625030819f9597092935fab23c1e64dfe3bbe57b48886b403da1c9aded2bc895c15e864a2436ef622b9da136ed6d855034afaa0b90494c2d5350efcbebbdbc06d90a822e6f603d3d035c59ad76d0849a6cf13a9389864ede04d500542bb8c0e9492ec0102e0ea5e5c060124f7e33a47dd062647cba1d0be5611a992ef33baf97b407ccb9ae8b1aa797b6361edcc927305f7d4fc6646f1c17a3f60df4d5c9b55b46e2b4c951a27b62eefeac6dbe663d10238500300202f4e9e82458c84f01a5fed51657dd923003b0fc42429adff9310ab3c0f088d8020721dd6209beac84550607c2a53c28eda94f14d3afcc3988ad50e02f7dc52b35abd0b5b9a87690023f9c9bb622d95724727257f51302111ca0f04866019b3cdd4d23228f00149a8e1847b622234877c25afe2d955205ecc020a36248b8a4853882521f7cf608a8e66cc185d31d8b9a69f1dce362857e95cbc9066a8ec132514fbea8b8d4e1dc7d7930eceb3744ea0542a394cc8a1bb6d86275162663b43b61aec634d8cdb8e507e8e33904a03edace9a56f2c06dffc40bb037c997d81a8a21cb721e436884384253038bdae6ec1a07cf420e409996c81201ad4f57b0168f3e974ae8e5e340af427a11c6f6e19e3c1d05eb3e10a43e3c06ec0fc3fea8cd4a04f60a204ea576af63e5b16917f90e5384fdfc798a311a84fb2ab9612afba2b7231e97b2ef32b3d1b4f131e220df143ee15b198c1ad88073d362fbcafdd407cccc394162c6fec54b27704fffaf13a756849a03a4df6830aeba952fd8de6f4a29b5aebdee634e747f1a583da9d5a70856c08601752642405daed6b9861b1d866c58e264dda3cdcc0e09bb972c569b0f60c8e959e8ddb2871dfae25814a8d0b28d727183e135963808e1a0f83675acadd8715010f2d27903a6528d3817e8aeacce241bc8aa42af38ea81c7b610d3190689eb5f08767b9c15fb08c6ed6f7d157a75a056ae46e440edc280d2ebf67d18c1459ee47c0b49f832bfe2e6f7e1295a5e585929eb4c59aad23178b583c3cbcb617bd51f9da1d785c453788a1611e766c073c2a014a06f9825f04eb1860044dfc4f3599f8085b19c9f7238f1015567200f1740d64402b173a0cf757961d1e055b299fcd0e93ea40899a544597b03c09f9b80598cbce007e826dd32109b369b83ac72175efdd1c1121aae08c7a81ed9536d338b6c56b72fceb9d15fee73543d3df6dd91ca55bbd3b7d0dd2aaaacdf9258364b3e150c7b78dec721ab132a0e37cb192a50cc70b077889b24c902445a7f2d513210f4a3306ec881ab8dbf4ebeeb0639473815f8ab0cc82dceb64bce219e944c58d9aa07c14b5c78937439b3d9a7c2ff80b844ea7bd1fff7c624f5e81159325322f3651955d801de3aa7c51ffb8267352df2af1bacba586edee1af7f1a9be5558346483ee00a5cbe06a67b15f0f8d381c74304af5439056037f1fb01deb05b6f028ba4876668f14be2ec49b8f736055d2d1d2c1455a6efafa6bc843c5f79ae9fb79007f038e41bb8fc8bf5c292fccff2207d56054712216d2108ec71c6313d3bd091ae11ed0375e4cf9f3aaac8fdee914f8fa5f9718faf428c345ab870294509c316d32c1bba9802f84e7aa95bf239aebbe641baebe4a98c81b6daeb087e81f5ced80dbbd3feeb08b57c07ab1a02888312b9126ac973af253082464569db717391299cf29c79d8d737894d7724bdadf514413292e573d2797376cc4e5caa594f72f13b2620110908d8671c2c5dbe060ac5730457ebcedba730c7dfdd08aa2f355948ba595e5bf243f0a698c05234a26e40e24fbfb97d2057c6cd94ea93057249221df14a949527c8e00adcf17ff672a00de708b0d05e9bb12dc8e32be152945db65709796e007920275c4047072bdb2a75d62ea9c8bda86f3086a107a9f9bd42b5c191f775df3812bbd38fecb6a5f631956f1233c289a3e71cc1a18f11e90d06d225d4a7aae52f7fb705952b99c6dbdf06930011d124533e4651c97e69fa8eba0848a322c1d40a87bf915211868c2bf40c2dd6de7de6199a107d2425856d6fbc0f7e10c999982c81841ff59b83a6d24f045c7e58c55349b602e1352d0a7df4f9342a4eae0bc33bf32586a0db8528c3849f3f61ec9ea8ad2dd2daac77ac8b0f391bba1634c6b4508734f0159ec80fe4766e6e4165662689c0fa3c74ba5ee780fa47ebe9100a15f6b3cb00806d915505f30266076d1c948ceeecd6f3ee4bb14a949472005d88d23cd559f3e8dfae4887c1506672b533c66f5702d7dc5be3ec805e71be150fb3247bae16ac9c92ff7d7a8486b970e6307b3f6f03b7d46d9d1114f8bd39f7789cb4d585d4667998c517463b23fe3a2a4d9995d63c3b42f5a54766926f0e8438f5ecdd50c93c145c7b38edae375e4dea35e3412c8fab031843c4c8fc85ba3ec3e2f3cbe8394a27ed2373ffbf4bb478825949dbb9b5dfd766c4c8b09666d7889a135e5542057c8a911f432bb0df75e43a92b450bcaa0072a95a061d925cacfb35ea8ab062a9d986c679340e21f22e25e0a875d981097b357f793a8275a00a61ddde3ffdc04a48b399770cdc943c7a7dcf84dc8f6929984edc17eba578e53d8d277e259c6456090350ac51bc100899caeb2c647a6d9c38d1f189dd7ee10a0ac0d111250a5ffd9b972e8f855bc140c07dce8cd37b427baa972f9872c79ca27804057b5843207ae0a853630fb222e0c5eac8d63766024eb8925bea5a75fd922c77a82ac6babd337c8349208072db699eb74cf69d5c0dd66a43be56387ba26fc855c2c96df5fdff1e98babd39f65d6b97ed014d86dbe8a9dad939d73079d1e4205b226788c992bf4b0b712c9fa7b72a66e859bf679c9c94cffbf48cadfe34f88298a60e9d3b0f4efc11f83586fa29bf338b781c0424c1dfcefe0b34e9f01da002f7bf79d4f65ea0ff16b9264c8987d21e63273128f6ffa28075bd166b0510bf8a288992c0d0b4efca73d304db6f44b746292bd02b526f3f0280afdcbc8ad8ca1ece909f7decaf5db2d799016d53ec4f4c6f26f79be6059b7156f6161080a3ac2ad187e482874643fc1829859d65c903aae5209907472ff66dcef304ada44794e023739a130dbff6379840a4721cc56305e2aa6f991dbd940fd86736a1dee39a7ead6b70724b72ba73fc433bd1bd015ce0ae863e09ddf9b4d38b35cbd232b397620f8ab6220baf4e23739f501e6b9dd01e4aa8bcfc5f06ce0140b0b8923217c6ae9fde469cb766d9a82b762d795b3593466ccd8950c9cbbb521555bdfe827fe3fef76e6ce7ec5d0b07bc217f33a83cd218845108548dac3e7865db82d7e2ef5f5ab97685876afb7c2d119501421be486a3c4bb3de37c7ab46173ceda216dccf1", 0x1000}, {&(0x7f0000001440)="b5818efc48c5c9f9e3eadd7c06f0ff760579fff5", 0x14}], 0x5, &(0x7f0000001500)=[{0x48, 0x116, 0x69b, "4d4f0bcd02f3a5bc1d2af9566473ebb1de91d92f142a164a0791d16445366c9d39f9be7b45c0bdace05ecc50d81480a9f8"}], 0x48}, 0x8800) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r6, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_SET_CLOCK(r6, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) 1.115862698s ago: executing program 1 (id=590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYRESOCT], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x90) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fgetxattr(r2, &(0x7f0000001180)=@known='system.sockprotoname\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x6, 0x0, 0x3ff, 0x1, 0xe2b, 0xd, 0x5c, 0x1, 0x1c8b, 0x47, 0x1, 0x7, 0x9be7, 0x1, 0x6, 0xffff], 0xf000, 0x40}) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r4, @ANYBLOB="000129bd7000fbdbdf25010000000000010002410800000000000000701c73795a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000410}, 0x841) r5 = memfd_create(&(0x7f0000000000)='\x107', 0x0) write$binfmt_elf32(r5, 0x0, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x20000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000020000100000000000000000002000000000000020000000008000400fbffffff08000d0000000000e41904c328457805fd85dc02000000e1421ac6e478705b9653d9e9eae24c8b03789ea6b7189ea43d099bb93fe140aab1b2623c5361a2951f47fb2ef6223f191f472d2cbf218af59415fa0c568488fc2c4ae374a018907f4687eadde0b88ab728645399df1bbf5e20aba3d9d081952039245fa571e7947c550f367ccd38d66caa6021cd3030393315e652c19923b70a4607a57a0400"/205], 0x2c}}, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000180)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1.115636785s ago: executing program 0 (id=591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800ebf50000000000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) accept$alg(r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="ef", 0xffe3}], 0x1, 0x0, 0x0, 0x20000000}, 0xa}], 0x420, 0x0) flock(0xffffffffffffffff, 0x0) setuid(0x0) mkdir(&(0x7f0000000600)='./file1\x00', 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000a00)='./file1\x00', &(0x7f0000000000)='affs\x00', 0x180042, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000046682d562c3163534e830000ac12a8b52f0d7086e274aa97a91fa46cdcefe7534fde04cace652b4c498a446290f93bce3177127ebc0c24e7e718c0b1da96d9c9fa8e95810000007cb9806b9641bb5a0124c1a1eae02533d551ea74d77602fab0ffc0a054efb9481ba4bf71fd681cb4a7dbe2f50747fcb93a0661f8889baa4958ff45d0961803846e520f882536fdad77614bdd2b6b19a7ead5ca28d9f56159ed73935ee196838e2d856a0d2f5564fa"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 374.612348ms ago: executing program 3 (id=592): r0 = epoll_create(0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = dup2(r0, r1) close_range(r2, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) eventfd2(0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @int={0x0, 0x0, 0x0, 0x1, 0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x4e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000180), 0xfea7) socket$netlink(0x10, 0x3, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300", @ANYRES16=r5], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r9, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r8, r7, 0x0, 0x100000002) 265.711791ms ago: executing program 3 (id=593): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="c1f4f386e4df"], 0x0, 0x0, 0x1) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000140)='cpuset.cpu_exclusive\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) mkdir(&(0x7f0000000000)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') write$cgroup_int(r2, &(0x7f0000000740), 0x12) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x4400) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r6, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004800}, 0x40) 163.343311ms ago: executing program 2 (id=594): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYRES32=r1, @ANYBLOB="2c0433"], 0x448}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x3c, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r6, 0x9204, 0x47cdc) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r8 = socket$caif_seqpacket(0x25, 0x5, 0x0) tee(r7, r8, 0x20000000000000, 0x0) r9 = socket(0x2a, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r10 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r10, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x1f}) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r10, 0x0, 0x14) ioctl$SNDCTL_SEQ_PANIC(r11, 0x5100) ioctl$SNDCTL_SEQ_RESET(r11, 0x5100) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r13 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r13, 0x227e, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002d00)=@newtfilter={0x2a0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {}, {0x0, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x26c, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_ACT={0x25c, 0x2, [@m_sample={0x144, 0x200a, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0xdf7, 0x3, 0x0, 0x7}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0xe7, 0x6, "4079d3d97a801512986c5eff8d0d4373bd241bcaf11e1b60d8c95c4921d195614b6840a396e87acd8ee7185f2d85cf1e1ffbbc3bff397e15278c3a52ea758cd676b9293c8fb74474d63133e189a8a04a32164ef6e9fd349701c8df9f425ada736a6c29c6f9f8f05f2940c997249de12c4e6ba72a4955e61b7331c9783501a996debc1e524d58d744c43fd682923dd9d435b18ab8eb683c50dabeedc2e22de174310b9374dd04d1ce3595eb6ead20b8965939c7da418785df09980a9f7050fd7e85103e6d17c308b6bd467ad95aa992a67bfe257b00e45b9f9d8e53cf47b76f1752fb4a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x114, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0xe6, 0x6, "4f231723b053d38a6ba70be38304269b4ae72b0570e7edd745d538f9b3560faf6d7bdf94ea8f8249460d700524ad2a45d2fa805c0b0ce92e33fdb9bd0279840ee4937541280e1e73e0211301ddf0b70934e933f8e780dc6d1cf17210374f7449b0d39668926ff2faac7bf63007adcdf79f0058d29220530168acca28a898c6c69bfb8e25ba3b67d89661f66ed189751f090e6ed10253f7b4721012d670aa2898545d1c28fb06c373b9a66b4af0cb9a7f07a9b0eb27dc0dd4cc5192c6c9b8f46cd60d9c9a9f76c020c367a5cf7f79220c0feb15127e00"/226}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}]}}]}, 0x2a0}}, 0x0) bind$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@default, @bcast, @netrom, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000004c0)={@local, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x7ffe, 0x100, 0xf7ffffffffffffff, 0x0, r12}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 163.071635ms ago: executing program 3 (id=595): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005e00010200"/18, @ANYRES32, @ANYBLOB="d21ca5"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="510003000000", 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x4d032, 0xffffffffffffffff, 0x0) gettid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, r6}, [@IFA_TARGET_NETNSID={0x8}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5889}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8000103}]}, 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x8080) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) rt_sigqueueinfo(r3, 0x2a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f0000000400000008000000b263000000000000", @ANYRES32, @ANYBLOB="0000080000000000000000000000000000000000470200002d3d88dc52930c150000000000ec5c1f5706f919e2dcbf9b04633969cf32cb7fdbc8fd641b9c82cb1b27eb5c2614af01226b17b85d50e8a34c918d3ebece066dc486461b87e11d9389895c870c9ae54d33ea4f00000000000000ab77ea5ae10dc9ce5117a8d43e6e37af2fc23d037833b9f1fe24a20d89ce4b6b170a745b1494b59b7072a3c905334883fa6292f10728d03ec16503ea97204a02009c97537e5e8de3b699f3d76af1a48db37d42ad748e339e34cda19c3812ffa23c7584f2e63e1074d2dfa0f93d9c35b3af36795f301f9d9d52ae3c9aeb771c8d296ed6dc37ef983a95b24a578602fbf8ca8e4e39460fbc734f73b2a6eb1a22e5cf17c3974adbc5d17fc18f3f3e004d975e41b0d3b4248e763af5ab9f50fb524add7211096529739e1690ff36af06dd532cb257e3f1228d65b565045545eb598e5dc3529d065f9d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x48) r8 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r8, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0x2, 0xce21, 0x0, @remote, 0x1}}, 0x24) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000002000000000000000000000000000000006c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000480003006c7a7300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400736861312d61736d00"/312], 0x180}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 153.325536ms ago: executing program 1 (id=596): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r3, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2000000000000000840000000200000000f041000000000000000000", @ANYRES32=0x0, @ANYBLOB='0'], 0x50}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000003c0), 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0000100}]}) set_mempolicy(0x1, &(0x7f0000000000)=0xffffffffffffffff, 0x6) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockopt$IP_VS_SO_GET_SERVICE(r7, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68) 75.628356ms ago: executing program 2 (id=597): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) r1 = openat$dsp(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) (fail_nth: 3) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) mq_open(0x0, 0x1, 0x31, 0x0) write(r2, &(0x7f0000000340)="07000000010000", 0x7) 15.386541ms ago: executing program 0 (id=598): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000", @ANYRES32=r2], 0x24}}, 0x0) 15.044227ms ago: executing program 0 (id=599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), r1) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0xc, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x10, 0xfffffffb, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0xfffff800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000005800)={0x0, 0x0, &(0x7f00000057c0)={&(0x7f0000005780)={0x18, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}}, 0x0) 0s ago: executing program 1 (id=600): prlimit64(0x0, 0xe, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000004f00)='./file0\x00', &(0x7f0000004f40), 0x8, &(0x7f00000003c0)=ANY=[]) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000280)="75817180c12a715573d46f38ca7c083c5c463f2ea18dad7c889b12301c38e1edb8ef1f7faaa0832e06da57b6cda993dae2962a53c35e760399bfe71828822054640c18e4defa27fee688d8fb1cd1119fd9810b85e82c108814cde6d25099bf1788390505b32df00cab4c641e9fc65a781212d85267a23a1a88120572f56a9cece22ec995b8ecfb61ccf9ac5c5bf15fd2201cab829ab0a7e293d04980c6185b909140a9d5334facff17b511efe9a1e0edff87d94ef3cb1e1070986d54e48ce1fb79d30170bed11e55ae2f7fa9f40516e6e40b24d97127cff2e1686a8c", &(0x7f0000000380)="69756c092b4be56d77734db913a5c3267d823c59a7da68fa01acb6c641add914e63108c6ff35d6f40e4358ffabf8efc15fb4ed07de08a66ae440dbe0a2af8b301d4fc56c00f7a6eadb1c2e8aca68317db47a7ed77817ad084fb834f15df306147f74e365325a2da0c1a92107c300b551d9581521c5488a63640a153370110000"}}, &(0x7f0000bbdffc)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448de, &(0x7f00000000c0)={0x0, 0x0, "a4cd91"}) r3 = fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x0) fsmount(r3, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000240)='dirsync\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="247f2b40", @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="08000500030000006dd0cdc9830e66cd3b39d688f83a1db081413ccb494b51e4e2e89209114965ebc28d2d103dad078aacba6000448d70b20ef1d4c9fbe4702ea91d18573355499ae10bace9b1c5667619b4aa80fd13d997df12762bf886db98917dffbb"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="980000c6", @ANYRES16=r5, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r7, @ANYBLOB="51000e00800000000802110000000802110000015050505050500000000000000000000064000000050300000025030000002a01002d1a000000000000000000000000000000000000000000000000000000000008000c006400000008000d00000000000800a10000000000080026006c090000080022010d0200"], 0x98}}, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet_icmp_raw(0x2, 0x3, 0x1) kernel console output (not intermixed with test programs): [ 32.147389][ T39] audit: type=1400 audit(1728802272.111:83): avc: denied { read } for pid=4816 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 32.153003][ T39] audit: type=1400 audit(1728802272.111:84): avc: denied { append } for pid=4816 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.158958][ T39] audit: type=1400 audit(1728802272.111:85): avc: denied { open } for pid=4816 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.164667][ T39] audit: type=1400 audit(1728802272.111:86): avc: denied { getattr } for pid=4816 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:6715' (ED25519) to the list of known hosts. [ 32.842881][ T39] audit: type=1400 audit(1728802272.801:87): avc: denied { name_bind } for pid=5312 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 34.468763][ T5320] cgroup: Unknown subsys name 'net' [ 34.669599][ T5320] cgroup: Unknown subsys name 'cpuset' [ 34.672655][ T5320] cgroup: Unknown subsys name 'rlimit' [ 34.840536][ T5328] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 35.412558][ T5320] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.927765][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 36.927776][ T39] audit: type=1400 audit(1728802276.891:105): avc: denied { execmem } for pid=5331 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.286487][ T39] audit: type=1400 audit(1728802277.241:106): avc: denied { create } for pid=5335 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.293180][ T39] audit: type=1400 audit(1728802277.241:107): avc: denied { read write } for pid=5335 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.302659][ T39] audit: type=1400 audit(1728802277.241:108): avc: denied { open } for pid=5335 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.309773][ T39] audit: type=1400 audit(1728802277.261:109): avc: denied { ioctl } for pid=5335 comm="syz-executor" path="socket:[2003]" dev="sockfs" ino=2003 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.326598][ T5344] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.330359][ T5344] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.333129][ T5344] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.335344][ T5344] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.337573][ T5344] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.340107][ T5344] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.342102][ T5344] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.344485][ T5344] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.347411][ T5344] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.349438][ T5344] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 37.351329][ T5344] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.353597][ T5348] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.357309][ T5348] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.360063][ T5348] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.361345][ T5349] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.362109][ T5348] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.363853][ T39] audit: type=1400 audit(1728802277.321:110): avc: denied { read } for pid=5336 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.364804][ T5349] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 37.365028][ T5349] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.368387][ T5348] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.372044][ T39] audit: type=1400 audit(1728802277.321:111): avc: denied { open } for pid=5336 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.375002][ T5348] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.375900][ T39] audit: type=1400 audit(1728802277.321:112): avc: denied { mounton } for pid=5336 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 37.378447][ T5348] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 37.378714][ T5349] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 37.378936][ T5349] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.398372][ T5348] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.507990][ T39] audit: type=1400 audit(1728802277.471:113): avc: denied { module_request } for pid=5337 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 37.576734][ T5337] chnl_net:caif_netlink_parms(): no params data found [ 37.616092][ T5341] chnl_net:caif_netlink_parms(): no params data found [ 37.626186][ T5336] chnl_net:caif_netlink_parms(): no params data found [ 37.676273][ T5337] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.678949][ T5337] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.680944][ T5337] bridge_slave_0: entered allmulticast mode [ 37.683083][ T5337] bridge_slave_0: entered promiscuous mode [ 37.702350][ T5337] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.704307][ T5337] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.706226][ T5337] bridge_slave_1: entered allmulticast mode [ 37.708900][ T5337] bridge_slave_1: entered promiscuous mode [ 37.711224][ T5335] chnl_net:caif_netlink_parms(): no params data found [ 37.780164][ T5336] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.782052][ T5336] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.783877][ T5336] bridge_slave_0: entered allmulticast mode [ 37.785883][ T5336] bridge_slave_0: entered promiscuous mode [ 37.798422][ T5337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.808464][ T5336] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.810319][ T5336] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.812154][ T5336] bridge_slave_1: entered allmulticast mode [ 37.814094][ T5336] bridge_slave_1: entered promiscuous mode [ 37.823682][ T5341] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.825552][ T5341] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.827595][ T5341] bridge_slave_0: entered allmulticast mode [ 37.829718][ T5341] bridge_slave_0: entered promiscuous mode [ 37.832724][ T5337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.865966][ T5336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.868700][ T5341] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.870542][ T5341] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.872384][ T5341] bridge_slave_1: entered allmulticast mode [ 37.874323][ T5341] bridge_slave_1: entered promiscuous mode [ 37.893816][ T5337] team0: Port device team_slave_0 added [ 37.900683][ T5336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.910838][ T5337] team0: Port device team_slave_1 added [ 37.947010][ T5341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.966599][ T5336] team0: Port device team_slave_0 added [ 37.969314][ T5336] team0: Port device team_slave_1 added [ 37.972202][ T5341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.975159][ T5337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.977530][ T5337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.984418][ T5337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.987694][ T5335] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.989544][ T5335] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.991290][ T5335] bridge_slave_0: entered allmulticast mode [ 37.993323][ T5335] bridge_slave_0: entered promiscuous mode [ 38.020594][ T5337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.022464][ T5337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.029361][ T5337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.032533][ T5335] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.034468][ T5335] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.036402][ T5335] bridge_slave_1: entered allmulticast mode [ 38.038663][ T5335] bridge_slave_1: entered promiscuous mode [ 38.057152][ T5336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.059024][ T5336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.065430][ T5336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.071467][ T5341] team0: Port device team_slave_0 added [ 38.087854][ T5335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.090518][ T5336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.092390][ T5336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.099835][ T5336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.107616][ T5341] team0: Port device team_slave_1 added [ 38.110172][ T5335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.166439][ T5337] hsr_slave_0: entered promiscuous mode [ 38.169316][ T5337] hsr_slave_1: entered promiscuous mode [ 38.172131][ T5341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.174010][ T5341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.182395][ T5341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.212059][ T5336] hsr_slave_0: entered promiscuous mode [ 38.214092][ T5336] hsr_slave_1: entered promiscuous mode [ 38.215964][ T5336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.218672][ T5336] Cannot create hsr debugfs directory [ 38.220660][ T5341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.222571][ T5341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.229654][ T5341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.234138][ T5335] team0: Port device team_slave_0 added [ 38.251124][ T5335] team0: Port device team_slave_1 added [ 38.294772][ T5335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.296779][ T5335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.304438][ T5335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.308712][ T5335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.310618][ T5335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.317523][ T5335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.354784][ T5341] hsr_slave_0: entered promiscuous mode [ 38.360459][ T5341] hsr_slave_1: entered promiscuous mode [ 38.362867][ T5341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.365451][ T5341] Cannot create hsr debugfs directory [ 38.410244][ T5335] hsr_slave_0: entered promiscuous mode [ 38.412257][ T5335] hsr_slave_1: entered promiscuous mode [ 38.414139][ T5335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.416207][ T5335] Cannot create hsr debugfs directory [ 38.608979][ T5336] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.612650][ T5336] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.615551][ T5336] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.619184][ T5336] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.637021][ T5341] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.641735][ T5341] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.644702][ T5341] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.648026][ T5341] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.671136][ T5337] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.674582][ T5337] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.680842][ T5337] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.684016][ T5337] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.711937][ T5335] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.715029][ T5335] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.718372][ T5335] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.726025][ T5336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.729987][ T5335] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.753908][ T5336] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.771976][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.774068][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.779892][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.781780][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.788513][ T5341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.806661][ T5336] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.809698][ T5336] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.821293][ T5337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.828192][ T5341] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.836336][ T39] audit: type=1400 audit(1728802278.791:114): avc: denied { sys_module } for pid=5336 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 38.839230][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.843610][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.848966][ T5337] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.854871][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.857280][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.865709][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.868129][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.871885][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.874195][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.878953][ T5335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.907024][ T5335] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.920302][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.922724][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.925895][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.928300][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.935283][ T5336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.972257][ T5336] veth0_vlan: entered promiscuous mode [ 38.978842][ T5336] veth1_vlan: entered promiscuous mode [ 38.998753][ T5337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.010309][ T5341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.013504][ T5336] veth0_macvtap: entered promiscuous mode [ 39.021590][ T5336] veth1_macvtap: entered promiscuous mode [ 39.044080][ T5337] veth0_vlan: entered promiscuous mode [ 39.052470][ T5337] veth1_vlan: entered promiscuous mode [ 39.059783][ T5336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.064094][ T5336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.067792][ T5335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.076573][ T5336] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.079629][ T5336] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.081882][ T5336] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.084116][ T5336] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.112350][ T5341] veth0_vlan: entered promiscuous mode [ 39.138615][ T5341] veth1_vlan: entered promiscuous mode [ 39.142037][ T5337] veth0_macvtap: entered promiscuous mode [ 39.143528][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.146321][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.146837][ T5337] veth1_macvtap: entered promiscuous mode [ 39.153813][ T5335] veth0_vlan: entered promiscuous mode [ 39.166495][ T5335] veth1_vlan: entered promiscuous mode [ 39.172256][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.174903][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.176857][ T5341] veth0_macvtap: entered promiscuous mode [ 39.182636][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.186286][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.190498][ T5337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.194057][ T5341] veth1_macvtap: entered promiscuous mode [ 39.199836][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.203446][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.207824][ T5337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.214522][ T5337] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.218100][ T5337] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.220396][ T5337] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.222734][ T5337] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.230158][ T5341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.231131][ T5336] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.232897][ T5341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.239501][ T5341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.242319][ T5341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.245818][ T5341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.258445][ T5341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.262829][ T5341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.265473][ T5341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.268753][ T5341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.272319][ T5341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.274858][ T5335] veth0_macvtap: entered promiscuous mode [ 39.284488][ T5341] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.287833][ T5341] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.290792][ T5341] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.293861][ T5341] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.303450][ T5335] veth1_macvtap: entered promiscuous mode [ 39.319241][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.321708][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.345047][ T5335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.345452][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.349284][ T5335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.349293][ T5335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.349301][ T5335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.349306][ T5335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.349313][ T5335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.350434][ T5335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.351809][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.383258][ T5335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.383773][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.386175][ T5335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.388370][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.392900][ T5335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.395608][ T5335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.400055][ T5335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.402761][ T5335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.406924][ T5335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.417908][ T63] Bluetooth: hci1: command tx timeout [ 39.417939][ T5347] Bluetooth: hci3: command tx timeout [ 39.417951][ T5349] Bluetooth: hci2: command tx timeout [ 39.422520][ T5348] Bluetooth: hci0: command tx timeout [ 39.433673][ T5335] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.436588][ T5335] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.447273][ T5335] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.450419][ T5335] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.471385][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.473493][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.569810][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.571889][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.591890][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.593956][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.661406][ T5406] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 39.677491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 39.698256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 39.757722][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 39.765266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 39.797321][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 39.867403][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 39.867862][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 39.869649][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 39.987276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 40.007832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 40.670963][ T5412] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 41.497283][ T5348] Bluetooth: hci1: command tx timeout [ 41.499137][ T5347] Bluetooth: hci3: command tx timeout [ 41.499261][ T63] Bluetooth: hci2: command tx timeout [ 41.502918][ T5348] Bluetooth: hci0: command tx timeout [ 41.774436][ T5423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 41.995732][ T5435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 42.292774][ T39] kauditd_printk_skb: 40 callbacks suppressed [ 42.292791][ T39] audit: type=1400 audit(1728802282.251:155): avc: denied { create } for pid=5442 comm="syz.2.11" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 42.317540][ T39] audit: type=1400 audit(1728802282.261:156): avc: denied { map } for pid=5442 comm="syz.2.11" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7909 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 42.324795][ T39] audit: type=1400 audit(1728802282.261:157): avc: denied { read write } for pid=5442 comm="syz.2.11" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7909 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 42.329658][ T5447] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 42.331786][ T39] audit: type=1400 audit(1728802282.271:158): avc: denied { ioctl } for pid=5442 comm="syz.2.11" path="/dev/vhost-net" dev="devtmpfs" ino=1114 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 42.340432][ T39] audit: type=1400 audit(1728802282.281:159): avc: denied { create } for pid=5442 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.347206][ T39] audit: type=1400 audit(1728802282.281:160): avc: denied { write } for pid=5442 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.353186][ T39] audit: type=1400 audit(1728802282.281:161): avc: denied { nlmsg_write } for pid=5442 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.412155][ T39] audit: type=1400 audit(1728802282.371:162): avc: denied { create } for pid=5449 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 42.754787][ T39] audit: type=1400 audit(1728802282.711:163): avc: denied { read } for pid=5449 comm="syz.2.13" name="nullb0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 42.761080][ T39] audit: type=1400 audit(1728802282.711:164): avc: denied { open } for pid=5449 comm="syz.2.13" path="/dev/nullb0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 43.388089][ T5464] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.405136][ T5464] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 43.413313][ T5464] syz.1.16 uses obsolete (PF_INET,SOCK_PACKET) [ 43.577850][ T63] Bluetooth: hci3: command tx timeout [ 43.577937][ T5348] Bluetooth: hci2: command tx timeout [ 43.579346][ T5347] Bluetooth: hci0: command 0x040f tx timeout [ 43.580741][ T5348] Bluetooth: hci1: command tx timeout [ 43.960801][ T5483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 44.359577][ T5477] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 45.381221][ T5509] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 45.657562][ T5348] Bluetooth: hci0: command 0x040f tx timeout [ 45.658189][ T63] Bluetooth: hci2: command tx timeout [ 45.659184][ T5348] Bluetooth: hci1: command tx timeout [ 45.662333][ T5349] Bluetooth: hci3: command tx timeout [ 46.536552][ T5540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 47.748810][ T5349] Bluetooth: hci0: command 0x040f tx timeout [ 47.952149][ T39] kauditd_printk_skb: 15 callbacks suppressed [ 47.952159][ T39] audit: type=1400 audit(1728802287.911:180): avc: denied { ioctl } for pid=5566 comm="syz.0.39" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 48.110500][ T39] audit: type=1400 audit(1728802288.071:181): avc: denied { ioctl } for pid=5570 comm="syz.0.40" path="/dev/raw-gadget" dev="devtmpfs" ino=761 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.177460][ T39] audit: type=1400 audit(1728802288.141:182): avc: denied { create } for pid=5564 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 48.367322][ T1304] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 48.520045][ T1304] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 48.523223][ T1304] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 48.525684][ T1304] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 48.528684][ T1304] usb 5-1: config 0 interface 0 has no altsetting 0 [ 48.533268][ T1304] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 48.535650][ T1304] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 48.538623][ T1304] usb 5-1: config 0 interface 0 has no altsetting 0 [ 48.541965][ T1304] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 48.544286][ T1304] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 48.547166][ T1304] usb 5-1: config 0 interface 0 has no altsetting 0 [ 48.550052][ T1304] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 48.552370][ T1304] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 48.555183][ T1304] usb 5-1: config 0 interface 0 has no altsetting 0 [ 48.558511][ T1304] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 48.560851][ T1304] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 48.563673][ T1304] usb 5-1: config 0 interface 0 has no altsetting 0 [ 48.566274][ T1304] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 48.569042][ T1304] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 48.571885][ T1304] usb 5-1: config 0 interface 0 has no altsetting 0 [ 48.574764][ T1304] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 48.577206][ T1304] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 48.580000][ T1304] usb 5-1: config 0 interface 0 has no altsetting 0 [ 48.582755][ T1304] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 48.585069][ T1304] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 48.588189][ T1304] usb 5-1: config 0 interface 0 has no altsetting 0 [ 48.592327][ T1304] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 48.594726][ T1304] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 48.596850][ T1304] usb 5-1: Product: syz [ 48.598106][ T1304] usb 5-1: Manufacturer: syz [ 48.599328][ T1304] usb 5-1: SerialNumber: syz [ 48.603871][ T1304] usb 5-1: config 0 descriptor?? [ 48.614060][ T1304] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 48.812939][ T1304] usb 5-1: USB disconnect, device number 2 [ 48.820201][ T1304] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 48.950939][ T39] audit: type=1400 audit(1728802288.911:183): avc: denied { create } for pid=5573 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.955958][ T39] audit: type=1400 audit(1728802288.911:184): avc: denied { setopt } for pid=5573 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.018925][ T39] audit: type=1400 audit(1728802288.981:185): avc: denied { open } for pid=5570 comm="syz.0.40" path="/dev/ptyq4" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 49.029934][ T39] audit: type=1400 audit(1728802288.981:186): avc: denied { ioctl } for pid=5570 comm="syz.0.40" path="/dev/ptyq4" dev="devtmpfs" ino=131 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 49.036897][ T39] audit: type=1400 audit(1728802288.981:187): avc: denied { read } for pid=5570 comm="syz.0.40" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 49.043707][ T39] audit: type=1400 audit(1728802288.981:188): avc: denied { open } for pid=5570 comm="syz.0.40" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 49.051304][ T39] audit: type=1400 audit(1728802288.991:189): avc: denied { map } for pid=5570 comm="syz.0.40" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 49.817765][ T5349] Bluetooth: hci0: command 0x040f tx timeout [ 50.119495][ T5598] capability: warning: `syz.3.47' uses deprecated v2 capabilities in a way that may be insecure [ 52.606000][ T5659] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 52.610621][ T5659] netlink: 'syz.0.61': attribute type 10 has an invalid length. [ 52.639261][ T5659] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 52.647002][ T5659] team0: Port device wlan1 added [ 52.651263][ T5660] netlink: 'syz.0.61': attribute type 10 has an invalid length. [ 53.707162][ T5368] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 54.057216][ T5368] usb 7-1: device descriptor read/64, error -71 [ 54.307243][ T5368] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 54.447382][ T5368] usb 7-1: device descriptor read/64, error -71 [ 54.512463][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 54.512473][ T39] audit: type=1400 audit(1728802294.471:207): avc: denied { create } for pid=5695 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 54.516309][ T5696] netlink: 28 bytes leftover after parsing attributes in process `syz.1.72'. [ 54.522922][ T5696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 54.558378][ T5368] usb usb7-port1: attempt power cycle [ 54.653829][ T5702] FAULT_INJECTION: forcing a failure. [ 54.653829][ T5702] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 54.657404][ T5702] CPU: 1 UID: 0 PID: 5702 Comm: syz.3.74 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 54.660116][ T5702] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.662878][ T5702] Call Trace: [ 54.663759][ T5702] [ 54.664539][ T5702] dump_stack_lvl+0x16c/0x1f0 [ 54.665788][ T5702] should_fail_ex+0x497/0x5b0 [ 54.667031][ T5702] _copy_from_user+0x30/0xf0 [ 54.668249][ T5702] snd_seq_write+0x3ea/0x6c0 [ 54.669472][ T5702] ? __pfx_snd_seq_write+0x10/0x10 [ 54.670805][ T5702] ? bpf_lsm_file_permission+0x9/0x10 [ 54.672204][ T5702] ? security_file_permission+0x71/0x210 [ 54.673675][ T5702] ? __pfx_snd_seq_write+0x10/0x10 [ 54.675014][ T5702] vfs_write+0x28e/0x1140 [ 54.676153][ T5702] ? __fget_files+0x23a/0x3f0 [ 54.677403][ T5702] ? __pfx_lock_release+0x10/0x10 [ 54.678722][ T5702] ? trace_lock_acquire+0x14a/0x1d0 [ 54.680077][ T5702] ? __pfx_vfs_write+0x10/0x10 [ 54.681347][ T5702] ? lock_acquire+0x2f/0xb0 [ 54.682532][ T5702] ? __fget_files+0x40/0x3f0 [ 54.683741][ T5702] ? __fget_files+0x244/0x3f0 [ 54.684970][ T5702] ksys_write+0x1fa/0x260 [ 54.686106][ T5702] ? __pfx_ksys_write+0x10/0x10 [ 54.687256][ T5702] do_syscall_64+0xcd/0x250 [ 54.688453][ T5702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.689988][ T5702] RIP: 0033:0x7fa724f7dff9 [ 54.691151][ T5702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.696084][ T5702] RSP: 002b:00007fa725dd6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 54.698250][ T5702] RAX: ffffffffffffffda RBX: 00007fa725136058 RCX: 00007fa724f7dff9 [ 54.700292][ T5702] RDX: 000000000000ffc8 RSI: 0000000020000000 RDI: 0000000000000004 [ 54.702342][ T5702] RBP: 00007fa725dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 54.704378][ T5702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.706422][ T5702] R13: 0000000000000000 R14: 00007fa725136058 R15: 00007ffc0d046938 [ 54.708466][ T5702] [ 54.713046][ T5349] Bluetooth: hci3: command tx timeout [ 54.907603][ T5368] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 54.992444][ T5368] usb 7-1: device descriptor read/8, error -71 [ 55.247269][ T5368] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 55.268638][ T5368] usb 7-1: device descriptor read/8, error -71 [ 55.382288][ T5368] usb usb7-port1: unable to enumerate USB device [ 55.578006][ T5349] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 55.580294][ T5349] Bluetooth: hci1: Injecting HCI hardware error event [ 55.583070][ T5348] Bluetooth: hci1: hardware error 0x00 [ 56.594202][ T39] audit: type=1400 audit(1728802296.551:208): avc: denied { execute } for pid=5725 comm="syz.0.81" path="/27/blkio.bfq.avg_queue_size" dev="tmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.371125][ T39] audit: type=1326 audit(1728802297.331:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.3.83" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa724f7dff9 code=0x0 [ 57.436748][ T5730] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 57.565697][ T39] audit: type=1400 audit(1728802297.521:210): avc: denied { create } for pid=5749 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 57.572433][ T39] audit: type=1400 audit(1728802297.531:211): avc: denied { create } for pid=5749 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.577425][ T39] audit: type=1400 audit(1728802297.531:212): avc: denied { ioctl } for pid=5749 comm="syz.1.86" path="socket:[10243]" dev="sockfs" ino=10243 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 57.583649][ T39] audit: type=1400 audit(1728802297.531:213): avc: denied { connect } for pid=5749 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.589547][ T39] audit: type=1400 audit(1728802297.531:214): avc: denied { ioctl } for pid=5749 comm="syz.1.86" path="socket:[10245]" dev="sockfs" ino=10245 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.595659][ T39] audit: type=1400 audit(1728802297.531:215): avc: denied { write } for pid=5749 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.631539][ T39] audit: type=1400 audit(1728802297.591:216): avc: denied { bind } for pid=5749 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.657247][ T5348] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 58.362857][ T5764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.89'. [ 58.365185][ T5764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.89'. [ 58.367174][ T8] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 58.617552][ T5348] Bluetooth: hci0: command 0x040f tx timeout [ 59.126810][ T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 59.129757][ T8] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 59.132265][ T8] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 59.134796][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.139203][ T8] usb 7-1: config 0 descriptor?? [ 59.250603][ T5778] trusted_key: encrypted_key: insufficient parameters specified [ 60.500936][ T5799] netlink: 28 bytes leftover after parsing attributes in process `syz.0.101'. [ 60.502194][ T5796] [U] ¦ [ 60.503425][ T5799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.101'. [ 60.855890][ T5811] netlink: 28 bytes leftover after parsing attributes in process `syz.1.105'. [ 60.861394][ T5811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'. [ 61.137338][ T25] usb 7-1: USB disconnect, device number 6 [ 61.497257][ T5348] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 61.501068][ T5348] Bluetooth: hci3: Injecting HCI hardware error event [ 61.503572][ T5348] Bluetooth: hci3: hardware error 0x00 [ 61.964361][ T39] audit: type=1400 audit(1728802301.921:217): avc: denied { create } for pid=5834 comm="syz.1.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 62.022738][ T39] audit: type=1400 audit(1728802301.981:218): avc: denied { create } for pid=5834 comm="syz.1.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 62.142476][ T39] audit: type=1400 audit(1728802302.101:219): avc: denied { read write } for pid=5837 comm="syz.2.111" name="ppp" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 62.153702][ T39] audit: type=1400 audit(1728802302.111:220): avc: denied { open } for pid=5837 comm="syz.2.111" path="/dev/ppp" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 62.165774][ T39] audit: type=1400 audit(1728802302.121:221): avc: denied { create } for pid=5837 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.480770][ T39] audit: type=1400 audit(1728802302.121:222): avc: denied { bind } for pid=5837 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 63.577236][ T5348] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 63.747149][ T5368] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 63.899868][ T5368] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.902520][ T5368] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 63.904867][ T5368] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 63.907266][ T5368] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.910815][ T5368] usb 7-1: config 0 descriptor?? [ 63.966765][ T39] audit: type=1400 audit(1728802303.921:223): avc: denied { bind } for pid=5857 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 64.016264][ T39] audit: type=1400 audit(1728802303.971:224): avc: denied { sqpoll } for pid=5857 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 64.129023][ T39] audit: type=1400 audit(1728802304.091:225): avc: denied { view } for pid=5857 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 64.168812][ T39] audit: type=1400 audit(1728802304.131:226): avc: denied { write } for pid=5857 comm="syz.3.118" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 64.607025][ T5875] netlink: 28 bytes leftover after parsing attributes in process `syz.3.122'. [ 65.462461][ T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 65.628599][ T25] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 65.630888][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.634211][ T25] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 65.639100][ T25] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 65.641203][ T25] usb 6-1: Manufacturer: syz [ 65.643264][ T25] usb 6-1: config 0 descriptor?? [ 65.698777][ T25] rc_core: IR keymap rc-hauppauge not found [ 65.700355][ T25] Registered IR keymap rc-empty [ 65.702938][ T25] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 65.706778][ T25] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input5 [ 65.860215][ T25] usb 6-1: USB disconnect, device number 2 [ 66.382158][ T5345] usb 7-1: USB disconnect, device number 7 [ 66.687590][ T5906] input: syz0 as /devices/virtual/input/input6 [ 66.794043][ T5915] netlink: 28 bytes leftover after parsing attributes in process `syz.3.133'. [ 67.161445][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 67.161456][ T39] audit: type=1400 audit(1728802307.121:236): avc: denied { mount } for pid=5925 comm="syz.1.136" name="/" dev="hugetlbfs" ino=11570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 67.647029][ T5936] netlink: 'syz.2.138': attribute type 6 has an invalid length. [ 67.652015][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'. [ 67.658244][ T39] audit: type=1400 audit(1728802307.621:237): avc: denied { name_bind } for pid=5933 comm="syz.2.138" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 67.664358][ T39] audit: type=1400 audit(1728802307.621:238): avc: denied { node_bind } for pid=5933 comm="syz.2.138" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 67.702648][ T5920] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 68.587185][ T5416] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 68.739437][ T5416] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.743099][ T5416] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 68.746372][ T5416] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.752544][ T5416] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.758056][ T5416] usb 5-1: config 0 descriptor?? [ 69.017189][ T5348] Bluetooth: hci0: command 0x040f tx timeout [ 69.037572][ T39] audit: type=1400 audit(1728802309.001:239): avc: denied { create } for pid=5955 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 69.045058][ T39] audit: type=1400 audit(1728802309.001:240): avc: denied { connect } for pid=5955 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 69.995524][ T5978] netlink: 32 bytes leftover after parsing attributes in process `syz.1.150'. [ 70.057273][ T39] audit: type=1400 audit(1728802310.001:241): avc: denied { read write } for pid=5975 comm="syz.2.149" name="mouse0" dev="devtmpfs" ino=867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 70.063224][ T39] audit: type=1400 audit(1728802310.001:242): avc: denied { open } for pid=5975 comm="syz.2.149" path="/dev/input/mouse0" dev="devtmpfs" ino=867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 71.030359][ T1381] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.033035][ T1381] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.261258][ T5378] usb 5-1: USB disconnect, device number 3 [ 72.935655][ T6021] netlink: 32 bytes leftover after parsing attributes in process `syz.3.160'. [ 73.356649][ T6024] process 'syz.3.161' launched './file0' with NULL argv: empty string added [ 73.362294][ T39] audit: type=1400 audit(1728802313.321:243): avc: denied { execute_no_trans } for pid=6022 comm="syz.3.161" path="/45/file0" dev="tmpfs" ino=272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.368311][ T6017] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 73.399727][ T39] audit: type=1400 audit(1728802313.361:244): avc: denied { create } for pid=6022 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 73.405083][ T39] audit: type=1400 audit(1728802313.361:245): avc: denied { getopt } for pid=6022 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 73.415161][ T39] audit: type=1400 audit(1728802313.371:246): avc: denied { create } for pid=6022 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 73.422327][ T39] audit: type=1400 audit(1728802313.381:247): avc: denied { read } for pid=6022 comm="syz.3.161" path="socket:[11700]" dev="sockfs" ino=11700 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 73.468967][ T39] audit: type=1400 audit(1728802313.431:248): avc: denied { write } for pid=6022 comm="syz.3.161" path="socket:[11700]" dev="sockfs" ino=11700 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 73.679009][ T5368] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 73.829731][ T5368] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.833271][ T5368] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 73.836814][ T5368] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 73.839335][ T5368] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.842954][ T5368] usb 6-1: config 0 descriptor?? [ 73.846001][ T5368] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 74.128838][ T6027] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 74.537214][ T5348] Bluetooth: hci0: command 0x040f tx timeout [ 75.111222][ T6057] netlink: 32 bytes leftover after parsing attributes in process `syz.2.171'. [ 75.179470][ T6060] netlink: 'syz.0.172': attribute type 6 has an invalid length. [ 75.181821][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'. [ 75.313799][ T6066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.175'. [ 75.677306][ T5378] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 75.829308][ T5378] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.837157][ T5378] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.843643][ T5378] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.851730][ T5378] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.857447][ T5378] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.864853][ T5378] usb 8-1: config 0 descriptor?? [ 76.140158][ T829] cfg80211: failed to load regulatory.db [ 76.275748][ T5378] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 76.278903][ T5378] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 76.289108][ T5378] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 76.439148][ T5368] usb 6-1: USB disconnect, device number 3 [ 76.530849][ T39] audit: type=1400 audit(1728802316.491:249): avc: denied { create } for pid=6065 comm="syz.3.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 76.532480][ T6068] ip6gretap0 speed is unknown, defaulting to 1000 [ 76.540001][ T39] audit: type=1400 audit(1728802316.491:250): avc: denied { write } for pid=6065 comm="syz.3.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 76.540124][ T6068] ip6gretap0 speed is unknown, defaulting to 1000 [ 76.551639][ T6068] ip6gretap0 speed is unknown, defaulting to 1000 [ 76.556609][ T6068] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 76.565062][ T6068] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 76.585225][ T6068] ip6gretap0 speed is unknown, defaulting to 1000 [ 76.589304][ T6068] ip6gretap0 speed is unknown, defaulting to 1000 [ 76.596176][ T6068] ip6gretap0 speed is unknown, defaulting to 1000 [ 76.600634][ T6068] ip6gretap0 speed is unknown, defaulting to 1000 [ 76.617214][ T5348] Bluetooth: hci0: command 0x040f tx timeout [ 76.619945][ T6075] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 77.607798][ T9] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 78.701599][ T5348] Bluetooth: hci0: command 0x040f tx timeout [ 79.117258][ T9] usb 8-1: device descriptor read/64, error -71 [ 79.357160][ T9] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 79.704315][ T6122] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 79.906868][ T9] usb 8-1: device firmware changed [ 79.910626][ T8] usb 8-1: USB disconnect, device number 2 [ 80.087258][ T8] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 80.244380][ T8] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.247739][ T8] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 80.255360][ T8] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.258343][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.269804][ T8] usb 8-1: config 0 descriptor?? [ 80.282149][ T8] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 80.789650][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.197'. [ 80.923314][ T6140] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 81.017736][ T5348] Bluetooth: hci0: command 0x040f tx timeout [ 82.566931][ T5378] usb 8-1: USB disconnect, device number 3 [ 83.097237][ T5348] Bluetooth: hci0: command 0x040f tx timeout [ 83.389651][ T39] audit: type=1400 audit(1728802323.341:251): avc: denied { read } for pid=6205 comm="syz.0.207" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 83.417345][ T39] audit: type=1400 audit(1728802323.341:252): avc: denied { open } for pid=6205 comm="syz.0.207" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 83.550295][ T39] audit: type=1400 audit(1728802323.511:253): avc: denied { setopt } for pid=6207 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 83.554724][ T6209] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 301 [ 83.594858][ T39] audit: type=1400 audit(1728802323.551:254): avc: denied { write } for pid=6207 comm="syz.0.208" name="file0" dev="9p" ino=37617750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 83.607608][ T39] audit: type=1400 audit(1728802323.551:255): avc: denied { open } for pid=6207 comm="syz.0.208" path="/60/bus/file0" dev="9p" ino=37617750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 83.614309][ T39] audit: type=1400 audit(1728802323.571:256): avc: denied { execute } for pid=6210 comm="syz.3.209" dev="hugetlbfs" ino=12666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 83.621604][ T39] audit: type=1400 audit(1728802323.571:257): avc: denied { execute_no_trans } for pid=6210 comm="syz.3.209" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=12666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 84.274135][ T39] audit: type=1400 audit(1728802324.231:258): avc: denied { unmount } for pid=5337 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 84.581260][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 84.587200][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 84.809592][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.813176][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 84.817269][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.820226][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.948477][ T25] usb 5-1: config 0 descriptor?? [ 84.958259][ T25] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 87.344469][ T6281] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 87.357745][ T25] usb 5-1: USB disconnect, device number 4 [ 88.697400][ T5348] Bluetooth: hci0: command 0x040f tx timeout [ 89.384486][ T39] audit: type=1400 audit(1728802329.341:259): avc: denied { mounton } for pid=6310 comm="syz.2.231" path="/47/file0" dev="tmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 89.737125][ T5396] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 89.898376][ T5396] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.901329][ T5396] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 89.908573][ T5396] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.913783][ T5396] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.919392][ T5396] usb 5-1: config 0 descriptor?? [ 89.924350][ T5396] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 90.320587][ T6324] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 91.498941][ T39] audit: type=1400 audit(1728802331.461:260): avc: denied { bind } for pid=6358 comm="syz.1.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.499420][ T6359] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 91.506295][ T6359] audit: out of memory in audit_log_start [ 91.667886][ T5348] Bluetooth: hci0: command 0x040f tx timeout [ 91.840013][ T6365] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 301 [ 92.660648][ T5381] usb 5-1: USB disconnect, device number 5 [ 93.717625][ T6383] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 93.850238][ T39] audit: type=1400 audit(1728802333.811:261): avc: denied { mount } for pid=6392 comm="syz.3.250" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 93.865070][ T6393] FAULT_INJECTION: forcing a failure. [ 93.865070][ T6393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.866337][ T39] audit: type=1400 audit(1728802333.811:262): avc: denied { unlink } for pid=6392 comm="syz.3.250" name="#1" dev="tmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 93.874739][ T6393] CPU: 1 UID: 0 PID: 6393 Comm: syz.3.250 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 93.874763][ T6393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.874769][ T6393] Call Trace: [ 93.874773][ T6393] [ 93.874777][ T6393] dump_stack_lvl+0x16c/0x1f0 [ 93.874808][ T6393] should_fail_ex+0x497/0x5b0 [ 93.874829][ T6393] _copy_to_user+0x30/0xc0 [ 93.874840][ T6393] simple_read_from_buffer+0xd0/0x160 [ 93.874853][ T6393] proc_fail_nth_read+0x198/0x270 [ 93.874865][ T6393] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 93.874877][ T6393] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 93.874887][ T6393] vfs_read+0x1ce/0xbd0 [ 93.874902][ T6393] ? __fget_files+0x23a/0x3f0 [ 93.874915][ T6393] ? fdget_pos+0x24c/0x360 [ 93.874927][ T6393] ? __pfx_lock_release+0x10/0x10 [ 93.874936][ T6393] ? trace_lock_acquire+0x14a/0x1d0 [ 93.874949][ T6393] ? __pfx_vfs_read+0x10/0x10 [ 93.874961][ T6393] ? __pfx___mutex_lock+0x10/0x10 [ 93.874977][ T6393] ? __fget_files+0x244/0x3f0 [ 93.874995][ T6393] ksys_read+0x12f/0x260 [ 93.875008][ T6393] ? __pfx_ksys_read+0x10/0x10 [ 93.875025][ T6393] do_syscall_64+0xcd/0x250 [ 93.875039][ T6393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.875051][ T6393] RIP: 0033:0x7fa724f7ca3c [ 93.875060][ T6393] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 93.875069][ T6393] RSP: 002b:00007fa725df7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 93.875079][ T6393] RAX: ffffffffffffffda RBX: 00007fa725135f80 RCX: 00007fa724f7ca3c [ 93.875086][ T6393] RDX: 000000000000000f RSI: 00007fa725df70a0 RDI: 0000000000000008 [ 93.875092][ T6393] RBP: 00007fa725df7090 R08: 0000000000000000 R09: 0000000000000000 [ 93.875098][ T6393] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.875104][ T6393] R13: 0000000000000000 R14: 00007fa725135f80 R15: 00007ffc0d046938 [ 93.875116][ T6393] [ 93.929582][ T39] audit: type=1400 audit(1728802333.811:263): avc: denied { mount } for pid=6392 comm="syz.3.250" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 93.936228][ T39] audit: type=1400 audit(1728802333.821:264): avc: denied { create } for pid=6392 comm="syz.3.250" name="#3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 93.942592][ T39] audit: type=1400 audit(1728802333.821:265): avc: denied { link } for pid=6392 comm="syz.3.250" name="#3" dev="tmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 93.949451][ T39] audit: type=1400 audit(1728802333.821:266): avc: denied { rename } for pid=6392 comm="syz.3.250" name="#4" dev="tmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 95.177187][ T5348] Bluetooth: hci0: command 0x040f tx timeout [ 95.236443][ T6422] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 301 [ 96.388142][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.265'. [ 96.393135][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 96.393145][ T39] audit: type=1400 audit(1728802336.351:268): avc: denied { lock } for pid=6449 comm="syz.2.265" path="socket:[12784]" dev="sockfs" ino=12784 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.403852][ T39] audit: type=1400 audit(1728802336.361:269): avc: denied { map } for pid=6449 comm="syz.2.265" path="socket:[13993]" dev="sockfs" ino=13993 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 96.412323][ T39] audit: type=1400 audit(1728802336.361:270): avc: denied { accept } for pid=6449 comm="syz.2.265" path="socket:[13993]" dev="sockfs" ino=13993 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 96.738478][ T39] audit: type=1326 audit(1728802336.701:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.1.266" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd5d7dff9 code=0x7ffc0000 [ 96.744864][ T39] audit: type=1326 audit(1728802336.701:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.1.266" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd5d7dff9 code=0x7ffc0000 [ 96.754485][ T39] audit: type=1326 audit(1728802336.701:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.1.266" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4bd5d7dff9 code=0x7ffc0000 [ 96.760411][ T39] audit: type=1326 audit(1728802336.701:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.1.266" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd5d7dff9 code=0x7ffc0000 [ 96.766425][ T39] audit: type=1326 audit(1728802336.701:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.1.266" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd5d7dff9 code=0x7ffc0000 [ 96.773379][ T39] audit: type=1326 audit(1728802336.701:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.1.266" exe="/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f4bd5d7dff9 code=0x7ffc0000 [ 96.779438][ T39] audit: type=1326 audit(1728802336.701:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.1.266" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd5d7dff9 code=0x7ffc0000 [ 98.110167][ T6490] netlink: 76 bytes leftover after parsing attributes in process `syz.2.275'. [ 99.117202][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 99.270327][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.273176][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 99.276984][ T9] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.279219][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.282523][ T9] usb 8-1: config 0 descriptor?? [ 99.287705][ T9] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 101.880380][ T9] usb 8-1: USB disconnect, device number 4 [ 101.910126][ T6559] netlink: 76 bytes leftover after parsing attributes in process `syz.3.290'. [ 102.437006][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.292'. [ 102.885256][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 102.885267][ T39] audit: type=1400 audit(1728802342.841:285): avc: denied { write } for pid=6578 comm="syz.3.295" name="sg0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 102.893209][ T39] audit: type=1400 audit(1728802342.841:286): avc: denied { open } for pid=6578 comm="syz.3.295" path="/dev/sg0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 102.901209][ T39] audit: type=1400 audit(1728802342.851:287): avc: denied { create } for pid=6578 comm="syz.3.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 103.403114][ T6592] netlink: 76 bytes leftover after parsing attributes in process `syz.0.299'. [ 105.447725][ T39] audit: type=1400 audit(1728802345.411:288): avc: denied { connect } for pid=6639 comm="syz.0.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 105.497946][ T39] audit: type=1400 audit(1728802345.451:289): avc: denied { getopt } for pid=6644 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.503271][ T39] audit: type=1400 audit(1728802345.451:290): avc: denied { connect } for pid=6644 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.508686][ T39] audit: type=1400 audit(1728802345.461:291): avc: denied { name_connect } for pid=6644 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 106.926018][ T39] audit: type=1400 audit(1728802346.881:292): avc: denied { mount } for pid=6675 comm="syz.1.316" name="/" dev="ramfs" ino=14661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 106.939051][ T6676] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 107.061567][ T39] audit: type=1400 audit(1728802347.021:293): avc: denied { unmount } for pid=5336 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 108.510033][ T6698] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 109.747161][ T5348] Bluetooth: hci0: command 0x040f tx timeout [ 110.365334][ T39] audit: type=1400 audit(1728802350.321:294): avc: denied { bind } for pid=6733 comm="syz.1.329" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.372067][ T39] audit: type=1400 audit(1728802350.321:295): avc: denied { node_bind } for pid=6733 comm="syz.1.329" saddr=10.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 110.402966][ T39] audit: type=1400 audit(1728802350.361:296): avc: denied { create } for pid=6735 comm="syz.1.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 110.411018][ T39] audit: type=1400 audit(1728802350.371:297): avc: denied { getopt } for pid=6735 comm="syz.1.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 110.419256][ T6736] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.330'. [ 110.425184][ T39] audit: type=1400 audit(1728802350.371:298): avc: denied { ioctl } for pid=6735 comm="syz.1.330" path="socket:[16430]" dev="sockfs" ino=16430 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 110.443402][ T39] audit: type=1400 audit(1728802350.401:299): avc: denied { create } for pid=6735 comm="syz.1.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 110.450243][ T39] audit: type=1400 audit(1728802350.411:300): avc: denied { connect } for pid=6735 comm="syz.1.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 110.456810][ T39] audit: type=1400 audit(1728802350.411:301): avc: denied { write } for pid=6735 comm="syz.1.330" path="socket:[16435]" dev="sockfs" ino=16435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 110.465124][ T39] audit: type=1400 audit(1728802350.411:302): avc: denied { ioctl } for pid=6735 comm="syz.1.330" path="socket:[16435]" dev="sockfs" ino=16435 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 110.559356][ T39] audit: type=1400 audit(1728802350.521:303): avc: denied { create } for pid=6737 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 111.215501][ T6756] vivid-002: disconnect [ 111.258109][ T6756] netlink: 68 bytes leftover after parsing attributes in process `syz.3.337'. [ 111.318381][ T6755] vivid-002: reconnect [ 111.415853][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.339'. [ 111.418521][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.339'. [ 111.568214][ T6767] FAULT_INJECTION: forcing a failure. [ 111.568214][ T6767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.571659][ T6767] CPU: 0 UID: 0 PID: 6767 Comm: syz.2.341 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 111.574360][ T6767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.577105][ T6767] Call Trace: [ 111.577977][ T6767] [ 111.578750][ T6767] dump_stack_lvl+0x16c/0x1f0 [ 111.579977][ T6767] should_fail_ex+0x497/0x5b0 [ 111.581212][ T6767] _copy_from_user+0x30/0xf0 [ 111.582414][ T6767] do_sock_getsockopt+0x5f6/0x800 [ 111.583723][ T6767] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 111.585162][ T6767] ? __fget_files+0x244/0x3f0 [ 111.586390][ T6767] __sys_getsockopt+0x1a1/0x270 [ 111.587657][ T6767] ? __pfx___sys_getsockopt+0x10/0x10 [ 111.589057][ T6767] ? fput+0x30/0x390 [ 111.590077][ T6767] ? ksys_write+0x1ad/0x260 [ 111.591263][ T6767] ? __pfx_ksys_write+0x10/0x10 [ 111.592536][ T6767] __x64_sys_getsockopt+0xbd/0x160 [ 111.593875][ T6767] ? do_syscall_64+0x91/0x250 [ 111.595103][ T6767] ? lockdep_hardirqs_on+0x7c/0x110 [ 111.596452][ T6767] do_syscall_64+0xcd/0x250 [ 111.597656][ T6767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.599179][ T6767] RIP: 0033:0x7f85d7f7dff9 [ 111.600334][ T6767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.605262][ T6767] RSP: 002b:00007f85d8e5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 111.607400][ T6767] RAX: ffffffffffffffda RBX: 00007f85d8135f80 RCX: 00007f85d7f7dff9 [ 111.609434][ T6767] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003 [ 111.611460][ T6767] RBP: 00007f85d8e5c090 R08: 0000000020000900 R09: 0000000000000000 [ 111.613492][ T6767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.615518][ T6767] R13: 0000000000000000 R14: 00007f85d8135f80 R15: 00007ffcca909e68 [ 111.617651][ T6767] [ 111.618560][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.728853][ T6774] ip6gretap0 speed is unknown, defaulting to 1000 [ 112.448159][ T6785] vivid-000: disconnect [ 112.457690][ T30] IPVS: starting estimator thread 0... [ 112.488952][ T6785] netlink: 68 bytes leftover after parsing attributes in process `syz.2.348'. [ 112.528287][ T6784] vivid-000: reconnect [ 112.551798][ T6789] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 112.567697][ T6787] IPVS: using max 34 ests per chain, 81600 per kthread [ 112.754167][ T6793] fuse: Unknown parameter ''' [ 113.845251][ T6818] vivid-001: disconnect [ 113.958153][ T6818] netlink: 68 bytes leftover after parsing attributes in process `syz.0.358'. [ 114.040840][ T6817] vivid-001: reconnect [ 115.645259][ T39] kauditd_printk_skb: 24 callbacks suppressed [ 115.645270][ T39] audit: type=1400 audit(1728802355.601:328): avc: denied { bind } for pid=6848 comm="syz.3.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.285350][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.370'. [ 118.617527][ T6894] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 119.245783][ T39] audit: type=1400 audit(1728802359.201:329): avc: denied { bind } for pid=6907 comm="syz.2.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.363151][ T39] audit: type=1400 audit(1728802359.321:330): avc: denied { remount } for pid=6914 comm="syz.2.384" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 119.370220][ T6915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.384'. [ 119.424526][ T39] audit: type=1400 audit(1728802359.381:331): avc: denied { getopt } for pid=6914 comm="syz.2.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.441568][ T6919] FAULT_INJECTION: forcing a failure. [ 119.441568][ T6919] name failslab, interval 1, probability 0, space 0, times 0 [ 119.444950][ T6919] CPU: 3 UID: 0 PID: 6919 Comm: syz.0.381 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 119.447673][ T6919] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.450448][ T6919] Call Trace: [ 119.451333][ T6919] [ 119.452117][ T6919] dump_stack_lvl+0x16c/0x1f0 [ 119.453367][ T6919] should_fail_ex+0x497/0x5b0 [ 119.454612][ T6919] ? fs_reclaim_acquire+0xae/0x150 [ 119.455949][ T6919] should_failslab+0xc2/0x120 [ 119.457204][ T6919] kmem_cache_alloc_node_noprof+0x71/0x310 [ 119.458728][ T6919] ? __alloc_skb+0x2b1/0x380 [ 119.459942][ T6919] __alloc_skb+0x2b1/0x380 [ 119.461121][ T6919] ? __pfx___alloc_skb+0x10/0x10 [ 119.462417][ T6919] ? __lock_acquire+0xbdd/0x3ce0 [ 119.463721][ T6919] alloc_skb_with_frags+0xe4/0x850 [ 119.465065][ T6919] ? __pfx___lock_acquire+0x10/0x10 [ 119.466419][ T6919] ? __pfx_mark_lock+0x10/0x10 [ 119.467665][ T6919] sock_alloc_send_pskb+0x7f1/0x980 [ 119.469061][ T6919] ? find_held_lock+0x2d/0x110 [ 119.470321][ T6919] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 119.471821][ T6919] ? lock_acquire+0x2f/0xb0 [ 119.473021][ T6919] ? dev_get_by_index+0x37/0x380 [ 119.474316][ T6919] packet_sendmsg+0x1f18/0x54d0 [ 119.475609][ T6919] ? __pfx_avc_has_perm+0x10/0x10 [ 119.476900][ T6919] ? find_held_lock+0x2d/0x110 [ 119.478149][ T6919] ? sock_has_perm+0x25d/0x2f0 [ 119.479402][ T6919] ? __pfx_sock_has_perm+0x10/0x10 [ 119.480749][ T6919] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 119.482486][ T6919] ? __pfx_packet_sendmsg+0x10/0x10 [ 119.483803][ T6919] ? __import_iovec+0x1fd/0x6e0 [ 119.485087][ T6919] ____sys_sendmsg+0xaaf/0xc90 [ 119.486342][ T6919] ? copy_msghdr_from_user+0x10b/0x160 [ 119.487773][ T6919] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.489159][ T6919] ? __pfx___lock_acquire+0x10/0x10 [ 119.490516][ T6919] ___sys_sendmsg+0x135/0x1e0 [ 119.491750][ T6919] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.493123][ T6919] ? lock_acquire+0x2f/0xb0 [ 119.494451][ T6919] ? __fget_files+0x40/0x3f0 [ 119.495887][ T6919] ? fdget+0x176/0x210 [ 119.497121][ T6919] __sys_sendmsg+0x117/0x1f0 [ 119.498912][ T6919] ? __pfx___sys_sendmsg+0x10/0x10 [ 119.500251][ T6919] ? __fget_files+0x244/0x3f0 [ 119.501505][ T6919] do_syscall_64+0xcd/0x250 [ 119.502703][ T6919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.504252][ T6919] RIP: 0033:0x7f9b9997dff9 [ 119.505426][ T6919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.510381][ T6919] RSP: 002b:00007f9b9a818038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.512525][ T6919] RAX: ffffffffffffffda RBX: 00007f9b99b35f80 RCX: 00007f9b9997dff9 [ 119.514561][ T6919] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000003 [ 119.516606][ T6919] RBP: 00007f9b9a818090 R08: 0000000000000000 R09: 0000000000000000 [ 119.518691][ T6919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.520758][ T6919] R13: 0000000000000000 R14: 00007f9b99b35f80 R15: 00007ffe9bad24b8 [ 119.522808][ T6919] [ 119.817420][ T5348] Bluetooth: hci0: command 0x040f tx timeout [ 120.579807][ T39] audit: type=1400 audit(1728802360.541:332): avc: denied { read } for pid=6935 comm="syz.1.389" name="sg1" dev="devtmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 120.586107][ T39] audit: type=1400 audit(1728802360.541:333): avc: denied { ioctl } for pid=6935 comm="syz.1.389" path="/dev/sg1" dev="devtmpfs" ino=711 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 121.336797][ T6949] Bluetooth: MGMT ver 1.23 [ 122.580641][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.393'. [ 122.591712][ T39] audit: type=1400 audit(1728802362.551:334): avc: denied { bind } for pid=6948 comm="syz.3.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 122.700831][ T39] audit: type=1400 audit(1728802362.661:335): avc: denied { accept } for pid=6959 comm="syz.0.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 122.926445][ T39] audit: type=1400 audit(1728802362.881:336): avc: denied { execute } for pid=6965 comm="syz.1.396" path="/105/cpu.stat" dev="tmpfs" ino=585 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 122.951770][ T6972] bond1: entered allmulticast mode [ 123.209411][ T39] audit: type=1400 audit(1728802363.171:337): avc: denied { write } for pid=6982 comm="syz.1.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 123.214241][ T39] audit: type=1400 audit(1728802363.171:338): avc: denied { read } for pid=6982 comm="syz.1.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.667682][ T7018] FAULT_INJECTION: forcing a failure. [ 124.667682][ T7018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.671049][ T7018] CPU: 3 UID: 0 PID: 7018 Comm: syz.3.410 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 124.673815][ T7018] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 124.676561][ T7018] Call Trace: [ 124.677512][ T7018] [ 124.678297][ T7018] dump_stack_lvl+0x16c/0x1f0 [ 124.679568][ T7018] should_fail_ex+0x497/0x5b0 [ 124.680809][ T7018] _copy_to_user+0x30/0xc0 [ 124.682001][ T7018] simple_read_from_buffer+0xd0/0x160 [ 124.683605][ T7018] proc_fail_nth_read+0x198/0x270 [ 124.685469][ T7018] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.687090][ T7018] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.688520][ T7018] vfs_read+0x1ce/0xbd0 [ 124.689557][ T7018] ? __fget_files+0x23a/0x3f0 [ 124.690763][ T7018] ? fdget_pos+0x24c/0x360 [ 124.691920][ T7018] ? __pfx_lock_release+0x10/0x10 [ 124.693245][ T7018] ? trace_lock_acquire+0x14a/0x1d0 [ 124.695028][ T7018] ? __pfx_vfs_read+0x10/0x10 [ 124.696680][ T7018] ? __pfx___mutex_lock+0x10/0x10 [ 124.698508][ T7018] ? __fget_files+0x244/0x3f0 [ 124.700209][ T7018] ksys_read+0x12f/0x260 [ 124.701754][ T7018] ? __pfx_ksys_read+0x10/0x10 [ 124.703507][ T7018] do_syscall_64+0xcd/0x250 [ 124.705157][ T7018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.707272][ T7018] RIP: 0033:0x7fa724f7ca3c [ 124.709006][ T7018] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 124.716093][ T7018] RSP: 002b:00007fa725df7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 124.719097][ T7018] RAX: ffffffffffffffda RBX: 00007fa725135f80 RCX: 00007fa724f7ca3c [ 124.721749][ T7018] RDX: 000000000000000f RSI: 00007fa725df70a0 RDI: 0000000000000004 [ 124.723950][ T7018] RBP: 00007fa725df7090 R08: 0000000000000000 R09: 0000000000000000 [ 124.726615][ T7018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.729409][ T7018] R13: 0000000000000000 R14: 00007fa725135f80 R15: 00007ffc0d046938 [ 124.732018][ T7018] [ 124.805696][ T7002] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 124.922665][ T39] audit: type=1326 audit(1728802364.881:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7019 comm="syz.3.411" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa724f7dff9 code=0x7fc00000 [ 124.981764][ T39] audit: type=1400 audit(1728802364.941:340): avc: denied { create } for pid=7023 comm="syz.0.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 124.986606][ T39] audit: type=1400 audit(1728802364.941:341): avc: denied { map } for pid=7023 comm="syz.0.412" path="socket:[18545]" dev="sockfs" ino=18545 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 124.986628][ T39] audit: type=1400 audit(1728802364.941:342): avc: denied { read } for pid=7023 comm="syz.0.412" path="socket:[18545]" dev="sockfs" ino=18545 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 124.999587][ T39] audit: type=1400 audit(1728802364.961:343): avc: denied { ioctl } for pid=7023 comm="syz.0.412" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17660 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 125.046882][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.416'. [ 125.119634][ T7032] team0 (unregistering): Port device team_slave_0 removed [ 125.126324][ T7032] team0 (unregistering): Port device team_slave_1 removed [ 125.139179][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.417'. [ 125.287204][ T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 125.387632][ T7043] veth0_vlan: left promiscuous mode [ 125.390773][ T7043] veth0_vlan: entered promiscuous mode [ 125.440267][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 125.443833][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 125.454953][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 125.457499][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.459653][ T9] usb 5-1: Product: syz [ 125.460884][ T9] usb 5-1: Manufacturer: syz [ 125.462527][ T9] usb 5-1: SerialNumber: syz [ 125.469300][ T7026] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 125.683194][ T9] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 125.906105][ T9] usb 5-1: USB disconnect, device number 6 [ 125.909685][ T9] usblp0: removed [ 126.057245][ T5348] Bluetooth: hci0: command 0x040f tx timeout [ 126.059863][ T7049] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 126.461660][ T7064] ======================================================= [ 126.461660][ T7064] WARNING: The mand mount option has been deprecated and [ 126.461660][ T7064] and is ignored by this kernel. Remove the mand [ 126.461660][ T7064] option from the mount to silence this warning. [ 126.461660][ T7064] ======================================================= [ 126.765485][ T68] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.878222][ T68] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.930701][ T5349] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 126.933467][ T5349] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 126.935896][ T5349] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 126.939658][ T5349] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 126.942444][ T5349] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 126.944635][ T5349] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 126.960006][ T68] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.973288][ T7077] ip6gretap0 speed is unknown, defaulting to 1000 [ 127.017441][ T68] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.036476][ T7077] chnl_net:caif_netlink_parms(): no params data found [ 127.074584][ T7077] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.076683][ T7077] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.079080][ T7077] bridge_slave_0: entered allmulticast mode [ 127.081433][ T7077] bridge_slave_0: entered promiscuous mode [ 127.083930][ T7077] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.086556][ T7077] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.088550][ T7077] bridge_slave_1: entered allmulticast mode [ 127.090584][ T7077] bridge_slave_1: entered promiscuous mode [ 127.114604][ T7077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.118576][ T7077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.158885][ T7077] team0: Port device team_slave_0 added [ 127.178285][ T7077] team0: Port device team_slave_1 added [ 127.179933][ T68] bridge_slave_1: left allmulticast mode [ 127.181485][ T68] bridge_slave_1: left promiscuous mode [ 127.183698][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.188031][ T68] bridge_slave_0: left allmulticast mode [ 127.189507][ T68] bridge_slave_0: left promiscuous mode [ 127.191019][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.404472][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.410476][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.416805][ T68] bond0 (unregistering): Released all slaves [ 127.474719][ T7077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.476601][ T7077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.483763][ T7077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.488599][ T7077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.490408][ T7077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.497040][ T7077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.531472][ T7077] hsr_slave_0: entered promiscuous mode [ 127.535609][ T7077] hsr_slave_1: entered promiscuous mode [ 127.543922][ T7077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.547118][ T7077] Cannot create hsr debugfs directory [ 127.612578][ T7099] mmap: syz.1.437 (7099) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 127.691412][ T39] kauditd_printk_skb: 86 callbacks suppressed [ 127.691469][ T39] audit: type=1400 audit(1728802367.651:430): avc: denied { search } for pid=5054 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.704401][ T39] audit: type=1400 audit(1728802367.651:431): avc: denied { read } for pid=5054 comm="dhcpcd" name="n71" dev="tmpfs" ino=3154 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 127.710905][ T39] audit: type=1400 audit(1728802367.651:432): avc: denied { open } for pid=5054 comm="dhcpcd" path="/run/udev/data/n71" dev="tmpfs" ino=3154 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 127.716749][ T39] audit: type=1400 audit(1728802367.651:433): avc: denied { getattr } for pid=5054 comm="dhcpcd" path="/run/udev/data/n71" dev="tmpfs" ino=3154 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 127.723604][ T68] hsr_slave_0: left promiscuous mode [ 127.726770][ T68] hsr_slave_1: left promiscuous mode [ 127.730574][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.732490][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.735048][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.736983][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.750270][ T68] veth1_macvtap: left promiscuous mode [ 127.752052][ T68] veth0_macvtap: left promiscuous mode [ 127.753553][ T68] veth1_vlan: left promiscuous mode [ 127.755039][ T68] veth0_vlan: left promiscuous mode [ 127.799501][ T39] audit: type=1400 audit(1728802367.761:434): avc: denied { read } for pid=7105 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.805501][ T39] audit: type=1400 audit(1728802367.761:435): avc: denied { open } for pid=7105 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.827272][ T39] audit: type=1400 audit(1728802367.761:436): avc: denied { getattr } for pid=7105 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.834682][ T39] audit: type=1400 audit(1728802367.761:437): avc: denied { write } for pid=7104 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.840973][ T39] audit: type=1400 audit(1728802367.761:438): avc: denied { add_name } for pid=7104 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.846847][ T39] audit: type=1400 audit(1728802367.761:439): avc: denied { create } for pid=7104 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 129.017735][ T5348] Bluetooth: hci0: command tx timeout [ 129.493123][ T7077] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 129.502499][ T7077] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 129.514743][ T7077] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 129.523561][ T7077] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 129.608086][ T7077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.623513][ T7077] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.633466][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.635467][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.644981][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.646858][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.740083][ T7077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.757193][ T7077] veth0_vlan: entered promiscuous mode [ 129.761687][ T7077] veth1_vlan: entered promiscuous mode [ 129.775831][ T7077] veth0_macvtap: entered promiscuous mode [ 129.781071][ T7077] veth1_macvtap: entered promiscuous mode [ 129.786976][ T7077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.791371][ T7077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.794756][ T7077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.798666][ T7077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.801311][ T7077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.804211][ T7077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.808515][ T7077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.813005][ T7077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.816458][ T7077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.819705][ T7077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.822760][ T7077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.826074][ T7077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.829537][ T7077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.832842][ T7077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.844869][ T7077] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.848613][ T7077] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.850982][ T7077] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.853324][ T7077] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.903755][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.445'. [ 129.906257][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.910604][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.924025][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.926086][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.400365][ T7180] FAULT_INJECTION: forcing a failure. [ 130.400365][ T7180] name failslab, interval 1, probability 0, space 0, times 0 [ 130.404523][ T7180] CPU: 3 UID: 0 PID: 7180 Comm: syz.2.449 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 130.408024][ T7180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.411583][ T7180] Call Trace: [ 130.412719][ T7180] [ 130.413722][ T7180] dump_stack_lvl+0x16c/0x1f0 [ 130.415315][ T7180] should_fail_ex+0x497/0x5b0 [ 130.416929][ T7180] ? fs_reclaim_acquire+0xae/0x150 [ 130.418735][ T7180] should_failslab+0xc2/0x120 [ 130.420330][ T7180] kmem_cache_alloc_node_noprof+0x71/0x310 [ 130.422306][ T7180] ? __alloc_skb+0x2b1/0x380 [ 130.423889][ T7180] __alloc_skb+0x2b1/0x380 [ 130.425410][ T7180] ? __pfx___alloc_skb+0x10/0x10 [ 130.427084][ T7180] ? __lock_acquire+0xbdd/0x3ce0 [ 130.428766][ T7180] alloc_skb_with_frags+0xe4/0x850 [ 130.430488][ T7180] ? __pfx___lock_acquire+0x10/0x10 [ 130.432233][ T7180] ? __pfx_mark_lock+0x10/0x10 [ 130.433852][ T7180] sock_alloc_send_pskb+0x7f1/0x980 [ 130.435605][ T7180] ? find_held_lock+0x2d/0x110 [ 130.437246][ T7180] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 130.439264][ T7180] ? lock_acquire+0x2f/0xb0 [ 130.440926][ T7180] ? dev_get_by_index+0x37/0x380 [ 130.442617][ T7180] packet_sendmsg+0x1f18/0x54d0 [ 130.444258][ T7180] ? __pfx_avc_has_perm+0x10/0x10 [ 130.445969][ T7180] ? find_held_lock+0x2d/0x110 [ 130.447592][ T7180] ? sock_has_perm+0x25d/0x2f0 [ 130.449216][ T7180] ? __pfx_sock_has_perm+0x10/0x10 [ 130.450938][ T7180] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 130.453168][ T7180] ? __pfx_packet_sendmsg+0x10/0x10 [ 130.454913][ T7180] ? __import_iovec+0x1fd/0x6e0 [ 130.456587][ T7180] ____sys_sendmsg+0xaaf/0xc90 [ 130.458308][ T7180] ? copy_msghdr_from_user+0x10b/0x160 [ 130.460178][ T7180] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.461974][ T7180] ? __pfx___lock_acquire+0x10/0x10 [ 130.463729][ T7180] ___sys_sendmsg+0x135/0x1e0 [ 130.465332][ T7180] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.467105][ T7180] ? lock_acquire+0x2f/0xb0 [ 130.468759][ T7180] ? __fget_files+0x40/0x3f0 [ 130.470377][ T7180] ? fdget+0x176/0x210 [ 130.471775][ T7180] __sys_sendmsg+0x117/0x1f0 [ 130.473353][ T7180] ? __pfx___sys_sendmsg+0x10/0x10 [ 130.475094][ T7180] ? __fget_files+0x244/0x3f0 [ 130.476727][ T7180] do_syscall_64+0xcd/0x250 [ 130.478270][ T7180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.480260][ T7180] RIP: 0033:0x7f2b5257dff9 [ 130.481774][ T7180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.488084][ T7180] RSP: 002b:00007f2b53384038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.490864][ T7180] RAX: ffffffffffffffda RBX: 00007f2b52735f80 RCX: 00007f2b5257dff9 [ 130.493500][ T7180] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000003 [ 130.496136][ T7180] RBP: 00007f2b53384090 R08: 0000000000000000 R09: 0000000000000000 [ 130.498962][ T7180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.501611][ T7180] R13: 0000000000000000 R14: 00007f2b52735f80 R15: 00007ffd6360bb68 [ 130.504249][ T7180] [ 131.106318][ T5348] Bluetooth: hci0: command tx timeout [ 131.320869][ T7165] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 131.691088][ T7197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.454'. [ 132.053628][ T7209] warning: `syz.1.459' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 132.077397][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.461'. [ 132.100083][ T7209] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 132.103240][ T7209] netlink: 40 bytes leftover after parsing attributes in process `syz.1.459'. [ 132.180673][ T7217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.463'. [ 132.460420][ T1381] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.462669][ T1381] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.125731][ T7226] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 133.180403][ T5348] Bluetooth: hci0: command 0x040f tx timeout [ 133.183577][ T7234] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 133.216391][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 133.216402][ T39] audit: type=1400 audit(1728802373.171:457): avc: denied { bind } for pid=7236 comm="syz.2.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 133.216666][ T7237] FAULT_INJECTION: forcing a failure. [ 133.216666][ T7237] name failslab, interval 1, probability 0, space 0, times 0 [ 133.227005][ T7237] CPU: 1 UID: 0 PID: 7237 Comm: syz.2.469 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 133.229756][ T7237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.232544][ T7237] Call Trace: [ 133.233429][ T7237] [ 133.234232][ T7237] dump_stack_lvl+0x16c/0x1f0 [ 133.235500][ T7237] should_fail_ex+0x497/0x5b0 [ 133.236769][ T7237] ? fs_reclaim_acquire+0xae/0x150 [ 133.238110][ T7237] should_failslab+0xc2/0x120 [ 133.239347][ T7237] kmem_cache_alloc_node_noprof+0x71/0x310 [ 133.240885][ T7237] ? __alloc_skb+0x2b1/0x380 [ 133.242111][ T7237] __alloc_skb+0x2b1/0x380 [ 133.243293][ T7237] ? __pfx___alloc_skb+0x10/0x10 [ 133.244768][ T7237] ? __print_lock_name+0x1d0/0x260 [ 133.246392][ T7237] alloc_skb_with_frags+0xe4/0x850 [ 133.247732][ T7237] ? lock_acquire+0x2f/0xb0 [ 133.248931][ T7237] ? __might_fault+0xe3/0x190 [ 133.250166][ T7237] sock_alloc_send_pskb+0x7f1/0x980 [ 133.251530][ T7237] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 133.253020][ T7237] packet_sendmsg+0x1f18/0x54d0 [ 133.254333][ T7237] ? avc_has_perm+0xa/0x1c0 [ 133.255533][ T7237] ? sock_has_perm+0x25d/0x2f0 [ 133.256813][ T7237] ? __pfx_sock_has_perm+0x10/0x10 [ 133.258158][ T7237] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 133.259907][ T7237] ? __pfx_packet_sendmsg+0x10/0x10 [ 133.261290][ T7237] ? __import_iovec+0x1fd/0x6e0 [ 133.262580][ T7237] ? __pfx_lockdep_stack_trace_count+0x10/0x10 [ 133.264192][ T7237] ____sys_sendmsg+0xaaf/0xc90 [ 133.265477][ T7237] ? copy_msghdr_from_user+0x10b/0x160 [ 133.266911][ T7237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.268307][ T7237] ? __pfx___lock_acquire+0x10/0x10 [ 133.269686][ T7237] ___sys_sendmsg+0x135/0x1e0 [ 133.270928][ T7237] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.272304][ T7237] ? lock_acquire+0x2f/0xb0 [ 133.273540][ T7237] ? __fget_files+0x40/0x3f0 [ 133.274761][ T7237] ? fdget+0x176/0x210 [ 133.275846][ T7237] __sys_sendmsg+0x117/0x1f0 [ 133.277107][ T7237] ? __pfx___sys_sendmsg+0x10/0x10 [ 133.278453][ T7237] ? __fget_files+0x244/0x3f0 [ 133.279703][ T7237] do_syscall_64+0xcd/0x250 [ 133.280923][ T7237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.282481][ T7237] RIP: 0033:0x7f2b5257dff9 [ 133.283654][ T7237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.288863][ T7237] RSP: 002b:00007f2b53384038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.291027][ T7237] RAX: ffffffffffffffda RBX: 00007f2b52735f80 RCX: 00007f2b5257dff9 [ 133.293101][ T7237] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 133.295180][ T7237] RBP: 00007f2b53384090 R08: 0000000000000000 R09: 0000000000000000 [ 133.297282][ T7237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.299323][ T7237] R13: 0000000000000000 R14: 00007f2b52735f80 R15: 00007ffd6360bb68 [ 133.301402][ T7237] [ 133.302311][ C1] vkms_vblank_simulate: vblank timer overrun [ 133.518132][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.472'. [ 133.518436][ T7246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.473'. [ 133.628494][ T7251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.475'. [ 133.702920][ T7251] team0 (unregistering): Port device team_slave_0 removed [ 133.712257][ T7251] team0 (unregistering): Port device team_slave_1 removed [ 134.678497][ T39] audit: type=1400 audit(1728802374.631:458): avc: denied { read } for pid=7271 comm="syz.0.481" name="usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 134.701026][ T39] audit: type=1400 audit(1728802374.641:459): avc: denied { open } for pid=7271 comm="syz.0.481" path="/dev/usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 134.856934][ T7280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.484'. [ 134.939660][ T7280] team0 (unregistering): Port device team_slave_0 removed [ 134.949080][ T7280] team0 (unregistering): Port device team_slave_1 removed [ 134.951922][ T7280] team0 (unregistering): Port device wlan1 removed [ 135.131210][ T39] audit: type=1400 audit(1728802375.091:460): avc: denied { ioctl } for pid=7281 comm="syz.0.485" path="socket:[17374]" dev="sockfs" ino=17374 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 135.137223][ T7282] Zero length message leads to an empty skb [ 135.257455][ T5348] Bluetooth: hci0: command 0x040f tx timeout [ 135.264043][ T7285] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 135.684306][ T7309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.493'. [ 136.855226][ T39] audit: type=1400 audit(1728802376.811:461): avc: denied { bind } for pid=7330 comm="syz.2.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.862632][ T39] audit: type=1400 audit(1728802376.821:462): avc: denied { setopt } for pid=7330 comm="syz.2.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 137.078096][ T7333] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 137.080016][ T7333] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 137.091913][ T7333] vhci_hcd vhci_hcd.0: Device attached [ 137.337281][ T5348] Bluetooth: hci0: command 0x040f tx timeout [ 137.772614][ T7338] vhci_hcd: connection closed [ 137.774697][ T1132] vhci_hcd: stop threads [ 137.779739][ T1132] vhci_hcd: release socket [ 137.781673][ T1132] vhci_hcd: disconnect device [ 137.787262][ T9] vhci_hcd: vhci_device speed not set [ 138.918699][ T7372] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 138.942568][ T7372] mkiss: ax0: crc mode is auto. [ 139.182696][ T7358] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 139.417295][ T5348] Bluetooth: hci0: command 0x040f tx timeout [ 139.543421][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.512'. [ 139.940048][ T7387] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 139.941818][ T7387] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 139.944514][ T7387] vhci_hcd vhci_hcd.0: Device attached [ 140.418502][ T7383] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 140.499909][ T1304] vhci_hcd: vhci_device speed not set [ 140.524975][ T7389] vhci_hcd: connection closed [ 140.526360][ T1132] vhci_hcd: stop threads [ 140.529093][ T1132] vhci_hcd: release socket [ 140.530333][ T1132] vhci_hcd: disconnect device [ 140.587261][ T1304] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 140.589496][ T1304] usb 13-1: enqueue for inactive port 0 [ 140.657353][ T1304] vhci_hcd: vhci_device speed not set [ 141.497204][ T5348] Bluetooth: hci0: command 0x040f tx timeout [ 141.791953][ T39] audit: type=1400 audit(1728802381.751:463): avc: denied { mount } for pid=7416 comm="syz.1.525" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 141.798880][ T39] audit: type=1400 audit(1728802381.761:464): avc: denied { mounton } for pid=7416 comm="syz.1.525" path="/130/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 141.804569][ T39] audit: type=1400 audit(1728802381.761:465): avc: denied { read } for pid=7416 comm="syz.1.525" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 141.814004][ T39] audit: type=1400 audit(1728802381.761:466): avc: denied { open } for pid=7416 comm="syz.1.525" path="/130/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 142.180579][ T1304] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 142.487146][ T1304] usb 6-1: Using ep0 maxpacket: 16 [ 142.498045][ T1304] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 142.516294][ T1304] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 142.519591][ T1304] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.524110][ T1304] usb 6-1: Product: syz [ 142.526372][ T1304] usb 6-1: Manufacturer: syz [ 142.528781][ T1304] usb 6-1: SerialNumber: syz [ 142.549319][ T1304] usb 6-1: config 0 descriptor?? [ 142.579854][ T1304] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input7 [ 142.840615][ T9] usb 6-1: USB disconnect, device number 4 [ 143.577240][ T5348] Bluetooth: hci0: command 0x040f tx timeout [ 143.931839][ T7465] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 143.934429][ T7465] audit: out of memory in audit_log_start [ 144.057115][ T39] audit: type=1400 audit(1728802384.011:467): avc: denied { unmount } for pid=5336 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 144.716609][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.541'. [ 145.571411][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.545'. [ 145.657141][ T5348] Bluetooth: hci0: command 0x040f tx timeout [ 146.946051][ T7525] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 146.950206][ T7525] FAULT_INJECTION: forcing a failure. [ 146.950206][ T7525] name failslab, interval 1, probability 0, space 0, times 0 [ 146.954623][ T7525] CPU: 1 UID: 0 PID: 7525 Comm: syz.3.552 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 146.957228][ T7525] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.959847][ T7525] Call Trace: [ 146.960721][ T7525] [ 146.961457][ T7525] dump_stack_lvl+0x16c/0x1f0 [ 146.962640][ T7525] should_fail_ex+0x497/0x5b0 [ 146.963831][ T7525] ? fs_reclaim_acquire+0xae/0x150 [ 146.965161][ T7525] should_failslab+0xc2/0x120 [ 146.966382][ T7525] __kmalloc_noprof+0xcb/0x400 [ 146.967630][ T7525] tomoyo_encode2+0x100/0x3e0 [ 146.968858][ T7525] tomoyo_encode+0x29/0x50 [ 146.970012][ T7525] tomoyo_realpath_from_path+0x19d/0x720 [ 146.971459][ T7525] ? tomoyo_path_number_perm+0x232/0x590 [ 146.972913][ T7525] tomoyo_path_number_perm+0x245/0x590 [ 146.974331][ T7525] ? tomoyo_path_number_perm+0x232/0x590 [ 146.975786][ T7525] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 146.977359][ T7525] ? trace_lock_acquire+0x14a/0x1d0 [ 146.978658][ T7525] ? lock_acquire+0x2f/0xb0 [ 146.979810][ T7525] ? __fget_files+0x40/0x3f0 [ 146.980978][ T7525] ? __fget_files+0x244/0x3f0 [ 146.982177][ T7525] security_file_ioctl+0x9b/0x240 [ 146.983449][ T7525] __x64_sys_ioctl+0xbb/0x220 [ 146.984670][ T7525] do_syscall_64+0xcd/0x250 [ 146.985859][ T7525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.987397][ T7525] RIP: 0033:0x7fa724f7dff9 [ 146.988572][ T7525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.993482][ T7525] RSP: 002b:00007fa725df7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.995609][ T7525] RAX: ffffffffffffffda RBX: 00007fa725135f80 RCX: 00007fa724f7dff9 [ 146.997666][ T7525] RDX: 00000000200001c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 146.999705][ T7525] RBP: 00007fa725df7090 R08: 0000000000000000 R09: 0000000000000000 [ 147.001871][ T7525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.003950][ T7525] R13: 0000000000000000 R14: 00007fa725135f80 R15: 00007ffc0d046938 [ 147.006040][ T7525] [ 147.006917][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.011708][ T7525] ERROR: Out of memory at tomoyo_realpath_from_path. [ 147.747131][ T5348] Bluetooth: hci0: command 0x040f tx timeout [ 148.055196][ T7541] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 148.082946][ T7541] mkiss: ax0: crc mode is auto. [ 148.883585][ T39] audit: type=1400 audit(1728802388.841:468): avc: denied { shutdown } for pid=7554 comm="syz.0.562" laddr=fe80::a lport=57520 faddr=fe80:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 148.889620][ T39] audit: type=1400 audit(1728802388.851:469): avc: denied { ioctl } for pid=7554 comm="syz.0.562" path="socket:[19124]" dev="sockfs" ino=19124 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 149.210761][ T39] audit: type=1400 audit(1728802389.171:470): avc: denied { execute_no_trans } for pid=7559 comm="syz.0.564" path="/146/file0" dev="tmpfs" ino=810 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 151.083505][ T7606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.576'. [ 151.091454][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.578'. [ 151.782382][ T39] audit: type=1400 audit(1728802391.741:471): avc: denied { name_bind } for pid=7622 comm="syz.3.582" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 151.789443][ T39] audit: type=1400 audit(1728802391.751:472): avc: denied { node_bind } for pid=7622 comm="syz.3.582" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 152.198125][ T7634] netlink: 'syz.0.586': attribute type 10 has an invalid length. [ 152.204693][ T7634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.209173][ T7634] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 152.216521][ T39] audit: type=1400 audit(1728802392.171:473): avc: denied { ioctl } for pid=7633 comm="syz.0.586" path="/dev/dri/card0" dev="devtmpfs" ino=635 ioctlcmd=0x64a6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 152.278272][ T7638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.586'. [ 152.298751][ T7638] bond0: entered promiscuous mode [ 152.300141][ T7638] bond_slave_0: entered promiscuous mode [ 152.301695][ T7638] bond_slave_1: entered promiscuous mode [ 152.303950][ T7638] batadv0: entered promiscuous mode [ 152.376785][ T7641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.587'. [ 153.359779][ T39] audit: type=1400 audit(1728802393.321:474): avc: denied { mount } for pid=7662 comm="syz.3.593" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 153.366446][ T39] audit: type=1400 audit(1728802393.321:475): avc: denied { mounton } for pid=7662 comm="syz.3.593" path="/151/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 153.388865][ T39] audit: type=1400 audit(1728802393.351:476): avc: denied { ioctl } for pid=7664 comm="syz.2.594" path="/dev/usbmon0" dev="devtmpfs" ino=721 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 153.399104][ T39] audit: type=1400 audit(1728802393.361:477): avc: denied { unmount } for pid=5341 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 153.502767][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.595'. [ 153.545420][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.598'. [ 153.583167][ T7679] Bluetooth: MGMT ver 1.23 [ 154.057182][ T5349] Bluetooth: hci0: command 0x040f tx timeout [ 154.061200][ T7673] [ 154.061883][ T7673] ============================================ [ 154.063473][ T7673] WARNING: possible recursive locking detected [ 154.065102][ T7673] 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 Not tainted SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 154.067989][ T7673] -------------------------------------------- [ 154.070504][ T7673] syz.2.597/7673 is trying to acquire lock: [ 154.072031][ T7673] ffff88802dce8078 (&hdev->lock){+.+.}-{3:3}, at: mgmt_set_connectable_complete+0x143/0x330 [ 154.074705][ T7673] [ 154.074705][ T7673] but task is already holding lock: [ 154.076611][ T7673] ffff88802dce8078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x346/0x1110 [ 154.078963][ T7673] [ 154.078963][ T7673] other info that might help us debug this: [ 154.081075][ T7673] Possible unsafe locking scenario: [ 154.081075][ T7673] [ 154.082984][ T7673] CPU0 [ 154.083951][ T7673] ---- [ 154.084835][ T7673] lock(&hdev->lock); [ 154.085898][ T7673] lock(&hdev->lock); [ 154.086957][ T7673] [ 154.086957][ T7673] *** DEADLOCK *** [ 154.086957][ T7673] [ 154.089043][ T7673] May be due to missing lock nesting notation [ 154.089043][ T7673] [ 154.091156][ T7673] 3 locks held by syz.2.597/7673: [ 154.092477][ T7673] #0: ffff88802dce8d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x26/0x90 [ 154.095016][ T7673] #1: ffff88802dce8078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x346/0x1110 [ 154.097637][ T7673] #2: ffff88802dce8690 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_dequeue+0x50/0x1f0 [ 154.100538][ T7673] [ 154.100538][ T7673] stack backtrace: [ 154.102095][ T7673] CPU: 2 UID: 0 PID: 7673 Comm: syz.2.597 Not tainted 6.12.0-rc2-syzkaller-00305-g7234e2ea0edd #0 [ 154.104883][ T7673] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 154.107727][ T7673] Call Trace: [ 154.108643][ T7673] [ 154.109411][ T7673] dump_stack_lvl+0x116/0x1f0 [ 154.110700][ T7673] print_deadlock_bug+0x2e3/0x410 [ 154.112298][ T7673] __lock_acquire+0x2185/0x3ce0 [ 154.113949][ T7673] ? __pfx___lock_acquire+0x10/0x10 [ 154.115536][ T7673] ? hlock_class+0x4e/0x130 [ 154.116872][ T7673] ? __lock_acquire+0x163e/0x3ce0 [ 154.118248][ T7673] lock_acquire.part.0+0x11b/0x380 [ 154.119715][ T7673] ? mgmt_set_connectable_complete+0x143/0x330 [ 154.121402][ T7673] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 154.122908][ T7673] ? rcu_is_watching+0x12/0xc0 [ 154.124593][ T7673] ? trace_lock_acquire+0x14a/0x1d0 [ 154.126425][ T7673] ? mgmt_set_connectable_complete+0x143/0x330 [ 154.128456][ T7673] ? lock_acquire+0x2f/0xb0 [ 154.129626][ T7673] ? mgmt_set_connectable_complete+0x143/0x330 [ 154.131209][ T7673] __mutex_lock+0x175/0x9c0 [ 154.132407][ T7673] ? mgmt_set_connectable_complete+0x143/0x330 [ 154.134034][ T7673] ? mgmt_set_connectable_complete+0x143/0x330 [ 154.135646][ T7673] ? __pfx___mutex_trylock_common+0x10/0x10 [ 154.137194][ T7673] ? __pfx___mutex_lock+0x10/0x10 [ 154.138493][ T7673] ? __mutex_lock+0x1a6/0x9c0 [ 154.139706][ T7673] ? mgmt_set_connectable_complete+0x143/0x330 [ 154.141307][ T7673] mgmt_set_connectable_complete+0x143/0x330 [ 154.142851][ T7673] ? __pfx_mgmt_set_connectable_complete+0x10/0x10 [ 154.144563][ T7673] ? __pfx_mgmt_set_connectable_complete+0x10/0x10 [ 154.146333][ T7673] _hci_cmd_sync_cancel_entry.constprop.0+0x6c/0x1d0 [ 154.148117][ T7673] hci_cmd_sync_dequeue+0x178/0x1f0 [ 154.149508][ T7673] cmd_complete_rsp+0x46/0x1e0 [ 154.150779][ T7673] mgmt_pending_foreach+0xdf/0x140 [ 154.152124][ T7673] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 154.153609][ T7673] __mgmt_power_off+0x12a/0x2c0 [ 154.154890][ T7673] ? __pfx___mgmt_power_off+0x10/0x10 [ 154.156339][ T7673] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 154.157942][ T7673] ? lockdep_hardirqs_on+0x7c/0x110 [ 154.159316][ T7673] ? 0xffffffff81000000 [ 154.160431][ T7673] hci_dev_close_sync+0xc33/0x1110 [ 154.161817][ T7673] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 154.163274][ T7673] hci_dev_do_close+0x2e/0x90 [ 154.164563][ T7673] hci_dev_close+0x183/0x1e0 [ 154.165830][ T7673] hci_sock_ioctl+0x28c/0x880 [ 154.167084][ T7673] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 154.168473][ T7673] sock_do_ioctl+0x116/0x280 [ 154.169701][ T7673] ? __pfx_sock_do_ioctl+0x10/0x10 [ 154.171049][ T7673] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 154.172786][ T7673] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 154.174550][ T7673] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 154.176387][ T7673] sock_ioctl+0x228/0x6c0 [ 154.177531][ T7673] ? __pfx_sock_ioctl+0x10/0x10 [ 154.178816][ T7673] ? selinux_file_ioctl+0x180/0x270 [ 154.180437][ T7673] ? selinux_file_ioctl+0xb4/0x270 [ 154.181883][ T7673] ? __pfx_sock_ioctl+0x10/0x10 [ 154.183140][ T7673] __x64_sys_ioctl+0x18f/0x220 [ 154.184380][ T7673] do_syscall_64+0xcd/0x250 [ 154.185558][ T7673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.187075][ T7673] RIP: 0033:0x7f2b5257dff9 [ 154.188226][ T7673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.193117][ T7673] RSP: 002b:00007f2b53384038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.195228][ T7673] RAX: ffffffffffffffda RBX: 00007f2b52735f80 RCX: 00007f2b5257dff9 [ 154.197274][ T7673] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000004 [ 154.199287][ T7673] RBP: 00007f2b525f0296 R08: 0000000000000000 R09: 0000000000000000 [ 154.201312][ T7673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.203329][ T7673] R13: 0000000000000000 R14: 00007f2b52735f80 R15: 00007ffd6360bb68 [ 154.205363][ T7673] [ 154.561414][ T1132] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.639801][ T1132] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.719727][ T1132] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.791194][ T1132] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.845305][ T1132] bridge_slave_1: left allmulticast mode [ 154.846722][ T1132] bridge_slave_1: left promiscuous mode [ 154.848640][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.851913][ T1132] bridge_slave_0: left allmulticast mode [ 154.853430][ T1132] bridge_slave_0: left promiscuous mode [ 154.854899][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.017879][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.021163][ T1132] bond_slave_0: left promiscuous mode [ 155.024410][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.027810][ T1132] bond_slave_1: left promiscuous mode [ 155.030993][ T1132] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 155.034022][ T1132] batadv0: left promiscuous mode [ 155.037515][ T1132] bond0 (unregistering): Released all slaves [ 155.041141][ T1132] bond1 (unregistering): Released all slaves [ 155.281538][ T1132] hsr_slave_0: left promiscuous mode [ 155.283561][ T1132] hsr_slave_1: left promiscuous mode [ 155.285592][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.288354][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.291034][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.293482][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.298164][ T1132] veth1_macvtap: left promiscuous mode [ 155.299916][ T1132] veth0_macvtap: left promiscuous mode [ 155.301712][ T1132] veth1_vlan: left promiscuous mode [ 155.303360][ T1132] veth0_vlan: left promiscuous mode [ 156.050609][ T1132] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.109799][ T1132] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.189449][ T1132] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.270085][ T1132] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.324840][ T1132] bridge_slave_1: left allmulticast mode [ 156.326811][ T1132] bridge_slave_1: left promiscuous mode [ 156.329044][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.332575][ T1132] bridge_slave_0: left allmulticast mode [ 156.334213][ T1132] bridge_slave_0: left promiscuous mode [ 156.336223][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.461585][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.464746][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.468036][ T1132] bond0 (unregistering): Released all slaves [ 156.470934][ T9] ip6gretap0 speed is unknown, defaulting to 1000 [ 156.732555][ T1132] hsr_slave_0: left promiscuous mode [ 156.734496][ T1132] hsr_slave_1: left promiscuous mode [ 156.736275][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.739164][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.741626][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.743538][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.746263][ T1132] veth1_macvtap: left promiscuous mode [ 156.747752][ T1132] veth0_macvtap: left promiscuous mode [ 156.749201][ T1132] veth1_vlan: left promiscuous mode [ 156.750562][ T1132] veth0_vlan: left promiscuous mode [ 157.413534][ T1132] IPVS: stop unused estimator thread 0... [ 160.147232][ T5347] Bluetooth: hci2: command 0x0406 tx timeout VM DIAGNOSIS: 06:53:14 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000000 RDX=1ffffffff1b4c370 RSI=ffffffff81f6a967 RDI=ffffffff8e1b8340 RBP=00000000ffffffff RSP=ffffc90003aaf850 R8 =ffffffffffffffff R9 =0000000000046100 R10=ffffffff905f3c8f R11=1ffffffff1c386b1 R12=0000000000000000 R13=ffffea0000dab8c0 R14=ffff8880298362e8 R15=ffffea0000dab8c0 RIP=ffffffff816aa4e0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4283a67d60 CR3=00000000125b4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4282f0b6a3 00007f4282f0b6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc487bd590 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555587f5490 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555587f5c1e 00005555587f5b40 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555558805844 0000555558805840 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000036323335 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08060a0104fa0010 0007800401000008 080606013aa60008 0007e00300100007 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0102080006100004 100006014af80180 0400080002100002 100008014bc80010 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0003ffffffff0401 0800060143f603ff ffffff0413800400 100000080008014f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e409c4da80100013 b00300100013a003 399c9c8010001390 0300100013800302 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 10000610003e1000 06014db200100000 10000010000e1000 0100000608060a01 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000001000008fd RBX=ffff888021922440 RCX=0000000000000830 RDX=0000000000000001 RSI=00000000000000fd RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc900054973f8 R8 =0000000000000000 R9 =fffffbfff20be791 R10=ffffffff905f3c8f R11=000000000000005d R12=1ffff92000a92e80 R13=ffffc90005497420 R14=0000000000000000 R15=ffff8880219224c0 RIP=ffffffff813c0088 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f9b9a8186c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020020000 CR3=0000000048a5e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=000000007ffbffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe9bad2850 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b999f1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b999f1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b999f113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b999f114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b999f11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b999f12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850a7e35 RDI=ffffffff9aae3b40 RBP=ffffffff9aae3b00 RSP=ffffc90007947030 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000037 R14=ffffffff850a7dd0 R15=0000000000000000 RIP=ffffffff850a7e5f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f2b533846c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b315ffff8 CR3=000000004bdea000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2b525f1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2b525f1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2b525f113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2b525f114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2b525f11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2b525f12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2b5270b488 00007f2b5270b480 00007f2b5270b478 00007f2b5270b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2b5326d100 00007f2b5270b440 00007f2b5270b458 0004000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2b5270b498 00007f2b5270b490 00007f2b5270b488 00007f2b5270b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000002 RBX=0000000000000001 RCX=ffffffff88f5f681 RDX=ffff888030ba8000 RSI=0000000000000000 RDI=0000000000000001 RBP=000000000003dbcc RSP=ffffc900053af7b8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=ffff888046d86640 R14=0000000000000000 R15=ffff88804bbb78e8 RIP=ffffffff818d82a0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f9b9a7f76c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002001c000 CR3=0000000048a5e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a2bf ffffffff8100a2bf ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a2bf ffffffff8100a2bf ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8100a2bf ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bd5df1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bd5df1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bd5df113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bd5df114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bd5df11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bd5df12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 001a2d00012a0000 0003250000000305 0000006400000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00020d0122000800 00096c0026000800 0000000000040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000064000c000800 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8c6a68e1f2cf2771 d9240be4e61605f4 a97f2fae551ed1be 7001d379fbe18ce4 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 546d9870101ecbf3 4ed987ffede0a1e9 ef11b517ffac4f33 d5a94091905b18c6 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8049d093e2a7b09a 82ab1c20d25ff15b 5cacf9cc61fbecb8 95c92ee2ec9c6af5 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 720512881a3aa267 52d81212785ac69f 1e644cab0cf02db3 0505398817bf9950 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000