last executing test programs: 4.86197448s ago: executing program 3 (id=180): setns(0xc9, 0x0) (async) prctl$PR_SET_NAME(0x53564d41, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) syz_pidfd_open(r1, 0x0) (async) r2 = dup(r0) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000800)={0x27, 0x0}, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f00000002c0)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0x7, 0x4, 0x1, 0x2, 0x7]}, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) (async) r6 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, r5, r6) (async) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r8 = accept4(r7, 0x0, 0x0, 0x800) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='comm\x00') write$binfmt_script(r9, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000033c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}], 0x1, 0x44800) (async) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89fc, 0x0) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="38010000100001000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="ffffffff000000000000000000000000000000003200000000000000000000000000ffffac141412000000000000000000000000000000000400000000000000ff0000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000a00040000000000000000004800010073686132353600000000000000000000000000000000001400"/241], 0x138}}, 0x0) (async) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000002c0)={'pimreg0\x00', 0x400}) r11 = openat(0xffffffffffffff9c, 0x0, 0x400400, 0x0) write$cgroup_pid(r11, &(0x7f00000000c0), 0x12) (async, rerun: 64) socket$inet6(0xa, 0x3, 0xff) (rerun: 64) 4.755789534s ago: executing program 3 (id=181): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000180), 0x2b03, 0x16802) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f00000001c0)={0x0, {0x0, 0x0, @qam}}) (async) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f00000001c0)={0x0, {0x0, 0x0, @qam}}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001300)=[{&(0x7f0000002b00)='1', 0x1}], 0x1}}], 0x1, 0x48c4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xe92, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xe84, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xe70, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/69, 0xe56}], 0x10000000000000b7) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000100, 0x0, 0x0) setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14381, 0x18200}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14381, 0x18200}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x3, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x3, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) 4.40254753s ago: executing program 3 (id=182): r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000004780)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x34, 0x0, 0x0, 0x0, 0x40, 0x80, 0xfd, 0x0, 0x0, 0x0, [0x0, 0xffffffff, 0x0, 0x4, 0x8, 0x400]}}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x8001, 0x0) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) 4.401358399s ago: executing program 3 (id=184): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649ff9", 0x68}], 0x1}, 0x4000010) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x14c) chroot(&(0x7f0000000100)='./file0\x00') (async) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) (async) pivot_root(&(0x7f0000000280)='./file0/../file0/../file0\x00', &(0x7f0000000300)='./file2\x00') (async) socket$kcm(0x29, 0x2, 0x0) 4.322196895s ago: executing program 3 (id=185): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1705, 0x200feff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r0}, @IFLA_MASTER={0x8, 0xa, r0}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.948248105s ago: executing program 3 (id=187): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0xfffffffffffffffe) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[], 0x74c8aad696aabd1d}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"}) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r4, &(0x7f0000000180)='0fc5:1227:ei', 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f00000005c0)={{0x69, 0xe}, 'port1\x00', 0x40, 0x840, 0x0, 0x441c, 0x15e, 0x3, 0xa1, 0x0, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.893296362s ago: executing program 32 (id=187): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0xfffffffffffffffe) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[], 0x74c8aad696aabd1d}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"}) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r4, &(0x7f0000000180)='0fc5:1227:ei', 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f00000005c0)={{0x69, 0xe}, 'port1\x00', 0x40, 0x840, 0x0, 0x441c, 0x15e, 0x3, 0xa1, 0x0, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.5525321s ago: executing program 2 (id=198): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0xa000, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000dc0)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x218, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x1234, @local}, 0x10) mount(0x0, 0x0, &(0x7f0000000300)='debugfs\x00', 0x22000, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, 0x0, 0x0) 2.462960364s ago: executing program 2 (id=199): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup(r0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x7) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0xffff, 0x23}, 0x66) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000fffd29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000223803001c0012800c0001006d6163766c616e000c000206000000000800ffef08000500", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x880}, 0x48805) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x8880}, 0x0) fchmod(r1, 0x98) 1.958182515s ago: executing program 2 (id=201): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xd, 0x200}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000240)="240000001a007f0214f9f4", 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0) write$binfmt_misc(r4, &(0x7f0000001280), 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x437, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x9}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0xfe}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}]}}}]}, 0x48}}, 0x0) 1.889965953s ago: executing program 1 (id=202): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) ioctl$KIOCSOUND(r4, 0x4b2f, 0xffffffffffffffff) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56041, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x4, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x1c, 0x18, 0x1, 0x402, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000280)="05", 0x1, 0x4009, &(0x7f0000000140)={0x11, 0xf5, r6, 0x1, 0x3, 0x6, @random="b746539f708c"}, 0x14) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x11}, 0x18) 1.857786099s ago: executing program 2 (id=203): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) r1 = syz_pidfd_open(r0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0) ioctl$BLKPG(r2, 0x40084d05, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000}, [@jmp={0x5, 0x1, 0xd, 0x8, 0x9, 0x1, 0xfffffffffffffff0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94) 1.812685715s ago: executing program 2 (id=204): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x7, 0x2) listen(r0, 0x5) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) socket(0x2d, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x42, 0xa}, {0x80, 0x200, 0x200, 0xa, [0x40]}}}}, 0x17) accept4$bt_l2cap(r0, 0x0, 0x0, 0x80000) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e20, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x48, r3, 0x7, 0x0, 0x40000, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_MASK={0x8, 0x5, "7180bbda"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000540)={0x4c, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @broadcast, @device_a, @initial, {0x3, 0x9}}, 0xfffd, @val={0x8c, 0x10, {0x283, "726712ea1b02", @short="acf28009ddef7a20"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18) unlink(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 731.896771ms ago: executing program 1 (id=206): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0xa000, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000dc0)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x218, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x1234, @local}, 0x10) mount(0x0, 0x0, &(0x7f0000000300)='debugfs\x00', 0x22000, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) 616.400978ms ago: executing program 1 (id=208): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001304000000002e"], 0x0, 0x37}, 0x20) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001304000000002e"], 0x0, 0x37}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x50) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x8, 0x7800, 0x3, 0x2, {{0x10, 0x4, 0x0, 0x5, 0x40, 0x65, 0x0, 0xe, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@lsrr={0x83, 0x23, 0x15, [@private=0xa010100, @loopback, @local, @multicast1, @local, @rand_addr=0x64010101, @loopback, @private=0xa010101]}, @noop, @lsrr={0x83, 0x7, 0x9, [@local]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="6c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800e00010069703665727370616e00000038000280140006002001000000000000000000000000000214000700200100000000000000000000000000020400120008000100", @ANYRES32=r9, @ANYBLOB="10e67fe60ac4c15a202297191215f6b26b06704d077b2dfd1093f37a526c35a53ed1fc79b299f0decd7b1c618d4db9dbb73987b9bb0bd778d607d73b2e6a4fb5b56b244d9532f4ef04aee10dc7b49d5543f84da3d22e42026d37b36cb4d7e0a65d1d49e92e4a722205414294bc1417f2f9f837fdcca1d09bc18eb205433d1c278317e5266ebce4f80afec61eb530eb4786587ab0d512329c463768479e97b5d190fd48204d3de165f074771ebc576b7a699f76b7b5b983c5121ea657a1d9ca01ee1a995a9d32055bf864085ea2c0dfb795faf9f27acfcc317cc7eb2cd9da28ed3f53"], 0x6c}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="6c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800e00010069703665727370616e00000038000280140006002001000000000000000000000000000214000700200100000000000000000000000000020400120008000100", @ANYRES32=r9, @ANYBLOB="10e67fe60ac4c15a202297191215f6b26b06704d077b2dfd1093f37a526c35a53ed1fc79b299f0decd7b1c618d4db9dbb73987b9bb0bd778d607d73b2e6a4fb5b56b244d9532f4ef04aee10dc7b49d5543f84da3d22e42026d37b36cb4d7e0a65d1d49e92e4a722205414294bc1417f2f9f837fdcca1d09bc18eb205433d1c278317e5266ebce4f80afec61eb530eb4786587ab0d512329c463768479e97b5d190fd48204d3de165f074771ebc576b7a699f76b7b5b983c5121ea657a1d9ca01ee1a995a9d32055bf864085ea2c0dfb795faf9f27acfcc317cc7eb2cd9da28ed3f53"], 0x6c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r12], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r10, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000130005002cbd70000000000000000000", @ANYRES32=r12, @ANYBLOB="1203000000080020f7ff0100aaaaaaaaaabb0000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) r15 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {0x0, 0x10}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2c, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x5}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x1}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x5}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x3}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x8}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4850}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x6, 0x2, 0x1, 0xffff, 0x1c, @local, @remote, 0x20, 0x7800, 0xfffffff9, 0x20004}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0], 0x0, 0x4c, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xb0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0], 0x0, 0x4c, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xb0, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000a80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="f6066d5667fec81aa5d764d5a7ffff", @ANYRES16=r3, @ANYBLOB="952d28bd7000fddbdf25020000008400018008000100", @ANYRES32=r4, @ANYBLOB="08000300010000000800030003000000140002006261746164765f736c6176655f300000140002006272696467653000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="1400020070696d36726567310000000000000000140002006970766c616e3000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="080003000100000060000180080003000000000008000300020000001400020076657468315f746f5f6261746164760008000300010000001400020076657468305f746f5f687372000000000800030001000000140002007465616d300000000000000000000000300001801400020064766d727030000000000000000000000800030000000000080003000200000008000100", @ANYRES32=r9, @ANYBLOB="3c0001801400020068737230000000000000000000000000080003000100000008000300102743e11400020076657468315f6d6163767461700000003c00018008000100", @ANYRES32=r12, @ANYBLOB="080003000200000008000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="080003000100000008000100", @ANYRES32=r17, @ANYBLOB="08000100", @ANYRES32=r18, @ANYBLOB="0c00018008000100", @ANYRES32=r19, @ANYBLOB="1c00018008000100", @ANYRES32=r20, @ANYBLOB="08000100", @ANYRES32=r21, @ANYBLOB="0800030002000000"], 0x1c8}, 0x1, 0x0, 0x0, 0x40}, 0x840) 500.710028ms ago: executing program 1 (id=211): socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000240)={0x0, 0xd4e2, 0x1, 0x6, 0x111}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000003c0), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r1, &(0x7f0000000080)='-1\x00', 0x3) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) r3 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x1, r3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="c4417e6f9ef64c6307b922030000b8f261730cba000000000f3066b8bc008ec0c402adb70b66450fc7760d0f35260f01df6726f34d0faeec440c01470f01cf", 0x3f}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x0, 0x0, 0x0, @generic=0x7}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000100)={0x0, 0x600000, 0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r8, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r10 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r10, 0x0) dup2(r10, r9) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_enter(r0, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 499.371823ms ago: executing program 4 (id=194): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) (async) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x27, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x4d}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x18}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0xe, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000002c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x7, 0x101, 0x101}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000340)=[r0, r0, r0, r0, r0], &(0x7f0000000380)=[{0x2, 0x1, 0x10, 0x5}, {0x2, 0x4, 0x0, 0x4}, {0x0, 0x5, 0xe, 0x1}, {0x3, 0x2, 0x0, 0x4}, {0x2, 0x1, 0x4, 0x1}], 0x10, 0x6}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0x2, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0xfffe, 0x7ff}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x8000040, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x40000) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r5, 0x25, 0x18, @void}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x7, 0x4) 417.767471ms ago: executing program 2 (id=212): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x200, 0x4) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000080)) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x10d) ioctl$XFS_IOC_FSCOUNTS(r1, 0x80081270, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) read$FUSE(r1, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000400)='addr\x00', 0x0, 0x0) timer_create(0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xb) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x8) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:05.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='1', 0x1) write$FUSE_INIT(r1, &(0x7f0000002440)={0x50, 0x0, r3, {0x7, 0x2d, 0x8000, 0x7ba70bad725cb123, 0x7f, 0x81, 0x9, 0x2, 0x0, 0x0, 0x4, 0x7}}, 0x50) bind$rds(r1, &(0x7f0000000240)={0x2, 0x4e20, @empty}, 0x10) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000200)={0xfbfa, [0x0, 0x2000000c], 0x7}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={0x54, r6, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x2}, @device_b, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0xab0, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x54}}, 0x8800) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) 415.480251ms ago: executing program 0 (id=213): sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400408d}, 0x40) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x33, 0x1]}}}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r1, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc45}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8001) write(r0, &(0x7f0000000280)='0', 0x1) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="2000000062000000ff0100000000000051a100000000000009000000070000000700000000000000"], 0x101000) ioctl$I2C_PEC(r0, 0x708, 0x6) 372.411933ms ago: executing program 0 (id=214): r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000280)={'\x00', 0x8, 0x7b, 0xfffffffd, 0x100000001, 0x7, 0xffffffffffffffff}) timer_create(0x3, &(0x7f0000000300)={0x0, 0x38, 0x1, @tid=r1}, &(0x7f0000000340)) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000440)='127.0.0.1:/exp\xc3\x98\xc8ort_path_with_very_long_name_to_increase_xdr_payload_leng', 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c000000020601030000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3100000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4840}, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000fcb000), 0x4) (async) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffffc, 0xfffffffc, 0x3, 0x4, 0xfffffffb, 0x3, 0x2259, 0xf528, 0xe}}}}]}, 0x58}}, 0x24040084) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='127.0.0.1\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='mountaddr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) chdir(&(0x7f0000000080)='./file0\x00') 363.900129ms ago: executing program 4 (id=215): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000020000a01040000000000000000010000030900010073797a300000000034000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000008000540fffffffb140000001100010000000000000000000000000a"], 0x7c}}, 0x0) r2 = syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC=r0, @ANYRES16=r1, @ANYRES64=r0, @ANYRES32=r0, @ANYRESHEX=r1, @ANYRES8=r0, @ANYRESDEC=r0], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) ioctl(r0, 0x8914, &(0x7f0000000200)="7573623000000000000000000000000003") socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 211.768758ms ago: executing program 1 (id=216): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000700)="f313", 0x2}], 0x1) close(r0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x2, [@fwd={0x7}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x4a, 0x0, 0x70}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x82ca, 0x1}}, @const={0x7, 0x0, 0x0, 0xa, 0x2}, @func={0xd, 0x0, 0x0, 0xc, 0x3}, @float={0x6, 0x0, 0x0, 0x10, 0xeabd65b1b2598228}]}}, 0x0, 0x72, 0xffffffffffffff28, 0x1, 0x5}, 0x28) r4 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x3}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000001580)={r4, r5, r5}, &(0x7f0000000540)=""/194, 0xc2, &(0x7f00000000c0)={&(0x7f0000000340)={'wp256-generic\x00'}}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r6, 0x402) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000004", 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0xf700, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@local, 0x15, 0x0, 0xfffffffd}}, 0x44) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@ng={0x4, 0xb}, 0x2, 0x0) 211.056876ms ago: executing program 0 (id=217): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x24, 0x0, &(0x7f0000cab000)) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'sit0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) ioprio_set$pid(0x2, 0x0, 0x6000) ioprio_get$pid(0x1, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) r4 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000040)) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001040)=@delchain={0xb8, 0x64, 0xf31, 0xfffffffb, 0x1000002, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_RATE={0x0, 0x5, {0xd2, 0xe}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0x2400c801) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 149.932859ms ago: executing program 0 (id=218): r0 = syz_io_uring_complete(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7, 0x400, 0xa6, {r1, r2/1000+60000}, {}, {0x2, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x3, 0x1, 0x0, 0x1}, 0xf, 0x1, 0x0, 0x0, "26b70052511a9288095f33b6c08b0327fa83e058ec2cbf6c31e589e5c176d76c342dbf058833a29c5f4b21327a9387605ad60337a4c886f1d23c755f71a2e550"}}, 0x80}, 0x1, 0x0, 0x0, 0x20001845}, 0x14) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20100, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r6, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '#\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20004000) writev(r3, &(0x7f0000000640)=[{&(0x7f0000000480)="b26003989c340e92e63a261a31b068e123f984a7e3f46c74660b59dc00c643b6ad0241e65ab9b3888b93b17843a34488fb0f38d4083c3a088285a53711cef4e86c09721be453acd45513f9bdf9f8af5577c587a6d2830dd086a3ebfb331c49c5538400aa656995504df2508f2879b5aee3b2acd61c7bfcbf8d8a665ea59baa5820d51a1c7a60d970d66b3ed4b499dfcb8de1cb2d135cea2f2c3e69b57fc0951528cecd9aa4dee6eff00c6b184ba0d46637c22ee638d3a0b7db9ad28aa4a644b517df90f14fb13115fdd7e21eb4f37823b8e938c6eeafb6ae50e0a07c02b7494780f7950bf1d3ca7853e8df", 0xeb}, {&(0x7f0000000580)="a6d6978b0697a17e0ff13ccb8efdfca6d588d77177f3b98594632dd9570cf531a9f510ec5ea6d696f7b5ffe99b13a58674cb8a57e7511cb31eae5c0e0362990f4a5df8b692b40c568d365ba59c87028b2bf4e821c738275a57cc918ce5d9edd25af810678c5373d07f6b4186f982a2bb6f86c1abf347ac5ab7af6ce6ef0c2dadb0d026ae5a04e20a311b421f2ec5ee9a1b9afeed820df66ec2e712fdab0c9876f15df8166d382d30282ff9752e97b85ca08341968fc56ef13b69a7", 0xbb}], 0x2) memfd_create(&(0x7f0000000680)='\x00', 0x3) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x60, r7, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x41}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'erspan0\x00'}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004}, 0x800) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r4) sendmsg$TIPC_NL_MEDIA_GET(r8, &(0x7f0000000b40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f00000008c0)={0x238, r9, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff7fff}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff567d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x79}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6d}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x30}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x597}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x80}, 0x800) close(r8) bind$bt_hci(r8, &(0x7f0000000b80)={0x1f, 0x1, 0x2}, 0x6) ioctl$TIOCSIG(r4, 0x40045436, 0x3) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r4) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x34, r10, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1b}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24044001) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000d00)) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000dc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004001}, 0x5) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000f00), &(0x7f0000000f40)=0x4) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r5, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20010880}, 0x0) 51.770604ms ago: executing program 0 (id=219): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa4, 0x20, 0x400, 0x70bd25, 0x25dfdbff, {}, [@nested={0x22, 0x38, 0x0, 0x1, [@typed={0x4, 0x29}, @generic="39572635699b", @typed={0x8, 0xa8, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0xe}, @nested={0x4, 0x35}, @nested={0x4, 0x11}]}, @typed={0x14, 0x16, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @typed={0x8, 0x158, 0x0, 0x0, @u32=0x8000000}, @nested={0x48, 0x106, 0x0, 0x1, [@generic="8913d8f6b24541d7fd346a53d22652384d29e58ed9cf2a790c0b4961c0212148fff14ebb04d3f44f98fb440e", @nested={0x4, 0xea}, @typed={0x8, 0x19, 0x0, 0x0, @u32=0x7}, @typed={0x8, 0x12, 0x0, 0x0, @u32=0x9}, @typed={0x4, 0x53}]}, @typed={0x5, 0x45, 0x0, 0x0, @str='\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40008}, 0x8000) r4 = epoll_create1(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sigaltstack(0x0, 0x0) epoll_pwait(r4, 0x0, 0x0, 0x7f, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x2000000, 0x0, 0x0, 0x6}, 0x2}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 2.440541ms ago: executing program 0 (id=220): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000280)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32, @ANYBLOB="0000c4f47770ad4c1d600078bf5388c9ed0407000000000000000000", @ANYRESOCT=r1, @ANYRESDEC=r1, @ANYBLOB='\x00'/28], 0x50) (async) r2 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) (async) close(0x3) (async) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x101) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000540)={0x2d00000000000000, 0x70000, 0x6fad, 0x8, 0x9}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000040000000800000001000000010000000183e05bbf83543daf9c83d79b8c4c85513f1029407710aecda5a2339108dfb3e829f4475daab6cf65e0d024eb486d8f876fadbab6db1e68a7b1ad6eb0bc289ef49831aabae6fe179210c5ee0d7ac6565b5c7186fe0066a66f000a3365d7c98caf2347ec8ae7b811092f", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="010000000300"/28], 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x102, 0x0) sendfile(r7, r7, &(0x7f0000000580)=0x8, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x10, &(0x7f00000004c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = socket$tipc(0x1e, 0x2, 0x0) (async) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r9, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r10}) (async) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x1}, 0x10) (async) bind$tipc(r8, 0x0, 0x0) (async) close_range(r1, r8, 0x2) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 0s ago: executing program 1 (id=221): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@getneigh={0x14, 0x1e, 0xa88, 0x70bd26, 0x25dfdbfd, {}, [""]}, 0x14}}, 0x0) (async) socket(0xb, 0x4, 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:19052' (ED25519) to the list of known hosts. [ 39.289765][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 39.289786][ T43] audit: type=1400 audit(1790951844.479:138): avc: denied { name_bind } for pid=5717 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.335848][ T43] audit: type=1400 audit(1790951844.519:139): avc: denied { execute } for pid=5718 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.336551][ T43] audit: type=1400 audit(1790951844.519:140): avc: denied { execute_no_trans } for pid=5718 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 41.559280][ T43] audit: type=1400 audit(1790951846.749:141): avc: denied { mounton } for pid=5718 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.560832][ T43] audit: type=1400 audit(1790951846.749:142): avc: denied { mount } for pid=5718 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.562899][ T5718] cgroup: Unknown subsys name 'net' [ 41.564121][ T43] audit: type=1400 audit(1790951846.749:143): avc: denied { unmount } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.739851][ T5718] cgroup: Unknown subsys name 'cpuset' [ 41.742801][ T5718] cgroup: Unknown subsys name 'rlimit' [ 41.881568][ T43] audit: type=1400 audit(1790951847.069:144): avc: denied { setattr } for pid=5718 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.882450][ T43] audit: type=1400 audit(1790951847.069:145): avc: denied { create } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.882625][ T43] audit: type=1400 audit(1790951847.069:146): avc: denied { write } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.882886][ T43] audit: type=1400 audit(1790951847.069:147): avc: denied { read } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 41.941502][ T5722] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 42.660215][ T5718] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.169927][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 46.169938][ T43] audit: type=1400 audit(1790951851.359:158): avc: denied { execmem } for pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.371362][ T43] audit: type=1400 audit(1790951851.559:159): avc: denied { create } for pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.371392][ T43] audit: type=1400 audit(1790951851.559:160): avc: denied { read write } for pid=5729 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.371412][ T43] audit: type=1400 audit(1790951851.559:161): avc: denied { open } for pid=5729 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.379878][ T43] audit: type=1400 audit(1790951851.569:162): avc: denied { ioctl } for pid=5731 comm="syz-executor" path="socket:[6093]" dev="sockfs" ino=6093 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.402357][ T5737] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.403125][ T5737] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.403721][ T5737] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.404378][ T5738] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.405265][ T5742] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.405603][ T5742] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.406985][ T5742] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.407578][ T5742] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.407674][ T5742] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.409251][ T5742] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.409400][ T5742] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.410379][ T5742] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.412443][ T5738] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.417520][ T43] audit: type=1400 audit(1790951851.609:163): avc: denied { read } for pid=5731 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.417784][ T43] audit: type=1400 audit(1790951851.609:164): avc: denied { open } for pid=5731 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.418537][ T43] audit: type=1400 audit(1790951851.609:165): avc: denied { mounton } for pid=5731 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.422399][ T43] audit: type=1400 audit(1790951851.609:166): avc: denied { module_request } for pid=5731 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.428366][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.431637][ T5744] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.433769][ T5744] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.433931][ T5734] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.437865][ T5737] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.439165][ T5089] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.441798][ T5089] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.455666][ T43] audit: type=1400 audit(1790951851.639:167): avc: denied { sys_module } for pid=5731 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.114258][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.114929][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.114996][ T5731] bridge_slave_0: entered allmulticast mode [ 47.115819][ T5731] bridge_slave_0: entered promiscuous mode [ 47.151171][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.151242][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.151369][ T5743] bridge_slave_0: entered allmulticast mode [ 47.153001][ T5743] bridge_slave_0: entered promiscuous mode [ 47.155962][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.156034][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.156123][ T5731] bridge_slave_1: entered allmulticast mode [ 47.159378][ T5731] bridge_slave_1: entered promiscuous mode [ 47.197791][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.198016][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.198089][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.198182][ T5743] bridge_slave_1: entered allmulticast mode [ 47.199521][ T5743] bridge_slave_1: entered promiscuous mode [ 47.224191][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.238134][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.238197][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.238257][ T5730] bridge_slave_0: entered allmulticast mode [ 47.239020][ T5730] bridge_slave_0: entered promiscuous mode [ 47.240542][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.240584][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.240733][ T5730] bridge_slave_1: entered allmulticast mode [ 47.241440][ T5730] bridge_slave_1: entered promiscuous mode [ 47.283131][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.284795][ T5731] team0: Port device team_slave_0 added [ 47.286915][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.311822][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.312720][ T5731] team0: Port device team_slave_1 added [ 47.320299][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.320341][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.320492][ T5729] bridge_slave_0: entered allmulticast mode [ 47.321162][ T5729] bridge_slave_0: entered promiscuous mode [ 47.322839][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.322888][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.322944][ T5729] bridge_slave_1: entered allmulticast mode [ 47.323682][ T5729] bridge_slave_1: entered promiscuous mode [ 47.333056][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.346590][ T5743] team0: Port device team_slave_0 added [ 47.360607][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.360619][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.360631][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.362093][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.362101][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.362113][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.363782][ T5743] team0: Port device team_slave_1 added [ 47.370644][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.398712][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.398724][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.398736][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.401061][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.401355][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.401363][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.401379][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.402480][ T5730] team0: Port device team_slave_0 added [ 47.419249][ T5730] team0: Port device team_slave_1 added [ 47.420222][ T5729] team0: Port device team_slave_0 added [ 47.441543][ T5729] team0: Port device team_slave_1 added [ 47.454003][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.454013][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.454025][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.455071][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.455079][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.455091][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.464768][ T5731] hsr_slave_0: entered promiscuous mode [ 47.465263][ T5731] hsr_slave_1: entered promiscuous mode [ 47.481051][ T5743] hsr_slave_0: entered promiscuous mode [ 47.481585][ T5743] hsr_slave_1: entered promiscuous mode [ 47.481904][ T5743] debugfs: 'hsr0' already exists in 'hsr' [ 47.481960][ T5743] Cannot create hsr debugfs directory [ 47.514053][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.514069][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.514088][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.525153][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.525170][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.525188][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.565858][ T5730] hsr_slave_0: entered promiscuous mode [ 47.566290][ T5730] hsr_slave_1: entered promiscuous mode [ 47.567253][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 47.567265][ T5730] Cannot create hsr debugfs directory [ 47.620875][ T5729] hsr_slave_0: entered promiscuous mode [ 47.621601][ T5729] hsr_slave_1: entered promiscuous mode [ 47.622276][ T5729] debugfs: 'hsr0' already exists in 'hsr' [ 47.622292][ T5729] Cannot create hsr debugfs directory [ 47.805643][ T5731] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.809911][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.831708][ T5731] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.835217][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.836109][ T5731] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.839508][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.843367][ T5731] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.849252][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.919598][ T5743] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.923591][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.924320][ T5743] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.927779][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.929477][ T5743] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.932057][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.933288][ T5743] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.936114][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.989417][ T5729] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.991988][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.993022][ T5729] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.995326][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.995886][ T5729] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.999026][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.004038][ T5729] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.010377][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.057252][ T5730] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.061035][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.073343][ T5730] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.079663][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.080417][ T5730] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.083527][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.084253][ T5730] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.088026][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.102026][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.125313][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.139510][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.146380][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.146595][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.159092][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.159178][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.167871][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.191025][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.191109][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.207895][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.207948][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.215112][ T5731] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.215126][ T5731] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.269587][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.285855][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.293933][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.305122][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.308540][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.308586][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.317738][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.317782][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.320014][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.320089][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.329578][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.329624][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.483182][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.499415][ T5746] Bluetooth: hci0: command tx timeout [ 48.499535][ T5746] Bluetooth: hci2: command tx timeout [ 48.499579][ T5746] Bluetooth: hci1: command tx timeout [ 48.499679][ T5742] Bluetooth: hci3: command tx timeout [ 48.528310][ T5731] veth0_vlan: entered promiscuous mode [ 48.540814][ T5731] veth1_vlan: entered promiscuous mode [ 48.562492][ T5731] veth0_macvtap: entered promiscuous mode [ 48.564925][ T5731] veth1_macvtap: entered promiscuous mode [ 48.576222][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.579451][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.589278][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.612745][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.623775][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.685216][ T5743] veth0_vlan: entered promiscuous mode [ 48.687340][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.691635][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.691649][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.701280][ T5743] veth1_vlan: entered promiscuous mode [ 48.736601][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.736623][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.743220][ T5730] veth0_vlan: entered promiscuous mode [ 48.751725][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.751914][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.752050][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.773186][ T5730] veth1_vlan: entered promiscuous mode [ 48.784856][ T5729] veth0_vlan: entered promiscuous mode [ 48.795558][ T5731] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.799130][ T5743] veth0_macvtap: entered promiscuous mode [ 48.800820][ T5729] veth1_vlan: entered promiscuous mode [ 48.805982][ T5743] veth1_macvtap: entered promiscuous mode [ 48.831755][ T5730] veth0_macvtap: entered promiscuous mode [ 48.844263][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.845353][ T5730] veth1_macvtap: entered promiscuous mode [ 48.856066][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.874713][ T5729] veth0_macvtap: entered promiscuous mode [ 48.878865][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.882436][ T5729] veth1_macvtap: entered promiscuous mode [ 48.890968][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.924228][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.931766][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.950658][ T5880] fuseblk: Bad value for 'blksize' [ 49.018038][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.018061][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.062103][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.062124][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.114708][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.114729][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.179382][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.179396][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.191015][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.191033][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.191981][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.192239][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.192270][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.192300][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.192331][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.192361][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.192398][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.192428][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.192458][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.192488][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.192519][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.192548][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.197634][ T5885] process 'syz.2.6' launched './file0' with NULL argv: empty string added [ 49.223339][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.223352][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.288948][ T5892] netlink: 'syz.3.8': attribute type 12 has an invalid length. [ 49.318771][ T5830] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.318798][ T5830] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.318816][ T5830] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.318833][ T5830] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.321157][ T5898] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9'. [ 49.322471][ T5897] geneve1: entered allmulticast mode [ 49.324202][ T5904] netlink: 'syz.3.10': attribute type 1 has an invalid length. [ 49.380303][ T5913] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10'. [ 49.382708][ T5913] netlink: 'syz.3.10': attribute type 10 has an invalid length. [ 49.382719][ T5913] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10'. [ 49.382796][ T5913] dummy0: entered promiscuous mode [ 49.441945][ T5918] netlink: 1319 bytes leftover after parsing attributes in process `syz.2.13'. [ 49.504151][ T5925] dlm: non-version read from control device 202 [ 50.587136][ T5742] Bluetooth: hci1: command tx timeout [ 50.587167][ T5742] Bluetooth: hci2: command tx timeout [ 50.587182][ T5742] Bluetooth: hci0: command tx timeout [ 50.587287][ T64] Bluetooth: hci3: command tx timeout [ 51.729022][ T43] kauditd_printk_skb: 73 callbacks suppressed [ 51.729040][ T43] audit: type=1400 audit(1790951856.919:241): avc: denied { mount } for pid=5949 comm="syz.2.20" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 51.729914][ T43] audit: type=1400 audit(1790951856.919:242): avc: denied { search } for pid=5949 comm="syz.2.20" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 51.730110][ T43] audit: type=1400 audit(1790951856.919:243): avc: denied { read } for pid=5949 comm="syz.2.20" name="export_features" dev="nfsd" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 51.730360][ T43] audit: type=1400 audit(1790951856.919:244): avc: denied { open } for pid=5949 comm="syz.2.20" path="/12/nfsd/export_features" dev="nfsd" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 51.731035][ T43] audit: type=1400 audit(1790951856.919:245): avc: denied { search } for pid=5949 comm="syz.2.20" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 51.731540][ T43] audit: type=1400 audit(1790951856.919:246): avc: denied { search } for pid=5949 comm="syz.2.20" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 51.732591][ T43] audit: type=1400 audit(1790951856.919:247): avc: denied { search } for pid=5949 comm="syz.2.20" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 51.733106][ T43] audit: type=1400 audit(1790951856.919:248): avc: denied { search } for pid=5949 comm="syz.2.20" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 51.733318][ T43] audit: type=1400 audit(1790951856.919:249): avc: denied { read } for pid=5949 comm="syz.2.20" name="supported_krb5_enctypes" dev="nfsd" ino=1048600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=lnk_file permissive=1 [ 51.748776][ T43] audit: type=1400 audit(1790951856.939:250): avc: denied { unmount } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 51.840070][ T5953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'. [ 51.840092][ T5953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'. [ 51.844996][ T5953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'. [ 51.845011][ T5953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'. [ 51.845449][ T5953] Zero length message leads to an empty skb [ 51.856878][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.856919][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.856949][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.856978][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.271680][ T5897] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 52.326043][ T5955] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 52.332694][ T5955] nbd: must specify a size in bytes for the device [ 52.379581][ T5961] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5961 comm=syz.3.25 [ 52.379647][ T5961] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5961 comm=syz.3.25 [ 52.379692][ T5961] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5961 comm=syz.3.25 [ 52.424005][ T5964] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 52.667731][ T5742] Bluetooth: hci2: command tx timeout [ 52.667756][ T5738] Bluetooth: hci1: command tx timeout [ 52.667796][ T5746] Bluetooth: hci0: command tx timeout [ 52.667830][ T64] Bluetooth: hci3: command tx timeout [ 52.707471][ T5736] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 52.781088][ T5996] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 52.785929][ T5996] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 52.877653][ T5736] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 52.879886][ T5736] usb 5-1: config 1 interface 0 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 52.879904][ T5736] usb 5-1: config 1 interface 0 has no altsetting 0 [ 52.880696][ T5736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 52.880708][ T5736] usb 5-1: SerialNumber: syz [ 52.892823][ T6007] netlink: 20 bytes leftover after parsing attributes in process `syz.2.36'. [ 52.892866][ T6008] netlink: 20 bytes leftover after parsing attributes in process `syz.2.36'. [ 52.927135][ T6010] tap0: tun_chr_ioctl cmd 1074025675 [ 52.927155][ T6010] tap0: persist disabled [ 53.092911][ T5981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.093335][ T5981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.244031][ T5736] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 53.252807][ T5736] usb 5-1: USB disconnect, device number 2 [ 53.779746][ T6033] atomic_op ffff8880343bc9e0 conn xmit_atomic 0000000000000000 [ 53.857551][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 53.911043][ T6056] syz.2.49 uses obsolete (PF_INET,SOCK_PACKET) [ 53.928388][ T6058] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1546 sclass=netlink_xfrm_socket pid=6058 comm=syz.0.50 [ 54.027278][ T6075] fuse: Unknown parameter 'J0x0000000000000006' [ 54.049909][ T6073] FAULT_INJECTION: forcing a failure. [ 54.049909][ T6073] name failslab, interval 1, probability 0, space 0, times 1 [ 54.049940][ T6073] CPU: 0 UID: 0 PID: 6073 Comm: syz.0.54 Not tainted syzkaller #0 PREEMPT(full) [ 54.049961][ T6073] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.049972][ T6073] Call Trace: [ 54.049978][ T6073] [ 54.049986][ T6073] dump_stack_lvl+0x100/0x190 [ 54.050020][ T6073] should_fail_ex.cold+0x5/0xa [ 54.050042][ T6073] should_failslab+0xc2/0x120 [ 54.050060][ T6073] kmem_cache_alloc_noprof+0x92/0x6a0 [ 54.050074][ T6073] ? __proc_create+0xc1/0x8f0 [ 54.050086][ T6073] ? __proc_create+0x247/0x8f0 [ 54.050099][ T6073] __proc_create+0x247/0x8f0 [ 54.050110][ T6073] ? __pfx___proc_create+0x10/0x10 [ 54.050123][ T6073] ? _raw_write_unlock+0x28/0x50 [ 54.050134][ T6073] ? proc_register+0x56d/0x910 [ 54.050147][ T6073] proc_create_reg+0x75/0x170 [ 54.050160][ T6073] proc_create_data+0x86/0x110 [ 54.050172][ T6073] ? __pfx_proc_create_data+0x10/0x10 [ 54.050184][ T6073] ? cache_register_net+0x137/0x5e0 [ 54.050198][ T6073] ? cache_register_net+0x137/0x5e0 [ 54.050213][ T6073] cache_register_net+0x2d6/0x5e0 [ 54.050228][ T6073] ip_map_cache_create+0x8b/0x130 [ 54.050248][ T6073] ? __pfx_sunrpc_init_net+0x10/0x10 [ 54.050259][ T6073] sunrpc_init_net+0x55/0x1b0 [ 54.050270][ T6073] ops_init+0x1e2/0x5f0 [ 54.050288][ T6073] setup_net+0x118/0x3a0 [ 54.050306][ T6073] ? __pfx_setup_net+0x10/0x10 [ 54.050325][ T6073] copy_net_ns+0x345/0x7a0 [ 54.050337][ T6073] create_new_namespaces+0x3ea/0xac0 [ 54.050355][ T6073] unshare_nsproxy_namespaces+0xf2/0x220 [ 54.050371][ T6073] ksys_unshare+0x4a2/0xa70 [ 54.050385][ T6073] ? __pfx_ksys_unshare+0x10/0x10 [ 54.050403][ T6073] __x64_sys_unshare+0x31/0x40 [ 54.050416][ T6073] do_syscall_64+0x123/0x790 [ 54.050429][ T6073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.050440][ T6073] RIP: 0033:0x7f78a6b9e159 [ 54.050466][ T6073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.050477][ T6073] RSP: 002b:00007f78a7ac7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 54.050490][ T6073] RAX: ffffffffffffffda RBX: 00007f78a6e25fa0 RCX: 00007f78a6b9e159 [ 54.050497][ T6073] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 54.050504][ T6073] RBP: 00007f78a6c3506b R08: 0000000000000000 R09: 0000000000000000 [ 54.050511][ T6073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.050518][ T6073] R13: 00007f78a6e26038 R14: 00007f78a6e25fa0 R15: 00007ffe068a3d28 [ 54.050533][ T6073] [ 54.196119][ T6078] xt_REDIRECT: bad MAP_IPS. [ 54.239676][ T37] IPVS: starting estimator thread 0... [ 54.318177][ T6087] netlink: 'syz.0.58': attribute type 63 has an invalid length. [ 54.336870][ T6081] IPVS: using max 43 ests per chain, 103200 per kthread [ 54.471937][ T6090] gadgetfs: bound to dummy_udc driver [ 54.701804][ T6093] cgroup: fork rejected by pids controller in /syz2 [ 54.716975][ T850] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 54.717407][ C2] gadgetfs: connected [ 54.717899][ T850] gadgetfs: disconnected [ 54.722140][ T37] Bluetooth: hci4: Frame reassembly failed (-84) [ 54.736935][ T5738] Bluetooth: hci0: command tx timeout [ 54.736967][ T5738] Bluetooth: hci2: command tx timeout [ 54.736985][ T5738] Bluetooth: hci1: command tx timeout [ 54.737036][ T5746] Bluetooth: hci3: command tx timeout [ 54.867638][ C2] gadgetfs: connected [ 54.868910][ T850] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 54.869227][ T850] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 54.869253][ T850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.872961][ C2] gadgetfs: configuration #1 [ 55.147935][ T6086] gadgetfs: suspended from state 3 [ 55.147997][ T6086] gadgetfs: disconnected [ 55.150844][ T850] usb 5-1: can't set config #1, error -71 [ 55.153150][ T850] usb 5-1: USB disconnect, device number 3 [ 55.493140][ T6192] netlink: 'syz.2.74': attribute type 4 has an invalid length. [ 55.500368][ T6192] netlink: 'syz.2.74': attribute type 4 has an invalid length. [ 55.538258][ T850] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 55.604123][ T6204] FAULT_INJECTION: forcing a failure. [ 55.604123][ T6204] name failslab, interval 1, probability 0, space 0, times 0 [ 55.604144][ T6204] CPU: 1 UID: 0 PID: 6204 Comm: syz.3.76 Not tainted syzkaller #0 PREEMPT(full) [ 55.604156][ T6204] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.604162][ T6204] Call Trace: [ 55.604166][ T6204] [ 55.604171][ T6204] dump_stack_lvl+0x100/0x190 [ 55.604191][ T6204] should_fail_ex.cold+0x5/0xa [ 55.604208][ T6204] should_failslab+0xc2/0x120 [ 55.604226][ T6204] __kmalloc_cache_noprof+0x91/0x6d0 [ 55.604237][ T6204] ? inode_doinit_with_dentry+0x70b/0x1340 [ 55.604257][ T6204] ? inode_doinit_with_dentry+0x7b1/0x1340 [ 55.604273][ T6204] inode_doinit_with_dentry+0x7b1/0x1340 [ 55.604289][ T6204] ? inode_set_ctime_current+0x283/0x850 [ 55.604307][ T6204] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 55.604321][ T6204] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 55.604338][ T6204] ? new_inode+0x15a/0x1c0 [ 55.604351][ T6204] selinux_d_instantiate+0x26/0x40 [ 55.604366][ T6204] security_d_instantiate+0x14c/0x1b0 [ 55.604384][ T6204] d_make_persistent+0x64/0x180 [ 55.604396][ T6204] debugfs_create_dir+0x195/0x440 [ 55.604408][ T6204] drm_debugfs_clients_add+0x6f/0x210 [ 55.604425][ T6204] drm_file_alloc+0x5c6/0xb40 [ 55.604444][ T6204] drm_open_helper+0x1fc/0x540 [ 55.604462][ T6204] drm_open+0x1a0/0x3e0 [ 55.604478][ T6204] ? __pfx_drm_open+0x10/0x10 [ 55.604495][ T6204] drm_stub_open+0x20f/0x380 [ 55.604511][ T6204] ? __pfx_drm_stub_open+0x10/0x10 [ 55.604527][ T6204] chrdev_open+0x234/0x6a0 [ 55.604543][ T6204] ? __pfx_chrdev_open+0x10/0x10 [ 55.604559][ T6204] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 55.604573][ T6204] do_dentry_open+0x6ab/0x14d0 [ 55.604586][ T6204] ? __pfx_chrdev_open+0x10/0x10 [ 55.604603][ T6204] vfs_open+0x82/0x3f0 [ 55.604621][ T6204] path_openat+0x19fa/0x2440 [ 55.604638][ T6204] ? __pfx_path_openat+0x10/0x10 [ 55.604657][ T6204] do_file_open+0x20e/0x430 [ 55.604674][ T6204] ? __pfx_do_file_open+0x10/0x10 [ 55.604698][ T6204] ? _raw_spin_unlock+0x28/0x50 [ 55.604715][ T6204] ? alloc_fd+0x471/0x7a0 [ 55.604734][ T6204] do_sys_openat2+0x10f/0x1e0 [ 55.604750][ T6204] ? __pfx_do_sys_openat2+0x10/0x10 [ 55.604768][ T6204] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 55.604784][ T6204] __x64_sys_openat+0x12d/0x210 [ 55.604801][ T6204] ? __pfx___x64_sys_openat+0x10/0x10 [ 55.604823][ T6204] do_syscall_64+0x123/0x790 [ 55.604835][ T6204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.604847][ T6204] RIP: 0033:0x7f2ca4f5e98e [ 55.604870][ T6204] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 55.604880][ T6204] RSP: 002b:00007f2ca5f23b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 55.604891][ T6204] RAX: ffffffffffffffda RBX: 00007f2ca5f246c0 RCX: 00007f2ca4f5e98e [ 55.604898][ T6204] RDX: 0000000000000000 RSI: 00007f2ca5f23c00 RDI: ffffffffffffff9c [ 55.604905][ T6204] RBP: 00007f2ca5f23c00 R08: 0000000000000000 R09: 0000000000000000 [ 55.604911][ T6204] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 55.604917][ T6204] R13: 00007f2ca5226038 R14: 00007f2ca5225fa0 R15: 00007fff7075f638 [ 55.604931][ T6204] [ 55.687489][ T850] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 55.688267][ T850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.688282][ T850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.688293][ T850] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 55.688313][ T850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.690968][ T850] usb 5-1: config 0 descriptor?? [ 55.847025][ T1527] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 55.898357][ T6164] syz_tun: entered allmulticast mode [ 55.986850][ T1527] usb 8-1: device descriptor read/64, error -71 [ 56.226858][ T1527] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 56.356921][ T1527] usb 8-1: device descriptor read/64, error -71 [ 56.463291][ T6164] syz_tun: left allmulticast mode [ 56.467854][ T1527] usb usb8-port1: attempt power cycle [ 56.471814][ T850] usbhid 5-1:0.0: can't add hid device: -71 [ 56.471867][ T850] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 56.473539][ T850] usb 5-1: USB disconnect, device number 4 [ 56.496100][ T6217] ip6t_rt: unknown flags D [ 56.545296][ T6219] ======================================================= [ 56.545296][ T6219] WARNING: The mand mount option has been deprecated and [ 56.545296][ T6219] and is ignored by this kernel. Remove the mand [ 56.545296][ T6219] option from the mount to silence this warning. [ 56.545296][ T6219] ======================================================= [ 56.555610][ T6214] dns_resolver: Unsupported content type (234) [ 56.738293][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 56.786692][ T43] kauditd_printk_skb: 196 callbacks suppressed [ 56.786958][ T43] audit: type=1400 audit(1790951861.969:447): avc: denied { name_bind } for pid=6222 comm="syz.1.83" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 56.787186][ T43] audit: type=1400 audit(1790951861.979:448): avc: denied { node_bind } for pid=6222 comm="syz.1.83" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 56.806852][ T1527] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 56.825243][ T43] audit: type=1400 audit(1790951862.009:449): avc: denied { prog_load } for pid=6224 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 56.825467][ T43] audit: type=1400 audit(1790951862.009:450): avc: denied { bpf } for pid=6224 comm="syz.1.84" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 56.825679][ T43] audit: type=1400 audit(1790951862.009:451): avc: denied { perfmon } for pid=6224 comm="syz.1.84" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 56.826611][ T43] audit: type=1400 audit(1790951862.009:452): avc: denied { prog_run } for pid=6224 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 56.827258][ T1527] usb 8-1: device descriptor read/8, error -71 [ 56.884796][ T43] audit: type=1400 audit(1790951862.069:453): avc: denied { mount } for pid=6226 comm="syz.1.85" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 56.895815][ T43] audit: type=1400 audit(1790951862.079:454): avc: denied { unmount } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 56.935700][ T43] audit: type=1400 audit(1790951862.119:455): avc: denied { unmount } for pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.936388][ T43] audit: type=1400 audit(1790951862.119:456): avc: denied { unmount } for pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 56.961820][ T6232] warning: `syz.1.87' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 57.067419][ T1527] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 57.088002][ T1527] usb 8-1: device descriptor read/8, error -71 [ 57.163408][ T6239] __nla_validate_parse: 4 callbacks suppressed [ 57.163421][ T6239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.89'. [ 57.197705][ T1527] usb usb8-port1: unable to enumerate USB device [ 57.494551][ T6253] fuse: Bad value for 'fd' [ 57.497158][ T6253] netlink: 'syz.2.92': attribute type 1 has an invalid length. [ 57.537633][ T6253] 8021q: adding VLAN 0 to HW filter on device bond2 [ 57.538936][ T6253] bond1: (slave bond2): making interface the new active one [ 57.539952][ T6253] bond1: (slave bond2): Enslaving as an active interface with an up link [ 57.581445][ T6258] tmpfs: Bad value for 'mpol' [ 57.619756][ T6260] macsec1: entered allmulticast mode [ 57.619775][ T6260] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 57.619831][ T6260] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 57.621906][ T6260] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 57.673211][ T35] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 57.675046][ T35] libceph: mon0 (2)0.0.0.0:6789 socket error on write qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 57.947482][ T35] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 58.101529][ T6285] Cannot find set identified by id 0 to match [ 58.458662][ T35] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 58.652046][ T6297] netlink: 144 bytes leftover after parsing attributes in process `syz.3.104'. [ 58.740298][ T6262] ceph: No mds server is up or the cluster is laggy [ 58.929957][ T6304] vlan2: entered promiscuous mode [ 58.929970][ T6304] bridge0: entered promiscuous mode [ 59.112242][ T6308] netlink: 'syz.3.109': attribute type 1 has an invalid length. [ 59.176641][ T6310] ip_tables: iptables: counters copy to user failed while replacing table [ 59.245621][ T6316] capability: warning: `syz.1.113' uses deprecated v2 capabilities in a way that may be insecure [ 59.299105][ T6321] use of bytesused == 0 is deprecated and will be removed in the future, [ 59.299119][ T6321] use the actual size instead. [ 59.337562][ T6323] netlink: 'syz.1.116': attribute type 2 has an invalid length. [ 59.918364][ T1033] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 60.067292][ T1033] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 60.068099][ T1033] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 60.068116][ T1033] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 60.068134][ T1033] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.075982][ T6332] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 60.088587][ T1033] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 60.287197][ T35] usb 7-1: USB disconnect, device number 2 [ 60.293134][ T6342] ip_tables: iptables: counters copy to user failed while replacing table [ 60.719378][ T6351] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 60.720038][ T6351] batman_adv: batadv0: Adding interface: gretap2 [ 60.720049][ T6351] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.720072][ T6351] batman_adv: batadv0: Interface activated: gretap2 [ 60.904877][ T6357] netlink: 'syz.1.126': attribute type 4 has an invalid length. [ 60.904899][ T6357] netlink: 17 bytes leftover after parsing attributes in process `syz.1.126'. [ 61.261455][ T6360] kvm [6358]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 61.262390][ T6360] kvm [6358]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 61.292358][ T1527] e1000 0000:00:06.0 eth0: Reset adapter [ 61.293495][ T6359] e1000e 0000:00:02.0: Interrupt Throttle Rate off [ 61.392256][ T6359] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 61.541649][ T6368] bridge0: port 3(syz_tun) entered blocking state [ 61.541803][ T6368] bridge0: port 3(syz_tun) entered disabled state [ 61.541874][ T6368] syz_tun: entered allmulticast mode [ 61.543292][ T6368] syz_tun: entered promiscuous mode [ 61.543743][ T6368] bridge0: port 3(syz_tun) entered blocking state [ 61.543806][ T6368] bridge0: port 3(syz_tun) entered forwarding state [ 61.553262][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 61.575204][ T6368] netlink: 'syz.2.128': attribute type 4 has an invalid length. [ 61.705926][ T6380] ip_tables: iptables: counters copy to user failed while replacing table [ 61.741419][ T6383] binder: 6382:6383 ioctl f50f 0 returned -22 [ 61.786909][ T43] kauditd_printk_skb: 167 callbacks suppressed [ 61.786921][ T43] audit: type=1400 audit(1790951866.969:624): avc: denied { create } for pid=6386 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.788939][ T43] audit: type=1400 audit(1790951866.979:625): avc: denied { ioctl } for pid=6386 comm="syz.1.132" path="socket:[13481]" dev="sockfs" ino=13481 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.789458][ T43] audit: type=1400 audit(1790951866.979:626): avc: denied { connect } for pid=6386 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.791278][ T43] audit: type=1400 audit(1790951866.979:627): avc: denied { mount } for pid=6386 comm="syz.1.132" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 61.792665][ T6387] FAULT_INJECTION: forcing a failure. [ 61.792665][ T6387] name failslab, interval 1, probability 0, space 0, times 0 [ 61.792692][ T6387] CPU: 2 UID: 0 PID: 6387 Comm: syz.1.132 Not tainted syzkaller #0 PREEMPT(full) [ 61.792715][ T6387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.792726][ T6387] Call Trace: [ 61.792732][ T6387] [ 61.792741][ T6387] dump_stack_lvl+0x100/0x190 [ 61.792772][ T6387] should_fail_ex.cold+0x5/0xa [ 61.792798][ T6387] should_failslab+0xc2/0x120 [ 61.792825][ T6387] __kmalloc_cache_noprof+0x91/0x6d0 [ 61.792845][ T6387] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 61.792864][ T6387] ? nfs_alloc_fhandle+0x3b/0x90 [ 61.792894][ T6387] nfs_alloc_fhandle+0x3b/0x90 [ 61.792920][ T6387] nfs_init_fs_context+0x65/0x1510 [ 61.792944][ T6387] alloc_fs_context+0x60c/0xf40 [ 61.792968][ T6387] __x64_sys_fsopen+0xed/0x220 [ 61.792990][ T6387] do_syscall_64+0x123/0x790 [ 61.793014][ T6387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.793034][ T6387] RIP: 0033:0x7f3c2039e159 [ 61.793053][ T6387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.793066][ T6387] RSP: 002b:00007f3c1e5f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 61.793086][ T6387] RAX: ffffffffffffffda RBX: 00007f3c20625fa0 RCX: 00007f3c2039e159 [ 61.793098][ T6387] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000a00 [ 61.793109][ T6387] RBP: 00007f3c2043506b R08: 0000000000000000 R09: 0000000000000000 [ 61.793119][ T6387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.793131][ T6387] R13: 00007f3c20626038 R14: 00007f3c20625fa0 R15: 00007ffcf076e188 [ 61.793156][ T6387] [ 61.794549][ T43] audit: type=1400 audit(1790951866.979:628): avc: denied { prog_load } for pid=6386 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 61.794849][ T43] audit: type=1400 audit(1790951866.979:629): avc: denied { bpf } for pid=6386 comm="syz.1.132" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 61.794997][ T43] audit: type=1400 audit(1790951866.979:630): avc: denied { perfmon } for pid=6386 comm="syz.1.132" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 61.802340][ T43] audit: type=1400 audit(1790951866.989:631): avc: denied { create } for pid=6386 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 61.802367][ T43] audit: type=1400 audit(1790951866.989:632): avc: denied { sys_admin } for pid=6386 comm="syz.1.132" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 61.828703][ T43] audit: type=1400 audit(1790951867.019:633): avc: denied { unmount } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 61.888909][ T9] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 61.962811][ T6399] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 62.008235][ T6402] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 62.008260][ T6402] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 62.008281][ T6402] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 62.009881][ T6402] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 62.014304][ T6402] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 63.617853][ T1527] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 68.131402][ T43] kauditd_printk_skb: 18 callbacks suppressed [ 68.131417][ T43] audit: type=1400 audit(1790951873.319:652): avc: denied { write } for pid=6422 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.131514][ T43] audit: type=1400 audit(1790951873.319:653): avc: denied { create } for pid=6422 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.131780][ T43] audit: type=1400 audit(1790951873.319:654): avc: denied { write open } for pid=6422 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth0.ra" dev="tmpfs" ino=2073 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.132018][ T43] audit: type=1400 audit(1790951873.319:655): avc: denied { append } for pid=6422 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" dev="tmpfs" ino=2073 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.132475][ T43] audit: type=1400 audit(1790951873.319:656): avc: denied { getattr } for pid=6422 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.162142][ T43] audit: type=1400 audit(1790951873.349:657): avc: denied { read } for pid=6424 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.196429][ T43] audit: type=1400 audit(1790951873.379:658): avc: denied { write } for pid=6425 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.196660][ T43] audit: type=1400 audit(1790951873.379:659): avc: denied { unlink } for pid=6425 comm="rm" name="resolv.conf.eth0.ra" dev="tmpfs" ino=2073 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.743075][ T43] audit: type=1400 audit(1790951874.929:660): avc: denied { write } for pid=6428 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.791932][ T43] audit: type=1400 audit(1790951874.979:661): avc: denied { write } for pid=6431 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.140372][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.140417][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.145035][ T42] cfg80211: failed to load regulatory.db [ 71.363363][ T6438] netlink: 'syz.0.136': attribute type 1 has an invalid length. [ 71.374810][ T6437] bridge0: port 3(syz_tun) entered blocking state [ 71.375025][ T6437] bridge0: port 3(syz_tun) entered disabled state [ 71.375099][ T6437] syz_tun: entered allmulticast mode [ 71.375976][ T6437] syz_tun: entered promiscuous mode [ 71.376244][ T6437] bridge0: port 3(syz_tun) entered blocking state [ 71.376287][ T6437] bridge0: port 3(syz_tun) entered forwarding state [ 71.384417][ T64] Bluetooth: hci0: connection err: -111 [ 71.419630][ T6438] veth3: entered allmulticast mode [ 71.424912][ T6438] bond1: (slave veth3): Enslaving as an active interface with a down link [ 71.438058][ T6438] macvlan2: entered promiscuous mode [ 71.438081][ T6438] macvlan2: entered allmulticast mode [ 71.438747][ T6438] bond1: entered promiscuous mode [ 71.440154][ T6438] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 71.440740][ T6438] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 71.441262][ T6438] bond1: left promiscuous mode [ 73.465861][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 73.465877][ T43] audit: type=1400 audit(1790951878.649:668): avc: denied { search } for pid=6440 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.465917][ T43] audit: type=1400 audit(1790951878.649:669): avc: denied { search } for pid=6440 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.465941][ T43] audit: type=1400 audit(1790951878.649:670): avc: denied { search } for pid=6440 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.466023][ T43] audit: type=1400 audit(1790951878.649:671): avc: denied { search } for pid=6440 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.468890][ T43] audit: type=1400 audit(1790951878.649:672): avc: denied { read } for pid=6441 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.469118][ T43] audit: type=1400 audit(1790951878.649:673): avc: denied { read open } for pid=6441 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.469246][ T43] audit: type=1400 audit(1790951878.649:674): avc: denied { getattr } for pid=6441 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.477772][ T43] audit: type=1400 audit(1790951878.669:675): avc: denied { write } for pid=6440 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.477845][ T43] audit: type=1400 audit(1790951878.669:676): avc: denied { add_name } for pid=6440 comm="dhcpcd-run-hook" name="resolv.conf.eth1.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.529331][ T43] audit: type=1400 audit(1790951878.719:677): avc: denied { write } for pid=6443 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.898439][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 78.216919][ T6450] bonding: b is being created... [ 78.224376][ T6456] Cannot find set identified by id 0 to match [ 78.296181][ T6472] netlink: 'syz.0.144': attribute type 2 has an invalid length. [ 78.296201][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.144'. [ 78.473680][ T43] kauditd_printk_skb: 66 callbacks suppressed [ 78.473693][ T43] audit: type=1400 audit(1790951883.659:744): avc: denied { create } for pid=6491 comm="syz.2.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 78.496964][ T5878] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 78.505975][ T6492] Cannot find set identified by id 0 to match [ 78.541106][ T43] audit: type=1400 audit(1790951883.729:745): avc: denied { create } for pid=6493 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.543753][ T43] audit: type=1400 audit(1790951883.729:746): avc: denied { create } for pid=6493 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.544300][ T43] audit: type=1400 audit(1790951883.729:747): avc: denied { setopt } for pid=6493 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.544702][ T43] audit: type=1400 audit(1790951883.729:748): avc: denied { read append } for pid=6493 comm="syz.2.152" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 78.544853][ T43] audit: type=1400 audit(1790951883.729:749): avc: denied { open } for pid=6493 comm="syz.2.152" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 78.545973][ T43] audit: type=1400 audit(1790951883.729:750): avc: denied { ioctl } for pid=6493 comm="syz.2.152" path="socket:[12559]" dev="sockfs" ino=12559 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.546218][ T43] audit: type=1400 audit(1790951883.729:751): avc: denied { ioctl } for pid=6493 comm="syz.2.152" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x9416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 78.546634][ T43] audit: type=1400 audit(1790951883.729:752): avc: denied { ioctl } for pid=6493 comm="syz.2.152" path="socket:[12558]" dev="sockfs" ino=12558 ioctlcmd=0x9435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.547104][ T43] audit: type=1400 audit(1790951883.739:753): avc: denied { listen } for pid=6493 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.656842][ T5878] usb 6-1: Using ep0 maxpacket: 16 [ 78.659227][ T5878] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 78.660246][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.660266][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.660283][ T5878] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 78.660310][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.662509][ T5878] usb 6-1: config 0 descriptor?? [ 78.697034][ T6504] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 78.702021][ T6504] ptrace attach of "/syz-executor exec"[5731] was attempted by " (v\x0a"[6504] [ 78.706207][ T6504] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 78.707964][ T6506] ptrace attach of "/syz-executor exec"[5731] was attempted by "D-pHi5AH!Ɏ1d%)_3_N\x22&iGu3AK0vf0*st@C'`(̚T\x0aǺi %CTADIEj*1©7ic.p<7~m\x075+Sd/b ,8aظlp JC\x0b>.Qb U( [ 79.010618][ T6521] ip_tables: iptables: counters copy to user failed while replacing table [ 79.099750][ T5878] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:045E:07DA.0002/input/input6 [ 79.116824][ T73] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 79.181433][ T5878] microsoft 0003:045E:07DA.0002: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 79.248401][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.164'. [ 79.248434][ T6532] netlink: 20 bytes leftover after parsing attributes in process `syz.3.164'. [ 79.255089][ T6532] geneve2: entered promiscuous mode [ 79.255109][ T6532] geneve2: entered allmulticast mode [ 79.272580][ T73] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 79.276126][ T73] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 79.276152][ T73] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 79.276171][ T73] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 79.287264][ T73] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.287287][ T73] usb 5-1: Product: syz [ 79.287301][ T73] usb 5-1: Manufacturer: syz [ 79.287314][ T73] usb 5-1: SerialNumber: syz [ 79.290855][ T1033] usb 6-1: USB disconnect, device number 2 [ 79.309716][ T73] usb 5-1: config 0 descriptor?? [ 79.398315][ T6535] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 79.398524][ T6535] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 79.403905][ T6535] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 79.408687][ T6535] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 79.408740][ T6535] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 79.412435][ T6535] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 79.416121][ T6535] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 79.416176][ T6535] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 79.420145][ T6535] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 79.428175][ T6535] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 79.428335][ T6535] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 79.434314][ T6535] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 79.523251][ T73] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 79.610614][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.168'. [ 79.612196][ T6552] hsr_slave_0: left promiscuous mode [ 79.612805][ T6552] hsr_slave_1: left promiscuous mode [ 79.650884][ T6554] netlink: 13 bytes leftover after parsing attributes in process `syz.3.169'. [ 79.651161][ T6554] netlink: 72 bytes leftover after parsing attributes in process `syz.3.169'. [ 79.651171][ T6554] netlink: 36 bytes leftover after parsing attributes in process `syz.3.169'. [ 79.656002][ T6554] FAULT_INJECTION: forcing a failure. [ 79.656002][ T6554] name failslab, interval 1, probability 0, space 0, times 0 [ 79.656021][ T6554] CPU: 3 UID: 0 PID: 6554 Comm: syz.3.169 Not tainted syzkaller #0 PREEMPT(full) [ 79.656033][ T6554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.656053][ T6554] Call Trace: [ 79.656057][ T6554] [ 79.656062][ T6554] dump_stack_lvl+0x100/0x190 [ 79.656083][ T6554] should_fail_ex.cold+0x5/0xa [ 79.656099][ T6554] should_failslab+0xc2/0x120 [ 79.656117][ T6554] __kmalloc_cache_noprof+0x91/0x6d0 [ 79.656128][ T6554] ? mpi_alloc_limb_space+0x31/0x60 [ 79.656142][ T6554] ? mpi_alloc+0x46/0x230 [ 79.656157][ T6554] mpi_alloc+0x46/0x230 [ 79.656169][ T6554] ? mpi_free+0xe6/0x150 [ 79.656181][ T6554] mpi_read_raw_data+0xf5/0x430 [ 79.656195][ T6554] rsa_set_pub_key+0x14f/0x270 [ 79.656209][ T6554] ? __pfx_rsa_set_pub_key+0x10/0x10 [ 79.656234][ T6554] ? __asan_memcpy+0x3c/0x60 [ 79.656249][ T6554] rsassa_pkcs1_set_pub_key+0xce/0x1f0 [ 79.656266][ T6554] public_key_verify_signature+0x4e5/0x910 [ 79.656282][ T6554] ? __pfx_public_key_verify_signature+0x10/0x10 [ 79.656302][ T6554] ? asymmetric_key_generate_id+0x7e/0x180 [ 79.656325][ T6554] x509_check_for_self_signed+0x325/0x510 [ 79.656340][ T6554] x509_cert_parse+0x60c/0x910 [ 79.656355][ T6554] x509_key_preparse+0x65/0x9c0 [ 79.656371][ T6554] asymmetric_key_preparse+0xce/0x1d0 [ 79.656389][ T6554] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 79.656408][ T6554] __key_create_or_update+0x463/0xe30 [ 79.656426][ T6554] ? __pfx___key_create_or_update+0x10/0x10 [ 79.656442][ T6554] ? lookup_user_key+0x3f3/0x1300 [ 79.656462][ T6554] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 79.656475][ T6554] ? __pfx_keyring_search_iterator+0x10/0x10 [ 79.656493][ T6554] key_create_or_update+0x42/0x60 [ 79.656510][ T6554] __do_sys_add_key+0x2e8/0x460 [ 79.656522][ T6554] ? __pfx___do_sys_add_key+0x10/0x10 [ 79.656531][ T6554] ? ksys_write+0x1ac/0x250 [ 79.656549][ T6554] do_syscall_64+0x123/0x790 [ 79.656563][ T6554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.656574][ T6554] RIP: 0033:0x7f2ca4f9e159 [ 79.656584][ T6554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.656594][ T6554] RSP: 002b:00007f2ca5f24028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 79.656606][ T6554] RAX: ffffffffffffffda RBX: 00007f2ca5225fa0 RCX: 00007f2ca4f9e159 [ 79.656613][ T6554] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 79.656619][ T6554] RBP: 00007f2ca503506b R08: 000000001d247401 R09: 0000000000000000 [ 79.656625][ T6554] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 79.656632][ T6554] R13: 00007f2ca5226038 R14: 00007f2ca5225fa0 R15: 00007fff7075f638 [ 79.656646][ T6554] [ 79.695918][ T6556] : renamed from vlan0 (while UP) [ 79.703512][ T6556] Bluetooth: MGMT ver 1.23 [ 79.748402][ T1527] usb 5-1: USB disconnect, device number 5 [ 79.787414][ T6560] netlink: 'syz.2.172': attribute type 1 has an invalid length. [ 79.787434][ T6560] netlink: 'syz.2.172': attribute type 2 has an invalid length. [ 79.886103][ T6566] input: @ as /devices/virtual/input/input7 [ 80.219588][ T6585] JFS: discard option not supported on device [ 80.220275][ T6585] Mount JFS Failure: -5 [ 80.220283][ T6585] jfs_mount failed w/return code = -5 [ 80.671330][ T6602] lo: entered allmulticast mode [ 80.671838][ T6602] tunl0: entered allmulticast mode [ 80.672354][ T6602] gre0: entered allmulticast mode [ 80.672641][ T6602] gretap0: entered allmulticast mode [ 80.672960][ T6602] erspan0: entered allmulticast mode [ 80.674711][ T6602] ip_vti0: entered allmulticast mode [ 80.675126][ T6602] ip6_vti0: entered allmulticast mode [ 80.675448][ T6602] sit0: entered allmulticast mode [ 80.675871][ T6602] ip6tnl0: entered allmulticast mode [ 80.676197][ T6602] ip6gre0: entered allmulticast mode [ 80.676491][ T6602] syz_tun: entered allmulticast mode [ 80.703289][ T6602] ip6gretap0: entered allmulticast mode [ 80.703567][ T6602] bridge0: entered allmulticast mode [ 80.703878][ T6602] vcan0: entered allmulticast mode [ 80.704082][ T6602] bond0: entered allmulticast mode [ 80.704090][ T6602] bond_slave_0: entered allmulticast mode [ 80.704099][ T6602] bond_slave_1: entered allmulticast mode [ 80.704446][ T6602] team0: entered allmulticast mode [ 80.704454][ T6602] team_slave_0: entered allmulticast mode [ 80.704462][ T6602] team_slave_1: entered allmulticast mode [ 80.704730][ T6602] dummy0: entered allmulticast mode [ 80.706085][ T6602] nlmon0: entered allmulticast mode [ 80.706276][ T6602] batadv0: entered allmulticast mode [ 80.706517][ T6602] vxcan0: entered allmulticast mode [ 80.706821][ T6602] vxcan1: entered allmulticast mode [ 80.719746][ T6602] veth0: entered allmulticast mode [ 80.719999][ T6602] veth1: entered allmulticast mode [ 80.720189][ T6602] wg0: entered allmulticast mode [ 80.720634][ T6602] wg1: entered allmulticast mode [ 80.741716][ T6602] wg2: entered allmulticast mode [ 80.741916][ T6602] veth0_to_bridge: entered allmulticast mode [ 80.742470][ T6602] veth1_to_bridge: entered allmulticast mode [ 80.743008][ T6602] veth0_to_bond: entered allmulticast mode [ 80.743446][ T6602] veth1_to_bond: entered allmulticast mode [ 80.743911][ T6602] veth0_to_team: entered allmulticast mode [ 80.744409][ T6602] veth1_to_team: entered allmulticast mode [ 80.744939][ T6602] veth0_to_batadv: entered allmulticast mode [ 80.745135][ T6602] batadv_slave_0: entered allmulticast mode [ 80.745329][ T6602] veth1_to_batadv: entered allmulticast mode [ 80.745622][ T6602] batadv_slave_1: entered allmulticast mode [ 80.745885][ T6602] xfrm0: entered allmulticast mode [ 80.746074][ T6602] veth0_to_hsr: entered allmulticast mode [ 80.746266][ T6602] hsr_slave_0: entered allmulticast mode [ 80.746450][ T6602] veth1_to_hsr: entered allmulticast mode [ 80.747013][ T6602] hsr_slave_1: entered allmulticast mode [ 80.747229][ T6602] hsr0: entered allmulticast mode [ 80.747459][ T6602] veth1_virt_wifi: entered allmulticast mode [ 80.747701][ T6602] veth0_virt_wifi: entered allmulticast mode [ 80.747899][ T6602] virt_wifi0: entered allmulticast mode [ 80.747964][ T6602] veth1_vlan: entered allmulticast mode [ 80.748198][ T6602] veth0_vlan: entered allmulticast mode [ 80.748483][ T6602] : entered allmulticast mode [ 80.748688][ T6602] vlan1: entered allmulticast mode [ 80.748899][ T6602] macvlan0: entered allmulticast mode [ 80.749103][ T6602] macvlan1: entered allmulticast mode [ 80.750369][ T6602] ipvlan0: entered allmulticast mode [ 80.750438][ T6602] ipvlan1: entered allmulticast mode [ 80.750497][ T6602] veth1_macvtap: entered allmulticast mode [ 80.750721][ T6602] veth0_macvtap: entered allmulticast mode [ 80.750936][ T6602] macvtap0: entered allmulticast mode [ 80.751667][ T6602] macsec0: entered allmulticast mode [ 80.751880][ T6602] geneve0: entered allmulticast mode [ 80.752076][ T6602] geneve1: entered allmulticast mode [ 80.752298][ T6602] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 80.752610][ T6602] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 80.753530][ T6602] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 80.753778][ T6602] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 80.754144][ T6602] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 80.754444][ T6602] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 80.754679][ T6602] vxlan0: entered allmulticast mode [ 80.754857][ T6602] ip6tnl1: entered allmulticast mode [ 80.754951][ T6602] vlan2: entered allmulticast mode [ 80.755212][ T6602] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 80.798597][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 81.106959][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 81.401195][ T5830] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.401230][ T5830] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.450659][ T6627] af_packet: tpacket_rcv: packet too big, clamped from 108 to 4294967272. macoff=96 [ 81.457232][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 81.457264][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 81.457280][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 81.479462][ T5830] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.479484][ T5830] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.515538][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.521640][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.522175][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.523723][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.526686][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.571810][ T5746] Bluetooth: hci2: unexpected event for opcode 0x0c58 [ 81.573217][ T5830] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.573962][ T5830] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.642433][ T5830] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.642455][ T5830] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.696452][ T6647] IPv6: addrconf: prefix option has invalid lifetime [ 81.702144][ T6649] IPv6: addrconf: prefix option has invalid lifetime [ 81.776355][ T5830] bridge_slave_1: left promiscuous mode [ 81.777956][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.790683][ T5830] bridge_slave_0: left promiscuous mode [ 81.790802][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.941658][ T6668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=6668 comm=syz.0.195 [ 81.941675][ T6668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=6668 comm=syz.0.195 [ 81.944755][ T5830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.957405][ T5830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.958875][ T5830] bond0 (unregistering): Released all slaves [ 81.973743][ T6668] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=167772162 (671088648 ns) > initial count (80 ns). Using initial count to start timer. [ 82.230339][ T6680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2664 sclass=netlink_route_socket pid=6680 comm=syz.2.196 [ 82.251269][ T6680] FAULT_INJECTION: forcing a failure. [ 82.251269][ T6680] name failslab, interval 1, probability 0, space 0, times 0 [ 82.251293][ T6680] CPU: 1 UID: 0 PID: 6680 Comm: syz.2.196 Not tainted syzkaller #0 PREEMPT(full) [ 82.251307][ T6680] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.251313][ T6680] Call Trace: [ 82.251318][ T6680] [ 82.251322][ T6680] dump_stack_lvl+0x100/0x190 [ 82.251353][ T6680] should_fail_ex.cold+0x5/0xa [ 82.251369][ T6680] should_failslab+0xc2/0x120 [ 82.251389][ T6680] __kmalloc_cache_noprof+0x91/0x6d0 [ 82.251401][ T6680] ? iopt_map_pages+0x99/0xaa0 [ 82.251418][ T6680] iopt_map_pages+0x99/0xaa0 [ 82.251434][ T6680] iopt_map_common.isra.0+0x158/0x2d0 [ 82.251448][ T6680] ? __pfx_iopt_map_common.isra.0+0x10/0x10 [ 82.251463][ T6680] ? security_capable+0x80/0x260 [ 82.251477][ T6680] ? iopt_alloc_pages.part.0+0x48f/0x5e0 [ 82.251496][ T6680] iopt_map_user_pages+0xe7/0x130 [ 82.251511][ T6680] iommufd_ioas_map+0x341/0x6c0 [ 82.251528][ T6680] ? __pfx_iommufd_ioas_map+0x10/0x10 [ 82.251546][ T6680] iommufd_fops_ioctl+0x358/0x520 [ 82.251563][ T6680] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 82.251578][ T6680] ? __fget_files+0x34/0x3d0 [ 82.251598][ T6680] ? selinux_file_ioctl+0x13b/0x290 [ 82.251611][ T6680] ? selinux_file_ioctl+0xb6/0x290 [ 82.251626][ T6680] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 82.251642][ T6680] __x64_sys_ioctl+0x18e/0x210 [ 82.251655][ T6680] do_syscall_64+0x123/0x790 [ 82.251671][ T6680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.251683][ T6680] RIP: 0033:0x7fcbfeb9e159 [ 82.251692][ T6680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.251702][ T6680] RSP: 002b:00007fcbffab4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.251713][ T6680] RAX: ffffffffffffffda RBX: 00007fcbfee25fa0 RCX: 00007fcbfeb9e159 [ 82.251720][ T6680] RDX: 0000200000000100 RSI: 0000000000003b85 RDI: 0000000000000003 [ 82.251727][ T6680] RBP: 00007fcbfec3506b R08: 0000000000000000 R09: 0000000000000000 [ 82.251733][ T6680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.251740][ T6680] R13: 00007fcbfee26038 R14: 00007fcbfee25fa0 R15: 00007ffcf9371458 [ 82.251755][ T6680] [ 82.308635][ T5444] 8021q: adding VLAN 0 to HW filter on device eth2 [ 82.372156][ T6631] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.372305][ T6631] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.372456][ T6631] bridge_slave_0: entered allmulticast mode [ 82.373826][ T6631] bridge_slave_0: entered promiscuous mode [ 82.377422][ T6683] netlink: 96 bytes leftover after parsing attributes in process `syz.2.197'. [ 82.377754][ T6631] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.377832][ T6631] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.377940][ T6631] bridge_slave_1: entered allmulticast mode [ 82.384427][ T6631] bridge_slave_1: entered promiscuous mode [ 82.408732][ T5830] hsr_slave_0: left promiscuous mode [ 82.409330][ T5830] hsr_slave_1: left promiscuous mode [ 82.409883][ T5830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.409908][ T5830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.411039][ T5830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.411050][ T5830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.423095][ T5830] veth1_macvtap: left promiscuous mode [ 82.423151][ T5830] veth0_macvtap: left promiscuous mode [ 82.423246][ T5830] veth1_vlan: left promiscuous mode [ 82.423324][ T5830] veth0_vlan: left promiscuous mode [ 82.601470][ T5830] team0 (unregistering): Port device team_slave_1 removed [ 82.613233][ T5830] team0 (unregistering): Port device team_slave_0 removed [ 82.695373][ T6631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.697674][ T6631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.712227][ T6631] team0: Port device team_slave_0 added [ 82.713564][ T6631] team0: Port device team_slave_1 added [ 82.740864][ T6631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.740875][ T6631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.740887][ T6631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.741618][ T6631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.741625][ T6631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.741637][ T6631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.776067][ T6631] hsr_slave_0: entered promiscuous mode [ 82.776609][ T6631] hsr_slave_1: entered promiscuous mode [ 82.780066][ T6693] Cannot find set identified by id 0 to match [ 82.823385][ T5746] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 82.824849][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.199'. [ 82.921626][ T5444] 8021q: adding VLAN 0 to HW filter on device eth3 [ 82.925907][ T6631] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.928648][ T6631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.929305][ T6631] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.931642][ T6631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.932157][ T6631] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.934926][ T6631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.935421][ T6631] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.941697][ T6631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.958627][ T6631] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.958704][ T6631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.958945][ T6631] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.959009][ T6631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.993150][ T6631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.008849][ T1063] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.009304][ T1063] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.013406][ T6631] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.016533][ T1063] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.016578][ T1063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.019362][ T1063] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.019433][ T1063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.141782][ T5444] 8021q: adding VLAN 0 to HW filter on device eth4 [ 83.271355][ T5444] 8021q: adding VLAN 0 to HW filter on device eth5 [ 83.279808][ T6631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.447436][ T6746] syzkaller0: entered promiscuous mode [ 83.447451][ T6746] syzkaller0: entered allmulticast mode [ 83.477574][ T43] kauditd_printk_skb: 313 callbacks suppressed [ 83.477587][ T43] audit: type=1400 audit(2000000001.269:1067): avc: denied { setopt } for pid=6750 comm="syz.2.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.492092][ T43] audit: type=1400 audit(2000000001.279:1068): avc: denied { listen } for pid=6750 comm="syz.2.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.492589][ T43] audit: type=1400 audit(2000000001.279:1069): avc: denied { create } for pid=6750 comm="syz.2.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 83.493100][ T5746] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 83.493343][ T43] audit: type=1400 audit(2000000001.279:1070): avc: denied { accept } for pid=6750 comm="syz.2.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.528196][ T43] audit: type=1400 audit(2000000001.319:1071): avc: denied { write } for pid=6753 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.536931][ T5746] Bluetooth: hci1: command 0x0c1a tx timeout [ 83.536955][ T5746] Bluetooth: hci0: command 0x0c1a tx timeout [ 83.628060][ T64] Bluetooth: hci3: command tx timeout [ 84.468064][ T6631] veth0_vlan: entered promiscuous mode [ 84.488923][ T6759] bond2: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 84.488952][ T6759] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 84.490909][ T6759] bond2 (unregistering): Released all slaves [ 84.513292][ T6760] bond2: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 84.513309][ T6760] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 84.515136][ T6760] bond2 (unregistering): Released all slaves [ 84.542120][ T6631] veth1_vlan: entered promiscuous mode [ 84.545099][ T43] audit: type=1400 audit(2000000002.329:1072): avc: denied { create } for pid=6764 comm="syz.1.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.589255][ T6765] ip_tables: iptables: counters copy to user failed while replacing table [ 84.590938][ T43] audit: type=1400 audit(2000000002.379:1073): avc: denied { create } for pid=6764 comm="syz.1.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.591988][ T43] audit: type=1400 audit(2000000002.379:1074): avc: denied { connect } for pid=6764 comm="syz.1.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.593406][ T43] audit: type=1400 audit(2000000002.379:1075): avc: denied { name_connect } for pid=6764 comm="syz.1.206" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 84.604892][ T6631] veth0_macvtap: entered promiscuous mode [ 84.609839][ T6631] veth1_macvtap: entered promiscuous mode [ 84.623481][ T6631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.631872][ T6631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.655135][ T43] audit: type=1400 audit(2000000002.439:1076): avc: denied { search } for pid=6768 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.670422][ T6770] Cannot find set identified by id 0 to match [ 84.674299][ T6770] FAULT_INJECTION: forcing a failure. [ 84.674299][ T6770] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 84.674329][ T6770] CPU: 0 UID: 0 PID: 6770 Comm: syz.0.207 Not tainted syzkaller #0 PREEMPT(full) [ 84.674349][ T6770] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.674361][ T6770] Call Trace: [ 84.674367][ T6770] [ 84.674376][ T6770] dump_stack_lvl+0x100/0x190 [ 84.674407][ T6770] should_fail_ex.cold+0x5/0xa [ 84.674433][ T6770] _copy_from_user+0x2e/0xd0 [ 84.674456][ T6770] move_addr_to_kernel+0x65/0x170 [ 84.674489][ T6770] __sys_connect+0xb5/0x170 [ 84.674512][ T6770] ? __pfx___sys_connect+0x10/0x10 [ 84.674554][ T6770] ? __fget_files+0x21f/0x3d0 [ 84.674587][ T6770] ? __pfx_ksys_write+0x10/0x10 [ 84.674613][ T6770] __x64_sys_connect+0x72/0xb0 [ 84.674633][ T6770] ? lockdep_hardirqs_on+0x7d/0x110 [ 84.674659][ T6770] do_syscall_64+0x123/0x790 [ 84.674679][ T6770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.674698][ T6770] RIP: 0033:0x7f78a6b9e159 [ 84.674714][ T6770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.674731][ T6770] RSP: 002b:00007f78a7ac7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 84.674749][ T6770] RAX: ffffffffffffffda RBX: 00007f78a6e25fa0 RCX: 00007f78a6b9e159 [ 84.674760][ T6770] RDX: 0000000000000010 RSI: 0000200000000300 RDI: 0000000000000007 [ 84.674772][ T6770] RBP: 00007f78a7ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 84.674783][ T6770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.674794][ T6770] R13: 00007f78a6e26038 R14: 00007f78a6e25fa0 R15: 00007ffe068a3d28 [ 84.674818][ T6770] [ 84.717287][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.717324][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.717355][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.717385][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.723278][ T6772] netlink: 'syz.1.208': attribute type 1 has an invalid length. [ 84.723353][ T6773] netlink: 'syz.1.208': attribute type 1 has an invalid length. [ 84.734481][ T6772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.208'. [ 84.743063][ T1063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.743076][ T1063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.749858][ T6777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.209'. [ 84.771452][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.771471][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.838266][ T6780] netlink: 36 bytes leftover after parsing attributes in process `syz.0.210'. [ 84.870578][ T6795] tmpfs: Bad value for 'mpol' [ 85.100819][ T6808] netlink: 24 bytes leftover after parsing attributes in process `syz.0.217'. [ 85.167851][ T5881] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 85.272280][ T6817] jffs2: notice: (6817) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 85.283015][ T1063] IPVS: starting estimator thread 0... [ 85.283062][ T6817] IPVS: ip_vs_add_dest(): server weight less than zero [ 85.298120][ T5881] usb 9-1: device descriptor read/64, error -71 [ 85.317662][ T5730] ------------[ cut here ]------------ [ 85.317676][ T5730] kernel BUG at fs/jffs2/nodelist.c:462! [ 85.317697][ T5730] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 85.326494][ T5730] CPU: 3 UID: 0 PID: 5730 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 85.331207][ T5730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.335443][ T5730] RIP: 0010:jffs2_del_ino_cache+0x24f/0x2c0 [ 85.338011][ T5730] Code: 4c 89 e2 49 8b 5e 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 71 49 89 1c 24 e9 42 ff ff ff e8 f2 73 81 fe 90 <0f> 0b e8 aa de f4 fe e9 5b fe ff ff e8 70 de f4 fe e9 59 ff ff ff [ 85.346160][ T5730] RSP: 0018:ffffc90003cffa98 EFLAGS: 00010293 [ 85.348791][ T5730] RAX: 0000000000000000 RBX: ffff88802caa2000 RCX: 0000000000000000 [ 85.352211][ T5730] RDX: ffff88802bb42580 RSI: ffffffff838ad45e RDI: ffff888051405ee0 [ 85.355613][ T5730] RBP: 0000000000000006 R08: 0000000000000000 R09: ffffed100595446c [ 85.358965][ T5730] R10: ffff88802caa2363 R11: 0000000000000000 R12: ffff888056e03c80 [ 85.362316][ T5730] R13: dffffc0000000000 R14: ffff888051405ec0 R15: ffff888056e03d30 [ 85.365758][ T5730] FS: 000055556f21e500(0000) GS:ffff8880d5e4f000(0000) knlGS:0000000000000000 [ 85.366832][ T6819] IPVS: using max 38 ests per chain, 91200 per kthread [ 85.372543][ T5730] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.375238][ T5730] CR2: 00007f78a7a43d58 CR3: 000000004fecf000 CR4: 0000000000352ef0 [ 85.378623][ T5730] Call Trace: [ 85.380105][ T5730] [ 85.381388][ T5730] jffs2_do_clear_inode+0x3ca/0x470 [ 85.383603][ T5730] ? __pfx_jffs2_evict_inode+0x10/0x10 [ 85.385591][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.222'. [ 85.389517][ T5730] evict+0x3c2/0xad0 [ 85.391218][ T5730] ? list_lru_del+0xba/0x2f0 [ 85.393147][ T5730] ? list_lru_del+0xba/0x2f0 [ 85.395044][ T5730] ? __pfx_evict+0x10/0x10 [ 85.396937][ T5730] ? do_raw_spin_unlock+0x145/0x1e0 [ 85.399132][ T5730] ? find_held_lock+0x2b/0x80 [ 85.401182][ T5730] ? find_held_lock+0x2b/0x80 [ 85.403231][ T5730] dispose_list+0x117/0x1e0 [ 85.405189][ T5730] evict_inodes+0x473/0x710 [ 85.407163][ T5730] ? __pfx_evict_inodes+0x10/0x10 [ 85.409328][ T5730] ? sync_blockdev+0x51/0x70 [ 85.411364][ T5730] generic_shutdown_super+0xc8/0x360 [ 85.413679][ T5730] kill_mtd_super+0x1d/0x80 [ 85.415804][ T5730] jffs2_kill_sb+0x7c/0xb0 [ 85.417800][ T5730] deactivate_locked_super+0xbd/0x130 [ 85.420157][ T5730] deactivate_super+0xea/0x110 [ 85.422279][ T5730] cleanup_mnt+0x21f/0x450 [ 85.424336][ T5730] task_work_run+0x150/0x240 [ 85.426416][ T5730] ? __pfx_task_work_run+0x10/0x10 [ 85.428693][ T5730] exit_to_user_mode_loop+0x1d8/0x700 [ 85.431037][ T5730] ? rcu_is_watching+0x13/0xc0 [ 85.433099][ T5730] do_syscall_64+0x661/0x790 [ 85.435078][ T5730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.437595][ T5730] RIP: 0033:0x7f3c2039f397 [ 85.439495][ T5730] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 85.447731][ T5730] RSP: 002b:00007ffcf076d3f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 85.451377][ T5730] RAX: 0000000000000000 RBX: 00007f3c204344bb RCX: 00007f3c2039f397 [ 85.454836][ T5730] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf076d4b0 [ 85.458390][ T5730] RBP: 00007ffcf076d4b0 R08: 00007ffcf076e4b0 R09: 00000000ffffffff [ 85.462094][ T5730] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf076e540 [ 85.465970][ T5730] R13: 00007f3c204344bb R14: 0000000000014cc4 R15: 00007ffcf076e580 [ 85.469908][ T5730] [ 85.471315][ T5730] Modules linked in: [ 85.473648][ T5730] ---[ end trace 0000000000000000 ]--- [ 85.476673][ ** replaying previous printk message ** [ 85.476673][ T5730] RIP: 0010:jffs2_del_ino_cache+0x24f/0x2c0 [ 85.477326][ T5730] Code: 4c 89 e2 49 8b 5e 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 71 49 89 1c 24 e9 42 ff ff ff e8 f2 73 81 fe 90 <0f> 0b e8 aa de f4 fe e9 5b fe ff ff e8 70 de f4 fe e9 59 ff ff ff [ 85.477346][ T5730] RSP: 0018:ffffc90003cffa98 EFLAGS: 00010293 [ 85.477363][ T5730] RAX: 0000000000000000 RBX: ffff88802caa2000 RCX: 0000000000000000 [ 85.477375][ T5730] RDX: ffff88802bb42580 RSI: ffffffff838ad45e RDI: ffff888051405ee0 [ 85.477387][ T5730] RBP: 0000000000000006 R08: 0000000000000000 R09: ffffed100595446c [ 85.477400][ T5730] R10: ffff88802caa2363 R11: 0000000000000000 R12: ffff888056e03c80 [ 85.477412][ T5730] R13: dffffc0000000000 R14: ffff888051405ec0 R15: ffff888056e03d30 [ 85.477425][ T5730] FS: 000055556f21e500(0000) GS:ffff8880d5e4f000(0000) knlGS:0000000000000000 [ 85.477463][ T5730] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.477476][ T5730] CR2: 00007f78a7a43d58 CR3: 000000004fecf000 CR4: 0000000000352ef0 [ 85.477489][ T5730] Kernel panic - not syncing: Fatal exception [ 85.521475][ T5730] Kernel Offset: disabled [ 85.523380][ T5730] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:38:10 Registers: info registers vcpu 0 CPU#0 RAX=000000000004bb94 RBX=ffffffff8ea91580 RCX=ffffffff8bd28215 RDX=0000000000000001 RSI=ffffffff8c623900 RDI=ffffffff81e097ee RBP=fffffbfff1d522b0 RSP=ffffffff8ea07cf0 R8 =0000000000000000 R9 =ffffed100d4867bd R10=ffff88806a433deb R11=ffffffff81d75dd9 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d40fa2 R15=dffffc0000000000 RIP=ffffffff8bd2674f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5b4f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f78a7a63ff8 CR3=000000003c432000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555557db6860 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3bb15f2e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3bb15f2e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555557db4e68 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01800401c7080006 0144ba00746e6d2f 2e01ffffffffffff fffff3080180031a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000031 6c6e747a797301ff ffffffffffffffdf 0807800307fe1000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 feeffa0800019803 0785f4cc08000190 032a900400018c03 3c04000188032808 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0106080008100016 1000060174940010 0000040100000208 0606016ca2000200 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0700080060030010 0050030010004003 0210003003281000 04900300020001a0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0304ddfeeffa0800 0198030785f4cc08 000190032a900400 018c033c04000188 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0328080001800301 8004048003048004 200300080010030f ffffffffffff0400 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 040011b403080400 11b00300020011a8 0310040011a4030a 040011a003040800 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=8000000000000001 RBX=0000000000000003 RCX=ffffffff81ff8423 RDX=0000000000000001 RSI=0000000000000000 RDI=0000000000000005 RBP=ffff88806a743ca0 RSP=ffffc900036ff548 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffed100685c763 R13=0000000000000003 R14=ffffed100d4e8795 R15=0000000000000001 RIP=ffffffff820c40f8 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5c4f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3baee09000 CR3=000000004ffe8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73746174735f7465 7365722e6f696b6c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf9371946 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf9371946 00007ffcf937194c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbfec3564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbfec3568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbfec357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbfec35680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=ffff88802b004b80 RCX=ffffffff81df258f RDX=0000000000000000 RSI=ffffe8fefc6871c0 RDI=0000001344d9bff0 RBP=ffffe8fefc6871c0 RSP=ffffc90000658bf0 R8 =0000000000000000 R9 =fffffbfff228ab2b R10=ffffffff9145595f R11=0000000000000008 R12=0000001344d9bff0 R13=0000001344d9bff0 R14=0000000000000001 R15=ffff88802b004c80 RIP=ffffffff81d9a2c0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555573f91500 ffffffff 00c00000 GS =0000 ffff8880d5d4f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f78a79556c8 CR3=000000004fc0b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7379735f65676173 752e746363617570 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe068a4216 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe068a4216 00007ffe068a421c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78a6c3564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78a6c3568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78a6c357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78a6c35680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b180b5 RDI=ffffffff9bc75f60 RBP=ffffffff9bc75f20 RSP=ffffc90003cff238 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=000000000000005d R14=000000000000000d R15=ffffc90003cff550 RIP=ffffffff85b180df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556f21e500 ffffffff 00c00000 GS =0000 ffff8880d5e4f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f78a7a43d58 CR3=000000004fecf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000007 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7379735f65676173 752e746363617570 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe068a4216 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe068a4216 00007ffe068a421c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78a6c3564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78a6c3568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78a6c357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78a6c35680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000001c 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000020ca0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000001c 0000000000000000 0000000000000000 0000000000020ca0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000