last executing test programs: 2.152013071s ago: executing program 2 (id=362): r0 = syz_open_dev$sg(&(0x7f0000000180), 0x3, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000180), 0x3, 0x0) (async) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f00000002c0)) (async) 2.133874344s ago: executing program 2 (id=363): r0 = openat$fb1(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x5c0, 0x0, 0x1acc02, 0x148, 0x0, 0x10, 0x528, 0x2a8, 0x2a8, 0x528, 0x2a8, 0x3, 0x0, {[{{@ip={@local, @multicast2, 0xff, 0xffffff00, 'veth0_virt_wifi\x00', 'netdevsim0\x00', {0xff}, {}, 0x1}, 0x40000, 0x3f8, 0x458, 0x0, {0x0, 0x5803}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@rand_addr=0x64010102, [0xff000000, 0xffffff00], @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff000000, 0x0, 0xffffff00], 0x4d6, 0x0, 0x1, 0x1, 0x4, 0xc}, {@ipv4=@empty, [0xff, 0xffffffff, 0xff000000, 0xffffffff], @ipv4=@broadcast, [0xffffffff, 0xffffffff, 0x0, 0xff000000], 0x4d6, 0x3506, 0x0, 0x1, 0x2, 0xd}, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffffff00, 0xffffff00, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0xffffff00, 0xffffffff, 0xff], 0x4d2, 0x0, 0x8c, 0x1, 0xa, 0x2}, {@ipv6=@mcast1, [0xff, 0xff, 0xffff00, 0xffffff00], @ipv6=@private2, [0x0, 0xff, 0xff, 0xffffff00], 0x4d2, 0x0, 0x67, 0x1, 0x18, 0x10}], 0x1, 0x84}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @fd}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, 0xff47, 0x4, [0x2a, 0x10, 0x6, 0x2c, 0x10, 0x3e, 0x7, 0x12, 0x32, 0x1, 0x21, 0xb, 0x3b, 0x1e, 0x2e, 0x1e], 0x1, 0x8000, 0x8000}}}, {{@ip={@remote, @multicast2, 0xffffff00, 0x0, 'virt_wifi0\x00', 'caif0\x00', {}, {0xff}, 0xd1b6c305b1e83769, 0x3, 0x2}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1, 0x5, 0x3, 0x4, 0x1], 0x6, 0x4}, {0x0, [0x1, 0x1, 0x1, 0x0, 0x6, 0x4], 0x2, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x620) ioctl$FBIOBLANK(r0, 0x4611, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x458800, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') preadv2(r3, &(0x7f00000001c0)=[{&(0x7f0000002240)=""/148, 0x94}], 0x1, 0xd0d, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000040)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="f81400003f000b0025bd700000000000020000000c0002000500000000000000d81401"], 0x14f8}}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/timer\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @loopback}], 0x10) r7 = socket(0x10, 0x80003, 0x0) write(r7, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000080)={'sit0\x00'}) syz_genetlink_get_family_id$fou(&(0x7f0000000300), r7) sendto$inet6(r4, &(0x7f00000000c0)='\x00', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000640)={0x300, 0x800, 0x800, 0x78, 0x2, 0x5, 0x10, 0x2, {0x0, 0x1}, {0x7fffffff, 0x9, 0x1}, {0x7fff, 0x1, 0x1}, {0x9, 0xa, 0x1}, 0x3, 0x40, 0x8, 0xe, 0x1, 0x9, 0x40, 0xb, 0x6, 0x80000001, 0x10001, 0x200000, 0x10, 0x4, 0x1, 0x8}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0xfc00}, 0x90) ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000100ee00", @ANYRES32=r3, @ANYBLOB="0000000000f0ffff0000000000f0ffff00000000"]) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, 0x90) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) 1.779547831s ago: executing program 3 (id=367): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x29, 0xa, 0x0, "32cfd5010000aa022c1e00f4bf40074000000400000000b00400d800", 0x59455247}) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async, rerun: 64) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000780), 0x81, 0x0) (rerun: 64) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.77929188s ago: executing program 3 (id=368): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r4 = socket(0x10, 0x3, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000020000000000000f01"], 0x0, 0x37, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r6) sendmsg$IEEE802154_SCAN_REQ(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, r7, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x49}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000841}, 0x94) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x2c, r9, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r9, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x64}, 0x24008001) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x2, 0x4001}, 0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}]}, 0x3c}}, 0x4000000) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) 1.70510484s ago: executing program 3 (id=369): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000100)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000000d40)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0}}], 0x1, 0x80) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0xf498, 0x481) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=@dellink={0x1a4, 0x11, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2, 0x20018}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x2}, @IFLA_VF_PORTS={0x17c, 0x18, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x7, 0x2, ']#\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9b}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "67b470f131299c422076b9d052960f31"}]}, {0x84, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_PROFILE={0x15, 0x2, '/dev/v4l-subdev#\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "07dc9f8f5e450bcc9426b272af854899"}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_PROFILE={0x7, 0x2, '$\x8a\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ba58e00a9016f5f9368b31dc6823c3f4"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "fa435e3a5b1a1076f7cfe4210d3587a4"}, @IFLA_PORT_PROFILE={0x9, 0x2, '{&\\:\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x4}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a5ea05e3fb20a2263dccf88d8f2879cf"}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6c8007b450056851572b60d23a216614"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "64ac2ec46419a36f08a37e16e9d136a0"}]}, {0x84, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "765858ea6b09845d8452a6a6ec160191"}, @IFLA_PORT_PROFILE={0x7, 0x2, '@$\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "daa3219c8c900789fc57f1206786cd59"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e625d2e7f2b72e41289486556de7446a"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7f}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "cb1db722781585fabeed4b04b4f2b3d2"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}]}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x8}, 0x810) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r3, 0xc040564b, &(0x7f00000000c0)={0x5, 0x0, 0x2004, 0x0, 0x3, {0x3, 0x8}}) 1.704797662s ago: executing program 3 (id=370): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x2d}}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1=0xe000030a}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x48}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x2, 0x1c10a1, 0xa, 0x4}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r5 = userfaultfd(0x801) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x1, &(0x7f0000000080)=0x80, 0x4) getsockopt$inet6_tcp_buf(r6, 0x6, 0xd, 0x0, &(0x7f0000000000)) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x9, 0x20010, r3, 0x82000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r7) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./control\x00') ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r9 = creat(&(0x7f0000000380)='./control\x00', 0x12f) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000300)={'\x00', 0x4, 0x8001, 0x2, 0x2, 0x6, 0xffffffffffffffff}) pread64(r8, &(0x7f0000001240)=""/102400, 0x200000, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x181000, &(0x7f0000000500)={[{@mode={'mode', 0x3d, 0x100000000}}], [{@euid_lt={'euid<', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x33, 0x39, 0x37, 0x34, 0x35, 0x33, 0x69], 0x2d, [0x31, 0x62, 0x31, 0x30], 0x2d, [0x64, 0x36, 0x34, 0x36], 0x2d, [0x37, 0x35, 0x31, 0x62], 0x2d, [0x30, 0x63, 0x63, 0x64, 0x64, 0x36, 0x32, 0x31]}}}, {@obj_user={'obj_user', 0x3d, '+'}}, {@dont_appraise}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) msgget(0x1, 0x200) 1.54492191s ago: executing program 3 (id=372): memfd_create(&(0x7f0000000040)='security.selinux\x00\xab', 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x4) 1.482853035s ago: executing program 3 (id=374): r0 = socket$alg(0x26, 0x5, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000000000000000000008000100e000000108000300", @ANYRES32=r3], 0x34}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "0a92072159ab0fbeb5e67b804d1cf7382975a202eaa7b07c5a414337d40bb803fc93d356aea4d8caeea9cc85ad688e03e566ed55c6efaeed3cb57d4c51fb0235"}, 0x48, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r5, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r6, 0x5b03, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r0, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e21, @empty}, 0x4, 0x2, 0x4, 0x3}}, 0x80) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r9, 0x80089419, &(0x7f0000000240)) ptrace(0x10, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0xa, 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f00000003c0)) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14) r10 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r10, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x4}], 0x18, 0x1}, 0x40) sendmsg$nl_route_sched_retired(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r11, 0x201, 0x70bd27, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) 1.480177445s ago: executing program 1 (id=375): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') mount(&(0x7f0000000040)=@filename='./cgroup\x00', &(0x7f0000000080)='./cgroup\x00', 0x0, 0x9001, 0x0) unshare(0x2a020400) 1.477201499s ago: executing program 1 (id=376): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000006440), 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003100000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r2 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, &(0x7f0000000100)) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000), &(0x7f00000000c0)=@v2={0x6, 0x3, 0x0, 0x0, 0x1, 'b'}, 0xa, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x5) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'virt_wifi0\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x5, 0x3, 0x7, "e7c1f03b8e98"}}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000200)=0x8001100) socket$tipc(0x1e, 0x5, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000180)={0xaa34, 0x100, 0x2, 0x3, 0x8, "fde29cafb53f3ba5"}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r6, 0x10f, 0x84, &(0x7f0000000140), &(0x7f00000000c0)=0x4) 1.285402181s ago: executing program 1 (id=377): r0 = fanotify_init(0x4, 0x400) r1 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x8000009, r2, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) r3 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.284758408s ago: executing program 1 (id=378): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x501a, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x5, 0xc3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f080003"], 0xf0}, 0x1, 0x0, 0x0, 0x4c004}, 0x20008453) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="f00000001a0093cf26bd7000fddbdf25ff7fd36b27d9a6bde300000000000000ff0100000000000000000000000000013d2200054e240002020000002c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000004d332000000ac1e010100000000000000000000000004"], 0xf0}}, 0x28008004) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$dri(0x0, 0x2, 0xc8d03) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000180)={0x200, 0xff, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000240)={r4}) (async) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x169802, 0x0) (async) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r5, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x0, 0x0) (async) recvfrom$inet6(r5, 0x0, 0x1000000, 0x0, 0x0, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) syz_open_procfs$pagemap(0x0, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000e0000000000000000000f6ffe3940000ee00003ed6"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r6, r7, 0x6, 0x0, @void}, 0x10) (async) ioctl$VT_ACTIVATE(r7, 0x5606, 0x21) socket$inet6_udplite(0xa, 0x2, 0x88) socket$isdn_base(0x22, 0x3, 0x0) 1.281659709s ago: executing program 2 (id=379): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000005400)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000005240)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/151, 0x97}, {&(0x7f0000000180)=""/117, 0x75}, {&(0x7f0000000280)=""/108, 0x6c}, {&(0x7f00000003c0)=""/176, 0xb0}], 0x5, &(0x7f0000001540)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/95, 0x5f}], 0x1, &(0x7f0000001640)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}}, {{&(0x7f0000001780)=@abs, 0x6e, &(0x7f0000001800), 0x0, &(0x7f0000001840)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000001880)=""/102, 0x66}, {&(0x7f0000001900)=""/103, 0x67}, {&(0x7f0000001980)=""/3, 0x3}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/104, 0x68}], 0x5, &(0x7f0000002ac0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002b00)=""/164, 0xa4}, {&(0x7f0000002bc0)=""/241, 0xf1}], 0x2, &(0x7f0000002d00)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000002dc0)=@abs, 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000002e40)=""/85, 0x55}, {&(0x7f0000002ec0)=""/117, 0x75}, {&(0x7f0000002f40)=""/18, 0x12}, {&(0x7f0000002f80)=""/41, 0x29}], 0x4, &(0x7f0000003000)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}}, {{0x0, 0x0, &(0x7f0000005100)=[{&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/27, 0x1b}, {&(0x7f0000004100)=""/4096, 0x1000}], 0x3, &(0x7f0000005140)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}], 0x7, 0x12022, &(0x7f0000005440)={r2, r3+10000000}) 1.225393017s ago: executing program 1 (id=380): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000063"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(r1, &(0x7f0000000f00)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)='f', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000008400000008"], 0x20}, 0x0) keyctl$clear(0x11, 0xffffffffffffffff) sendmsg$inet(r1, &(0x7f0000000f00)={&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='&', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0x20}, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x400400, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x428b}, {r2, 0x2}, {r0, 0x6128}], 0x3, &(0x7f00000000c0)={r3, r4+60000000}, &(0x7f0000000180)={[0xffffffffa57b81aa]}, 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 405.34906ms ago: executing program 2 (id=386): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r0, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x800) 404.452477ms ago: executing program 1 (id=387): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc", 0x68}], 0x1, 0x0, 0x6b}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)={0x440, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x46}}}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}], @NL80211_ATTR_TX_RATES={0x15c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x5, 0x3, 0x6c, 0xb, 0xb, 0xc, 0x6c, 0x6, 0x24, 0x3, 0xb, 0x2, 0x12, 0x36, 0x24, 0x1b, 0x12, 0x36, 0x6, 0x16, 0x6, 0x1, 0xc, 0xb, 0x4, 0x6, 0x1, 0x12, 0x2, 0xb, 0x60, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x2, 0x1, 0x6, 0x8, 0x7, 0xa7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3, 0xfc01, 0x240, 0x1ff, 0x1, 0x81, 0x800]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x7, 0x4}, {0x1, 0x6}, {0x3, 0x7}, {0x2, 0x7}, {0x0, 0xa}, {0x1, 0x3}, {0x1, 0x9}, {0x2, 0x9}, {0x2, 0x4}, {0x3, 0xa}, {0x2, 0x5}, {0x2, 0x9}, {0x3, 0x1}, {0x2, 0xa}, {0x1, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2837, 0x9, 0xe3a, 0xc, 0x4, 0x0, 0x3]}}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x4, 0xd, 0xa, 0x2, 0x1, 0x9, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0xfffd, 0xe000, 0x5, 0x0, 0x2, 0xb]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x7, 0x8}, {0x0, 0x2}, {0x0, 0x8}, {0x2, 0x9}, {0x0, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x2, 0x7}, {0x1, 0x9}, {0x4, 0x5}, {0x7, 0x3}, {0x3, 0x1}, {0x3, 0x7}, {0x7, 0x3}, {0x2, 0x7}, {0x5, 0x8}, {0x5, 0x6}, {0x7, 0x8}, {0x5, 0x9}, {0x3}, {0x3, 0x4}, {0x4}, {0x4, 0x8}, {0x1, 0x3}, {0x2}, {0x7, 0x3}, {0x0, 0x8}, {0x6, 0xa}, {0x6, 0xa}, {0x5, 0x6}, {0x6, 0x1}, {0x0, 0x1}, {0x7, 0x5}, {0x7, 0x1}, {0x4, 0x6}, {0x2, 0x7}, {0x0, 0xa}, {0x2, 0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x4, 0x8}, {0x0, 0x8}, {}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x5, 0x1}, {0x1, 0x6}, {0x0, 0x4}, {0x1, 0x8}, {0x7, 0x5}, {0x1, 0x7}, {0x1, 0x7}, {0x0, 0x4}, {0x0, 0x1}, {0x6, 0x5}, {0x4, 0x2}, {0x5, 0x2}, {0x0, 0x2}, {0x0, 0x5}, {0x5}, {0x3, 0x6}, {0x7, 0x7}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x12, 0x60, 0x6c, 0x60, 0x3, 0x60, 0x3, 0x18, 0x3, 0x3]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x88, 0x401, 0x650, 0x8000, 0x9, 0x8, 0x401]}}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x9}, {0x1, 0x9}, {0x3}, {}, {0x7, 0x3}, {0x4, 0x5}, {0x2, 0x1}, {0x6}]}]}]}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TX_RATES={0x100, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x4, 0x9, 0xffff, 0x3, 0x9, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x1, 0x1}, {0x4, 0x5}, {0x2, 0x8}, {0x1, 0x5}, {0x7, 0xa}, {0x0, 0x9}, {0x3, 0x3}, {0x2, 0x8}, {0x6, 0x7}, {0x0, 0x7}, {0x5, 0x8}, {0x4, 0xa}, {0x4, 0x6}, {0x0, 0x9}, {0x0, 0x6}, {0x7}, {0x3, 0x1}, {0x6, 0x9}, {0x0, 0xa}, {}, {0x2, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x8001, 0xdf2e, 0x3, 0x2, 0x1000]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0xd, 0x2, 0xd62, 0x8, 0xffff, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x5e48, 0x1, 0x7, 0x1, 0x7e0, 0x7f, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x3, 0xc, 0x100, 0x5, 0x9, 0x36, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x3, 0x24, 0x5, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x800, 0x4, 0x9, 0x7, 0x2, 0x7]}}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{0x7, 0x6}, {0x6, 0x3}, {0x5, 0x6}, {0x5, 0x3}, {0x0, 0x7}, {0x2, 0x3}, {0x2, 0x1}, {0x3, 0x3}, {0x0, 0xa}, {0x2, 0x3}, {0x7}, {0x6, 0x5}, {0x4, 0x1}, {0x6}, {0x5, 0x6}, {0x1, 0x9}, {0x6, 0xa}, {0x1, 0x1}, {0x3, 0x7}, {0x1, 0x3}, {0x6, 0x6}, {0x7, 0x9}, {0x7, 0x6}, {0x0, 0x3}, {0x1, 0xa}, {0x4, 0x4}, {0x1, 0xa}, {0x7, 0x7}, {0x7}, {0x6, 0xa}, {0x2, 0x6}, {}, {0x1, 0x3}, {0x4, 0x8}, {0x7, 0x1}, {0x4}, {0x6, 0x3}]}]}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}], @NL80211_ATTR_PRIVACY={0x4}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}]]}, 0x440}, 0x1, 0x0, 0x0, 0xeddb9b63522f9ffa}, 0x4000010) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000063c0)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000003c0)="276dc7feb49c57c2a1ad8842760ba91a4000eda5cd4c7ff61ca1ce5aa7c35b172c2be1aa20d5324cd6dd2e7ea318b995ce09f810da541def6afc76ac9b2cdd24f9f50d25b80e102ca8bcd047883034664af2dd384cc23065ea42a18a2e51b95eecfbd616f66865aae3053224c4f48abe5f93949191b3a92c920260cd8276dace", 0x80}, {&(0x7f00000004c0)="17", 0x1}], 0x2}}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) r4 = socket$nl_generic(0x10, 0x3, 0x10) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x204, 0x10, 0x701, 0x70bd2b, 0x0, {0xa}, [@nested={0x1ef, 0x4e, 0x0, 0x1, [@nested={0x103, 0x4, 0x0, 0x1, [@typed={0x4, 0x21}, @generic="a4464e4b452bc5489f841fbb00cb6c78b1ca1503a3513a9c1fe1115c4849de2cad78f88f7843b3d8932e3666080f4b78d26702546e2d1dd86c103b51f2915d3784a398dc28ee15f536fa08bdd333bac884212cc2b5ad5484cd1a04f5b28d17de4e9cabd1c63c051548e679841cb41e5c0abfc259cadfbda1165fdf3974ae5d339c3e7b6afddd68e11bf3d01a4a4f9311ec8c05073d2bfd174fd555f1824a075e0e05458df65d241685c9e33435909966ca5cc44d6932a20b17fe7e2400361bb4a70f846f76431d202f17246d56c0611d54c88c06a44526246fff7a86b966e1da6a16b694543901898ee72bcbf07cca14d64d98aa7229bd", @nested={0x4, 0x90}]}, @generic="411ba8d3ae11130fc1372933bc88fdb3f2b03210696a589b010023c07fa31ebed5b0ac2508c7059cfc67697e9ee4ecff379e7dcdb6956bd602e56e5bec477a94928913f9ee5f798c1c48dbf04c7336a91403906361270d7f17e09b41a1d47678c8de89352c4740cdfed4e49c4d576f97b53c0b93b89169f91e90172daa8b9e9447c915bca5fcfe6ad8811de5", @generic="31e8831350928a7a1ee3154d4c130786aa3560033bcf420fcc72823532dea9627fdfed075c6f7751171db996826650b8e6114ed36a75138fc830b09a8fbabc215dcd76", @nested={0x18, 0xa4, 0x0, 0x1, [@nested={0x4, 0x4a}, @typed={0x8, 0xc6, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x13f, 0x0, 0x0, @uid=r5}]}]}]}, 0x204}}, 0x0) recvmmsg(r4, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4) 345.237305ms ago: executing program 0 (id=388): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f00000003c0)={0x0, 0x0, r4}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TCGETA(r5, 0x5405, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 344.377306ms ago: executing program 2 (id=389): r0 = fanotify_init(0x4, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0xd, 0x8000029, r1, 0x0) pread64(r1, 0x0, 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r1, 0x460f, &(0x7f00000001c0)={0x1f, 0x2}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) r3 = io_uring_setup(0x80002553, &(0x7f0000000000)={0x0, 0x47a1, 0x1, 0x2, 0x22}) io_uring_setup(0x3025, &(0x7f00000000c0)={0x0, 0xff72, 0x8, 0x3, 0x39e, 0x0, r3}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000180)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f0000000000)="0bbb268d0200a808ed90cfcf000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0x30) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000011146ff90000050000000000080001000000000008004b0028"], 0x28}}, 0x0) getsockopt$ax25_int(r2, 0x101, 0x6, &(0x7f0000000080), &(0x7f0000000140)=0x4) 295.441326ms ago: executing program 2 (id=390): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000004280), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0xfffffffffffffffd, {0x0, 0xfffffffffffffffc, 0x7, 0x0, 0x88000, 0x0, {0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x4, 0x2000, 0x7, r4, 0x0, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r5) read$FUSE(r5, &(0x7f000000c400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8001, 0x0, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f0000000040)=[0xee01, 0x0, 0x0, 0xee01, 0xffffffffffffffff, 0xee01, 0xee01, 0x0]) fstat(r0, &(0x7f0000004200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) getgroups(0x9, &(0x7f00000001c0)=[0xffffffffffffffff, 0xee01, 0xee01, 0xffffffffffffffff, 0xee01, 0xee00, 0xee01, 0xee00, 0xee01]) fstat(r1, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000002300)=ANY=[@ANYBLOB="02000000010002000000000002000000", @ANYRES32=r2, @ANYBLOB="02000200", @ANYRES32=r4, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=0xee00, @ANYBLOB="02000200", @ANYRES32=r6, @ANYBLOB="040001000000000008000500", @ANYRES32=r7, @ANYBLOB="08000400", @ANYRES32=r8, @ANYBLOB="0800019f", @ANYRES32=r9, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32=r10, @ANYBLOB="08000600", @ANYRES32=0xee00, @ANYBLOB="08000600", @ANYRES32=r11, @ANYBLOB="10000000000000002000040000000000"], 0x84, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x491, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r13, 0x0, r12, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r14, 0x0, 0xfffffe3e) timer_settime(0x0, 0x0, 0x0, 0x0) r15 = open(0x0, 0x0, 0x0) fstat(r15, 0x0) 175.667745ms ago: executing program 0 (id=391): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = dup(r1) bind$alg(r2, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000240)="d301", 0x2, 0x20000050, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xae}}, 0x10) 175.352307ms ago: executing program 0 (id=392): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @empty, 0x8}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local, @empty, @val={@val={0x88a8, 0x5}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x18, @multicast1}, {0x2, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xfffffffffffffffa}}}}}}, 0x0) 125.737145ms ago: executing program 0 (id=393): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0x6}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x9, {0x1a9}}}}]}]}, 0x68}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000080)="fc") r2 = syz_open_dev$vim2m(&(0x7f0000019080), 0x401, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0xb, 0x1, 0x0, "adbdeec74e9e4aea00000000000000a902552f08cefca462dda36c7451f8e500"}) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000140)=0xfffffffc, 0x4) close_range(r1, r0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 125.355612ms ago: executing program 0 (id=394): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x24, r6, 0x1, 0x0, 0xfffffffe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48058}, 0x2000c010) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x85, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0x4}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r4, {0xd, 0xffe0}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x6}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1f8, 0x110, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f00000000c0), {[{{@arp={@remote, @loopback, 0xff0000ff, 0xffffff00, 0xb, 0xd, {@empty, {[0xff, 0x0, 0xff, 0x92fd838934d7ed53, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0x0, 0x0, 0xff]}}, 0xff, 0x7, 0xfff, 0x8, 0x5, 0x0, 'pim6reg\x00', 'caif0\x00', {0x3a2f058c7f580301}, {0xff}, 0x0, 0x184}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="795eb911eb75", @dev={0xac, 0x14, 0x14, 0x1a}, @multicast2, 0x2, 0x1}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0xff000000, 0xff000000, 0x10, 0x8, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0x0, 0xff, 0xff]}}, 0x5, 0xf37, 0x2, 0x9, 0x1, 0xff00, 'caif0\x00', 'ip6gretap0\x00', {}, {0xff}, 0x0, 0x209}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 0s ago: executing program 0 (id=395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='sched\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f00000004c0)='5', 0x1}], 0x1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = fanotify_init(0x4, 0x400) (async) r4 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r5 = dup(r4) fanotify_mark(r3, 0x1, 0x8000009, r5, 0x0) r6 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ptrace$poke(0x21, r2, 0x0, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x400, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r8, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x4, &(0x7f00000001c0)=[{0x5d23, 0x20, 0x6}, {0xf88c, 0x7a, 0x9, 0x5}, {0x9, 0x3, 0xf5, 0x6}, {0xffff, 0x7, 0x59, 0xffffff7f}]}) r10 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0xc8d03) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r10, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r8, 0xc01864cd, &(0x7f0000000040)={&(0x7f0000000000)=[r9, r11], &(0x7f00000000c0), 0x2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r8, 0xc01064c4, &(0x7f0000000340)={&(0x7f0000000300)=[r9], 0x1}) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x10000, 0x0) ioctl$FITRIM(r12, 0xc0185879, &(0x7f00000005c0)={0x4, 0xad2, 0x800000000000000}) connect$netrom(r1, &(0x7f0000000380)={{0x6, @rose}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) (async) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000040a0101000000000f98750047b013bd0800000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) kernel console output (not intermixed with test programs): [ 38.270639][ T39] audit: type=1400 audit(1737216697.999:82): avc: denied { siginh } for pid=5914 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.455613][ T39] audit: type=1400 audit(1737216699.199:83): avc: denied { read } for pid=5331 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 39.463508][ T39] audit: type=1400 audit(1737216699.199:84): avc: denied { append } for pid=5331 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.471153][ T39] audit: type=1400 audit(1737216699.199:85): avc: denied { open } for pid=5331 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.479127][ T39] audit: type=1400 audit(1737216699.199:86): avc: denied { getattr } for pid=5331 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:18719' (ED25519) to the list of known hosts. [ 40.021290][ T39] audit: type=1400 audit(1737216699.769:87): avc: denied { name_bind } for pid=5920 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.575637][ T5922] cgroup: Unknown subsys name 'net' [ 41.740653][ T5922] cgroup: Unknown subsys name 'cpuset' [ 41.745733][ T5922] cgroup: Unknown subsys name 'rlimit' [ 41.923782][ T5927] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.535150][ T5922] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.804773][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 44.804788][ T39] audit: type=1400 audit(1737216704.549:105): avc: denied { execmem } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.956317][ T39] audit: type=1400 audit(1737216704.699:106): avc: denied { create } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.967377][ T39] audit: type=1400 audit(1737216704.699:107): avc: denied { read write } for pid=5933 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.974084][ T39] audit: type=1400 audit(1737216704.709:108): avc: denied { open } for pid=5933 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.981054][ T39] audit: type=1400 audit(1737216704.729:109): avc: denied { ioctl } for pid=5935 comm="syz-executor" path="socket:[7392]" dev="sockfs" ino=7392 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.003971][ T5939] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.007772][ T5940] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.011277][ T5940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.017697][ T5941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.020501][ T5941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.022848][ T5941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.025273][ T5941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.027573][ T5941] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.030231][ T5947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.030742][ T5941] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.032472][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.033323][ T5947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.033847][ T5947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.034107][ T5947] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 45.034645][ T5941] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.034974][ T5941] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.035233][ T5941] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 45.035339][ T5941] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.040064][ T5940] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.040923][ T5947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.042645][ T5940] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 45.043127][ T5949] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 45.043244][ T5949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.043914][ T39] audit: type=1400 audit(1737216704.789:110): avc: denied { read } for pid=5944 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.043936][ T39] audit: type=1400 audit(1737216704.789:111): avc: denied { open } for pid=5944 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.043951][ T39] audit: type=1400 audit(1737216704.789:112): avc: denied { mounton } for pid=5944 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.078805][ T5940] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.158298][ T39] audit: type=1400 audit(1737216704.909:113): avc: denied { module_request } for pid=5944 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.218480][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 45.239684][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 45.303864][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 45.360331][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.363083][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.366095][ T5944] bridge_slave_0: entered allmulticast mode [ 45.369176][ T5944] bridge_slave_0: entered promiscuous mode [ 45.385827][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 45.398249][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.400996][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.403847][ T5944] bridge_slave_1: entered allmulticast mode [ 45.407111][ T5944] bridge_slave_1: entered promiscuous mode [ 45.458402][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.460406][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.462405][ T5933] bridge_slave_0: entered allmulticast mode [ 45.464576][ T5933] bridge_slave_0: entered promiscuous mode [ 45.502711][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.504768][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.508666][ T5935] bridge_slave_0: entered allmulticast mode [ 45.510777][ T5935] bridge_slave_0: entered promiscuous mode [ 45.513069][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.515968][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.518999][ T5933] bridge_slave_1: entered allmulticast mode [ 45.522222][ T5933] bridge_slave_1: entered promiscuous mode [ 45.541644][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.549655][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.566796][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.569677][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.572526][ T5935] bridge_slave_1: entered allmulticast mode [ 45.575689][ T5935] bridge_slave_1: entered promiscuous mode [ 45.608886][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.618362][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.656418][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.692115][ T5944] team0: Port device team_slave_0 added [ 45.695734][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.728846][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.731816][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.734738][ T5942] bridge_slave_0: entered allmulticast mode [ 45.738400][ T5942] bridge_slave_0: entered promiscuous mode [ 45.757281][ T5944] team0: Port device team_slave_1 added [ 45.774725][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.778049][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.780926][ T5942] bridge_slave_1: entered allmulticast mode [ 45.784219][ T5942] bridge_slave_1: entered promiscuous mode [ 45.789702][ T5933] team0: Port device team_slave_0 added [ 45.804906][ T5935] team0: Port device team_slave_0 added [ 45.822850][ T5933] team0: Port device team_slave_1 added [ 45.835549][ T5935] team0: Port device team_slave_1 added [ 45.874204][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.876300][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.883282][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.896374][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.912770][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.915520][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.925293][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.931884][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.934027][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.942686][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.947529][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.951527][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.954372][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.965846][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.975199][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.977774][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.985110][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.997423][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.999889][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.009388][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.032094][ T5942] team0: Port device team_slave_0 added [ 46.035024][ T5942] team0: Port device team_slave_1 added [ 46.081806][ T5944] hsr_slave_0: entered promiscuous mode [ 46.084959][ T5944] hsr_slave_1: entered promiscuous mode [ 46.100808][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.103779][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.114082][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.120128][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.122990][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.133037][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.183396][ T5933] hsr_slave_0: entered promiscuous mode [ 46.185497][ T5933] hsr_slave_1: entered promiscuous mode [ 46.187736][ T5933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.190101][ T5933] Cannot create hsr debugfs directory [ 46.194982][ T5935] hsr_slave_0: entered promiscuous mode [ 46.198029][ T5935] hsr_slave_1: entered promiscuous mode [ 46.200738][ T5935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.203916][ T5935] Cannot create hsr debugfs directory [ 46.268280][ T5942] hsr_slave_0: entered promiscuous mode [ 46.270390][ T5942] hsr_slave_1: entered promiscuous mode [ 46.272301][ T5942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.274544][ T5942] Cannot create hsr debugfs directory [ 46.476970][ T5944] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.481859][ T5944] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.485825][ T5944] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.494136][ T5944] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.512322][ T5935] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.519001][ T5935] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.522284][ T5935] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.530961][ T5935] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.554175][ T5942] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.561124][ T5942] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.564678][ T5942] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.569353][ T5942] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.599396][ T5933] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.607067][ T5933] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.611920][ T5933] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.618145][ T5933] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.653152][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.680765][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.683804][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.693552][ T97] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.697091][ T97] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.701790][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.703848][ T97] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.720489][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.728190][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.739240][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.742076][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.744785][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.749296][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.751222][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.767704][ T97] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.770599][ T97] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.775246][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.778136][ T97] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.806737][ T5944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.831548][ T39] audit: type=1400 audit(1737216706.579:114): avc: denied { sys_module } for pid=5944 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 46.833255][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.852209][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.862395][ T97] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.865064][ T97] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.871819][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.874146][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.890056][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.919144][ T5944] veth0_vlan: entered promiscuous mode [ 46.925834][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.931138][ T5944] veth1_vlan: entered promiscuous mode [ 46.955429][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.968015][ T5935] veth0_vlan: entered promiscuous mode [ 46.971339][ T5944] veth0_macvtap: entered promiscuous mode [ 46.974741][ T5944] veth1_macvtap: entered promiscuous mode [ 46.981325][ T5935] veth1_vlan: entered promiscuous mode [ 46.987782][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.997607][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.005641][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.009740][ T5944] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.012352][ T5944] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.014896][ T5944] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.017739][ T5944] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.026601][ T5942] veth0_vlan: entered promiscuous mode [ 47.037416][ T5942] veth1_vlan: entered promiscuous mode [ 47.041589][ T5935] veth0_macvtap: entered promiscuous mode [ 47.051546][ T5933] veth0_vlan: entered promiscuous mode [ 47.053972][ T5935] veth1_macvtap: entered promiscuous mode [ 47.060892][ T5933] veth1_vlan: entered promiscuous mode [ 47.069717][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.073059][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.076824][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.086777][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.089877][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.093403][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.104691][ T5935] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.107899][ T5935] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.110357][ T5935] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.112944][ T5935] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.116955][ T5939] Bluetooth: hci3: command tx timeout [ 47.117004][ T5945] Bluetooth: hci0: command tx timeout [ 47.117027][ T67] Bluetooth: hci1: command tx timeout [ 47.118418][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.118540][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.121644][ T5940] Bluetooth: hci2: command tx timeout [ 47.132886][ T5942] veth0_macvtap: entered promiscuous mode [ 47.138892][ T5933] veth0_macvtap: entered promiscuous mode [ 47.148276][ T5942] veth1_macvtap: entered promiscuous mode [ 47.153099][ T5933] veth1_macvtap: entered promiscuous mode [ 47.158770][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.161135][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.161487][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.166406][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.169238][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.172209][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.175662][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.184167][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.187768][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.190495][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.193434][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.197059][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.201042][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.204314][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.207817][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.210742][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.213380][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.216654][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.219941][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.227588][ T5933] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.229957][ T5944] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.230109][ T5933] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.238223][ T5933] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.240594][ T5933] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.244339][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.248475][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.251095][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.253896][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.256891][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.260335][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.265519][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.272743][ T5942] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.276028][ T5942] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.279221][ T5942] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.281932][ T5942] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.303247][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.305829][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.313424][ T5995] hfs: can't find a HFS filesystem on dev sr0 [ 47.337908][ T1235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.340173][ T1235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.351812][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.354705][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.367805][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.370078][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.383493][ T97] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.385735][ T97] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.399626][ T97] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.402663][ T97] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.434354][ T6002] gfs2: path_lookup on ™6(ï+‰d‹QÌnB´!eU‚çVè!š`:Ñ 8×DSEíÄðÃÄèÎ Áy|YT¢®{-€íê°”,mb/ returned error -2 [ 47.460670][ T6007] Zero length message leads to an empty skb [ 47.493498][ T6010] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET) [ 47.502021][ T6010] wg2: entered promiscuous mode [ 47.504057][ T6010] wg2: entered allmulticast mode [ 47.550969][ T6019] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 47.553484][ T6017] block device autoloading is deprecated and will be removed. [ 47.607092][ T6025] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 47.609108][ T6025] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 47.614661][ T6025] vhci_hcd vhci_hcd.0: Device attached [ 47.619540][ T6027] usbip_core: unknown command [ 47.620987][ T6027] vhci_hcd: unknown pdu 0 [ 47.622293][ T6027] usbip_core: unknown command [ 47.625158][ T65] vhci_hcd: stop threads [ 47.628351][ T65] vhci_hcd: release socket [ 47.630127][ T65] vhci_hcd: disconnect device [ 47.886416][ T5974] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 48.036829][ T5974] usb 8-1: Using ep0 maxpacket: 8 [ 48.041788][ T5974] usb 8-1: config 2 interface 0 has no altsetting 0 [ 48.047108][ T5974] usb 8-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 48.050347][ T5974] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.052758][ T5974] usb 8-1: Product: syz [ 48.054011][ T5974] usb 8-1: Manufacturer: syz [ 48.055480][ T5974] usb 8-1: SerialNumber: syz [ 48.185697][ T6034] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 48.194418][ T6034] CIFS mount error: No usable UNC path provided in device string! [ 48.194418][ T6034] [ 48.197886][ T6034] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 48.278952][ T5974] usb 8-1: USB disconnect, device number 2 [ 48.482105][ T6042] sctp: failed to load transform for md5: -4 [ 48.505278][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 48.509598][ T6049] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 49.154579][ T6058] warning: `syz.0.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 49.196734][ T5940] Bluetooth: hci0: command tx timeout [ 49.196751][ T5945] Bluetooth: hci3: command tx timeout [ 49.198541][ T5940] Bluetooth: hci1: command tx timeout [ 49.207069][ T6062] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20'. [ 49.209686][ T6062] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20'. [ 49.321748][ T6072] tipc: Started in network mode [ 49.323268][ T6072] tipc: Node identity , cluster identity 4711 [ 49.325148][ T6072] tipc: Failed to obtain node identity [ 49.327555][ T6072] tipc: Enabling of bearer rejected, failed to enable media [ 49.345038][ T6073] block device autoloading is deprecated and will be removed. [ 49.350018][ T6068] md: md2 stopped. [ 49.648299][ T6100] tmpfs: Bad value for 'mpol' [ 49.676413][ T5939] Bluetooth: hci2: command tx timeout [ 49.676545][ T6102] ======================================================= [ 49.676545][ T6102] WARNING: The mand mount option has been deprecated and [ 49.676545][ T6102] and is ignored by this kernel. Remove the mand [ 49.676545][ T6102] option from the mount to silence this warning. [ 49.676545][ T6102] ======================================================= [ 49.721453][ T6106] capability: warning: `syz.0.33' uses 32-bit capabilities (legacy support in use) [ 49.809123][ T39] kauditd_printk_skb: 95 callbacks suppressed [ 49.809134][ T39] audit: type=1400 audit(1737216709.559:210): avc: denied { read } for pid=6105 comm="syz.0.33" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 49.817671][ T6110] netlink: 52 bytes leftover after parsing attributes in process `syz.0.33'. [ 49.820357][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'. [ 49.822908][ T39] audit: type=1400 audit(1737216709.559:211): avc: denied { open } for pid=6105 comm="syz.0.33" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 49.832441][ T39] audit: type=1400 audit(1737216709.579:212): avc: denied { bind } for pid=6105 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 49.838929][ T39] audit: type=1400 audit(1737216709.579:213): avc: denied { write } for pid=6105 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.039006][ T6051] 9pnet: Unknown protocol version 9p2000.uS˜+µ*Ö³r^:>¥Oœ£â¿Iwwjœ) [ 50.039006][ T6051] )Õå«=ATª¹t%§•DQÅ»‰™Ž]=HVSü´§+'|| ûl÷vŸÓ@ ÅfÏFÒX_?)¤ãDP·•/V–ø„¸ê¸ÞCc…2Fß ÌÈ‚àk+Õ@›òÊRžÕ¡¤íüÆIåj¯ªC@îÿy‰æÔ(ûáÚË÷ò¨F§€"Ü£†p}"WrqwêоҩçÏbV„O [ 50.127932][ T39] audit: type=1400 audit(1737216709.879:214): avc: denied { unmount } for pid=5944 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 50.228446][ T5939] Bluetooth: hci3: unexpected event 0x01 length: 17 > 1 [ 50.230905][ T39] audit: type=1326 audit(1737216709.979:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6116 comm="syz.2.35" exe="/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fe0e317cce7 code=0x0 [ 50.608755][ T39] audit: type=1400 audit(1737216710.359:216): avc: denied { execute } for pid=6121 comm="syz.1.37" name="file0" dev="tmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.614248][ T6122] process 'syz.1.37' launched './file0' with NULL argv: empty string added [ 50.620481][ T39] audit: type=1400 audit(1737216710.369:217): avc: denied { execute_no_trans } for pid=6121 comm="syz.1.37" path="/8/file0" dev="tmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.822806][ T39] audit: type=1400 audit(1737216710.569:218): avc: denied { unlink } for pid=6131 comm="syz.1.40" name="#1" dev="tmpfs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 50.829804][ T39] audit: type=1400 audit(1737216710.569:219): avc: denied { mount } for pid=6131 comm="syz.1.40" name="/" dev="overlay" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 50.831326][ T6132] overlayfs: failed to get inode (-116) [ 50.840457][ T6132] overlayfs: failed to get inode (-116) [ 51.082842][ T6151] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 51.115285][ T6156] xt_hashlimit: size too large, truncated to 1048576 [ 51.179201][ T6161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.49'. [ 51.191896][ T6161] hub 6-0:1.0: USB hub found [ 51.193788][ T6161] hub 6-0:1.0: 1 port detected [ 51.276311][ T5939] Bluetooth: hci3: command tx timeout [ 51.276323][ T5940] Bluetooth: hci0: command tx timeout [ 51.286328][ T5940] Bluetooth: hci1: command tx timeout [ 51.312900][ T6168] cgroup: No subsys list or none specified [ 51.364011][ T6175] netlink: 16 bytes leftover after parsing attributes in process `syz.3.54'. [ 51.766934][ T5940] Bluetooth: hci2: command tx timeout [ 51.866731][ T6189] kvm: kvm [6187]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x71d4 [ 52.168815][ T6203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.63'. [ 52.213050][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.66'. [ 52.273028][ T6212] netlink: 224 bytes leftover after parsing attributes in process `syz.1.67'. [ 52.307036][ T6214] program syz.1.68 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.365917][ T6221] fuse: Bad value for 'group_id' [ 52.367551][ T6221] fuse: Bad value for 'group_id' [ 52.385770][ T6221] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.395609][ T6221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 52.453847][ T6224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 52.460333][ T6223] syz.1.71: attempt to access beyond end of device [ 52.460333][ T6223] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 52.464109][ T6223] efs: cannot read volume header [ 52.574693][ T6241] syz_tun: entered allmulticast mode [ 53.356858][ T5940] Bluetooth: hci3: command tx timeout [ 53.356896][ T5939] Bluetooth: hci1: command tx timeout [ 53.356917][ T5945] Bluetooth: hci0: command tx timeout [ 53.377630][ T6240] syz_tun: left allmulticast mode [ 53.457353][ T6278] FAULT_INJECTION: forcing a failure. [ 53.457353][ T6278] name failslab, interval 1, probability 0, space 0, times 1 [ 53.462139][ T6278] CPU: 2 UID: 0 PID: 6278 Comm: syz.3.88 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 53.465423][ T6278] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.469436][ T6278] Call Trace: [ 53.470806][ T6278] [ 53.471953][ T6278] dump_stack_lvl+0x16c/0x1f0 [ 53.473884][ T6278] should_fail_ex+0x497/0x5b0 [ 53.475719][ T6278] ? fs_reclaim_acquire+0xae/0x150 [ 53.477863][ T6278] should_failslab+0xc2/0x120 [ 53.479851][ T6278] __kmalloc_noprof+0xcb/0x510 [ 53.481760][ T6278] ? __pfx___mutex_lock+0x10/0x10 [ 53.483799][ T6278] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 53.486007][ T6278] genl_start+0x18e/0x960 [ 53.487508][ T6278] __netlink_dump_start+0x607/0x970 [ 53.489004][ T6278] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 53.490613][ T6278] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 53.492899][ T6278] ? __pfx_genl_get_cmd+0x10/0x10 [ 53.494843][ T6278] ? __pfx_genl_start+0x10/0x10 [ 53.496763][ T6278] ? __pfx_genl_dumpit+0x10/0x10 [ 53.498704][ T6278] ? __pfx_genl_done+0x10/0x10 [ 53.500622][ T6278] ? __radix_tree_lookup+0x21f/0x2c0 [ 53.502728][ T6278] genl_rcv_msg+0x470/0x800 [ 53.504541][ T6278] ? __pfx_genl_rcv_msg+0x10/0x10 [ 53.506585][ T6278] ? __pfx_ethnl_default_start+0x10/0x10 [ 53.508827][ T6278] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 53.511122][ T6278] ? __pfx_ethnl_default_done+0x10/0x10 [ 53.513337][ T6278] netlink_rcv_skb+0x16b/0x440 [ 53.515286][ T6278] ? __pfx_genl_rcv_msg+0x10/0x10 [ 53.517353][ T6278] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 53.519526][ T6278] ? down_read+0xc9/0x330 [ 53.521264][ T6278] ? __pfx_down_read+0x10/0x10 [ 53.523186][ T6278] ? netlink_deliver_tap+0x1ae/0xd30 [ 53.525272][ T6278] genl_rcv+0x28/0x40 [ 53.527022][ T6278] netlink_unicast+0x53c/0x7f0 [ 53.528962][ T6278] ? __pfx_netlink_unicast+0x10/0x10 [ 53.531097][ T6278] netlink_sendmsg+0x8b8/0xd70 [ 53.533061][ T6278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.534784][ T6278] ____sys_sendmsg+0xaaf/0xc90 [ 53.536163][ T6278] ? copy_msghdr_from_user+0x10b/0x160 [ 53.537739][ T6278] ? __pfx_____sys_sendmsg+0x10/0x10 [ 53.539262][ T6278] ___sys_sendmsg+0x135/0x1e0 [ 53.540658][ T6278] ? __pfx____sys_sendmsg+0x10/0x10 [ 53.542359][ T6278] ? __pfx_lock_release+0x10/0x10 [ 53.543940][ T6278] ? trace_lock_acquire+0x14e/0x1f0 [ 53.545531][ T6278] ? __fget_files+0x206/0x3a0 [ 53.546932][ T6278] __sys_sendmsg+0x16e/0x220 [ 53.548306][ T6278] ? __pfx___sys_sendmsg+0x10/0x10 [ 53.549800][ T6278] do_syscall_64+0xcd/0x250 [ 53.551111][ T6278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.552828][ T6278] RIP: 0033:0x7fb056d85d29 [ 53.554123][ T6278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.559697][ T6278] RSP: 002b:00007fb057ad6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.562108][ T6278] RAX: ffffffffffffffda RBX: 00007fb056f75fa0 RCX: 00007fb056d85d29 [ 53.564399][ T6278] RDX: 0000000000040050 RSI: 0000000020000000 RDI: 0000000000000003 [ 53.566674][ T6278] RBP: 00007fb057ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 53.568914][ T6278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.571201][ T6278] R13: 0000000000000000 R14: 00007fb056f75fa0 R15: 00007fff7ec77d28 [ 53.573515][ T6278] [ 53.574508][ C2] vkms_vblank_simulate: vblank timer overrun [ 53.842531][ T6306] __nla_validate_parse: 1 callbacks suppressed [ 53.842543][ T6306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.96'. [ 53.904521][ T6312] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 53.958215][ T6319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.100'. [ 54.079769][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.106'. [ 54.108524][ T6339] ipt_ECN: cannot use operation on non-tcp rule [ 54.111984][ T6340] ipt_ECN: cannot use operation on non-tcp rule [ 54.144445][ T6349] hsr0: entered allmulticast mode [ 54.145981][ T6349] hsr_slave_0: entered allmulticast mode [ 54.147975][ T6349] hsr_slave_1: entered allmulticast mode [ 54.220925][ T6332] kvm: emulating exchange as write [ 54.247257][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.275259][ T6350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.106'. [ 54.289779][ T6360] netlink: 165 bytes leftover after parsing attributes in process `syz.0.110'. [ 54.318759][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.462358][ T6381] Bluetooth: MGMT ver 1.23 [ 54.672946][ T6415] FAULT_INJECTION: forcing a failure. [ 54.672946][ T6415] name failslab, interval 1, probability 0, space 0, times 0 [ 54.676934][ T6415] CPU: 0 UID: 0 PID: 6415 Comm: syz.0.125 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 54.680146][ T6415] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.683213][ T6415] Call Trace: [ 54.684248][ T6415] [ 54.685170][ T6415] dump_stack_lvl+0x16c/0x1f0 [ 54.686572][ T6415] should_fail_ex+0x497/0x5b0 [ 54.687949][ T6415] ? fs_reclaim_acquire+0xae/0x150 [ 54.689428][ T6415] should_failslab+0xc2/0x120 [ 54.690796][ T6415] __kmalloc_noprof+0xcb/0x510 [ 54.692176][ T6415] ? __pfx_ethnl_default_start+0x10/0x10 [ 54.693789][ T6415] ethnl_default_start+0x114/0x420 [ 54.695264][ T6415] ? __pfx_ethnl_default_start+0x10/0x10 [ 54.696873][ T6415] genl_start+0x5fa/0x960 [ 54.698128][ T6415] __netlink_dump_start+0x607/0x970 [ 54.699632][ T6415] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 54.701294][ T6415] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 54.703102][ T6415] ? __pfx_genl_get_cmd+0x10/0x10 [ 54.704542][ T6415] ? __pfx_genl_start+0x10/0x10 [ 54.705923][ T6415] ? __pfx_genl_dumpit+0x10/0x10 [ 54.707348][ T6415] ? __pfx_genl_done+0x10/0x10 [ 54.708627][ T6415] ? __radix_tree_lookup+0x21f/0x2c0 [ 54.710171][ T6415] genl_rcv_msg+0x470/0x800 [ 54.711494][ T6415] ? __pfx_genl_rcv_msg+0x10/0x10 [ 54.712965][ T6415] ? __pfx_ethnl_default_start+0x10/0x10 [ 54.714580][ T6415] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 54.716206][ T6415] ? __pfx_ethnl_default_done+0x10/0x10 [ 54.717802][ T6415] netlink_rcv_skb+0x16b/0x440 [ 54.719187][ T6415] ? __pfx_genl_rcv_msg+0x10/0x10 [ 54.720646][ T6415] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 54.722181][ T6415] ? down_read+0xc9/0x330 [ 54.723449][ T6415] ? __pfx_down_read+0x10/0x10 [ 54.724829][ T6415] ? netlink_deliver_tap+0x1ae/0xd30 [ 54.726362][ T6415] genl_rcv+0x28/0x40 [ 54.727545][ T6415] netlink_unicast+0x53c/0x7f0 [ 54.728928][ T6415] ? __pfx_netlink_unicast+0x10/0x10 [ 54.730461][ T6415] netlink_sendmsg+0x8b8/0xd70 [ 54.731832][ T6415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.733375][ T6415] ____sys_sendmsg+0xaaf/0xc90 [ 54.734769][ T6415] ? copy_msghdr_from_user+0x10b/0x160 [ 54.736335][ T6415] ? __pfx_____sys_sendmsg+0x10/0x10 [ 54.737885][ T6415] ___sys_sendmsg+0x135/0x1e0 [ 54.739242][ T6415] ? __pfx____sys_sendmsg+0x10/0x10 [ 54.740743][ T6415] ? __pfx_lock_release+0x10/0x10 [ 54.742207][ T6415] ? trace_lock_acquire+0x14e/0x1f0 [ 54.743730][ T6415] ? __fget_files+0x206/0x3a0 [ 54.745092][ T6415] __sys_sendmsg+0x16e/0x220 [ 54.746436][ T6415] ? __pfx___sys_sendmsg+0x10/0x10 [ 54.747913][ T6415] do_syscall_64+0xcd/0x250 [ 54.749229][ T6415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.750930][ T6415] RIP: 0033:0x7f9ebc185d29 [ 54.752228][ T6415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.757693][ T6415] RSP: 002b:00007f9ebcee3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.760091][ T6415] RAX: ffffffffffffffda RBX: 00007f9ebc375fa0 RCX: 00007f9ebc185d29 [ 54.762364][ T6415] RDX: 0000000000040050 RSI: 0000000020000000 RDI: 0000000000000003 [ 54.764617][ T6415] RBP: 00007f9ebcee3090 R08: 0000000000000000 R09: 0000000000000000 [ 54.766863][ T6415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.766884][ T6415] R13: 0000000000000000 R14: 00007f9ebc375fa0 R15: 00007ffe29dc9658 [ 54.766897][ T6415] [ 54.791567][ T6429] capability: warning: `syz.0.129' uses deprecated v2 capabilities in a way that may be insecure [ 54.837086][ T39] kauditd_printk_skb: 91 callbacks suppressed [ 54.837096][ T39] audit: type=1400 audit(1737216714.589:311): avc: denied { write } for pid=6437 comm="syz.1.133" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 54.854356][ T6440] netlink: 32 bytes leftover after parsing attributes in process `syz.3.134'. [ 54.892116][ T39] audit: type=1400 audit(1737216714.639:312): avc: denied { read } for pid=6448 comm="syz.3.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 54.897646][ T39] audit: type=1400 audit(1737216714.639:313): avc: denied { connect } for pid=6445 comm="syz.1.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.939094][ T39] audit: type=1400 audit(1737216714.689:314): avc: denied { read } for pid=6454 comm="syz.2.138" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.941323][ T6457] overlayfs: failed to resolve './file0': -2 [ 54.945211][ T39] audit: type=1400 audit(1737216714.689:315): avc: denied { map } for pid=6454 comm="syz.2.138" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.945230][ T39] audit: type=1400 audit(1737216714.689:316): avc: denied { execute } for pid=6454 comm="syz.2.138" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.962883][ T6457] overlayfs: failed to resolve './file0': -2 [ 54.964732][ T6457] overlayfs: failed to resolve './file0': -2 [ 54.972296][ T6457] overlayfs: failed to resolve './file0': -2 [ 54.974588][ T6457] overlayfs: failed to resolve './file0': -2 [ 54.977289][ T6457] overlayfs: failed to resolve './file0': -2 [ 54.980629][ T6457] overlayfs: failed to resolve './file0': -2 [ 54.982966][ T6457] overlayfs: failed to resolve './file0': -2 [ 54.986758][ T6457] overlayfs: failed to resolve './file0': -2 [ 54.989131][ T6457] overlayfs: failed to resolve './file0': -2 [ 54.989719][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.137'. [ 54.993399][ T39] audit: type=1400 audit(1737216714.739:317): avc: denied { accept } for pid=6458 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 54.998973][ T6457] overlayfs: failed to resolve './file0': -2 [ 55.000864][ T6457] overlayfs: failed to resolve './file0': -2 [ 55.002644][ T39] audit: type=1400 audit(1737216714.739:318): avc: denied { shutdown } for pid=6458 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 55.008950][ T6457] overlayfs: failed to resolve './file0': -2 [ 55.009513][ T6461] netlink: 'syz.1.139': attribute type 5 has an invalid length. [ 55.013279][ T6457] overlayfs: failed to resolve './file0': -2 [ 55.016344][ T6457] overlayfs: failed to resolve './file0': -2 [ 55.019330][ T6457] overlayfs: failed to resolve './file0': -2 [ 55.021587][ T6457] overlayfs: failed to resolve './file0': -2 [ 55.028440][ T6457] overlayfs: failed to resolve './file0': -2 [ 55.031397][ T6457] overlayfs: failed to resolve './file0': -2 [ 55.033263][ T6453] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.036664][ T6457] overlayfs: failed to resolve './file0': -2 [ 55.038872][ T6457] overlayfs: failed to resolve './file0': -2 [ 55.040875][ T6457] overlayfs: failed to resolve './file0': -2 [ 55.042663][ T39] audit: type=1400 audit(1737216714.789:319): avc: denied { create } for pid=6452 comm="syz.3.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 55.048195][ T39] audit: type=1400 audit(1737216714.789:320): avc: denied { bind } for pid=6452 comm="syz.3.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 55.048374][ T6457] overlayfs: failed to resolve './file0': -2 [ 55.057208][ T6457] overlayfs: failed to resolve './file0': -2 [ 55.068976][ T6457] overlayfs: failed to resolve './file0': -2 [ 55.071676][ T6457] overlayfs: failed to resolve './file0': -2 [ 55.082442][ T6457] overlayfs: failed to resolve './file0': -2 [ 55.085595][ T6457] overlayfs: failed to resolve './file0': -2 [ 55.089947][ T6457] overlayfs: failed to resolve './file0': -2 [ 55.092319][ T6457] overlayfs: failed to resolve './file0': -2 [ 55.094331][ T6457] overlayfs: failed to resolve './file0': -2 [ 55.096805][ T6457] overlayfs: failed to resolve './file0': -2 [ 55.099035][ T6457] overlayfs: failed to resolve './file0': -2 [ 55.132638][ T6471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.142'. [ 55.193205][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.147'. [ 55.196024][ T6484] bond0: option ad_select: unable to set because the bond device is up [ 55.203976][ T6484] bridge_slave_0: left allmulticast mode [ 55.205578][ T6484] bridge_slave_0: left promiscuous mode [ 55.209179][ T6484] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.213522][ T6484] bridge_slave_1: left allmulticast mode [ 55.215491][ T6484] bridge_slave_1: left promiscuous mode [ 55.218961][ T6484] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.244404][ T6484] bond0: (slave bond_slave_0): Releasing backup interface [ 55.256019][ T6499] netlink: 'syz.2.147': attribute type 10 has an invalid length. [ 55.258915][ T6499] netlink: 2 bytes leftover after parsing attributes in process `syz.2.147'. [ 55.261679][ T6484] bond0: (slave bond_slave_1): Releasing backup interface [ 55.280083][ T6484] team0: Port device team_slave_0 removed [ 55.285649][ T6484] team0: Port device team_slave_1 removed [ 55.289906][ T6484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.297783][ T6484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.301095][ T6484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.303286][ T6484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.319663][ T6499] team0: entered promiscuous mode [ 55.321299][ T6499] bridge0: port 1(team0) entered blocking state [ 55.323961][ T6499] bridge0: port 1(team0) entered disabled state [ 55.325868][ T6499] team0: entered allmulticast mode [ 55.337367][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.343233][ T6508] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 55.366537][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.401934][ T6519] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.447555][ T6523] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.602037][ T6539] netlink: 'syz.1.163': attribute type 39 has an invalid length. [ 55.649178][ T6541] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 55.736577][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.911759][ T6551] ipt_REJECT: TCP_RESET invalid for non-tcp [ 55.951420][ T6553] netlink: 'syz.0.170': attribute type 30 has an invalid length. [ 55.953953][ T6553] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 55.956804][ T6553] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 56.169968][ T6563] netlink: 'syz.0.174': attribute type 1 has an invalid length. [ 56.173012][ T6563] netlink: 'syz.0.174': attribute type 4 has an invalid length. [ 56.213658][ T6565] FAULT_INJECTION: forcing a failure. [ 56.213658][ T6565] name failslab, interval 1, probability 0, space 0, times 0 [ 56.219275][ T6565] CPU: 1 UID: 0 PID: 6565 Comm: syz.0.175 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 56.223345][ T6565] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.227176][ T6565] Call Trace: [ 56.228455][ T6565] [ 56.229640][ T6565] dump_stack_lvl+0x16c/0x1f0 [ 56.231520][ T6565] should_fail_ex+0x497/0x5b0 [ 56.233402][ T6565] ? fs_reclaim_acquire+0xae/0x150 [ 56.235219][ T6565] should_failslab+0xc2/0x120 [ 56.236606][ T6565] __kmalloc_noprof+0xcb/0x510 [ 56.238220][ T6565] ? __pfx_ethnl_default_start+0x10/0x10 [ 56.240500][ T6565] ethnl_default_start+0x15a/0x420 [ 56.242647][ T6565] ? __pfx_ethnl_default_start+0x10/0x10 [ 56.244873][ T6565] genl_start+0x5fa/0x960 [ 56.246631][ T6565] __netlink_dump_start+0x607/0x970 [ 56.248687][ T6565] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 56.250995][ T6565] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 56.253520][ T6565] ? __pfx_genl_get_cmd+0x10/0x10 [ 56.255581][ T6565] ? __pfx_genl_start+0x10/0x10 [ 56.257523][ T6565] ? __pfx_genl_dumpit+0x10/0x10 [ 56.259480][ T6565] ? __pfx_genl_done+0x10/0x10 [ 56.261210][ T6565] ? __radix_tree_lookup+0x21f/0x2c0 [ 56.262994][ T6565] genl_rcv_msg+0x470/0x800 [ 56.264310][ T6565] ? __pfx_genl_rcv_msg+0x10/0x10 [ 56.265816][ T6565] ? __pfx_ethnl_default_start+0x10/0x10 [ 56.267585][ T6565] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 56.269635][ T6565] ? __pfx_ethnl_default_done+0x10/0x10 [ 56.271762][ T6565] netlink_rcv_skb+0x16b/0x440 [ 56.273684][ T6565] ? __pfx_genl_rcv_msg+0x10/0x10 [ 56.275662][ T6565] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 56.277821][ T6565] ? down_read+0xc9/0x330 [ 56.279465][ T6565] ? __pfx_down_read+0x10/0x10 [ 56.281354][ T6565] ? netlink_deliver_tap+0x1ae/0xd30 [ 56.283405][ T6565] genl_rcv+0x28/0x40 [ 56.285050][ T6565] netlink_unicast+0x53c/0x7f0 [ 56.286978][ T6565] ? __pfx_netlink_unicast+0x10/0x10 [ 56.289080][ T6565] netlink_sendmsg+0x8b8/0xd70 [ 56.290982][ T6565] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.293098][ T6565] ____sys_sendmsg+0xaaf/0xc90 [ 56.294964][ T6565] ? copy_msghdr_from_user+0x10b/0x160 [ 56.296962][ T6565] ? __pfx_____sys_sendmsg+0x10/0x10 [ 56.299124][ T6565] ___sys_sendmsg+0x135/0x1e0 [ 56.300694][ T6565] ? __pfx____sys_sendmsg+0x10/0x10 [ 56.302499][ T6565] ? __pfx_lock_release+0x10/0x10 [ 56.303956][ T6565] ? trace_lock_acquire+0x14e/0x1f0 [ 56.305469][ T6565] ? __fget_files+0x206/0x3a0 [ 56.306980][ T6565] __sys_sendmsg+0x16e/0x220 [ 56.308868][ T6565] ? __pfx___sys_sendmsg+0x10/0x10 [ 56.310965][ T6565] do_syscall_64+0xcd/0x250 [ 56.312799][ T6565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.315179][ T6565] RIP: 0033:0x7f9ebc185d29 [ 56.316943][ T6565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.324375][ T6565] RSP: 002b:00007f9ebcee3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.327521][ T6565] RAX: ffffffffffffffda RBX: 00007f9ebc375fa0 RCX: 00007f9ebc185d29 [ 56.330684][ T6565] RDX: 0000000000040050 RSI: 0000000020000000 RDI: 0000000000000003 [ 56.333852][ T6565] RBP: 00007f9ebcee3090 R08: 0000000000000000 R09: 0000000000000000 [ 56.337022][ T6565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 56.340127][ T6565] R13: 0000000000000000 R14: 00007f9ebc375fa0 R15: 00007ffe29dc9658 [ 56.342980][ T6565] [ 56.367106][ T6567] ieee802154 phy0 wpan0: encryption failed: -22 [ 56.403340][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.418780][ T6576] syz_tun: entered allmulticast mode [ 56.421957][ T6576] binder: 6574:6576 ioctl c018620c 20000100 returned -22 [ 56.428290][ T6574] syz_tun: left allmulticast mode [ 56.670296][ T6630] FAULT_INJECTION: forcing a failure. [ 56.670296][ T6630] name failslab, interval 1, probability 0, space 0, times 0 [ 56.674063][ T6630] CPU: 1 UID: 0 PID: 6630 Comm: syz.3.197 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 56.677120][ T6630] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.680210][ T6630] Call Trace: [ 56.681189][ T6630] [ 56.682063][ T6630] dump_stack_lvl+0x16c/0x1f0 [ 56.683439][ T6630] should_fail_ex+0x497/0x5b0 [ 56.684836][ T6630] should_failslab+0xc2/0x120 [ 56.686229][ T6630] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 56.687768][ T6630] ? skb_clone+0x190/0x3f0 [ 56.689058][ T6630] skb_clone+0x190/0x3f0 [ 56.690301][ T6630] netlink_deliver_tap+0xabd/0xd30 [ 56.691775][ T6630] netlink_dump+0xb60/0xd00 [ 56.693102][ T6630] ? __pfx_netlink_dump+0x10/0x10 [ 56.694566][ T6630] ? rcu_is_watching+0x12/0xc0 [ 56.695955][ T6630] ? ethnl_default_start+0x2dd/0x420 [ 56.697668][ T6630] ? __pfx_ethnl_default_start+0x10/0x10 [ 56.699275][ T6630] ? genl_start+0x67d/0x960 [ 56.700593][ T6630] __netlink_dump_start+0x6ca/0x970 [ 56.702100][ T6630] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 56.703753][ T6630] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 56.705497][ T6630] ? __pfx_genl_get_cmd+0x10/0x10 [ 56.706971][ T6630] ? __pfx_genl_start+0x10/0x10 [ 56.708374][ T6630] ? __pfx_genl_dumpit+0x10/0x10 [ 56.709815][ T6630] ? __pfx_genl_done+0x10/0x10 [ 56.711198][ T6630] ? __radix_tree_lookup+0x21f/0x2c0 [ 56.712747][ T6630] genl_rcv_msg+0x470/0x800 [ 56.714069][ T6630] ? __pfx_genl_rcv_msg+0x10/0x10 [ 56.715537][ T6630] ? __pfx_ethnl_default_start+0x10/0x10 [ 56.717153][ T6630] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 56.718798][ T6630] ? __pfx_ethnl_default_done+0x10/0x10 [ 56.720413][ T6630] netlink_rcv_skb+0x16b/0x440 [ 56.721805][ T6630] ? __pfx_genl_rcv_msg+0x10/0x10 [ 56.723290][ T6630] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 56.724845][ T6630] ? down_read+0xc9/0x330 [ 56.726250][ T6630] ? __pfx_down_read+0x10/0x10 [ 56.727648][ T6630] ? netlink_deliver_tap+0x1ae/0xd30 [ 56.729226][ T6630] genl_rcv+0x28/0x40 [ 56.730383][ T6630] netlink_unicast+0x53c/0x7f0 [ 56.731765][ T6630] ? __pfx_netlink_unicast+0x10/0x10 [ 56.733295][ T6630] netlink_sendmsg+0x8b8/0xd70 [ 56.734676][ T6630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.736190][ T6630] ____sys_sendmsg+0xaaf/0xc90 [ 56.737570][ T6630] ? copy_msghdr_from_user+0x10b/0x160 [ 56.739118][ T6630] ? __pfx_____sys_sendmsg+0x10/0x10 [ 56.740653][ T6630] ___sys_sendmsg+0x135/0x1e0 [ 56.742002][ T6630] ? __pfx____sys_sendmsg+0x10/0x10 [ 56.743491][ T6630] ? __pfx_lock_release+0x10/0x10 [ 56.744968][ T6630] ? trace_lock_acquire+0x14e/0x1f0 [ 56.746481][ T6630] ? __fget_files+0x206/0x3a0 [ 56.747834][ T6630] __sys_sendmsg+0x16e/0x220 [ 56.749154][ T6630] ? __pfx___sys_sendmsg+0x10/0x10 [ 56.750635][ T6630] do_syscall_64+0xcd/0x250 [ 56.751937][ T6630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.753632][ T6630] RIP: 0033:0x7fb056d85d29 [ 56.754981][ T6630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.760414][ T6630] RSP: 002b:00007fb057ad6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.762804][ T6630] RAX: ffffffffffffffda RBX: 00007fb056f75fa0 RCX: 00007fb056d85d29 [ 56.765084][ T6630] RDX: 0000000000040050 RSI: 0000000020000000 RDI: 0000000000000003 [ 56.767331][ T6630] RBP: 00007fb057ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 56.769590][ T6630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 56.771842][ T6630] R13: 0000000000000000 R14: 00007fb056f75fa0 R15: 00007fff7ec77d28 [ 56.774145][ T6630] [ 56.837050][ T30] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 56.864980][ T6642] netlink: 'syz.3.201': attribute type 21 has an invalid length. [ 56.867347][ T6642] IPv6: NLM_F_CREATE should be specified when creating new route [ 56.872274][ T6646] overlayfs: conflicting options: userxattr,metacopy=on [ 56.900565][ T6648] overlay: Bad value for 'workdir' [ 56.907323][ T6647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 56.991623][ T30] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 56.994999][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 56.998457][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 57.001380][ T30] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 57.005721][ T30] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 57.008486][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.011907][ T30] usb 6-1: config 0 descriptor?? [ 57.126993][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.221009][ T30] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 57.227694][ T30] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 57.235081][ T30] usb 6-1: USB disconnect, device number 2 [ 57.436433][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.481516][ T6681] binder: Binderfs stats mode cannot be changed during a remount [ 58.479182][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.536334][ T5627] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 58.578507][ T6715] netlink: 'syz.1.230': attribute type 18 has an invalid length. [ 58.688480][ T5627] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 58.694316][ T5627] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.697428][ T5627] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 58.700494][ T5627] usb 7-1: SerialNumber: syz [ 58.896377][ T64] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 59.046917][ T64] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 59.053484][ T64] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 59.057268][ T64] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 59.060861][ T64] usb 6-1: config 0 interface 0 has no altsetting 0 [ 59.064311][ T64] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 59.068036][ T64] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 59.071769][ T64] usb 6-1: config 0 interface 0 has no altsetting 0 [ 59.075272][ T64] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 59.078914][ T64] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 59.083073][ T64] usb 6-1: config 0 interface 0 has no altsetting 0 [ 59.086579][ T64] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 59.090055][ T64] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 59.094026][ T64] usb 6-1: config 0 interface 0 has no altsetting 0 [ 59.098599][ T64] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 59.102145][ T64] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 59.106130][ T64] usb 6-1: config 0 interface 0 has no altsetting 0 [ 59.109076][ T64] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 59.111928][ T64] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 59.115911][ T64] usb 6-1: config 0 interface 0 has no altsetting 0 [ 59.120235][ T64] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 59.123257][ T64] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 59.127529][ T64] usb 6-1: config 0 interface 0 has no altsetting 0 [ 59.131003][ T64] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 59.134564][ T64] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 59.138854][ T64] usb 6-1: config 0 interface 0 has no altsetting 0 [ 59.143098][ T64] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 59.146707][ T64] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 59.149829][ T64] usb 6-1: Product: syz [ 59.151353][ T64] usb 6-1: Manufacturer: syz [ 59.153063][ T64] usb 6-1: SerialNumber: syz [ 59.156660][ T64] usb 6-1: config 0 descriptor?? [ 59.165594][ T64] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 59.361020][ T64] usb 6-1: USB disconnect, device number 3 [ 59.365882][ T64] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 59.368594][ T6730] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 59.512653][ T5627] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 59.518118][ T5627] usb 7-1: USB disconnect, device number 2 [ 59.526647][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.620928][ T6734] __nla_validate_parse: 11 callbacks suppressed [ 59.620938][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.237'. [ 59.676997][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.839116][ T6758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'. [ 59.842820][ T6758] openvswitch: netlink: Unexpected mask (mask=8000040, allowed=10048) [ 59.849181][ T6758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 59.947203][ T1118] sr 2:0:0:0: [sr0] tag#19 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 59.950468][ T1118] sr 2:0:0:0: [sr0] tag#19 Sense Key : Illegal Request [current] [ 59.952831][ T1118] sr 2:0:0:0: [sr0] tag#19 Add. Sense: Invalid command operation code [ 59.955201][ T1118] sr 2:0:0:0: [sr0] tag#19 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 59.958111][ T1118] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x208800 phys_seg 1 prio class 0 [ 59.972192][ T39] kauditd_printk_skb: 59 callbacks suppressed [ 59.972201][ T39] audit: type=1400 audit(1737216719.719:380): avc: denied { unmount } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 60.049667][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.251'. [ 60.093699][ T39] audit: type=1400 audit(1737216719.839:381): avc: denied { mount } for pid=6777 comm="syz.2.253" name="/" dev="ramfs" ino=12903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 60.101238][ T39] audit: type=1400 audit(1737216719.849:382): avc: denied { mounton } for pid=6777 comm="syz.2.253" path="/49/file0/bus" dev="ramfs" ino=13589 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 60.103753][ T6778] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 60.110524][ T6778] overlayfs: failed to set xattr on upper [ 60.112039][ T6782] netlink: 40 bytes leftover after parsing attributes in process `syz.3.255'. [ 60.112185][ T6778] overlayfs: ...falling back to redirect_dir=nofollow. [ 60.117568][ T6778] overlayfs: ...falling back to index=off. [ 60.117574][ T6778] overlayfs: ...falling back to uuid=null. [ 60.146850][ T39] audit: type=1400 audit(1737216719.899:383): avc: denied { unmount } for pid=5944 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 60.198083][ T39] audit: type=1400 audit(1737216719.949:384): avc: denied { create } for pid=6791 comm="syz.3.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 60.204968][ T39] audit: type=1400 audit(1737216719.949:385): avc: denied { write } for pid=6791 comm="syz.3.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 60.211741][ T6793] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 60.216160][ T39] audit: type=1400 audit(1737216719.959:386): avc: denied { setopt } for pid=6791 comm="syz.3.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 60.327153][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.330710][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.339545][ T39] audit: type=1400 audit(1737216720.089:387): avc: denied { ioctl } for pid=6803 comm="syz.3.264" path="socket:[13617]" dev="sockfs" ino=13617 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.353710][ T39] audit: type=1400 audit(1737216720.089:388): avc: denied { ioctl } for pid=6803 comm="syz.3.264" path="socket:[13615]" dev="sockfs" ino=13615 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 60.402535][ T39] audit: type=1400 audit(1737216720.149:389): avc: denied { mount } for pid=6812 comm="syz.1.266" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 60.442614][ T6821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.270'. [ 60.501482][ T6828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 60.509924][ T6828] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6828 comm=syz.2.270 [ 60.547623][ T6832] FAULT_INJECTION: forcing a failure. [ 60.547623][ T6832] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 60.553200][ T6832] CPU: 3 UID: 0 PID: 6832 Comm: syz.3.273 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 60.557424][ T6832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.561789][ T6832] Call Trace: [ 60.563135][ T6832] [ 60.564354][ T6832] dump_stack_lvl+0x16c/0x1f0 [ 60.566280][ T6832] should_fail_ex+0x497/0x5b0 [ 60.568244][ T6832] _copy_from_user+0x2e/0xd0 [ 60.570169][ T6832] kstrtouint_from_user+0xd7/0x1c0 [ 60.572295][ T6832] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 60.574642][ T6832] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 60.576803][ T6832] proc_fail_nth_write+0x84/0x250 [ 60.578364][ T6832] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 60.580287][ T6832] ? ksys_write+0x12b/0x250 [ 60.582077][ T6832] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 60.583732][ T6832] vfs_write+0x24c/0x1150 [ 60.584914][ T6832] ? __fget_files+0x1fc/0x3a0 [ 60.586350][ T6832] ? __pfx___mutex_lock+0x10/0x10 [ 60.587837][ T6832] ? __pfx_vfs_write+0x10/0x10 [ 60.589253][ T6832] ? __fget_files+0x206/0x3a0 [ 60.590685][ T6832] ksys_write+0x12b/0x250 [ 60.592180][ T6832] ? __pfx_ksys_write+0x10/0x10 [ 60.593896][ T6832] do_syscall_64+0xcd/0x250 [ 60.595259][ T6832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.597045][ T6832] RIP: 0033:0x7fb056d847df [ 60.598396][ T6832] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 60.604258][ T6832] RSP: 002b:00007fb057ad6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 60.606775][ T6832] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb056d847df [ 60.609039][ T6832] RDX: 0000000000000001 RSI: 00007fb057ad60a0 RDI: 0000000000000004 [ 60.611405][ T6832] RBP: 00007fb057ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 60.613774][ T6832] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 60.616013][ T6832] R13: 0000000000000000 R14: 00007fb056f75fa0 R15: 00007fff7ec77d28 [ 60.618565][ T6832] [ 60.620351][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.683879][ T6838] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.720927][ T6845] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 60.926286][ T64] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 61.086316][ T64] usb 5-1: Using ep0 maxpacket: 8 [ 61.089585][ T64] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 61.092350][ T64] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 61.094952][ T64] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 61.097872][ T64] usb 5-1: config 250 has no interface number 0 [ 61.099837][ T64] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 61.104032][ T64] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 61.107839][ T64] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 61.110863][ T64] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 61.114140][ T64] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 61.118281][ T64] usb 5-1: config 250 interface 228 has no altsetting 0 [ 61.121714][ T64] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 61.125171][ T64] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 61.127919][ T64] usb 5-1: Product: syz [ 61.129196][ T64] usb 5-1: SerialNumber: syz [ 61.132908][ T64] hub 5-1:250.228: bad descriptor, ignoring hub [ 61.134950][ T64] hub 5-1:250.228: probe with driver hub failed with error -5 [ 61.337423][ T64] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 61.549669][ T6902] netlink: 56 bytes leftover after parsing attributes in process `syz.3.295'. [ 61.555311][ T6901] netlink: 56 bytes leftover after parsing attributes in process `syz.3.295'. [ 61.563506][ T6901] bridge0: entered promiscuous mode [ 61.565197][ T6901] macvlan2: entered promiscuous mode [ 61.567350][ T6901] bridge0: port 3(macvlan2) entered blocking state [ 61.569344][ T6901] bridge0: port 3(macvlan2) entered disabled state [ 61.571360][ T6901] macvlan2: entered allmulticast mode [ 61.572943][ T6901] bridge0: entered allmulticast mode [ 61.575115][ T6901] macvlan2: left allmulticast mode [ 61.577014][ T6901] bridge0: left allmulticast mode [ 61.579215][ T6901] bridge0: left promiscuous mode [ 61.633660][ T6905] overlayfs: failed to resolve './file0': -2 [ 61.686467][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.840056][ T6914] openvswitch: netlink: ERSPAN option length err (len 4096, max 255). [ 61.918780][ T6924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.921912][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.958529][ T6926] netlink: 60 bytes leftover after parsing attributes in process `syz.1.303'. [ 61.970859][ T6926] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer. [ 61.980820][ T6926] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 62.210300][ T6939] binder: BINDER_SET_CONTEXT_MGR already set [ 62.212358][ T6939] binder: 6936:6939 ioctl 4018620d 20000100 returned -16 [ 62.246786][ T6841] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 62.265784][ T6956] netlink: 'syz.2.310': attribute type 10 has an invalid length. [ 62.283953][ T6956] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 62.289115][ T6952] pim6reg1: entered promiscuous mode [ 62.290737][ T6952] pim6reg1: entered allmulticast mode [ 62.332532][ T6965] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=6965 comm=syz.3.313 [ 62.426803][ T6968] block nbd3: server does not support multiple connections per device. [ 62.432558][ T6967] block nbd3: shutting down sockets [ 62.524591][ T6976] netlink: 25 bytes leftover after parsing attributes in process `syz.1.316'. [ 62.556885][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.317'. [ 62.560362][ T6978] netlink: 'syz.3.317': attribute type 22 has an invalid length. [ 62.575759][ T6982] qnx6: unable to set blocksize [ 62.605027][ T6978] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 62.607027][ T6978] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 62.608305][ T6978] vhci_hcd vhci_hcd.0: Device attached [ 62.612696][ T6985] vhci_hcd: cannot find the pending unlink 138 [ 62.616963][ T6985] vhci_hcd: connection closed [ 62.618435][ T6346] vhci_hcd: stop threads [ 62.622248][ T6346] vhci_hcd: release socket [ 62.623959][ T6346] vhci_hcd: disconnect device [ 62.896742][ T57] usb 5-1: USB disconnect, device number 2 [ 62.901642][ T57] usblp0: removed [ 63.424590][ T7006] i2c i2c-1: Invalid block write size 34 [ 63.652047][ T7021] dlm: Unknown command passed to DLM device : 8 [ 63.652047][ T7021] [ 63.799148][ T7027] netlink: 'syz.1.329': attribute type 4 has an invalid length. [ 63.823991][ T7027] bond2: entered allmulticast mode [ 64.065079][ T7054] xt_HMARK: spi-set and port-set can't be combined [ 64.501347][ T7075] syz_tun: entered promiscuous mode [ 64.505976][ T7075] batadv_slave_0: entered promiscuous mode [ 64.527477][ T7077] syz_tun: entered promiscuous mode [ 64.529757][ T7077] batadv_slave_0: entered promiscuous mode [ 64.532705][ T7077] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 64.534928][ T7077] Cannot create hsr debugfs directory [ 64.536702][ T7077] hsr1: entered allmulticast mode [ 64.538104][ T7077] syz_tun: entered allmulticast mode [ 64.539625][ T7077] batadv_slave_0: entered allmulticast mode [ 64.565200][ T7077] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 64.807211][ T57] net_ratelimit: 68 callbacks suppressed [ 64.807222][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.815448][ T7085] syz.0.344: attempt to access beyond end of device [ 64.815448][ T7085] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 64.821428][ T7085] FAT-fs (nbd0): unable to read boot sector [ 64.938547][ T7085] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 65.026662][ T7101] xfs: Unknown parameter 'grpquota' [ 65.374067][ T7149] __nla_validate_parse: 6 callbacks suppressed [ 65.374077][ T7149] netlink: 52 bytes leftover after parsing attributes in process `syz.0.351'. [ 65.379163][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'. [ 65.423253][ T7150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.354'. [ 65.427198][ T7150] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.477927][ T39] kauditd_printk_skb: 40 callbacks suppressed [ 65.477940][ T39] audit: type=1400 audit(1737216725.229:430): avc: denied { write } for pid=7151 comm="syz.2.355" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 65.533463][ T7156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.536844][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.576337][ T7159] devtmpfs: Unknown parameter '0x000000000000000001777777777777777777777' [ 65.580315][ T39] audit: type=1400 audit(1737216725.319:431): avc: denied { mount } for pid=7158 comm="syz.2.357" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 65.581031][ T7159] vti0: entered allmulticast mode [ 65.589171][ T39] audit: type=1400 audit(1737216725.319:432): avc: denied { remount } for pid=7158 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 65.718190][ T39] audit: type=1400 audit(1737216725.469:433): avc: denied { getopt } for pid=7172 comm="syz.3.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 65.745847][ T39] audit: type=1400 audit(1737216725.489:434): avc: denied { read } for pid=7177 comm="syz.2.363" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 65.753452][ T39] audit: type=1400 audit(1737216725.489:435): avc: denied { open } for pid=7177 comm="syz.2.363" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 65.754663][ T7179] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 65.762210][ T39] audit: type=1400 audit(1737216725.499:436): avc: denied { mount } for pid=7176 comm="syz.3.364" name="/" dev="autofs" ino=17284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 65.769611][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.769859][ T39] audit: type=1400 audit(1737216725.499:437): avc: denied { read } for pid=7176 comm="syz.3.364" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 65.783440][ T39] audit: type=1400 audit(1737216725.499:438): avc: denied { open } for pid=7176 comm="syz.3.364" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 65.783461][ T39] audit: type=1400 audit(1737216725.499:439): avc: denied { ioctl } for pid=7176 comm="syz.3.364" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 65.807366][ T7179] netlink: 'syz.2.363': attribute type 1 has an invalid length. [ 65.820352][ T7182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.365'. [ 65.836428][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.842031][ T7179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.844518][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.033529][ T7186] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 66.088983][ T7195] netlink: 'syz.3.368': attribute type 10 has an invalid length. [ 66.092155][ T7195] macvlan0: entered allmulticast mode [ 66.095679][ T7195] veth1_vlan: entered allmulticast mode [ 66.099757][ T7195] team0: Port device macvlan0 added [ 66.352775][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 66.375884][ T7216] netlink: 'syz.1.376': attribute type 10 has an invalid length. [ 66.378990][ T7216] hsr0: entered promiscuous mode [ 66.383652][ T7216] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 66.386705][ T7216] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 66.390317][ T7216] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 66.616415][ T64] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 66.717905][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.766344][ T64] usb 8-1: Using ep0 maxpacket: 8 [ 66.770644][ T64] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 66.773168][ T64] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 66.776262][ T64] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 66.779264][ T64] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 66.782299][ T64] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 66.786201][ T64] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 66.789052][ T64] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.876468][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.994284][ T64] usb 8-1: usb_control_msg returned -32 [ 66.995960][ T64] usbtmc 8-1:16.0: can't read capabilities [ 67.350352][ T7241] usbtmc 8-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 67.428717][ T7247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.385'. [ 67.442785][ T7247] overlayfs: workdir and upperdir must reside under the same mount [ 67.468210][ T7241] trusted_key: syz.3.374 sent an empty control message without MSG_MORE. [ 67.508590][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.389'. [ 67.511900][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.389'. [ 67.552016][ T64] usb 8-1: USB disconnect, device number 3 [ 67.718995][ T7272] netlink: 68 bytes leftover after parsing attributes in process `syz.0.393'. [ 67.879940][ T7277] ------------[ cut here ]------------ [ 67.882080][ T7277] WARNING: CPU: 3 PID: 7277 at mm/page_alloc.c:4729 __alloc_pages_noprof+0xeff/0x25b0 [ 67.885080][ T7277] Modules linked in: [ 67.886466][ T7277] CPU: 3 UID: 0 PID: 7277 Comm: syz.0.395 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 67.890218][ T7277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.893447][ T7277] RIP: 0010:__alloc_pages_noprof+0xeff/0x25b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 67.895262][ T7277] Code: 24 2c 00 00 00 00 89 cd 0f 84 8b f9 ff ff 8b 34 24 48 89 da 8b 7c 24 08 e8 de b2 fe ff e9 69 f9 ff ff c6 05 1a d2 57 0e 01 90 <0f> 0b 90 31 db e9 9f f3 ff ff 89 14 24 e8 6f af 0c 00 8b 14 24 e9 [ 67.909434][ T7277] RSP: 0018:ffffc900065b7878 EFLAGS: 00010246 [ 67.912002][ T7277] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 67.915096][ T7277] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000040cc0 [ 67.921094][ T7277] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 67.924347][ T7277] R10: 0000000020000200 R11: 0000000000000000 R12: 0000000000000014 [ 67.927575][ T7277] R13: 0000000000040cc0 R14: 1ffff92000cb6f23 R15: ffffffff853b6447 [ 67.930787][ T7277] FS: 00007f9ebcee36c0(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000 [ 67.934302][ T7277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.937030][ T7277] CR2: 00007f9ebc169ae0 CR3: 00000000581fa000 CR4: 0000000000352ef0 [ 67.940179][ T7277] DR0: 00000000000000f4 DR1: 0000000000000000 DR2: 0000000000000000 [ 67.943302][ T7277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 67.946518][ T7277] Call Trace: [ 67.947871][ T7277] [ 67.949070][ T7277] ? __warn+0xea/0x3c0 [ 67.950713][ T7277] ? __alloc_pages_noprof+0xeff/0x25b0 [ 67.952890][ T7277] ? report_bug+0x3c0/0x580 [ 67.954719][ T7277] ? handle_bug+0x54/0xa0 [ 67.956574][ T7277] ? exc_invalid_op+0x17/0x50 [ 67.958451][ T7277] ? asm_exc_invalid_op+0x1a/0x20 [ 67.960437][ T7277] ? drm_syncobj_array_find+0x37/0x3b0 [ 67.962634][ T7277] ? __alloc_pages_noprof+0xeff/0x25b0 [ 67.964771][ T7277] ? hlock_class+0x4e/0x130 [ 67.966685][ T7277] ? __lock_acquire+0xcc5/0x3c40 [ 67.968658][ T7277] ? hlock_class+0x4e/0x130 [ 67.970467][ T7277] ? mark_lock+0xb5/0xc60 [ 67.972176][ T7277] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 67.974470][ T7277] ? __pfx_mark_lock+0x10/0x10 [ 67.976449][ T7277] ? hlock_class+0x4e/0x130 [ 67.978313][ T7277] ? mark_lock+0xb5/0xc60 [ 67.980065][ T7277] ? __pfx_mark_lock+0x10/0x10 [ 67.981962][ T7277] ? find_held_lock+0x2d/0x110 [ 67.983856][ T7277] ? __pfx_mark_lock+0x10/0x10 [ 67.985770][ T7277] ? hlock_class+0x4e/0x130 [ 67.991375][ T7277] ? __lock_acquire+0x15a9/0x3c40 [ 67.993423][ T7277] ? drm_syncobj_array_find+0x37/0x3b0 [ 67.995610][ T7277] ___kmalloc_large_node+0x84/0x1b0 [ 68.004646][ T7277] __kmalloc_large_node_noprof+0x1c/0x70 [ 68.006986][ T7277] __kmalloc_noprof.cold+0xc/0x61 [ 68.008972][ T7277] drm_syncobj_array_find+0x37/0x3b0 [ 68.011121][ T7277] drm_syncobj_timeline_signal_ioctl+0x228/0x860 [ 68.013637][ T7277] ? find_held_lock+0x2d/0x110 [ 68.015530][ T7277] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 68.018225][ T7277] ? drm_dev_enter+0x4c/0x170 [ 68.020055][ T7277] drm_ioctl_kernel+0x1e6/0x3d0 [ 68.021914][ T7277] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 68.024587][ T7277] ? __might_fault+0xe3/0x190 [ 68.026604][ T7277] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 68.028794][ T7277] ? __might_fault+0xe3/0x190 [ 68.030754][ T7277] drm_ioctl+0x5d6/0xc00 [ 68.032452][ T7277] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 68.035122][ T7277] ? __pfx_drm_ioctl+0x10/0x10 [ 68.037112][ T7277] ? __pfx_lock_release+0x10/0x10 [ 68.039136][ T7277] ? selinux_file_ioctl+0x180/0x270 [ 68.041256][ T7277] ? selinux_file_ioctl+0xb4/0x270 [ 68.043314][ T7277] ? __pfx_drm_ioctl+0x10/0x10 [ 68.045274][ T7277] __x64_sys_ioctl+0x190/0x200 [ 68.047321][ T7277] do_syscall_64+0xcd/0x250 [ 68.049138][ T7277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.051487][ T7277] RIP: 0033:0x7f9ebc185d29 [ 68.053273][ T7277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.060813][ T7277] RSP: 002b:00007f9ebcee3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.064189][ T7277] RAX: ffffffffffffffda RBX: 00007f9ebc375fa0 RCX: 00007f9ebc185d29 [ 68.067455][ T7277] RDX: 0000000020000040 RSI: 00000000c01864cd RDI: 0000000000000008 [ 68.070529][ T7277] RBP: 00007f9ebc201b08 R08: 0000000000000000 R09: 0000000000000000 [ 68.073622][ T7277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.076787][ T7277] R13: 0000000000000000 R14: 00007f9ebc375fa0 R15: 00007ffe29dc9658 [ 68.080003][ T7277] [ 68.081212][ T7277] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 68.084014][ T7277] CPU: 3 UID: 0 PID: 7277 Comm: syz.0.395 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 68.088120][ T7277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.092295][ T7277] Call Trace: [ 68.093637][ T7277] [ 68.094803][ T7277] dump_stack_lvl+0x3d/0x1f0 [ 68.096640][ T7277] panic+0x71d/0x800 [ 68.098197][ T7277] ? __pfx_panic+0x10/0x10 [ 68.100006][ T7277] ? show_trace_log_lvl+0x29d/0x3d0 [ 68.102069][ T7277] ? check_panic_on_warn+0x1f/0xb0 [ 68.104108][ T7277] ? __alloc_pages_noprof+0xeff/0x25b0 [ 68.106257][ T7277] check_panic_on_warn+0xab/0xb0 [ 68.108215][ T7277] __warn+0xf6/0x3c0 [ 68.109784][ T7277] ? __alloc_pages_noprof+0xeff/0x25b0 [ 68.111900][ T7277] report_bug+0x3c0/0x580 [ 68.113635][ T7277] handle_bug+0x54/0xa0 [ 68.115271][ T7277] exc_invalid_op+0x17/0x50 [ 68.117099][ T7277] asm_exc_invalid_op+0x1a/0x20 [ 68.119043][ T7277] RIP: 0010:__alloc_pages_noprof+0xeff/0x25b0 [ 68.121468][ T7277] Code: 24 2c 00 00 00 00 89 cd 0f 84 8b f9 ff ff 8b 34 24 48 89 da 8b 7c 24 08 e8 de b2 fe ff e9 69 f9 ff ff c6 05 1a d2 57 0e 01 90 <0f> 0b 90 31 db e9 9f f3 ff ff 89 14 24 e8 6f af 0c 00 8b 14 24 e9 [ 68.128915][ T7277] RSP: 0018:ffffc900065b7878 EFLAGS: 00010246 [ 68.130844][ T7277] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 68.133118][ T7277] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000040cc0 [ 68.135372][ T7277] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 68.137626][ T7277] R10: 0000000020000200 R11: 0000000000000000 R12: 0000000000000014 [ 68.139884][ T7277] R13: 0000000000040cc0 R14: 1ffff92000cb6f23 R15: ffffffff853b6447 [ 68.142147][ T7277] ? drm_syncobj_array_find+0x37/0x3b0 [ 68.143737][ T7277] ? hlock_class+0x4e/0x130 [ 68.145037][ T7277] ? __lock_acquire+0xcc5/0x3c40 [ 68.146462][ T7277] ? hlock_class+0x4e/0x130 [ 68.147764][ T7277] ? mark_lock+0xb5/0xc60 [ 68.148997][ T7277] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 68.150620][ T7277] ? __pfx_mark_lock+0x10/0x10 [ 68.151983][ T7277] ? hlock_class+0x4e/0x130 [ 68.153357][ T7277] ? mark_lock+0xb5/0xc60 [ 68.154633][ T7277] ? __pfx_mark_lock+0x10/0x10 [ 68.156015][ T7277] ? find_held_lock+0x2d/0x110 [ 68.157406][ T7277] ? __pfx_mark_lock+0x10/0x10 [ 68.158756][ T7277] ? hlock_class+0x4e/0x130 [ 68.160038][ T7277] ? __lock_acquire+0x15a9/0x3c40 [ 68.161468][ T7277] ? drm_syncobj_array_find+0x37/0x3b0 [ 68.163002][ T7277] ___kmalloc_large_node+0x84/0x1b0 [ 68.164410][ T7277] __kmalloc_large_node_noprof+0x1c/0x70 [ 68.165960][ T7277] __kmalloc_noprof.cold+0xc/0x61 [ 68.167374][ T7277] drm_syncobj_array_find+0x37/0x3b0 [ 68.168877][ T7277] drm_syncobj_timeline_signal_ioctl+0x228/0x860 [ 68.170697][ T7277] ? find_held_lock+0x2d/0x110 [ 68.172120][ T7277] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 68.174100][ T7277] ? drm_dev_enter+0x4c/0x170 [ 68.175471][ T7277] drm_ioctl_kernel+0x1e6/0x3d0 [ 68.176870][ T7277] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 68.178823][ T7277] ? __might_fault+0xe3/0x190 [ 68.180190][ T7277] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 68.181734][ T7277] ? __might_fault+0xe3/0x190 [ 68.183120][ T7277] drm_ioctl+0x5d6/0xc00 [ 68.184359][ T7277] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 68.186307][ T7277] ? __pfx_drm_ioctl+0x10/0x10 [ 68.187686][ T7277] ? __pfx_lock_release+0x10/0x10 [ 68.189129][ T7277] ? selinux_file_ioctl+0x180/0x270 [ 68.190677][ T7277] ? selinux_file_ioctl+0xb4/0x270 [ 68.192065][ T7277] ? __pfx_drm_ioctl+0x10/0x10 [ 68.193424][ T7277] __x64_sys_ioctl+0x190/0x200 [ 68.194741][ T7277] do_syscall_64+0xcd/0x250 [ 68.196051][ T7277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.197767][ T7277] RIP: 0033:0x7f9ebc185d29 [ 68.199045][ T7277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.204426][ T7277] RSP: 002b:00007f9ebcee3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.206812][ T7277] RAX: ffffffffffffffda RBX: 00007f9ebc375fa0 RCX: 00007f9ebc185d29 [ 68.209055][ T7277] RDX: 0000000020000040 RSI: 00000000c01864cd RDI: 0000000000000008 [ 68.211311][ T7277] RBP: 00007f9ebc201b08 R08: 0000000000000000 R09: 0000000000000000 [ 68.213587][ T7277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.215828][ T7277] R13: 0000000000000000 R14: 00007f9ebc375fa0 R15: 00007ffe29dc9658 [ 68.218098][ T7277] [ 68.219619][ T7277] Kernel Offset: disabled [ 68.220904][ T7277] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:12:07 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000002 RDX=1ffff110039dea79 RSI=1ffff110039dea75 RDI=ffff88801cef53b8 RBP=0000000000000000 RSP=ffffc900000f7958 R8 =0000000000000001 R9 =0000000000000001 R10=000000000000000a R11=0000000000000002 R12=ffffffff8e1bb900 R13=ffff88801cef4880 R14=0000000000000021 R15=ffff88801cef53b0 RIP=ffffffff81768cd3 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2322eb6440 CR3=000000003061a000 CR4=00352ef0 DR0=00000000000000f4 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe29dc99f0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ebc202a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ebc202aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ebc202aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ebc202ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ebc202b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ebc202c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000002 RBX=0000000000000000 RCX=00000000000001d9 RDX=0000000000000000 RSI=ffffffff813ef693 RDI=0000000000000007 RBP=0000000003004020 RSP=ffffc90020ed7a78 R8 =0000000000000007 R9 =0000000000000000 R10=0000000002000000 R11=0000000000000000 R12=ffff888026530000 R13=ffff888026e88000 R14=0000000003004020 R15=0000000000000002 RIP=ffffffff813ef6b6 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f9ebcee36c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9ebc34c560 CR3=000000004cb86000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff7ec780c0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb056e02a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb056e02aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb056e02aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb056e02ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb056e02b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb056e02c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a946840 RCX=ffffffff818e191c RDX=ffff88801cef2440 RSI=ffffffff818e18f6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900000e7998 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000006 R12=ffffed100d528d09 R13=0000000000000001 R14=ffff88806a946848 R15=ffff88806a83fe40 RIP=ffffffff818e18f8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9eb9ff5f98 CR3=000000000df7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe1d0e7690 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07ea402a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07ea402aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07ea402aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07ea402ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07ea402b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07ea402c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000d0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000d0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851c1355 RDI=ffffffff9ab11b20 RBP=ffffffff9ab11ae0 RSP=ffffc900065b7160 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000004 R12=0000000000000000 R13=0000000000000030 R14=ffffffff851c12f0 R15=0000000000000000 RIP=ffffffff851c137f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f9ebcee36c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9ebc169ae0 CR3=00000000581fa000 CR4=00352ef0 DR0=00000000000000f4 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffc000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ebc202a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ebc202aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ebc202aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ebc202ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ebc202b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ebc202c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000032647261632f 6972642f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000011475142400c 4a51470c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000