last executing test programs: 9.27650783s ago: executing program 1 (id=88): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1ff, 0x101940) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000300)={{0x8, 0x1, 0x100, 0x92e, 'syz0\x00', 0xf0}, 0x1, [0xffffffffffffff81, 0x8, 0x1, 0x7f, 0x6, 0x4, 0x6, 0x2, 0x8000000000000001, 0x46, 0x4b25, 0x5, 0x4, 0xffffffffffff77db, 0x3, 0x49e2, 0x9, 0x1, 0x1, 0x1f61, 0x10, 0x6, 0x8000000000000001, 0x2, 0x6, 0x101, 0x12, 0x1000, 0x8, 0x8, 0x6, 0x4, 0x7, 0x3, 0x7fffffff, 0x9, 0x6, 0x4d, 0x592, 0x5, 0x7, 0x3, 0x26, 0x2, 0x7, 0x9, 0x0, 0x10001, 0x80000000, 0x7, 0xf, 0x6, 0x5, 0x2, 0x8, 0x9, 0x4, 0x0, 0x0, 0x1ff, 0xe, 0x8, 0x4, 0x2, 0x242000000000, 0x8, 0x1, 0x56, 0x6, 0x9, 0x5, 0x7, 0x9, 0x8012, 0x7, 0xe5f9, 0xe, 0xffffffff80000000, 0x4, 0x2, 0x3, 0x100000003, 0x3, 0x8, 0x8, 0x471a, 0x0, 0x2, 0x2007, 0x6703, 0x8, 0x800, 0x6, 0x1, 0x3ff, 0x3, 0x5, 0x8, 0xfae, 0x10, 0x9, 0xab8, 0xffffffffffffffb5, 0x4, 0x7, 0x3, 0x0, 0x8, 0xc, 0xffffffffffff036a, 0xa, 0xd, 0x0, 0x4040000000, 0x8000, 0x4a10, 0x2, 0x7fff, 0x5ba, 0x6, 0x8000000000000001, 0x400000000000, 0xffffffffffff1d34, 0xc, 0x3c7, 0x5, 0x7, 0x2]}) (async) write(0xffffffffffffffff, &(0x7f00000002c0)="09f8000001", 0x5) (async) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_adj\x00') writev(r3, &(0x7f0000000240)=[{&(0x7f0000000800)='1', 0x1}, {&(0x7f0000000840)="c2", 0x1}], 0x2) (async) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000880)={0xf, 0x14, 0xe, 0x2, 0x4, 0x1, 0x4, 0x18}) r4 = socket(0x10, 0x80002, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) (async) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) ioctl$CDROM_SELECT_SPEED(r3, 0x5322, 0x40) 9.276317236s ago: executing program 1 (id=89): r0 = syz_open_dev$video(&(0x7f0000000000), 0x4, 0x402140) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000040)) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x4d, 0x2}, 0x7) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000140)={0x5, 0x2, 0x81}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x2a0080, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f00000001c0)) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000200)) r2 = syz_open_dev$radio(&(0x7f00000002c0), 0x3, 0x2) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000300)={0xa, @sdr={0x3131354f, 0x6}}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x8, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) r4 = socket$inet_smc(0x2b, 0x1, 0x0) lseek(r4, 0x3, 0x2) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f00000005c0)={r3, &(0x7f00000004c0)='\x00', 0x82, &(0x7f0000000500)={@align=0x1000, {0x2, 0x8, 0x8, 0x2}}, 0x100000, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x58}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000600)={0x48, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r5, 0x3ba0, &(0x7f0000000680)={0x48, 0xa, r6}) r7 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_pdu(r7, &(0x7f0000000700)=@r2t={{0x9, 0x6, 0x18, 0xa, 0x7}, 0x5, 0xf4a, 0x5, 0x2}, 0x80, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000780)={0x11, 0x4, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x2, 0x1, [0x8]}}, @generic={0x5, 0x9, "37ef7bfcc2cef49749"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x30) socket$tipc(0x1e, 0x2, 0x0) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000007c0)=0x5) r8 = syz_open_dev$vcsa(&(0x7f0000000800), 0x4, 0x640) ioctl$KVM_CAP_HYPERV_SEND_IPI(r8, 0x4068aea3, &(0x7f0000000840)) newfstatat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) statx(r5, &(0x7f00000009c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000008c0)='./file0/file0\x00', r9, r10) r11 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000b00), 0x10000, 0x0) ioctl$CDROMREADALL(r11, 0x5318, &(0x7f0000000b40)) fcntl$setstatus(r1, 0x4, 0x42400) 9.210973334s ago: executing program 1 (id=90): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000240)={0x0, &(0x7f0000000000)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x200, 0x20000000007fff}}, @nested_vmlaunch={0x12f, 0x18}], 0x80}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x24) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$CDROM_NEXT_WRITABLE(0xffffffffffffffff, 0x5394, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/kmsg\x00', 0x800, 0x0) read(r5, 0x0, 0x0) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f00000000c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.040637386s ago: executing program 1 (id=91): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) exit(0x5) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) mkdir(&(0x7f0000000140)='./sys\x00', 0x14a) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x6, 0x4) mkdir(&(0x7f0000000040)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x4) setsockopt$inet_int(r1, 0x0, 0x18, 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write(r2, &(0x7f0000000700)='transport=fc,traddr=nn-0x1000000044001122:pn-0x2000000044001122,host_traddr=nn-0x1000000044001123:pn-0x2000000044001123,nqn=testsubsys,hostnqn=n', 0x90) mount(0x0, &(0x7f0000001700)='./sys\x00', &(0x7f0000001800)='sysfs\x00', 0x1c082, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000240)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000640)={0x2, 0x4e20, @empty}, 0x10) keyctl$join(0x1, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys\x00', 0x1dd) mount(0x0, &(0x7f0000000800)='./sys\x00', &(0x7f0000000840)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./sys/bus/nd/devices/pfn0.0/align\x00', 0x1, 0x0) writev(r5, &(0x7f00000008c0)=[{&(0x7f0000000900)="db", 0x1}], 0x1) fcntl$setstatus(r4, 0x4, 0x40800) connect$inet(r4, &(0x7f0000000680)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r6, 0x2000009) sendfile(r4, r6, 0x0, 0x7ffff004) write(0xffffffffffffffff, &(0x7f0000001d00)='0 4 0 2', 0x7) 8.17121293s ago: executing program 1 (id=92): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}, @uuid={'CRP-syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000240)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0x8000, 0x0, 0x0, @by_dev={r1}, [@raid={0x0, 0x8, 0x0, 0x78, 'raid\x00', {'raid0', 0x20, '3 64 daemon_sleep 100', 0x20, 0x1, [{0x20, @none, 0x20, @ram_num={'1:', 0x0}}]}}]}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt\x00', 0x1ff) open$dir(&(0x7f0000000740)='./mnt\x00', 0x48a00, 0x11) mount(&(0x7f0000000600)=@filename='./dev/sda1\x00', &(0x7f0000000640)='./mnt\x00', &(0x7f0000000680)='ext4\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./mnt\x00', 0x149000, 0x19a) ioctl$XFS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000700)) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r3, &(0x7f0000000040)=[{&(0x7f0000000080)=""/58, 0x3a}], 0x1, &(0x7f0000000400)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000100000000000000000085000000c500000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.100502572s ago: executing program 1 (id=93): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 5.790681122s ago: executing program 3 (id=108): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x1077, &(0x7f0000000040)={0x0, 0xafc4, 0x1, 0x5, 0x2d2}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="10000000f1000300", @ANYRES8], 0x0) 5.789700393s ago: executing program 3 (id=109): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001240)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000001280)={0x34, &(0x7f00000012c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xc0145b0e, &(0x7f0000001300)={0x100000, 0xffffffff, 0xfffffffd, 0x4, 0x69702c63, 0x7ff}) syz_open_procfs(r1, &(0x7f0000000000)='map_files\x00') (async) r4 = syz_open_procfs(r1, &(0x7f0000000000)='map_files\x00') getdents(r4, &(0x7f0000000040)=""/195, 0xc3) (async) getdents(r4, &(0x7f0000000040)=""/195, 0xc3) r5 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) recvfrom(r4, &(0x7f00000001c0)=""/4096, 0x1000, 0x12103, &(0x7f00000011c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x2, 0x4, 0x2, 0x4, {0xa, 0x4e20, 0x2040, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf35}}}, 0x80) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) socket$pppl2tp(0x18, 0x1, 0x1) 5.58090542s ago: executing program 0 (id=111): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000480)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) ioprio_set$pid(0x3, r3, 0x6007) sync() r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r2, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x2c, r4, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, 'THAWED\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xc, 0x14, '+$}\\}@(*'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) sendmmsg$inet(r5, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000240)={r6, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x4}) r7 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r7, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0xc) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x1, 0x2, 0x0, 0x3, 0x1}, 0x2c) 5.444492457s ago: executing program 0 (id=113): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'pim6reg0\x00', &(0x7f0000000280)=@ethtool_gstrings={0x1b, 0x0, 0x2b, "460fd189cedc8522b279627c87c26c9a13e94305d074db46c9109525eaf4ea70e1ee75be3940ac09e9643d"}}) r1 = socket$kcm(0xa, 0x2, 0x0) close(r1) socket$kcm(0x2, 0x2, 0x73) setsockopt$sock_attach_bpf(r1, 0x0, 0x4, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2}) fcntl$getownex(r2, 0x10, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000080)=[0x0], &(0x7f0000000080), &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x1, 0x0, 0x7, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000480)={&(0x7f0000000440)=[0x0, 0x0], 0x37}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000a00)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000700)={&(0x7f0000000600)="9c39aa9009e02306b58d61366b73c6ac864e40f2fb30c148622d3798eb81e922b55dd18af26559f223cf34dea783f94781887d69b2cebabb5a0bbb807fcd1c277ae13cf30bee99d630b5b66e4a6a716b7a769fd15e65a51dda9867bba3a4a08fb4287a6e44dae18e7f507daf581eca1deeacbb3b7eb57bc208d33fa8b6980f1c85e8da25dd20eac8c8e85066f485344577bdaade2a241544ccaf1c9ff17da7ee05d625c9dd4f8a36a5be71e9e527c459cf76f9d177db7d978f74eaaed9ec8ec0a47623c9ea411e6daf3882b344303e9d5f06698ec9a1da533452", 0xda}) r4 = syz_open_dev$dri(&(0x7f0000000840), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000880)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f00000008c0)={&(0x7f0000000900)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000940)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000980)={&(0x7f00000009c0)=[0x0, 0x0, 0x0], &(0x7f0000000a00), 0x3, r6}) r7 = syz_open_dev$dri(&(0x7f0000000b80), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000bc0)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000c00)={&(0x7f0000000c40)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000c80)={&(0x7f0000000cc0)=[0x0, 0x0], &(0x7f0000000d00), 0x2, r8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000d40)={0x1, 0x1, &(0x7f0000000d80)=[r8], &(0x7f0000000dc0)=[0x4], &(0x7f0000000e00)=[r9], &(0x7f0000000e40), 0x0, 0x7fffffff}) 5.380522356s ago: executing program 0 (id=116): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000000c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000be4000/0x1000)=nil, 0x4000000004, &(0x7f0000000140)=[{0x2, 0x6, 0xffffffffffffffff}, {0xfffffffffffffffe, 0xfffffffffffffffd, 0xffffffff}], 0x2, 0x3fe, 0x1e, 0x0, 0x2c, 0x5f}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180)={0x0, 0xff}, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x16, 0xffe0}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000020000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x71, 0x81, 0x2, 0xb, 0x12, 0x5}}, @TCA_RED_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x150}}, 0x0) 5.378842703s ago: executing program 0 (id=117): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001"], 0x30}}, 0x0) setitimer(0x2, 0x0, &(0x7f0000000140)) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = io_uring_setup(0x1b7b, &(0x7f0000000080)={0x0, 0x970, 0x1f480, 0x2, 0x325}) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r1], 0x30}, 0x1, 0x0, 0x0, 0x4081}, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x5) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000240)="0f01c2440f35676566400fc7b29f000000650f01cfc7442400db000000c74424022b100000c7442406000000000f011c24c744240001000000c744240200000080ff1c24400f01f666ba2100edc7442400fd00c0fec744240200480000c7442406000000000f011c246566400f38288801000000", 0x74}], 0x1, 0x2c, &(0x7f0000000300), 0x0) 5.310626102s ago: executing program 0 (id=118): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d10c6a41d10f5fe0000fef50000070000000a0001006f776e657200000010000180080001006f736600040002800900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010) socket$kcm(0x2, 0x3, 0x84) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/fscreate\x00') write$binfmt_script(r3, &(0x7f00000008c0)={'#! ', './mnt', [{0x20, 'mu\x04\x00\x00\x00ath\x00\x8b'}, {0x20, '{('}, {0x20, ']p)l\xa83\x05KE\xa1@\xa5\x05\xea\x87\xeb\xe0\x02\xca\xcd\x1a\xc6\xbd\xe22\xe1\x9b\xb4$\xdc\xc6\xe9\xd3F\xabou\x0fUxM\x1e\xfc\xe8\xcb\xbd\xfa\x7f\x14\xab\xad\xfcy'}, {0x20, '($@^@}]'}, {0x20, '1 rdac'}, {0x20, 'ext4\x00'}], 0xa, "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"}, 0x1d9) mount(0x0, &(0x7f00000018c0)='./dev\x00', &(0x7f0000001900)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001940)='./mnt\x00', 0x1ff) mount(&(0x7f0000001980)=@filename='./dev/sda1\x00', &(0x7f00000019c0)='./mnt\x00', &(0x7f0000001a00)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000001a40)='./mnt\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001a80)='./debug\x00', 0x1ff) syz_genetlink_get_family_id$nl80211(0x0, r2) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x1c8, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, [@multipath={0x0, 0x2010, 0x0, 0x90, 'multipath\x00', {'0', 0x20, '1 rdac', 0x20, 0x1, 0x20, 0x2, [{0x20, 'historical-service-time 0', 0x20, 0x0, 0x20, '2'}]}}]}) openat$dm_control(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d10c6a41d10f5fe0000fef50000070000000a0001006f776e657200000010000180080001006f736600040002800900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010) (async) socket$kcm(0x2, 0x3, 0x84) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/fscreate\x00') (async) write$binfmt_script(r3, &(0x7f00000008c0)={'#! ', './mnt', [{0x20, 'mu\x04\x00\x00\x00ath\x00\x8b'}, {0x20, '{('}, {0x20, ']p)l\xa83\x05KE\xa1@\xa5\x05\xea\x87\xeb\xe0\x02\xca\xcd\x1a\xc6\xbd\xe22\xe1\x9b\xb4$\xdc\xc6\xe9\xd3F\xabou\x0fUxM\x1e\xfc\xe8\xcb\xbd\xfa\x7f\x14\xab\xad\xfcy'}, {0x20, '($@^@}]'}, {0x20, '1 rdac'}, {0x20, 'ext4\x00'}], 0xa, "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"}, 0x1d9) (async) mount(0x0, &(0x7f00000018c0)='./dev\x00', &(0x7f0000001900)='devtmpfs\x00', 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001940)='./mnt\x00', 0x1ff) (async) mount(&(0x7f0000001980)=@filename='./dev/sda1\x00', &(0x7f00000019c0)='./mnt\x00', &(0x7f0000001a00)='ext4\x00', 0x8410, 0x0) (async) chdir(&(0x7f0000001a40)='./mnt\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001a80)='./debug\x00', 0x1ff) (async) syz_genetlink_get_family_id$nl80211(0x0, r2) (async) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) (async) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x1c8, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, [@multipath={0x0, 0x2010, 0x0, 0x90, 'multipath\x00', {'0', 0x20, '1 rdac', 0x20, 0x1, 0x20, 0x2, [{0x20, 'historical-service-time 0', 0x20, 0x0, 0x20, '2'}]}}]}) (async) 5.261055149s ago: executing program 0 (id=119): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) exit(0x5) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) mkdir(&(0x7f0000000140)='./sys\x00', 0x14a) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x6, 0x4) mkdir(&(0x7f0000000040)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x4) setsockopt$inet_int(r1, 0x0, 0x18, 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write(r2, &(0x7f0000000700)='transport=fc,traddr=nn-0x1000000044001122:pn-0x2000000044001122,host_traddr=nn-0x1000000044001123:pn-0x2000000044001123,nqn=testsubsys,hostnqn=n', 0x90) mount(0x0, &(0x7f0000001700)='./sys\x00', &(0x7f0000001800)='sysfs\x00', 0x1c082, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000240)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000640)={0x2, 0x4e20, @empty}, 0x10) keyctl$join(0x1, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys\x00', 0x1dd) mount(0x0, &(0x7f0000000800)='./sys\x00', &(0x7f0000000840)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./sys/bus/nd/devices/pfn0.0/align\x00', 0x1, 0x0) writev(r5, &(0x7f00000008c0)=[{&(0x7f0000000900)="db", 0x1}], 0x1) fcntl$setstatus(r4, 0x4, 0x40800) connect$inet(r4, &(0x7f0000000680)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) write(r6, &(0x7f0000001d00)='0 4 0 2', 0x7) 2.720129157s ago: executing program 3 (id=122): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000480)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) ioprio_set$pid(0x3, r3, 0x6007) sync() r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r2, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x2c, r4, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, 'THAWED\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xc, 0x14, '+$}\\}@(*'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) sendmmsg$inet(r5, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000240)={r6, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x4}) r7 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r7, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0xc) write$nci(r0, &(0x7f0000000280)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x1, 0x2, 0x0, 0x3, 0x1}, 0x2c) 2.589914111s ago: executing program 3 (id=123): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f00000000c0)="240000001500050001000000000000000e010003080002000900000008000600e8030000", 0x24) 2.589546813s ago: executing program 3 (id=124): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) (async, rerun: 64) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (rerun: 64) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x4}]}, 0x10) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) (rerun: 32) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @broadcast}) (async, rerun: 64) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r6, 0xfffff789) (async) r7 = accept(r6, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x1000, 0x1000, 0x7ffe, 0x0, 0x2a, 0x4, 0xe0}, 0x9c) (async, rerun: 64) write$tun(r4, &(0x7f0000000180)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0x18, 0x66, 0x0, 0x3, 0x73, 0x0, @rand_addr=0x64010120, @broadcast, {[@ra={0x94, 0x4}]}}}}, 0x26) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x1009, 0x7c}, {0x3, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0xd0f, 0x170bd2b, 0x25dfdbfe, {0x60, 0x0, 0x0, r8, {}, {0xe, 0xa}, {0xf, 0xfffb}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c044}, 0x0) (async, rerun: 64) recvfrom$inet(r0, &(0x7f0000000480)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.900765625s ago: executing program 2 (id=125): openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendfile(r0, r0, 0x0, 0x3) 1.849019956s ago: executing program 2 (id=126): syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@remote}, {@remote}, {@dev}, {}, {@multicast2}, {@local}, {@local}, {@multicast1}]}]}}}}}}}, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x0, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x0, 0x0, 0x2}]}, 0x38}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000300)="11223344", 0x4, 0x0, &(0x7f0000000340)={0x2, 0x4d2, @remote}, 0x10) 1.84887115s ago: executing program 2 (id=127): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, 0x0) 1.770337611s ago: executing program 2 (id=128): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) r0 = syz_io_uring_setup(0xf03, &(0x7f0000000040)={0x0, 0x5b5f, 0x10000, 0x0, 0x51}, &(0x7f00000000c0)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) setns(0xc9, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14381, 0x18200}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x7000000, 0x0, 0x20000040}, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = epoll_create(0x80) syz_io_uring_submit(r1, r2, r3, &(0x7f00000002c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x8, 0x0, r6, r5, &(0x7f0000000340)={0x2000}, 0x3, 0x0, 0x1}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f00000001c0)='3', 0x4e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 1.657998065s ago: executing program 3 (id=129): timer_create(0x0, &(0x7f0000000ac0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) exit(0x20000000000051a) tkill(r1, 0x12) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000009) wait4(0x0, 0x0, 0x8, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) 337.551901ms ago: executing program 2 (id=130): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000005c0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0x8, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa76f, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000804, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400840, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) acct(&(0x7f0000000040)='./file0\x00') (async) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000ac0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000b40)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000d00)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000d40)=[@text32={0x20, &(0x7f0000000d80)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000dc0)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) (async, rerun: 64) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r7 = socket$packet(0x11, 0x2, 0x300) bind$packet(r7, &(0x7f00000000c0)={0x11, 0xf5}, 0x14) (async, rerun: 32) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ptype\x00') (rerun: 32) preadv(r8, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/138, 0x8a}], 0x1, 0xbc, 0xfffffffb) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 2 (id=131): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000480)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) ioprio_set$pid(0x3, r3, 0x6007) sync() r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r2, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x2c, r4, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, 'THAWED\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xc, 0x14, '+$}\\}@(*'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) sendmmsg$inet(r5, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000240)={r6, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x4}) socket$netlink(0x10, 0x3, 0xb) write$nci(r0, &(0x7f0000000280)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x1, 0x2, 0x0, 0x3, 0x1}, 0x2c) kernel console output (not intermixed with test programs): [ 37.940710][ T42] audit: type=1400 audit(1793691358.780:136): avc: denied { rlimitinh } for pid=5763 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.940823][ T42] audit: type=1400 audit(1793691358.780:137): avc: denied { siginh } for pid=5763 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:35517' (ED25519) to the list of known hosts. [ 38.841370][ T42] audit: type=1400 audit(1793691359.680:138): avc: denied { name_bind } for pid=5770 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 38.878664][ T42] audit: type=1400 audit(1793691359.720:139): avc: denied { execute } for pid=5771 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 38.879160][ T42] audit: type=1400 audit(1793691359.720:140): avc: denied { execute_no_trans } for pid=5771 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 41.254943][ T42] audit: type=1400 audit(1793691362.100:141): avc: denied { mounton } for pid=5771 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.256615][ T42] audit: type=1400 audit(1793691362.100:142): avc: denied { mount } for pid=5771 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.258594][ T5771] cgroup: Unknown subsys name 'net' [ 41.397730][ T5771] cgroup: Unknown subsys name 'cpuset' [ 41.402584][ T5771] cgroup: Unknown subsys name 'rlimit' [ 41.633657][ T5776] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.421175][ T5771] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.396334][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 46.396353][ T42] audit: type=1400 audit(1793691367.240:154): avc: denied { execmem } for pid=5778 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.594868][ T42] audit: type=1400 audit(1793691367.430:155): avc: denied { create } for pid=5782 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.595291][ T42] audit: type=1400 audit(1793691367.440:156): avc: denied { read write } for pid=5782 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.596054][ T42] audit: type=1400 audit(1793691367.440:157): avc: denied { open } for pid=5782 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.601629][ T42] audit: type=1400 audit(1793691367.440:158): avc: denied { ioctl } for pid=5782 comm="syz-executor" path="socket:[1941]" dev="sockfs" ino=1941 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.621024][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.621569][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.623558][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.626472][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.627872][ T67] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.628716][ T67] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.632642][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.636504][ T42] audit: type=1400 audit(1793691367.480:159): avc: denied { read } for pid=5782 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.637137][ T42] audit: type=1400 audit(1793691367.480:160): avc: denied { open } for pid=5782 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.639647][ T42] audit: type=1400 audit(1793691367.480:161): avc: denied { mounton } for pid=5782 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.640469][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.642331][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.643525][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.643783][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.643811][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.644378][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.645964][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.646429][ T42] audit: type=1400 audit(1793691367.490:162): avc: denied { module_request } for pid=5782 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.653226][ T42] audit: type=1400 audit(1793691367.490:163): avc: denied { mounton } for pid=5792 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.653682][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.654051][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.655578][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.655808][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.658491][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.658999][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.849451][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.850080][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.854367][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.881370][ T5791] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 46.892641][ T5792] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 46.926264][ T5782] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 46.975769][ T5784] infiniband rxe0: set active [ 46.977367][ T5784] infiniband rxe0: added rxe_eth0 [ 46.983128][ T79] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.985299][ T5784] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 46.985328][ T5784] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 46.985363][ T5784] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 47.002114][ T5784] RDS/IB: rxe0: added [ 47.002226][ T5784] smc: adding ib device rxe0 with port count 1 [ 47.002263][ T5784] smc: ib device rxe0 port 1 has no pnetid [ 47.013961][ T58] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.028184][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.130082][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.177901][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.178579][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.178679][ T5791] bridge_slave_0: entered allmulticast mode [ 47.179852][ T5791] bridge_slave_0: entered promiscuous mode [ 47.184376][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.184544][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.185255][ T5791] bridge_slave_1: entered allmulticast mode [ 47.186508][ T5791] bridge_slave_1: entered promiscuous mode [ 47.239105][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.260257][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.288317][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.299245][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.299324][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.299383][ T5782] bridge_slave_0: entered allmulticast mode [ 47.300151][ T5782] bridge_slave_0: entered promiscuous mode [ 47.311992][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.312074][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.312221][ T5782] bridge_slave_1: entered allmulticast mode [ 47.312938][ T5782] bridge_slave_1: entered promiscuous mode [ 47.341738][ T5791] team0: Port device team_slave_0 added [ 47.343416][ T5791] team0: Port device team_slave_1 added [ 47.344716][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.346162][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.369266][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.370263][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.370323][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.370612][ T5792] bridge_slave_0: entered allmulticast mode [ 47.371871][ T5792] bridge_slave_0: entered promiscuous mode [ 47.393264][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.393384][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.393534][ T5792] bridge_slave_1: entered allmulticast mode [ 47.395361][ T5792] bridge_slave_1: entered promiscuous mode [ 47.407648][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.407664][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.407687][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.417168][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.418940][ T5782] team0: Port device team_slave_0 added [ 47.419943][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.419956][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.419979][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.421365][ T5782] team0: Port device team_slave_1 added [ 47.428873][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.463203][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.463238][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.463253][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.465317][ T5792] team0: Port device team_slave_0 added [ 47.466558][ T5792] team0: Port device team_slave_1 added [ 47.469878][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.469887][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.469901][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.479343][ T5791] hsr_slave_0: entered promiscuous mode [ 47.479988][ T5791] hsr_slave_1: entered promiscuous mode [ 47.500632][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.500643][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.500657][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.505888][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.505898][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.505912][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.593077][ T5782] hsr_slave_0: entered promiscuous mode [ 47.593510][ T5782] hsr_slave_1: entered promiscuous mode [ 47.593985][ T5782] debugfs: 'hsr0' already exists in 'hsr' [ 47.593995][ T5782] Cannot create hsr debugfs directory [ 47.625747][ T5792] hsr_slave_0: entered promiscuous mode [ 47.626301][ T5792] hsr_slave_1: entered promiscuous mode [ 47.626594][ T5792] debugfs: 'hsr0' already exists in 'hsr' [ 47.626603][ T5792] Cannot create hsr debugfs directory [ 47.911706][ T5791] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.918358][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.945503][ T5791] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.948907][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.962654][ T5791] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.965819][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.983744][ T5791] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.985833][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.987257][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.987370][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.987463][ T5784] bridge_slave_0: entered allmulticast mode [ 47.988977][ T5784] bridge_slave_0: entered promiscuous mode [ 48.003383][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.003427][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.003489][ T5784] bridge_slave_1: entered allmulticast mode [ 48.004190][ T5784] bridge_slave_1: entered promiscuous mode [ 48.029857][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.029894][ T5792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.032714][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.033560][ T5792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.036883][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.047634][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.060370][ T5792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.063763][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.067833][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.067921][ T5791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.068181][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.068227][ T5791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.071257][ T5784] team0: Port device team_slave_0 added [ 48.073128][ T5784] team0: Port device team_slave_1 added [ 48.073336][ T5792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.077919][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.119610][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.119622][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.119636][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.128166][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.135572][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.157999][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.158014][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.158035][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.193394][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.195701][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.200356][ T5784] hsr_slave_0: entered promiscuous mode [ 48.201365][ T5784] hsr_slave_1: entered promiscuous mode [ 48.201918][ T5784] debugfs: 'hsr0' already exists in 'hsr' [ 48.201931][ T5784] Cannot create hsr debugfs directory [ 48.209125][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.212822][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.215997][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.220366][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.221231][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.225837][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.367444][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.398825][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.416605][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.418488][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.420769][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.421178][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.423134][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.428868][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.432057][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.433606][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.433654][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.439148][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.444280][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.446632][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.447896][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.447968][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.468511][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.468557][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.484860][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.484944][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.533819][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.563642][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.583974][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.584147][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.602756][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.602843][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.655844][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.671320][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.676707][ T5786] Bluetooth: hci0: command tx timeout [ 48.676888][ T5790] Bluetooth: hci3: command tx timeout [ 48.677811][ T1719] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.677854][ T1719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.681864][ T1719] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.681926][ T1719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.745864][ T5790] Bluetooth: hci1: command tx timeout [ 48.755151][ T5790] Bluetooth: hci2: command tx timeout [ 48.832578][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.863194][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.880735][ T5791] veth0_vlan: entered promiscuous mode [ 48.890139][ T5791] veth1_vlan: entered promiscuous mode [ 48.920081][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.926106][ T5792] veth0_vlan: entered promiscuous mode [ 48.932248][ T5791] veth0_macvtap: entered promiscuous mode [ 48.934708][ T5792] veth1_vlan: entered promiscuous mode [ 48.939828][ T5791] veth1_macvtap: entered promiscuous mode [ 48.950985][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.962415][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.994608][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.995935][ T5782] veth0_vlan: entered promiscuous mode [ 49.012747][ T5782] veth1_vlan: entered promiscuous mode [ 49.036732][ T5792] veth0_macvtap: entered promiscuous mode [ 49.048380][ T1719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.048398][ T1719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.053568][ T5792] veth1_macvtap: entered promiscuous mode [ 49.070481][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.070498][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.080610][ T5782] veth0_macvtap: entered promiscuous mode [ 49.084453][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.086940][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.100370][ T5782] veth1_macvtap: entered promiscuous mode [ 49.106462][ T5784] veth0_vlan: entered promiscuous mode [ 49.121575][ T5784] veth1_vlan: entered promiscuous mode [ 49.127276][ T5856] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.127313][ T5856] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.137326][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.142218][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.151146][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.178933][ T5784] veth0_macvtap: entered promiscuous mode [ 49.192994][ T5784] veth1_macvtap: entered promiscuous mode [ 49.200903][ T5791] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.222166][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.222180][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.232375][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.243536][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.252064][ T1719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.252081][ T1719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.268965][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.280272][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.280290][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.290009][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.290028][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.305492][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.305557][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.305606][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.305636][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.305663][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.305691][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.305721][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.335317][ T5856] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.335345][ T5856] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.335364][ T5856] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.335388][ T5856] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.335415][ T5856] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.341799][ T1719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.341816][ T1719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.386255][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.386274][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.574562][ T5958] nvme_fabrics: found same hostid 3b3270e4-f2c5-4715-8acb-4ee4e8e569b7 but different hostnqn n [ 49.583158][ T5958] ip_tables: iptables: counters copy to user failed while replacing table [ 49.591537][ T5959] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 49.591577][ T5959] block device autoloading is deprecated and will be removed. [ 49.600279][ T5958] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 49.600295][ T5958] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 49.601672][ T5960] vhci_hcd: xmit failed -107 [ 49.602392][ T5958] vhci_hcd vhci_hcd.0: Device attached [ 49.607062][ T13] vhci_hcd vhci_hcd.0: stop threads [ 49.607077][ T13] vhci_hcd vhci_hcd.0: release socket [ 49.607099][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 49.629810][ T5962] capability: warning: `syz.3.4' uses deprecated v2 capabilities in a way that may be insecure [ 50.744882][ T5790] Bluetooth: hci3: command tx timeout [ 50.744911][ T5790] Bluetooth: hci0: command tx timeout [ 50.825010][ T5786] Bluetooth: hci2: command tx timeout [ 50.825045][ T5786] Bluetooth: hci1: command tx timeout [ 51.060106][ T5983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=5983 comm=syz.2.10 [ 51.071988][ T5985] Zero length message leads to an empty skb [ 51.316984][ T5995] overlay: Unknown parameter 'permit_directio' [ 51.390835][ T5999] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 51.390851][ T5999] block device autoloading is deprecated and will be removed. [ 51.399631][ T5999] EXT4-fs warning (device sda1): verify_group_input:166: Cannot read last block (266218) [ 51.623444][ T42] kauditd_printk_skb: 79 callbacks suppressed [ 51.623457][ T42] audit: type=1400 audit(1793691372.460:243): avc: denied { mmap_zero } for pid=6009 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 51.625022][ T42] audit: type=1400 audit(1793691372.460:244): avc: denied { create } for pid=6009 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 51.626666][ T42] audit: type=1400 audit(1793691372.460:245): avc: denied { connect } for pid=6009 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 51.628514][ T42] audit: type=1400 audit(1793691372.470:246): avc: denied { ioctl } for pid=6009 comm="syz.0.19" path="socket:[7842]" dev="sockfs" ino=7842 ioctlcmd=0x80487436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 51.688533][ T42] audit: type=1400 audit(1793691372.530:247): avc: denied { read } for pid=6011 comm="syz.0.20" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 51.688565][ T42] audit: type=1400 audit(1793691372.530:248): avc: denied { open } for pid=6011 comm="syz.0.20" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 51.689106][ T42] audit: type=1400 audit(1793691372.530:249): avc: denied { ioctl } for pid=6011 comm="syz.0.20" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 51.737963][ T42] audit: type=1400 audit(1793691372.580:250): avc: denied { write } for pid=6011 comm="syz.0.20" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 51.751824][ T42] audit: type=1400 audit(1793691372.590:251): avc: denied { map } for pid=6011 comm="syz.0.20" path="socket:[10662]" dev="sockfs" ino=10662 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.752037][ T42] audit: type=1400 audit(1793691372.590:252): avc: denied { read } for pid=6011 comm="syz.0.20" path="socket:[10662]" dev="sockfs" ino=10662 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.099939][ T6033] CacheFiles: Failed to register: -95 [ 52.279600][ T6047] nvme_fabrics: found same hostid 3b3270e4-f2c5-4715-8acb-4ee4e8e569b7 but different hostnqn n [ 52.281412][ T6047] ip_tables: iptables: counters copy to user failed while replacing table [ 52.834942][ T5786] Bluetooth: hci3: command tx timeout [ 52.835009][ T5790] Bluetooth: hci0: command tx timeout [ 52.910478][ T6067] syz_tun: entered allmulticast mode [ 52.911115][ T6068] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 52.912876][ T6064] syz_tun: left allmulticast mode [ 52.914893][ T5786] Bluetooth: hci2: command tx timeout [ 52.914957][ T5790] Bluetooth: hci1: command tx timeout [ 52.980466][ T6074] netlink: 64 bytes leftover after parsing attributes in process `syz.0.34'. [ 52.984527][ T6074] syzkaller1: entered promiscuous mode [ 52.984540][ T6074] syzkaller1: entered allmulticast mode [ 54.904868][ T5790] Bluetooth: hci0: command tx timeout [ 54.904900][ T5790] Bluetooth: hci3: command tx timeout [ 54.984907][ T5786] Bluetooth: hci1: command tx timeout [ 54.984942][ T5786] Bluetooth: hci2: command tx timeout [ 55.225160][ T6043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 55.341824][ T6113] device-mapper: table: 248:0: flakey: Feature error_writes conflicts with feature drop_writes (-EINVAL) [ 55.341849][ T6113] device-mapper: ioctl: error adding target to table [ 55.344662][ T6115] nvme_fabrics: found same hostid 3b3270e4-f2c5-4715-8acb-4ee4e8e569b7 but different hostnqn n [ 55.349040][ T6115] ip_tables: iptables: counters copy to user failed while replacing table [ 55.388787][ T6119] ======================================================= [ 55.388787][ T6119] WARNING: The mand mount option has been deprecated and [ 55.388787][ T6119] and is ignored by this kernel. Remove the mand [ 55.388787][ T6119] option from the mount to silence this warning. [ 55.388787][ T6119] ======================================================= [ 55.440435][ T6121] netlink: 20 bytes leftover after parsing attributes in process `syz.3.47'. [ 55.440466][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.47'. [ 55.440851][ T6121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 55.493666][ T6123] can: request_module (can-proto-3) failed. [ 55.498319][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.44'. [ 55.940120][ T6145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.52'. [ 55.940136][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.52'. [ 55.940256][ T6145] netlink: 'syz.3.52': attribute type 11 has an invalid length. [ 55.940265][ T6145] netlink: 'syz.3.52': attribute type 7 has an invalid length. [ 56.146621][ T6148] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 56.146842][ T1166] IPVS: starting estimator thread 0... [ 56.154705][ T6147] netlink: 'syz.1.53': attribute type 2 has an invalid length. [ 56.161470][ T6147] !;: entered promiscuous mode [ 56.203748][ T6155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.55'. [ 56.254825][ T6151] IPVS: using max 42 ests per chain, 100800 per kthread [ 56.319199][ T6161] CacheFiles: Empty tag specified [ 56.744033][ T6180] FAULT_INJECTION: forcing a failure. [ 56.744033][ T6180] name failslab, interval 1, probability 0, space 0, times 1 [ 56.744063][ T6180] CPU: 0 UID: 0 PID: 6180 Comm: syz.1.62 Not tainted syzkaller #0 PREEMPT(full) [ 56.744085][ T6180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.744114][ T6180] Call Trace: [ 56.744122][ T6180] [ 56.744130][ T6180] dump_stack_lvl+0x100/0x190 [ 56.744166][ T6180] should_fail_ex.cold+0x5/0xa [ 56.744199][ T6180] should_failslab+0xc2/0x120 [ 56.744220][ T6180] __kvmalloc_node_noprof+0x113/0x9b0 [ 56.744253][ T6180] ? bucket_table_alloc+0x8d/0x4d0 [ 56.744289][ T6180] bucket_table_alloc+0x8d/0x4d0 [ 56.744330][ T6180] __rhashtable_init_noprof+0x521/0x9b0 [ 56.744354][ T6180] __rhltable_init_noprof+0x28/0x70 [ 56.744396][ T6180] nf_tables_newtable+0xf70/0x1a90 [ 56.744437][ T6180] ? __pfx_nf_tables_newtable+0x10/0x10 [ 56.744464][ T6180] ? net_generic+0x25/0x2a0 [ 56.744498][ T6180] ? __nla_parse+0x40/0x60 [ 56.744523][ T6180] nfnetlink_rcv_batch+0x1410/0x2880 [ 56.744567][ T6180] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 56.744601][ T6180] ? lock_acquire+0x1d1/0x380 [ 56.744628][ T6180] ? avc_has_perm_noaudit+0x56/0x470 [ 56.744659][ T6180] ? avc_has_perm_noaudit+0x145/0x470 [ 56.744707][ T6180] ? __nla_parse+0x40/0x60 [ 56.744731][ T6180] nfnetlink_rcv+0x3bd/0x440 [ 56.744758][ T6180] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 56.744796][ T6180] netlink_unicast+0x668/0x950 [ 56.744822][ T6180] ? __pfx_netlink_unicast+0x10/0x10 [ 56.744853][ T6180] netlink_sendmsg+0x9ac/0x10c0 [ 56.744883][ T6180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.744911][ T6180] ? selinux_socket_sendmsg+0x198/0x2f0 [ 56.744941][ T6180] ? ____sys_sendmsg+0xa99/0xc30 [ 56.744969][ T6180] ____sys_sendmsg+0xa99/0xc30 [ 56.744996][ T6180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.745023][ T6180] ? __pfx_____sys_sendmsg+0x10/0x10 [ 56.745061][ T6180] ___sys_sendmsg+0x190/0x1e0 [ 56.745089][ T6180] ? __pfx____sys_sendmsg+0x10/0x10 [ 56.745115][ T6180] ? futex_wait+0x11e/0x370 [ 56.745148][ T6180] ? find_held_lock+0x2b/0x80 [ 56.745183][ T6180] __sys_sendmsg+0x160/0x210 [ 56.745206][ T6180] ? __pfx___sys_sendmsg+0x10/0x10 [ 56.745242][ T6180] do_syscall_64+0x123/0x790 [ 56.745264][ T6180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.745286][ T6180] RIP: 0033:0x7fac14f9fb19 [ 56.745312][ T6180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.745330][ T6180] RSP: 002b:00007fac15dfd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.745351][ T6180] RAX: ffffffffffffffda RBX: 00007fac15225fa0 RCX: 00007fac14f9fb19 [ 56.745364][ T6180] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 56.745376][ T6180] RBP: 00007fac15037b70 R08: 0000000000000000 R09: 0000000000000000 [ 56.745389][ T6180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.745400][ T6180] R13: 00007fac15226038 R14: 00007fac15225fa0 R15: 00007ffc41fe2b38 [ 56.745425][ T6180] [ 56.747217][ T6180] netlink: 76 bytes leftover after parsing attributes in process `syz.1.62'. [ 56.764175][ T42] kauditd_printk_skb: 46 callbacks suppressed [ 56.764192][ T42] audit: type=1400 audit(1793691377.600:299): avc: denied { unmount } for pid=5791 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 56.843052][ T6183] nvme_fabrics: found same hostid 3b3270e4-f2c5-4715-8acb-4ee4e8e569b7 but different hostnqn n [ 56.844406][ T6183] ip_tables: iptables: counters copy to user failed while replacing table [ 57.452376][ T41] rxe_eth0 speed is unknown, defaulting to 1000 [ 57.498034][ T42] audit: type=1400 audit(1793691378.340:300): avc: denied { write } for pid=6184 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.561830][ T42] audit: type=1400 audit(1793691378.400:301): avc: denied { write } for pid=6187 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.708135][ T6193] ip_tables: iptables: counters copy to user failed while replacing table [ 57.709835][ T42] audit: type=1400 audit(1793691378.550:302): avc: denied { shutdown } for pid=6192 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.710316][ T42] audit: type=1400 audit(1793691378.550:303): avc: denied { shutdown } for pid=6192 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.713114][ T42] audit: type=1400 audit(1793691378.550:304): avc: denied { getopt } for pid=6192 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.402126][ T42] audit: type=1400 audit(1793691379.240:305): avc: denied { map } for pid=6200 comm="syz.1.68" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 58.402282][ T42] audit: type=1400 audit(1793691379.240:306): avc: denied { execute } for pid=6200 comm="syz.1.68" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 58.706991][ T6136] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 58.751898][ T42] audit: type=1400 audit(1793691379.590:307): avc: denied { ioctl } for pid=6211 comm="syz.3.74" path="/dev/vhost-vsock" dev="devtmpfs" ino=1308 ioctlcmd=0x8008af00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 58.754954][ T41] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 58.796048][ T6219] nvme_fabrics: found same hostid 3b3270e4-f2c5-4715-8acb-4ee4e8e569b7 but different hostnqn n [ 58.800982][ T6219] ip_tables: iptables: counters copy to user failed while replacing table [ 58.803249][ T42] audit: type=1400 audit(1793691379.640:308): avc: denied { write } for pid=6220 comm="syz.0.75" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 58.833869][ T6225] cgroup: Need name or subsystem set [ 58.876743][ T1136] ata1.00: exception Emask 0x0 SAct 0x1000 SErr 0x0 action 0x6 [ 58.876769][ T1136] ata1.00: waking up from sleep [ 58.876818][ T1136] ata1: hard resetting link [ 58.915272][ T6208] FAULT_INJECTION: forcing a failure. [ 58.915272][ T6208] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 58.915292][ T6208] CPU: 2 UID: 0 PID: 6208 Comm: syz.1.71 Not tainted syzkaller #0 PREEMPT(full) [ 58.915307][ T6208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.915314][ T6208] Call Trace: [ 58.915331][ T6208] [ 58.915337][ T6208] dump_stack_lvl+0x100/0x190 [ 58.915366][ T6208] should_fail_ex.cold+0x5/0xa [ 58.915386][ T6208] _copy_from_user+0x2e/0xd0 [ 58.915401][ T6208] memdup_user+0x6b/0xe0 [ 58.915414][ T6208] raw_alloc_io_data+0x186/0x1c0 [ 58.915434][ T6208] raw_ioctl+0x1332/0x2b80 [ 58.915455][ T6208] ? __pfx_raw_ioctl+0x10/0x10 [ 58.915472][ T6208] ? selinux_file_ioctl+0x1e0/0x290 [ 58.915490][ T6208] ? selinux_file_ioctl+0x1e7/0x290 [ 58.915509][ T6208] ? __pfx_raw_ioctl+0x10/0x10 [ 58.915527][ T6208] __x64_sys_ioctl+0x18e/0x210 [ 58.915547][ T6208] do_syscall_64+0x123/0x790 [ 58.915561][ T6208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.915574][ T6208] RIP: 0033:0x7fac14f9f7ab [ 58.915584][ T6208] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 58.915595][ T6208] RSP: 002b:00007fac15dfaf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.915607][ T6208] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fac14f9f7ab [ 58.915615][ T6208] RDX: 00007fac15dfafc0 RSI: 0000000040085503 RDI: 0000000000000004 [ 58.915622][ T6208] RBP: 00007fac15dfbfd0 R08: 0000000000000012 R09: 00007fac15dfafc8 [ 58.915629][ T6208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 58.915635][ T6208] R13: 0000000800000000 R14: 0000000000000012 R15: 00007fac15056ba4 [ 58.915651][ T6208] [ 58.921324][ T6208] ip6tnl0 speed is unknown, defaulting to 1000 [ 58.921942][ T6208] ip6tnl0 speed is unknown, defaulting to 1000 [ 58.922299][ T6208] ip6tnl0 speed is unknown, defaulting to 1000 [ 58.999999][ T6208] infiniband syz0: set active [ 59.000037][ T50] ip6tnl0 speed is unknown, defaulting to 1000 [ 59.000075][ T6208] infiniband syz0: added ip6tnl0 [ 59.005920][ T6208] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 59.005942][ T6208] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 59.005966][ T6208] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 59.013796][ T6208] RDS/IB: syz0: added [ 59.013821][ T6208] smc: adding ib device syz0 with port count 1 [ 59.013839][ T6208] smc: ib device syz0 port 1 has no pnetid [ 59.014298][ T50] ip6tnl0 speed is unknown, defaulting to 1000 [ 59.015204][ T6208] ip6tnl0 speed is unknown, defaulting to 1000 [ 59.105061][ T6208] ip6tnl0 speed is unknown, defaulting to 1000 [ 59.197572][ T1136] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 59.198996][ T1136] ata1.00: configured for UDMA/100 [ 59.199213][ T1136] ata1: EH complete [ 59.211274][ T6208] ip6tnl0 speed is unknown, defaulting to 1000 [ 59.318155][ T6208] ip6tnl0 speed is unknown, defaulting to 1000 [ 59.413920][ T41] usb 6-1: device descriptor read/all, error -71 [ 59.704368][ T6264] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 59.952064][ T6274] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=6274 comm=syz.1.88 [ 59.952558][ T6274] syz.1.88 (6274): /proc/6273/oom_adj is deprecated, please use /proc/6273/oom_score_adj instead. [ 60.249801][ T6285] nvme_fabrics: found same hostid 3b3270e4-f2c5-4715-8acb-4ee4e8e569b7 but different hostnqn n [ 60.251539][ T6285] ip_tables: iptables: counters copy to user failed while replacing table [ 61.060551][ T6287] device-mapper: table: 248:1: raid: Invalid flags combination (-EINVAL) [ 61.060567][ T6287] device-mapper: ioctl: error adding target to table [ 61.830766][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 61.830787][ T42] audit: type=1400 audit(1793691382.670:335): avc: denied { read } for pid=5791 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 61.830944][ T42] audit: type=1400 audit(1793691382.670:336): avc: denied { open } for pid=5791 comm="syz-executor" path="/28/mnt/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 61.831307][ T42] audit: type=1804 audit(1793691382.670:337): pid=5791 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/28/mnt/swap-file" dev="sda1" ino=2025 res=1 errno=0 [ 61.831524][ T42] audit: type=1400 audit(1793691382.670:338): avc: denied { setattr } for pid=5791 comm="syz-executor" path="/28/mnt/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 62.473911][ T6252] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 62.474350][ T6265] netlink: 'syz.2.85': attribute type 1 has an invalid length. [ 62.474365][ T6265] netlink: 244 bytes leftover after parsing attributes in process `syz.2.85'. [ 62.480932][ T5194] udevd[5194]: could not touch /run/udev/queue: No such file or directory [ 62.483894][ T5194] udevd[5194]: could not touch /run/udev/queue: No such file or directory [ 62.497132][ T42] audit: type=1400 audit(1793691383.340:339): avc: denied { read } for pid=5792 comm="syz-executor" name="loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.497163][ T42] audit: type=1400 audit(1793691383.340:340): avc: denied { open } for pid=5792 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.497185][ T42] audit: type=1400 audit(1793691383.340:341): avc: denied { ioctl } for pid=5792 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.509811][ T5194] udevd[5194]: could not touch /run/udev/queue: No such file or directory [ 62.522563][ T5194] udevd[5194]: could not touch /run/udev/queue: No such file or directory [ 62.523574][ T5194] udevd[5194]: could not touch /run/udev/queue: No such file or directory [ 62.529820][ T5194] udevd[5194]: could not touch /run/udev/queue: No such file or directory [ 62.531618][ T5194] udevd[5194]: could not touch /run/udev/queue: No such file or directory [ 62.532901][ T5194] udevd[5194]: could not touch /run/udev/queue: No such file or directory [ 62.533454][ T5194] udevd[5194]: could not touch /run/udev/queue: No such file or directory [ 62.533720][ T5194] udevd[5194]: could not touch /run/udev/queue: No such file or directory [ 62.612958][ T6294] kvm [6292]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 62.613563][ T6294] kvm [6292]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 62.633289][ T42] audit: type=1400 audit(1793691383.470:342): avc: denied { ioctl } for pid=6296 comm="syz.2.95" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0xf505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 62.640119][ T42] audit: type=1400 audit(1793691383.480:343): avc: denied { allowed } for pid=6296 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 62.664570][ T42] audit: type=1400 audit(1793691383.500:344): avc: denied { read } for pid=6292 comm="syz.3.94" name="cec3" dev="devtmpfs" ino=985 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.841291][ T6317] netlink: 'syz.3.101': attribute type 13 has an invalid length. [ 62.841309][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.101'. [ 62.842957][ T6317] netlink: 'syz.3.101': attribute type 13 has an invalid length. [ 62.842973][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.101'. [ 62.843521][ T6319] nvme_fabrics: found same hostid 3b3270e4-f2c5-4715-8acb-4ee4e8e569b7 but different hostnqn n [ 62.845102][ T6319] ip_tables: iptables: counters copy to user failed while replacing table [ 62.851660][ T6319] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 62.851683][ T6319] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 62.851750][ T6320] vhci_hcd: xmit failed -107 [ 62.852848][ T6319] vhci_hcd vhci_hcd.0: Device attached [ 62.853957][ T5856] vhci_hcd vhci_hcd.0: stop threads [ 62.853972][ T5856] vhci_hcd vhci_hcd.0: release socket [ 62.853988][ T5856] vhci_hcd vhci_hcd.0: disconnect device [ 63.301746][ T6340] process 'syz.3.107' launched '/dev/fd/5' with NULL argv: empty string added [ 63.304032][ T6340] netlink: 28 bytes leftover after parsing attributes in process `syz.3.107'. [ 63.304053][ T6340] netlink: 'syz.3.107': attribute type 7 has an invalid length. [ 63.304060][ T6340] netlink: 'syz.3.107': attribute type 8 has an invalid length. [ 63.304066][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.107'. [ 63.358295][ T6341] netlink: 28 bytes leftover after parsing attributes in process `syz.3.107'. [ 63.358325][ T6341] netlink: 'syz.3.107': attribute type 7 has an invalid length. [ 63.358334][ T6341] netlink: 'syz.3.107': attribute type 8 has an invalid length. [ 63.358342][ T6341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.107'. [ 63.608631][ T37] IPVS: starting estimator thread 0... [ 63.610089][ T6355] 9p: Unknown uid 00000000004294967295 [ 63.612010][ T6355] syz.2.110 uses obsolete (PF_INET,SOCK_PACKET) [ 63.705763][ T6356] IPVS: using max 42 ests per chain, 100800 per kthread [ 63.746241][ T58] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 63.875347][ T58] usb 8-1: device descriptor read/64, error -71 [ 63.887275][ T6386] jffs2: notice: (6386) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 63.888881][ T6388] syz.0.117 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 63.914679][ T6391] SELinux: Context #! ./mnt mu is not valid (left unmapped). [ 63.920581][ T6391] device-mapper: table: 248:2: multipath: unknown path selector type (-EINVAL) [ 63.920595][ T6391] device-mapper: ioctl: error adding target to table [ 63.926925][ T6396] device-mapper: table: 248:2: multipath: unknown path selector type (-EINVAL) [ 63.926939][ T6396] device-mapper: ioctl: error adding target to table [ 64.116973][ T58] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 64.244959][ T58] usb 8-1: device descriptor read/64, error -71 [ 64.356391][ T58] usb usb8-port1: attempt power cycle [ 64.706160][ T58] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 64.725788][ T58] usb 8-1: device descriptor read/8, error -71 [ 64.732576][ T6406] FAULT_INJECTION: forcing a failure. [ 64.732576][ T6406] name failslab, interval 1, probability 0, space 0, times 0 [ 64.732595][ T6406] CPU: 2 UID: 0 PID: 6406 Comm: syz.2.121 Not tainted syzkaller #0 PREEMPT(full) [ 64.732608][ T6406] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.732615][ T6406] Call Trace: [ 64.732620][ T6406] [ 64.732625][ T6406] dump_stack_lvl+0x100/0x190 [ 64.732651][ T6406] should_fail_ex.cold+0x5/0xa [ 64.732678][ T6406] should_failslab+0xc2/0x120 [ 64.732692][ T6406] __kmalloc_cache_noprof+0x91/0x6d0 [ 64.732708][ T6406] ? cap_capable+0x107/0x430 [ 64.732723][ T6406] ? __x64_sys_futex+0x358/0x4d0 [ 64.732738][ T6406] ? fsnotify_alloc_group+0x8d/0x320 [ 64.732760][ T6406] fsnotify_alloc_group+0x8d/0x320 [ 64.732779][ T6406] __do_sys_fanotify_init+0x26c/0xe10 [ 64.732797][ T6406] do_syscall_64+0x123/0x790 [ 64.732830][ T6406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.732843][ T6406] RIP: 0033:0x7fd29299fb19 [ 64.732854][ T6406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.732866][ T6406] RSP: 002b:00007fd29379e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 64.732878][ T6406] RAX: ffffffffffffffda RBX: 00007fd292c25fa0 RCX: 00007fd29299fb19 [ 64.732886][ T6406] RDX: 0000000000000000 RSI: 0000000000000400 RDI: 000000000000001a [ 64.732893][ T6406] RBP: 00007fd292a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 64.732901][ T6406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.732908][ T6406] R13: 00007fd292c26038 R14: 00007fd292c25fa0 R15: 00007ffeb47c4468 [ 64.732924][ T6406] [ 64.964920][ T58] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 64.975502][ T5886] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 64.985341][ T58] usb 8-1: device descriptor read/8, error -71 [ 65.095300][ T58] usb usb8-port1: unable to enumerate USB device [ 65.125520][ T5886] usb 7-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 65.127722][ T5886] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.127748][ T5886] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.127767][ T5886] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 65.127803][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.131469][ T5886] usb 7-1: config 0 descriptor?? [ 65.547193][ T5886] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 66.730096][ T6420] syzkaller1: entered promiscuous mode [ 66.730110][ T6420] syzkaller1: entered allmulticast mode [ 66.786636][ C3] plantronics 0003:047F:FFFF.0002: usb_submit_urb(ctrl) failed: -1 [ 66.795729][ T6417] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 66.796257][ T6417] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 66.796526][ T6417] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 66.796719][ T6417] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 66.796964][ T6417] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 66.797168][ T6417] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 66.797363][ T6417] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 66.797537][ T6417] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 66.797747][ T6417] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 66.797984][ T6417] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 67.460444][ T6431] lo: entered allmulticast mode [ 67.462718][ T6431] bond0: entered allmulticast mode [ 67.463377][ T6431] dummy0: entered allmulticast mode [ 67.463904][ T6431] eql: entered allmulticast mode [ 67.464061][ T6431] ifb0: entered allmulticast mode [ 67.464304][ T6431] ifb1: entered allmulticast mode [ 67.468411][ T6431] e1000 0000:00:07.0 eth0: entered allmulticast mode [ 67.477710][ T6431] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 67.482531][ T6431] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 67.482885][ T6431] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 67.483354][ T6431] hwsim0: entered allmulticast mode [ 67.483470][ T6431] ieee802154 phy1 wpan1: entered allmulticast mode [ 67.484120][ T6431] teql0: entered allmulticast mode [ 67.485540][ T6431] tunl0: entered allmulticast mode [ 67.485701][ T6431] gre0: entered allmulticast mode [ 67.485854][ T6431] gretap0: entered allmulticast mode [ 67.486685][ T6431] erspan0: entered allmulticast mode [ 67.487217][ T6431] ip_vti0: entered allmulticast mode [ 67.487376][ T6431] ip6_vti0: entered allmulticast mode [ 67.487540][ T6431] sit0: entered allmulticast mode [ 67.487697][ T6431] ip6tnl0: entered allmulticast mode [ 67.487819][ T6431] ip6gre0: entered allmulticast mode [ 67.487972][ T6431] lapb0: entered allmulticast mode [ 67.488290][ T6431] lapb1: entered allmulticast mode [ 67.488658][ T6431] lapb2: entered allmulticast mode [ 67.488813][ T6431] lapb3: entered allmulticast mode [ 67.488914][ T6431] lapb4: entered allmulticast mode [ 67.488998][ T6431] lapb5: entered allmulticast mode [ 67.489135][ T6431] lapb6: entered allmulticast mode [ 67.489306][ T6431] rxe_eth0: entered allmulticast mode [ 67.491343][ T5886] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.854108][ T5863] usb 7-1: USB disconnect, device number 2 [ 68.015303][ T5863] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 68.175268][ T5863] usb 7-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 68.176093][ T5863] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 68.176107][ T5863] usb 7-1: config 0 has no interface number 0 [ 68.176125][ T5863] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 68.176139][ T5863] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 68.176157][ T5863] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.181157][ T5863] usb 7-1: config 0 descriptor?? [ 68.185639][ T6431] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 68.196888][ T5863] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 68.392733][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 68.392748][ T42] audit: type=1400 audit(1793691389.230:371): avc: denied { write } for pid=6430 comm="syz.2.128" name="iowarrior0" dev="devtmpfs" ino=2899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 68.398162][ C3] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 68.399662][ T58] usb 7-1: USB disconnect, device number 3 [ 68.957080][ T42] audit: type=1400 audit(1793691389.800:372): avc: denied { bind } for pid=6435 comm="syz.2.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.318397][ C1] ================================================================== [ 69.318409][ C1] BUG: KASAN: double-free in rcu_free_sheaf+0x1a/0xe0 [ 69.318431][ C1] Free of addr ffff8880383d1500 by task syz.2.131/6449 [ 69.318438][ C1] [ 69.318444][ C1] CPU: 1 UID: 0 PID: 6449 Comm: syz.2.131 Not tainted syzkaller #0 PREEMPT(full) [ 69.318457][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.318463][ C1] Call Trace: [ 69.318467][ C1] [ 69.318472][ C1] dump_stack_lvl+0x100/0x190 [ 69.318490][ C1] print_report+0x13d/0x4b0 [ 69.318506][ C1] ? __virt_addr_valid+0x239/0x430 [ 69.318521][ C1] ? rcu_free_sheaf+0x1a/0xe0 [ 69.318535][ C1] kasan_report_invalid_free+0xb8/0x190 [ 69.318548][ C1] ? rcu_free_sheaf+0x1a/0xe0 [ 69.318563][ C1] ? rcu_free_sheaf+0x1a/0xe0 [ 69.318580][ C1] check_slab_allocation+0xc3/0xf0 [ 69.318590][ C1] __rcu_free_sheaf_prepare+0x117/0x300 [ 69.318604][ C1] ? rcu_core+0x5eb/0x1220 [ 69.318614][ C1] rcu_free_sheaf+0x1a/0xe0 [ 69.318629][ C1] rcu_core+0x5f0/0x1220 [ 69.318640][ C1] ? __pfx_rcu_core+0x10/0x10 [ 69.318650][ C1] ? clockevents_program_event+0x1ef/0x820 [ 69.318665][ C1] ? mark_held_locks+0x40/0x70 [ 69.318681][ C1] handle_softirqs+0x216/0xa20 [ 69.318694][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 69.318706][ C1] ? _raw_spin_unlock+0x28/0x50 [ 69.318722][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 69.318737][ C1] __irq_exit_rcu+0x178/0x220 [ 69.318749][ C1] irq_exit_rcu+0x9/0x30 [ 69.318760][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 69.318777][ C1] [ 69.318781][ C1] [ 69.318785][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 69.318797][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x46/0x70 [ 69.318808][ C1] Code: 00 01 00 ff 74 1e f6 c4 01 74 44 a9 00 00 00 0f 75 3d f7 c1 00 00 00 f0 75 35 8b 82 44 17 00 00 85 c0 74 2b 8b 82 18 17 00 00 <83> f8 02 75 20 48 8b 8a 20 17 00 00 8b 92 1c 17 00 00 48 8b 01 48 [ 69.318819][ C1] RSP: 0018:ffffc90007dbf460 EFLAGS: 00000246 [ 69.318828][ C1] RAX: 0000000000000000 RBX: 000800000004df0e RCX: 0000000000000001 [ 69.318835][ C1] RDX: ffff8880312b0000 RSI: ffffffff826a436f RDI: 0000000000000006 [ 69.318842][ C1] RBP: 1ffff92000fb7e8d R08: 000000000004df0e R09: 000000000017ffff [ 69.318848][ C1] R10: ffffea000137c373 R11: 0000000000000001 R12: 000000000004df0e [ 69.318855][ C1] R13: 000000000137c380 R14: 00007fd29230b000 R15: 000800000004df0e [ 69.318864][ C1] ? vm_normal_page+0x11f/0x380 [ 69.318884][ C1] vm_normal_page+0x11f/0x380 [ 69.318899][ C1] ? __pfx_vm_normal_page+0x10/0x10 [ 69.318914][ C1] ? arch_check_zapped_pte+0x9d/0x140 [ 69.318927][ C1] ? __pfx_arch_check_zapped_pte+0x10/0x10 [ 69.318940][ C1] ? __pfx___might_resched+0x10/0x10 [ 69.318954][ C1] ? __tlb_remove_folio_pages_size.isra.0+0x153/0x550 [ 69.318967][ C1] __zap_vma_range+0xf42/0x4980 [ 69.318987][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 69.319002][ C1] ? mas_next_slot+0xc05/0x13a0 [ 69.319017][ C1] unmap_vmas+0x294/0x5f0 [ 69.319033][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 69.319048][ C1] ? mas_next_slot+0xc05/0x13a0 [ 69.319064][ C1] exit_mmap+0x1ef/0xa40 [ 69.319073][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 69.319082][ C1] ? rcu_is_watching+0x13/0xc0 [ 69.319108][ C1] ? find_held_lock+0x2b/0x80 [ 69.319140][ C1] ? uprobe_clear_state+0x5f/0x250 [ 69.319157][ C1] ? __mutex_unlock_slowpath+0x35d/0x930 [ 69.319172][ C1] __mmput+0x12a/0x410 [ 69.319184][ C1] mmput+0x62/0x70 [ 69.319195][ C1] do_exit+0x80c/0x2a00 [ 69.319209][ C1] ? __pfx_futex_wake_mark+0x10/0x10 [ 69.319225][ C1] ? __pfx_do_exit+0x10/0x10 [ 69.319239][ C1] ? do_raw_spin_lock+0x128/0x260 [ 69.319248][ C1] ? find_held_lock+0x2b/0x80 [ 69.319259][ C1] ? get_signal+0xa28/0x22e0 [ 69.319272][ C1] do_group_exit+0xd5/0x2a0 [ 69.319288][ C1] get_signal+0x1f58/0x22e0 [ 69.319299][ C1] ? __pfx_futex_wait+0x10/0x10 [ 69.319315][ C1] ? vfs_write+0x15d/0x1050 [ 69.319326][ C1] ? __pfx_get_signal+0x10/0x10 [ 69.319339][ C1] ? do_futex+0x190/0x440 [ 69.319351][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 69.319363][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 69.319375][ C1] ? fput+0x7c/0x100 [ 69.319389][ C1] exit_to_user_mode_loop+0x139/0x700 [ 69.319400][ C1] ? rcu_is_watching+0x13/0xc0 [ 69.319411][ C1] do_syscall_64+0x661/0x790 [ 69.319422][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.319433][ C1] RIP: 0033:0x7fd29299fb19 [ 69.319441][ C1] Code: Unable to access opcode bytes at 0x7fd29299faef. [ 69.319446][ C1] RSP: 002b:00007fd290bf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 69.319456][ C1] RAX: fffffffffffffe00 RBX: 00007fd292c26098 RCX: 00007fd29299fb19 [ 69.319463][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd292c26098 [ 69.319469][ C1] RBP: 00007fd292c26090 R08: 0000000000000000 R09: 0000000000000000 [ 69.319476][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.319482][ C1] R13: 00007fd292c26128 R14: 00007ffeb47c4380 R15: 00007ffeb47c4468 [ 69.319492][ C1] [ 69.319496][ C1] [ 69.319498][ C1] Allocated by task 5791: [ 69.319503][ C1] kasan_save_stack+0x30/0x50 [ 69.319512][ C1] kasan_save_track+0x14/0x30 [ 69.319521][ C1] __kasan_kmalloc+0xaa/0xb0 [ 69.319529][ C1] __kmalloc_noprof+0x32f/0x840 [ 69.319543][ C1] tomoyo_encode2+0xfb/0x3c0 [ 69.319553][ C1] tomoyo_encode+0x29/0x50 [ 69.319561][ C1] tomoyo_realpath_from_path+0x18c/0x690 [ 69.319570][ C1] tomoyo_path_perm+0x276/0x460 [ 69.319583][ C1] tomoyo_path_unlink+0x91/0xe0 [ 69.319593][ C1] security_path_unlink+0x145/0x2b0 [ 69.319603][ C1] filename_unlinkat+0x316/0x770 [ 69.319615][ C1] __x64_sys_unlink+0x46/0x70 [ 69.319627][ C1] do_syscall_64+0x123/0x790 [ 69.319636][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.319650][ C1] [ 69.319654][ C1] Freed by task 5791: [ 69.319661][ C1] kasan_save_stack+0x30/0x50 [ 69.319674][ C1] kasan_save_track+0x14/0x30 [ 69.319687][ C1] kasan_save_free_info+0x3b/0x70 [ 69.319707][ C1] __kasan_slab_free+0x5f/0x80 [ 69.319725][ C1] kfree+0x22b/0x6d0 [ 69.319742][ C1] tomoyo_path_perm+0x29c/0x460 [ 69.319762][ C1] tomoyo_path_unlink+0x91/0xe0 [ 69.319777][ C1] security_path_unlink+0x145/0x2b0 [ 69.319795][ C1] filename_unlinkat+0x316/0x770 [ 69.319815][ C1] __x64_sys_unlink+0x46/0x70 [ 69.319828][ C1] do_syscall_64+0x123/0x790 [ 69.319837][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.319846][ C1] [ 69.319848][ C1] The buggy address belongs to the object at ffff8880383d1500 [ 69.319848][ C1] which belongs to the cache kmalloc-64 of size 64 [ 69.319857][ C1] The buggy address is located 0 bytes inside of [ 69.319857][ C1] 64-byte region [ffff8880383d1500, ffff8880383d1540) [ 69.319866][ C1] [ 69.319869][ C1] The buggy address belongs to the physical page: [ 69.319873][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x383d1 [ 69.319887][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 69.319896][ C1] page_type: f5(slab) [ 69.319906][ C1] raw: 00fff00000000000 ffff88801d4428c0 dead000000000100 dead000000000122 [ 69.319915][ C1] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000 [ 69.319921][ C1] page dumped because: kasan: bad access detected [ 69.319926][ C1] page_owner tracks the page as allocated [ 69.319929][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5195, tgid 5195 (udevadm), ts 13418931674 [ 69.319946][ C1] post_alloc_hook+0xfd/0x120 [ 69.319958][ C1] get_page_from_freelist+0x1113/0x35e0 [ 69.319971][ C1] __alloc_frozen_pages_noprof+0x2bd/0x3280 [ 69.319984][ C1] new_slab+0xb1/0x6d0 [ 69.319996][ C1] refill_objects+0xe3/0x410 [ 69.320008][ C1] __pcs_replace_empty_main+0x35e/0x650 [ 69.320020][ C1] __kmalloc_noprof+0x677/0x840 [ 69.320034][ C1] tomoyo_encode2+0xfb/0x3c0 [ 69.320042][ C1] tomoyo_encode+0x29/0x50 [ 69.320050][ C1] tomoyo_realpath_from_path+0x18c/0x690 [ 69.320060][ C1] tomoyo_check_open_permission+0x2af/0x3c0 [ 69.320073][ C1] tomoyo_file_open+0x6b/0x90 [ 69.320084][ C1] security_file_open+0xb5/0x1e0 [ 69.320093][ C1] do_dentry_open+0x552/0x1470 [ 69.320101][ C1] vfs_open_consume+0xcc/0x460 [ 69.320113][ C1] path_openat+0x1547/0x23f0 [ 69.320124][ C1] page last free pid 5195 tgid 5195 ts 13390950875 stack trace: [ 69.320131][ C1] __free_frozen_pages+0x7b4/0x1110 [ 69.320141][ C1] qlist_free_all+0x47/0xf0 [ 69.320155][ C1] kasan_quarantine_reduce+0x1a0/0x1f0 [ 69.320170][ C1] __kasan_slab_alloc+0x69/0x90 [ 69.320179][ C1] __kmalloc_cache_noprof+0x278/0x6d0 [ 69.320191][ C1] inode_doinit_use_xattr+0x54/0x330 [ 69.320206][ C1] inode_doinit_with_dentry+0x10fc/0x1340 [ 69.320221][ C1] selinux_d_instantiate+0x26/0x40 [ 69.320235][ C1] security_d_instantiate+0x14c/0x1b0 [ 69.320245][ C1] d_splice_alias_ops+0xd6/0x1350 [ 69.320256][ C1] kernfs_iop_lookup+0x23f/0x2d0 [ 69.320272][ C1] lookup_open+0xb29/0x19e0 [ 69.320286][ C1] path_openat+0xe75/0x23f0 [ 69.320297][ C1] do_file_open+0x20e/0x430 [ 69.320308][ C1] do_sys_openat2+0x163/0x1d0 [ 69.320319][ C1] __x64_sys_openat+0x12d/0x210 [ 69.320332][ C1] [ 69.320334][ C1] Memory state around the buggy address: [ 69.320338][ C1] ffff8880383d1400: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 69.320346][ C1] ffff8880383d1480: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 69.320352][ C1] >ffff8880383d1500: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 69.320358][ C1] ^ [ 69.320363][ C1] ffff8880383d1580: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 69.320369][ C1] ffff8880383d1600: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 69.320375][ C1] ================================================================== [ 69.320412][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 69.627050][ C1] CPU: 1 UID: 0 PID: 6449 Comm: syz.2.131 Not tainted syzkaller #0 PREEMPT(full) [ 69.629899][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.633002][ C1] Call Trace: [ 69.634054][ C1] [ 69.634985][ C1] dump_stack_lvl+0x100/0x190 [ 69.636538][ C1] vpanic+0x2dc/0x6f8 [ 69.637806][ C1] panic+0xd1/0xe0 [ 69.638988][ C1] ? __pfx_panic+0x10/0x10 [ 69.640399][ C1] ? rcu_free_sheaf+0x1a/0xe0 [ 69.641876][ C1] check_panic_on_warn.cold+0x19/0x34 [ 69.643570][ C1] ? rcu_free_sheaf+0x1a/0xe0 [ 69.645058][ C1] end_report.part.0+0x3a/0x90 [ 69.646557][ C1] kasan_report_invalid_free.cold+0xd/0x12 [ 69.648407][ C1] ? rcu_free_sheaf+0x1a/0xe0 [ 69.649884][ C1] ? rcu_free_sheaf+0x1a/0xe0 [ 69.651365][ C1] check_slab_allocation+0xc3/0xf0 [ 69.652963][ C1] __rcu_free_sheaf_prepare+0x117/0x300 [ 69.654693][ C1] ? rcu_core+0x5eb/0x1220 [ 69.656124][ C1] rcu_free_sheaf+0x1a/0xe0 [ 69.657557][ C1] rcu_core+0x5f0/0x1220 [ 69.658885][ C1] ? __pfx_rcu_core+0x10/0x10 [ 69.660387][ C1] ? clockevents_program_event+0x1ef/0x820 [ 69.662206][ C1] ? mark_held_locks+0x40/0x70 [ 69.663735][ C1] handle_softirqs+0x216/0xa20 [ 69.665253][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 69.666904][ C1] ? _raw_spin_unlock+0x28/0x50 [ 69.668461][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 69.670211][ C1] __irq_exit_rcu+0x178/0x220 [ 69.671713][ C1] irq_exit_rcu+0x9/0x30 [ 69.673108][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 69.674872][ C1] [ 69.675825][ C1] [ 69.676766][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 69.678650][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x46/0x70 [ 69.680564][ C1] Code: 00 01 00 ff 74 1e f6 c4 01 74 44 a9 00 00 00 0f 75 3d f7 c1 00 00 00 f0 75 35 8b 82 44 17 00 00 85 c0 74 2b 8b 82 18 17 00 00 <83> f8 02 75 20 48 8b 8a 20 17 00 00 8b 92 1c 17 00 00 48 8b 01 48 [ 69.686472][ C1] RSP: 0018:ffffc90007dbf460 EFLAGS: 00000246 [ 69.688386][ C1] RAX: 0000000000000000 RBX: 000800000004df0e RCX: 0000000000000001 [ 69.690826][ C1] RDX: ffff8880312b0000 RSI: ffffffff826a436f RDI: 0000000000000006 [ 69.693274][ C1] RBP: 1ffff92000fb7e8d R08: 000000000004df0e R09: 000000000017ffff [ 69.695740][ C1] R10: ffffea000137c373 R11: 0000000000000001 R12: 000000000004df0e [ 69.698210][ C1] R13: 000000000137c380 R14: 00007fd29230b000 R15: 000800000004df0e [ 69.700660][ C1] ? vm_normal_page+0x11f/0x380 [ 69.702191][ C1] vm_normal_page+0x11f/0x380 [ 69.703682][ C1] ? __pfx_vm_normal_page+0x10/0x10 [ 69.705325][ C1] ? arch_check_zapped_pte+0x9d/0x140 [ 69.707005][ C1] ? __pfx_arch_check_zapped_pte+0x10/0x10 [ 69.708866][ C1] ? __pfx___might_resched+0x10/0x10 [ 69.710516][ C1] ? __tlb_remove_folio_pages_size.isra.0+0x153/0x550 [ 69.712771][ C1] __zap_vma_range+0xf42/0x4980 [ 69.714322][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 69.716022][ C1] ? mas_next_slot+0xc05/0x13a0 [ 69.717568][ C1] unmap_vmas+0x294/0x5f0 [ 69.718943][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 69.720551][ C1] ? mas_next_slot+0xc05/0x13a0 [ 69.722089][ C1] exit_mmap+0x1ef/0xa40 [ 69.723511][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 69.725036][ C1] ? rcu_is_watching+0x13/0xc0 [ 69.726540][ C1] ? find_held_lock+0x2b/0x80 [ 69.727995][ C1] ? uprobe_clear_state+0x5f/0x250 [ 69.729567][ C1] ? __mutex_unlock_slowpath+0x35d/0x930 [ 69.731313][ C1] __mmput+0x12a/0x410 [ 69.732601][ C1] mmput+0x62/0x70 [ 69.733790][ C1] do_exit+0x80c/0x2a00 [ 69.735121][ C1] ? __pfx_futex_wake_mark+0x10/0x10 [ 69.736772][ C1] ? __pfx_do_exit+0x10/0x10 [ 69.738227][ C1] ? do_raw_spin_lock+0x128/0x260 [ 69.739816][ C1] ? find_held_lock+0x2b/0x80 [ 69.741287][ C1] ? get_signal+0xa28/0x22e0 [ 69.742758][ C1] do_group_exit+0xd5/0x2a0 [ 69.744191][ C1] get_signal+0x1f58/0x22e0 [ 69.745625][ C1] ? __pfx_futex_wait+0x10/0x10 [ 69.747167][ C1] ? vfs_write+0x15d/0x1050 [ 69.748605][ C1] ? __pfx_get_signal+0x10/0x10 [ 69.750132][ C1] ? do_futex+0x190/0x440 [ 69.751503][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 69.753226][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 69.755162][ C1] ? fput+0x7c/0x100 [ 69.756399][ C1] exit_to_user_mode_loop+0x139/0x700 [ 69.758085][ C1] ? rcu_is_watching+0x13/0xc0 [ 69.759596][ C1] do_syscall_64+0x661/0x790 [ 69.761053][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.762906][ C1] RIP: 0033:0x7fd29299fb19 [ 69.764313][ C1] Code: Unable to access opcode bytes at 0x7fd29299faef. [ 69.766599][ C1] RSP: 002b:00007fd290bf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 69.769223][ C1] RAX: fffffffffffffe00 RBX: 00007fd292c26098 RCX: 00007fd29299fb19 [ 69.772507][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd292c26098 [ 69.775803][ C1] RBP: 00007fd292c26090 R08: 0000000000000000 R09: 0000000000000000 [ 69.779010][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.781516][ C1] R13: 00007fd292c26128 R14: 00007ffeb47c4380 R15: 00007ffeb47c4468 [ 69.783987][ C1] [ 69.785532][ C1] Kernel Offset: disabled [ 69.786883][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:36:30 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffc90000006d68 RCX=0000000000000000 RDX=0000000000000060 RSI=0000000000000000 RDI=ffffc90000006cd8 RBP=ffff888030c00000 RSP=ffffc90000006c80 R8 =0000000000000001 R9 =0000000000006cd8 R10=ffffc90000006cd8 R11=0000000000000001 R12=0000000000000000 R13=ffffc90000006d98 R14=ffffc90000006cd8 R15=ffffc90000006d00 RIP=ffffffff8bedb638 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055557046f500 ffffffff 00c00000 GS =0000 ffff8880d447d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd290b71ff8 CR3=000000002f24c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4dccd5d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff4c5ee776 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff4c5ee776 00007fff4c5ee77c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4dcc0381ad ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4dcc0381e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4dcc03834b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4dcc0381d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002000902000000 4005000800000000 317a797300010009 0400000a00000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000317a7973 000200090600000a 0000000000000000 01010a0c00000040 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100068001000c80 0000108003001400 000000317a797300 0100090000000031 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7a79730002000906 00000a0000000000 00000001010a0c00 000040450e000040 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c00081400000040 030008fcffffff40 0a00080000000031 7a79730002000902 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004005000800 000000317a797300 0100090400000a00 0000000000000004 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85c23bf5 RDI=ffffffff9cf4b080 RBP=ffffffff9cf4b040 RSP=ffffc900006a0590 R8 =000000000000001f R9 =0000000000000000 R10=0000000000000003 R11=20666f2065657246 R12=0000000000000000 R13=0000000000000031 R14=0000000000000008 R15=ffffc900006a08a8 RIP=ffffffff85c23c1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d457d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2e41bff8 CR3=000000000fd96000 CR4=00352ef0 DR0=0000000000000004 DR1=0000000000000000 DR2=000000000000000a DR3=0000000000000800 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000000 Opmask02=00000000ffff7fdf Opmask03=0000000020400004 Opmask04=00000000fffff7ff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3263666e2f63666e 2f6c617574726976 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560a806bd1c0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560a806cde70 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb13fff1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb13ff52c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560a806cde70 0000560a806bd1c0 0000560a806cafa0 0000560a806cbf30 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 536e703a554d4551 6e762530b0420d62 623a623bb05eaf41 302f623ae40f0782 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 712d63707276703a 29393030322c3948 43492b3533512843 50647261646e6174 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 712d63707276726a 29393030322c3918 43492b3533512843 50647261646e6174 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f7f7bffffffffff 7f7f3dfab7fffffb 677feb7ff7dfff6b 7a7f7a7ff5ef7ff6 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d332e36312e0046 46464630302e3070 4637003130002f31 3000343053413a32 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d2d2d35312e003a 29393030302c3048 3a37003130002831 30002e30312d3532 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffc90004c7fa48 RCX=0000000000000000 RDX=0000000000000008 RSI=0000000000000000 RDI=ffffc90004c7fa48 RBP=1ffff9200098ff45 RSP=ffffc90004c7fa08 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc90004c7fa48 R11=0000000000000000 R12=ffff888014f21880 R13=ffffc90004c7fa48 R14=dffffc0000000000 R15=ffffc90004c7fdb8 RIP=ffffffff8bedb695 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00005555761ce500 ffffffff 00c00000 GS =0000 ffff8880d467d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd29298ac80 CR3=000000005564b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc41fe0cc0 0000003000000018 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4449454949672e72 656c6c616b7a7973 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc41fe3026 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc41fe3026 00007ffc41fe302c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fac150381ad ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fac150381e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fac1503834b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fac150381d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 646e756f46206950 2079727265627073 61522e6f6964732d 353534333463616d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=1ffffffff2792db3 RBX=0000000000000001 RCX=ffffffff93c96d9a RDX=dffffc0000000000 RSI=0000000000000001 RDI=ffffffff93c96d9c RBP=ffffc9000329f9d0 RSP=ffffc9000329f918 R8 =ffffffff93c96d9e R9 =0000000000000007 R10=0000000000000200 R11=00000000000aed01 R12=ffffc9000329f9d8 R13=ffffc9000329f988 R14=ffffc9000329ff48 R15=ffffc9000329f9bc RIP=ffffffff81bb4eac RFL=00000a03 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555863e1500 ffffffff 00c00000 GS =0000 ffff8880d477d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2e423ffc CR3=00000000319f2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe568168d0 0000003000000018 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 617461642f766564 752f6e75722f746e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe56818c36 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe56818c36 00007ffe56818c3c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f09744381ad ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f09744381e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f097443834b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f09744381d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000