last executing test programs: 5.939790807s ago: executing program 3 (id=7197): sendmsg$802154_raw(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)="10bf609f58a66509ee6230244648384bbf", 0x11}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 5.939427137s ago: executing program 3 (id=7198): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2715, 0x0, &(0x7f0000019600)) 5.939361692s ago: executing program 3 (id=7199): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() 5.839509253s ago: executing program 3 (id=7200): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000940)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000c00)={0x2, 0x4e22, @empty}, 0x10) recvfrom(r2, &(0x7f00000006c0)=""/74, 0x4a, 0x4140, 0x0, 0x0) 4.939907601s ago: executing program 3 (id=7207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 4.896907005s ago: executing program 3 (id=7210): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r0, 0x1) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000100100000100000002000000000000001000000000000000100100000e"], 0x28}, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x20200000}], 0xfffb, 0x2, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f00000013c0)={&(0x7f0000001400)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001500)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0) 1.10855225s ago: executing program 2 (id=7321): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000440)={'syzkaller1\x00', @link_local}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'syzkaller1\x00'}) write$tun(r0, &(0x7f00000006c0)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1}, {0x0, 0x4e23, 0x8}}}}}}, 0x2e) 1.075146926s ago: executing program 0 (id=7323): ioctl$BLKCRYPTOGENERATEKEY(0xffffffffffffffff, 0xc030128a, 0x0) 989.96418ms ago: executing program 0 (id=7324): openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=.dma,') 942.498613ms ago: executing program 0 (id=7327): socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000016c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001780)=ANY=[@ANYBLOB="7c000000100001040000000000dcb0b93d000000", @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500070000000500", @ANYRES8=r0], 0x7c}}, 0x0) 552.615067ms ago: executing program 1 (id=7335): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x4000000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x6100204) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="0029479735", 0x5}], 0x1, 0x73a, 0x8000007) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/187, 0xff22}], 0x1, 0x3, 0x1) 524.709128ms ago: executing program 1 (id=7336): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000019440)={0x1, &(0x7f0000019480)=[{0x6, 0x20, 0x0, 0x480}]}, 0x10) sendmsg$inet6(r0, &(0x7f00000194c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019500)=ANY=[], 0x30}, 0x4004004) 439.611795ms ago: executing program 1 (id=7337): creat(&(0x7f0000000880)='./file0\x00', 0xd931d3864d39dcfb) faccessat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x5, 0x300) 439.452535ms ago: executing program 1 (id=7338): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000480)={0x0, 0x8000}, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000540)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000580)=[{{&(0x7f0000000680)={0x2, 0x4e28, @multicast1}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000700)="ea471a214184f8b733e8f2ee259294303fcfd33c9ce3754766d259a5a4ced32dd20ab8f59180f783c59dbb3fb64e9eb410dbd76d0b34d79a7ed32ab7deb9afeea5a7c5868bdc07434308ed8b9c0554f4e0237034f1317c7d9416a4242c69b6445221ed4cfe7e06b4840d848674e2040a5c26f6eec698f6c0a56fac8d5f8b2563737943be1df2d9e8279ad864156c4bb635a60813c05f23a48ccd6e217578f72ace3b1a8341d696ccb6d16b5a0dc59c9abb46e3c6cda5e2e87c315c55676be92127ce1ad1935550a96795513cc2963f11ffc114503d9ec0fd921ab168afdd8a71", 0xe0}, {&(0x7f0000000800)="88f99f90f32186344d6ecb24692254c193a4c62b239eedc0f028ac3b9fc150b60c4e9e681e9109ffbe94142950903cf158e2fbe335116333a4856604c3df4509fbb77d52660027d1e8f811ea138a4e959b25912794f4abbbd429c3d1c2f1", 0x5e}, {&(0x7f0000001580)="2dc88534604a1a86bdd54f8e62fcf9c5925e68f6e7767ff3a60731d2591acac2041cafcbe0147c92fc6156361ca6b65dc39e60772976691e7458fda037bd31d6e2b085d2709a67c32e074c414f51762c5d6ddd1ccb5e58aaaf44bfc73bbce4a266aa2305235116c3eb687ad2b726b521294ba9d6dc28d6a2767b89abdf4181e6efa57817f8", 0x85}, {&(0x7f0000001640)="3d93e8ce393eeb81fd033961e32a931efa2d0f877b01a28f9be70f098b210087263de2cd76c191c9572da03df204fe0551d960de80831b9ee40a7ae0c7a5dc324b3ef5010e62760849d42b5d7c17c0884d027a5ea12acf7539dc91eeebfc5299b239c1c3c1bf96b4760a751e5872f09ac7ca6c9f365e56d3631e61e4e68b72071e700f06009dbbf31716939ff86d20be034f3bc3529da052887e28ef914a570ddd2185d018dbc4df7ed14dd0dab55046eeb41461508a5b2c3ab1d2814d8d39a5b08da6a6", 0xc4}], 0x4}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000900)="f37d9170c056960f350f64d08bbc49adc69fd577fb3869bea9c619138e89fa17e7922b5bd35dcbc49eaa815a9f0e4f520be2549343799ec40f076ab4b1e1e84d059e23df870d13b7199feed08c5ead2be57949a5bf6f2fba0e3b0e341e21406a323fc48d481142b0c1b6a51a14bb230357f15d3afd07a1ab6a4a9d3a403e7a0f9752dfc28ffd", 0x86}, {&(0x7f00000009c0)="62380953af", 0x5}, {&(0x7f0000000a00)="b604de41ea0454d41c8d4dbefe9ca2c50418ee9d1eb8404d86d7fb96a8e92650175ff7e5f8fd63ed00090b8a3e00488fbd2bda6144974833c8af6b6919a6da9d541f97448f7ef2988e8e35df10913baf8964c4897af08e0803f2bbc9dc40975393a359b65f798fe524d8318c9e166e41b203ddc3ad9f840b7355940bb739ed66dec4ab9202da8fc668f756beb04edddd066ea9b3981cde05109973b83357cd45baa1e45065ddc24864483d9a555dee061bbd2c014fad765e8dda956c909a983caa46e96513ea1afa5ca8dc5c29630220c69cb9da8b4e8d71a252b2594b8a", 0xde}, {&(0x7f0000000b00)="60b2da4690496445c42aa0889d280db3175428c3a0986c10b949c8a0c9a0730bcc2280adf08b792cfd106e681cf950145d0df1024a28f861e9fc6f347794cd943f3272dff44e0c04574255a46e86c00c5d42beb39ddf4b6a316560f2a9ea6ab78c45abf499e7f19a5d01a82cb0e6ec9d1533e7812e3fef2aa9409d8fee1bac420cc24d831a", 0x85}, {&(0x7f0000000bc0)="8a260937a7650176e765ec5a26a5b384119921b54b9b380302b9e9124b08a29d7d54539fcc633df71a", 0x29}, {&(0x7f00000013c0)="a81001df82540e39c796cfb370a772b294ae3d7d0e3080ba2e47c954112ac9d0509842145b33098f074727abd4785e70b7a17e4295a9aa80806ecf4f243fb245f2fb6102f79b26b548c5a5a7fbbb1e07b7a724fd85cf59522f107ea078db2f3d06e9422d166daa23507dd66e6de53c461aed2a73f9b0be6f71e8f8c2e07edde8d73939293d02f4f2f8886d084a366dfb3125ce998c2927da37f893e1f466eb50f02c4446a165a6a25b", 0xa9}, {&(0x7f0000001480)="9a40ed2e12621c759c086b362ce0b1492a1196120eea5a619b2cc50ca353376e28c8482a8f339233a28a439aa784d18bc6c4313d", 0x34}, {&(0x7f00000014c0)="8e54ff3312aa036533f35cb64369434fd30aac9e3823b719a1f8a8cbf94f14af9c5d8bdaae4e", 0x26}], 0x8}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c80)="f8faad168e15cd1b063ffc221f295e2c3398a5d62aa1f63d98f24449f7548bb6e13c5363718ddae0340fa50a2ef4e6a06338f0daa80a62475bcdc787af9fd7c56b2bb0edcf3e97ea53309464092a68fd896f1b94017299b9f62a03f659630695071daf9fa9d391228743b48fb605b21e6cfe79a8c5771e465a4a605e082ae8a472a4db02413c49791c435d869f4a2aa4b1b156c68e9cf17b571e", 0x9a}, {&(0x7f0000000d80)="3a32b41fc430a9e005c36807592420fff35d0d7d616ecd5de9bd13a5bd909cd722fddb", 0x23}], 0x2}}], 0x3, 0x2000c044) writev(r0, &(0x7f0000001100)=[{&(0x7f0000001140)="b420", 0x2}], 0x1) 427.898592ms ago: executing program 1 (id=7339): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 377.252952ms ago: executing program 0 (id=7340): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="65572abd7000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) 377.111311ms ago: executing program 1 (id=7341): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000000780)={'syzkaller0\x00', @random="2b0100004ec6"}) 341.927105ms ago: executing program 0 (id=7342): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000002060128750000000000000007000000140007800800114000000000080012400000ffff05000100"], 0x60}, 0x1, 0x2000000, 0x0, 0x20000810}, 0x20004000) 339.280513ms ago: executing program 2 (id=7343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x0) 284.733116ms ago: executing program 2 (id=7344): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) sendto(0xffffffffffffffff, 0x0, 0x5a, 0x8800, 0x0, 0x0) syz_clone3(0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000200), 0x0, &(0x7f0000000240)={0x0, "c694ef4b3792828d9d7d67e4e3ea7f4993d2027c4a92cb1e61f64b18f1f110afb027899e2d01c12e67367fa6cca9b88dcfc9d15a3a271b341e1c934d95487d7e", 0x3b}, 0x48, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./trace/set_event\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x20300, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='3', 0x4e) syslog(0x3, &(0x7f0000000100)=""/25, 0x19) 269.275213ms ago: executing program 0 (id=7345): syz_open_dev$sg(&(0x7f0000000000), 0x6, 0xa00) open(&(0x7f0000000080)='./file0\x00', 0x1a47c1, 0x78e22799f4a46fb2) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)=@newlink={0x38, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x11403, 0x21018}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x80) mount(0x0, &(0x7f0000000640)='./config\x00', &(0x7f0000000680)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='usbip-vudc.0', 0xc) 159.919881ms ago: executing program 2 (id=7346): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f00000009c0)={0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000a00)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}], 0x18}}], 0x1, 0xff00) 116.695µs ago: executing program 2 (id=7347): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001780)={0x0, 0x0}, &(0x7f00000017c0)=0x5) setresuid(0x0, 0x0, r2) sendmmsg$unix(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[@cred={{0x1c, 0x1, 0x2, {0x0, r2}}}], 0x20, 0x20000010}}], 0x1, 0x20000040) 0s ago: executing program 2 (id=7348): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = eventfd2(0xfffffffa, 0x1) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="fdffffffffffffff", 0x8}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) kernel console output (not intermixed with test programs): tipc: Enabled bearer , priority 0 [ 266.590130][T19721] netlink: 'syz.1.5669': attribute type 4 has an invalid length. [ 266.590142][T19721] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5669'. [ 266.598988][T19725] tipc: Resetting bearer [ 266.608801][T19727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5671'. [ 266.608813][T19727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5671'. [ 266.609407][T19727] netlink: 'syz.3.5671': attribute type 4 has an invalid length. [ 266.609417][T19727] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5671'. [ 266.631617][T19725] team0: No ports can be present during mode change [ 266.634566][T19725] tipc: Enabling of bearer rejected, already enabled [ 266.669185][T19733] bond0: option mode: unable to set because the bond device has slaves [ 266.672520][T19733] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 266.714249][T19738] bond0: option mode: unable to set because the bond device has slaves [ 266.723988][T19738] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 266.756502][ T12] bond0: (slave dummy0): link status definitely down, disabling slave [ 266.802807][T19752] bond0: option mode: unable to set because the bond device has slaves [ 266.803380][T19752] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 266.911404][T19763] 8021q: adding VLAN 0 to HW filter on device bond11 [ 266.938717][T19763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5685'. [ 266.938728][T19763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5685'. [ 266.939083][T19763] netlink: 'syz.3.5685': attribute type 4 has an invalid length. [ 267.137131][T19798] tipc: Resetting bearer [ 267.141744][T19798] bond8: (slave veth0_to_bond): Releasing backup interface [ 267.152239][T19800] bond0: option mode: unable to set because the bond device is up [ 267.157272][T19802] tipc: Resetting bearer [ 267.159092][T19802] bond0: (slave dummy0): Enslaving as a backup interface with an up link [ 267.165856][T19802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.170701][T19798] team0: Unable to change to the same mode the team is in [ 267.296818][T19821] netlink: 'syz.1.5711': attribute type 1 has an invalid length. [ 267.310781][T19821] 8021q: adding VLAN 0 to HW filter on device bond9 [ 267.320296][T19821] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 267.562920][T19848] netlink: 'syz.2.5722': attribute type 1 has an invalid length. [ 267.564095][T19847] tipc: Resetting bearer [ 267.570681][T19847] bond9: (slave veth0_to_bond): Releasing backup interface [ 267.590701][T19848] 8021q: adding VLAN 0 to HW filter on device bond12 [ 267.600964][T19848] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 267.602404][T19847] team0: Unable to change to the same mode the team is in [ 267.712624][T19861] bond2: (slave bond0): Releasing backup interface [ 267.713676][T19861] bond0: left allmulticast mode [ 267.713685][T19861] gretap1: left allmulticast mode [ 267.723720][T19861] netlink: 'syz.2.5728': attribute type 4 has an invalid length. [ 267.808740][T19870] 8021q: adding VLAN 0 to HW filter on device bond13 [ 267.817870][T19870] bond12: (slave veth0_to_bond): Releasing backup interface [ 267.822072][T19870] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 268.009106][T19897] 8021q: adding VLAN 0 to HW filter on device bond12 [ 268.014552][ C3] net_ratelimit: 201 callbacks suppressed [ 268.019454][T19897] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 268.079139][T19911] tipc: Resetting bearer [ 268.088082][T19911] bond16: (slave veth0_to_bond): Releasing active interface [ 268.093124][T19911] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 268.117444][T19911] team0: No ports can be present during mode change [ 268.118621][T19911] tipc: Enabling of bearer rejected, already enabled [ 268.183254][T19925] 8021q: adding VLAN 0 to HW filter on device bond13 [ 268.195459][T19925] bond12: (slave veth0_to_bond): Releasing backup interface [ 268.208965][T19925] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 268.391264][T19956] 8021q: adding VLAN 0 to HW filter on device bond14 [ 268.397826][T19956] bond13: (slave veth0_to_bond): Releasing backup interface [ 268.400907][T19956] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 268.644357][T19985] 8021q: adding VLAN 0 to HW filter on device bond15 [ 268.652187][T19985] bond14: (slave veth0_to_bond): Releasing backup interface [ 268.657569][T19985] bond15: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 268.852194][T20006] 8021q: adding VLAN 0 to HW filter on device bond16 [ 268.864133][T20006] bond15: (slave veth0_to_bond): Releasing backup interface [ 268.873568][T20006] bond16: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 268.993090][T20033] 8021q: adding VLAN 0 to HW filter on device bond14 [ 269.008573][T20029] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.021024][T20033] bond13: (slave veth0_to_bond): Releasing backup interface [ 269.024105][T20033] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 269.062277][T20038] libceph: resolve '0' (ret=-3): failed [ 269.123709][T20029] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.166538][T20049] syz.3.5806: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 269.166680][T20049] CPU: 3 UID: 0 PID: 20049 Comm: syz.3.5806 Not tainted syzkaller #0 PREEMPT(full) [ 269.166694][T20049] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 269.166702][T20049] Call Trace: [ 269.166707][T20049] [ 269.166712][T20049] dump_stack_lvl+0x100/0x190 [ 269.166755][T20049] warn_alloc.cold+0x9e/0xb2 [ 269.166781][T20049] ? __pfx_warn_alloc+0x10/0x10 [ 269.166846][T20049] ? __kasan_kmalloc+0xaa/0xb0 [ 269.166871][T20049] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 269.166884][T20049] ? xskq_create+0x52/0x290 [ 269.166899][T20049] ? do_sock_setsockopt+0xf3/0x1d0 [ 269.166913][T20049] ? do_syscall_64+0x123/0x790 [ 269.166943][T20049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.166962][T20049] ? xsk_setsockopt+0x743/0xab0 [ 269.166976][T20049] __vmalloc_node_range_noprof+0x123b/0x1420 [ 269.167003][T20049] ? xsk_setsockopt+0x743/0xab0 [ 269.167019][T20049] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 269.167036][T20049] ? kasan_save_track+0x14/0x30 [ 269.167051][T20049] ? __kasan_kmalloc+0xaa/0xb0 [ 269.167067][T20049] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 269.167079][T20049] ? xskq_create+0x52/0x290 [ 269.167094][T20049] ? xsk_setsockopt+0x743/0xab0 [ 269.167111][T20049] xskq_create+0x18f/0x290 [ 269.167133][T20049] ? xsk_setsockopt+0x743/0xab0 [ 269.167150][T20049] xsk_setsockopt+0x743/0xab0 [ 269.167164][T20049] ? __pfx_xsk_setsockopt+0x10/0x10 [ 269.167178][T20049] ? find_held_lock+0x2b/0x80 [ 269.167196][T20049] ? __fget_files+0x215/0x3d0 [ 269.167214][T20049] ? selinux_socket_setsockopt+0x6a/0x80 [ 269.167241][T20049] ? __pfx_xsk_setsockopt+0x10/0x10 [ 269.167256][T20049] do_sock_setsockopt+0xf3/0x1d0 [ 269.167273][T20049] __sys_setsockopt+0x195/0x220 [ 269.167293][T20049] __x64_sys_setsockopt+0xbd/0x160 [ 269.167310][T20049] ? do_syscall_64+0xae/0x790 [ 269.167335][T20049] ? lockdep_hardirqs_on+0x7d/0x110 [ 269.167351][T20049] do_syscall_64+0x123/0x790 [ 269.167369][T20049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.167381][T20049] RIP: 0033:0x7f6a22d9e559 [ 269.167391][T20049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.167403][T20049] RSP: 002b:00007f6a20ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 269.167424][T20049] RAX: ffffffffffffffda RBX: 00007f6a23025fa0 RCX: 00007f6a22d9e559 [ 269.167433][T20049] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 269.167441][T20049] RBP: 00007f6a22e35ad8 R08: 0000000000000004 R09: 0000000000000000 [ 269.167448][T20049] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.167456][T20049] R13: 00007f6a23026038 R14: 00007f6a23025fa0 R15: 00007ffe44d754f8 [ 269.167473][T20049] [ 269.167759][T20049] Mem-Info: [ 269.167767][T20049] active_anon:14367 inactive_anon:18813 isolated_anon:0 [ 269.167767][T20049] active_file:3576 inactive_file:25848 isolated_file:0 [ 269.167767][T20049] unevictable:3048 dirty:352 writeback:0 [ 269.167767][T20049] slab_reclaimable:8994 slab_unreclaimable:78498 [ 269.167767][T20049] mapped:24726 shmem:26718 pagetables:6310 [ 269.167767][T20049] sec_pagetables:302 bounce:0 [ 269.167767][T20049] kernel_misc_reclaimable:0 [ 269.167767][T20049] free:416026 free_pcp:18899 free_cma:0 [ 269.167796][T20049] Node 0 active_anon:57228kB inactive_anon:75248kB active_file:14304kB inactive_file:102944kB unevictable:10192kB isolated(anon):0kB isolated(file):0kB mapped:98904kB dirty:1408kB writeback:0kB shmem:104864kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:8192kB kernel_stack:15968kB pagetables:15004kB sec_pagetables:1208kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 269.167827][T20049] Node 1 active_anon:240kB inactive_anon:4kB active_file:0kB inactive_file:448kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:160kB pagetables:10236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 269.167855][T20049] Node 0 DMA free:14580kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:280kB local_pcp:0kB free_cma:0kB [ 269.167888][T20049] lowmem_reserve[]: 0 1204 1204 1204 1204 [ 269.167909][T20049] Node 0 DMA32 free:117280kB boost:0kB min:27108kB low:33884kB high:40660kB reserved_highatomic:0kB free_highatomic:0kB active_anon:57228kB inactive_anon:75248kB active_file:14304kB inactive_file:102944kB unevictable:10192kB writepending:1408kB zspages:0kB present:2080628kB managed:1233664kB mlocked:8256kB bounce:0kB free_pcp:39496kB local_pcp:9520kB free_cma:0kB [ 269.167941][T20049] lowmem_reserve[]: 0 0 0 0 0 [ 269.167959][T20049] Node 1 Normal free:1532244kB boost:0kB min:40124kB low:50152kB high:60180kB reserved_highatomic:0kB free_highatomic:0kB active_anon:240kB inactive_anon:4kB active_file:0kB inactive_file:448kB unevictable:2000kB writepending:0kB zspages:124kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:35820kB local_pcp:10712kB free_cma:0kB [ 269.167988][T20049] lowmem_reserve[]: 0 0 0 0 0 [ 269.168009][T20049] Node 0 DMA: 29*4kB (UM) 28*8kB (UM) 28*16kB (UM) 29*32kB (UM) 17*64kB (UM) 12*128kB (UM) 6*256kB (UM) 5*512kB (UM) 4*1024kB (UM) 1*2048kB (U) 0*4096kB = 14580kB [ 269.168091][T20049] Node 0 DMA32: 333*4kB (U) 261*8kB (UM) 164*16kB (U) 395*32kB (UE) 165*64kB (UME) 53*128kB (UME) 23*256kB (U) 23*512kB (UM) 28*1024kB (UM) 17*2048kB (U) 0*4096kB = 117180kB [ 269.168171][T20049] Node 1 Normal: 645*4kB (UME) 213*8kB (UME) 423*16kB (UM) 583*32kB (UM) 525*64kB (UM) 425*128kB (UME) 388*256kB (UM) 307*512kB (UM) 229*1024kB (UME) 23*2048kB (UME) 214*4096kB (UM) = 1532364kB [ 269.168256][T20049] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 269.168264][T20049] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 269.168273][T20049] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 269.168281][T20049] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 269.168289][T20049] 56141 total pagecache pages [ 269.168294][T20049] 3 pages in swap cache [ 269.168298][T20049] Free swap = 124944kB [ 269.168302][T20049] Total swap = 124996kB [ 269.168306][T20049] 1048443 pages RAM [ 269.168310][T20049] 0 pages HighMem/MovableOnly [ 269.168314][T20049] 290717 pages reserved [ 269.168318][T20049] 0 pages cma reserved [ 269.219678][T20029] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.273038][T20056] 8021q: adding VLAN 0 to HW filter on device bond15 [ 269.315801][T20056] bond14: (slave veth0_to_bond): Releasing backup interface [ 269.332430][T20056] bond15: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 269.437741][ T43] audit: type=1326 audit(1792408913.915:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19982 comm="syz.0.5778" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cee59e559 code=0x7fc00000 [ 269.484671][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.494224][T20086] validate_nla: 8 callbacks suppressed [ 269.494234][T20086] netlink: 'syz.3.5823': attribute type 1 has an invalid length. [ 269.519893][T20086] 8021q: adding VLAN 0 to HW filter on device bond17 [ 269.546192][T20086] bond16: (slave veth0_to_bond): Releasing backup interface [ 269.546706][T20093] 9pnet_virtio: no channels available for device syz [ 269.554333][T20086] bond17: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 269.555202][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.555238][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.555266][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.699183][T20120] netlink: 'syz.2.5836': attribute type 1 has an invalid length. [ 269.717528][T20120] 8021q: adding VLAN 0 to HW filter on device bond16 [ 269.731125][T20120] bond15: (slave veth0_to_bond): Releasing backup interface [ 269.736718][T20120] bond16: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 269.822886][T20142] __nla_validate_parse: 10 callbacks suppressed [ 269.822897][T20142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5842'. [ 269.823317][T20142] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5842'. [ 269.926046][T20161] netlink: 'syz.2.5848': attribute type 1 has an invalid length. [ 269.942075][T20161] 8021q: adding VLAN 0 to HW filter on device bond17 [ 269.951062][T20161] bond16: (slave veth0_to_bond): Releasing backup interface [ 269.954145][T20161] bond17: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 270.389553][T20214] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5861'. [ 270.609627][ T43] audit: type=1400 audit(1792408915.085:765): avc: denied { write } for pid=20240 comm="syz.1.5871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 270.750152][T20282] overlayfs: failed to clone upperpath [ 270.822020][ T43] audit: type=1400 audit(1792408915.295:766): avc: denied { setopt } for pid=20294 comm="syz.3.5890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 270.991559][T20344] overlayfs: failed to clone upperpath [ 271.015736][T20348] overlayfs: failed to clone upperpath [ 271.053767][T20354] netlink: 'syz.3.5914': attribute type 1 has an invalid length. [ 271.067661][T20354] 8021q: adding VLAN 0 to HW filter on device bond18 [ 271.094084][T20361] jffs2: notice: (20361) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 271.103403][T20361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5916'. [ 271.105590][T20361] overlayfs: failed to clone upperpath [ 271.135909][ T43] audit: type=1326 audit(1792408915.615:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20349 comm="syz.0.5912" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cee59e559 code=0x7fc00000 [ 271.137318][T20366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58205 sclass=netlink_route_socket pid=20366 comm=syz.0.5912 [ 271.218392][ T43] audit: type=1326 audit(1792408915.695:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20383 comm="syz.1.5925" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3166b9e559 code=0x7ffc0000 [ 271.218436][ T43] audit: type=1326 audit(1792408915.695:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20383 comm="syz.1.5925" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3166b9e559 code=0x7ffc0000 [ 271.218605][ T43] audit: type=1326 audit(1792408915.695:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20383 comm="syz.1.5925" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3166b9e559 code=0x7ffc0000 [ 271.218685][ T43] audit: type=1326 audit(1792408915.695:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20383 comm="syz.1.5925" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3166b9e559 code=0x7ffc0000 [ 271.218781][ T43] audit: type=1326 audit(1792408915.695:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20383 comm="syz.1.5925" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3166b9e559 code=0x7ffc0000 [ 271.218886][ T43] audit: type=1326 audit(1792408915.695:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20383 comm="syz.1.5925" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3166b9e559 code=0x7ffc0000 [ 271.221012][T20384] fuse: fd is not a fuse device [ 271.407215][T20406] netlink: 'syz.2.5935': attribute type 5 has an invalid length. [ 271.496886][T20420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.513378][T20421] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5939'. [ 271.549370][T20420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.567645][T20422] ip6tnl0: Caught tx_queue_len zero misconfig [ 271.602379][T20423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.831267][T20428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.197313][T20463] bond0: option active_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 272.355162][T20473] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5960'. [ 272.700805][T20519] geneve2: entered promiscuous mode [ 272.714595][ T5813] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 272.714619][ T5813] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 272.714640][ T5813] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 272.814036][T20528] Process accounting resumed [ 273.184691][ C3] af_packet: tpacket_rcv: packet too big, clamped from 26 to 4294967286. macoff=82 [ 273.214581][ C3] net_ratelimit: 126 callbacks suppressed [ 273.604322][T20566] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 273.662197][T20593] kAFS: unable to lookup cell '(,c' [ 273.774678][T20615] overlayfs: failed to clone upperpath [ 273.888594][T20636] overlayfs: failed to clone upperpath [ 273.925455][T20641] overlayfs: failed to resolve './file1/file0': -2 [ 274.187723][T20667] overlayfs: failed to clone upperpath [ 274.438268][T20685] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6027'. [ 274.558769][T20707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.613269][T20707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.667133][T20707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.819219][T20746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49436 sclass=netlink_route_socket pid=20746 comm=syz.3.6050 [ 274.853558][T20754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.905502][T20754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.957571][T20754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.174860][ T43] kauditd_printk_skb: 116 callbacks suppressed [ 275.174871][ T43] audit: type=1400 audit(1792408919.655:890): avc: denied { create } for pid=20772 comm="syz.1.6061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 275.869353][T20855] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 275.869368][T20855] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 275.869381][T20855] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 275.869391][T20855] One or more global auth toks could not properly register; rc = [-22] [ 275.869416][T20855] Error validating options; rc = [-22] [ 276.721802][ T43] audit: type=1800 audit(1792408921.195:891): pid=20885 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.6102" name="bus" dev="tmpfs" ino=7950 res=0 errno=0 [ 276.730132][T20887] netlink: 'syz.0.6103': attribute type 1 has an invalid length. [ 276.753477][T20887] 8021q: adding VLAN 0 to HW filter on device bond17 [ 276.896438][T20897] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6106'. [ 277.433497][T20941] vlan0: left promiscuous mode [ 277.501025][T20948] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6122'. [ 277.514712][T20950] overlayfs: failed to clone upperpath [ 277.541486][T20953] overlayfs: failed to clone upperpath [ 277.950243][T20975] bond0: option mode: unable to set because the bond device is up [ 277.980123][T20979] lo: entered promiscuous mode [ 277.980505][T20979] tunl0: entered promiscuous mode [ 277.984065][T20979] gre0: entered promiscuous mode [ 277.997520][T20979] gretap0: entered promiscuous mode [ 278.018679][T20979] erspan0: entered promiscuous mode [ 278.022980][T20979] ip_vti0: entered promiscuous mode [ 278.029294][T20979] ip6_vti0: entered promiscuous mode [ 278.033348][T20979] sit0: entered promiscuous mode [ 278.043699][T20979] ip6tnl0: entered promiscuous mode [ 278.047951][T20979] ip6gre0: entered promiscuous mode [ 278.049295][T20979] vcan0: entered promiscuous mode [ 278.053203][T20979] .`: entered promiscuous mode [ 278.054678][T20979] tipc: Resetting bearer [ 278.054910][T20979] team0: entered promiscuous mode [ 278.060968][T20979] nlmon0: entered promiscuous mode [ 278.062551][T20979] veth0: entered promiscuous mode [ 278.066548][T20979] veth1: entered promiscuous mode [ 278.072540][T20979] wg0: entered promiscuous mode [ 278.074631][T20979] wg2: entered promiscuous mode [ 278.075837][T20979] veth0_to_bridge: entered promiscuous mode [ 278.078750][T20979] bridge_slave_0: entered promiscuous mode [ 278.081683][T20979] veth1_to_bridge: entered promiscuous mode [ 278.084646][T20979] veth0_to_bond: entered promiscuous mode [ 278.086408][T20979] bond_slave_0: entered promiscuous mode [ 278.087699][T20979] veth1_to_bond: entered promiscuous mode [ 278.093643][T20979] bond_slave_1: entered promiscuous mode [ 278.097001][T20979] veth0_to_team: entered promiscuous mode [ 278.099238][T20979] team_slave_0: entered promiscuous mode [ 278.102187][T20979] veth1_to_team: entered promiscuous mode [ 278.105563][T20979] team_slave_1: entered promiscuous mode [ 278.108713][T20979] veth0_to_batadv: entered promiscuous mode [ 278.114276][T20979] batadv_slave_0: entered promiscuous mode [ 278.118186][T20979] veth1_to_batadv: entered promiscuous mode [ 278.122005][T20979] batadv_slave_1: entered promiscuous mode [ 278.125620][T20979] xfrm0: entered promiscuous mode [ 278.128508][T20979] veth0_to_hsr: entered promiscuous mode [ 278.136403][T20979] veth1_to_hsr: entered promiscuous mode [ 278.150583][T20979] veth1_virt_wifi: entered promiscuous mode [ 278.156512][T20979] veth0_virt_wifi: entered promiscuous mode [ 278.162937][T20979] virt_wifi0: entered promiscuous mode [ 278.171641][T20979] vlan1: entered promiscuous mode [ 278.173633][T20979] macvlan0: entered promiscuous mode [ 278.179708][T20979] macvlan1: entered promiscuous mode [ 278.181161][T20979] ipvlan0: entered promiscuous mode [ 278.188251][T20979] ipvlan1: entered promiscuous mode [ 278.199465][T20979] macvtap0: entered promiscuous mode [ 278.200951][T20979] macsec0: entered promiscuous mode [ 278.205795][T20979] geneve0: entered promiscuous mode [ 278.212467][T20979] geneve1: entered promiscuous mode [ 278.217561][T20979] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 278.223208][T20979] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 278.231580][T20979] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 278.238149][T20979] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 278.241181][T20979] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 278.243347][T20979] pimreg3: entered promiscuous mode [ 278.244944][T20979] bond1: entered promiscuous mode [ 278.249362][T20979] bond2: entered promiscuous mode [ 278.251032][T20979] bond3: entered promiscuous mode [ 278.251102][T20979] mac80211_hwsim hwsim10 wlan2: entered promiscuous mode [ 278.251190][T20979] syztnl0: entered promiscuous mode [ 278.254138][T20979] bond4: entered promiscuous mode [ 278.260096][T20979] bond0: entered promiscuous mode [ 278.263678][T20979] bond5: entered promiscuous mode [ 278.264085][T20979] bond6: entered promiscuous mode [ 278.264151][T20979] bond7: entered promiscuous mode [ 278.264213][T20979] bond8: entered promiscuous mode [ 278.265356][T20979] bond9: entered promiscuous mode [ 278.265423][T20979] bond10: entered promiscuous mode [ 278.268128][T20979] bond11: entered promiscuous mode [ 278.268578][T20979] bond12: entered promiscuous mode [ 278.268645][T20979] mac80211_hwsim hwsim14 wlan3: entered promiscuous mode [ 278.268713][T20979] bond13: entered promiscuous mode [ 278.271510][T20979] bond14: entered promiscuous mode [ 278.275091][T20979] bond15: entered promiscuous mode [ 278.275562][T20979] ip6tnl1: entered promiscuous mode [ 278.279689][T20979] veth2: entered promiscuous mode [ 278.279811][T20979] veth3: entered promiscuous mode [ 278.281073][T20979] tipc: Resetting bearer [ 278.282500][T20979] syzkaller0: entered promiscuous mode [ 278.287403][T20979] bond16: entered promiscuous mode [ 278.291159][T20979] bond17: entered promiscuous mode [ 278.304703][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.304743][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.304773][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.332893][ T43] audit: type=1400 audit(1792408922.805:892): avc: denied { write } for pid=20984 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.344533][ C2] net_ratelimit: 1242 callbacks suppressed [ 278.378810][ T43] audit: type=1400 audit(1792408922.855:893): avc: denied { write } for pid=20989 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.432944][T21003] netlink: 'syz.1.6135': attribute type 8 has an invalid length. [ 278.467267][ T43] audit: type=1400 audit(1792408922.945:894): avc: denied { write } for pid=21002 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.519035][ T43] audit: type=1400 audit(1792408922.995:895): avc: denied { write } for pid=21014 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.557397][T21021] bond0: option mode: unable to set because the bond device has slaves [ 278.557847][T21021] tipc: Resetting bearer [ 278.582933][T21021] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 278.583395][T21024] netlink: 'syz.1.6144': attribute type 1 has an invalid length. [ 278.593498][ T43] audit: type=1400 audit(1792408923.065:896): avc: denied { write } for pid=21022 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.611097][T21024] 8021q: adding VLAN 0 to HW filter on device bond10 [ 278.626379][ T12] bond0: (slave dummy0): link status definitely down, disabling slave [ 278.635986][ T43] audit: type=1400 audit(1792408923.105:897): avc: denied { write } for pid=21030 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.677832][T21037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6147'. [ 278.797511][T21056] netlink: 'syz.3.6156': attribute type 1 has an invalid length. [ 278.824430][T21056] 8021q: adding VLAN 0 to HW filter on device bond19 [ 278.838136][T21056] bond17: (slave veth0_to_bond): Releasing backup interface [ 278.857049][T21062] tipc: Resetting bearer [ 278.860391][T21062] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 278.878164][T21062] team0: Unable to change to the same mode the team is in [ 278.880556][T21062] tipc: Enabling of bearer rejected, already enabled [ 278.893441][ T43] audit: type=1400 audit(1792408923.365:898): avc: denied { write } for pid=21060 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.945712][ T43] audit: type=1400 audit(1792408923.425:899): avc: denied { write } for pid=21071 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.950900][T21074] tipc: Resetting bearer [ 279.000252][T21080] 8021q: adding VLAN 0 to HW filter on device bond18 [ 279.000516][T21074] team0: Unable to change to the same mode the team is in [ 279.002824][T21074] tipc: Enabling of bearer rejected, already enabled [ 279.028536][T21080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6171'. [ 279.028548][T21080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6171'. [ 279.028567][T21080] bond0: left promiscuous mode [ 279.029412][T21080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.032485][T21080] bond4: (slave bond0): making interface the new active one [ 279.032497][T21080] bond0: entered promiscuous mode [ 279.033487][T21080] bond4: (slave bond0): Enslaving as an active interface with an up link [ 279.060422][T21080] netlink: 'syz.0.6171': attribute type 4 has an invalid length. [ 279.060443][T21080] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6171'. [ 279.147024][T21098] netlink: 'syz.0.6169': attribute type 1 has an invalid length. [ 279.161750][T21098] 8021q: adding VLAN 0 to HW filter on device bond19 [ 279.167171][T21098] veth0_to_bond: left promiscuous mode [ 279.201669][T21103] bond0: option mode: unable to set because the bond device is up [ 279.228155][ T13] tipc: Subscription rejected, illegal request [ 279.360644][T21124] bond0: option mode: unable to set because the bond device is up [ 279.385844][T21127] netlink: 'syz.3.6179': attribute type 1 has an invalid length. [ 279.438910][T21134] netlink: 'syz.2.6181': attribute type 10 has an invalid length. [ 279.449202][T21134] team0: Device wg2 failed to enter team mode [ 279.449211][T21134] team0: Device wg2 failed to enter team mode [ 279.464705][T21136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6182'. [ 279.501682][T21142] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6185'. [ 279.560777][T21153] netlink: 'syz.3.6190': attribute type 1 has an invalid length. [ 279.581160][T21157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.635132][T21166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.687739][T21157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.748345][T21176] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6199'. [ 279.769532][T21173] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 279.827909][T21182] netlink: 'syz.1.6202': attribute type 1 has an invalid length. [ 279.947103][T21196] bridge2: entered allmulticast mode [ 280.006986][T21202] bond0: option mode: unable to set because the bond device is up [ 280.030913][T21204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.085111][T21207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.138452][T21207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.491581][T21233] tipc: Resetting bearer [ 280.492800][T21233] bond0: (slave dummy0): Releasing active interface [ 280.505459][T21233] bond17: (slave veth0_to_bond): Releasing backup interface [ 280.557723][T21233] team0: No ports can be present during mode change [ 280.558760][T21233] vlan0: entered promiscuous mode [ 280.632567][T21241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6227'. [ 280.648451][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 280.648461][ T43] audit: type=1400 audit(1792408925.125:905): avc: denied { read } for pid=21240 comm="syz.1.6227" lport=41608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 281.009307][T21266] tipc: Resetting bearer [ 281.045634][T21266] team0: Unable to change to the same mode the team is in [ 281.668177][ T43] audit: type=1400 audit(1792408926.145:906): avc: denied { getopt } for pid=21277 comm="syz.2.6242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 282.209929][T21316] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=21316 comm=syz.0.6252 [ 282.212349][T21199] kexec: Could not allocate control_code_buffer [ 282.313334][T21330] __nla_validate_parse: 3 callbacks suppressed [ 282.313351][T21330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6259'. [ 282.363905][T21337] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=21337 comm=syz.0.6262 [ 282.499848][T21350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6269'. [ 282.672688][T21372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6279'. [ 282.676309][T21372] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6279'. [ 282.680943][T21372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.713000][T21375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6280'. [ 282.743918][T21379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.759617][T21382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6283'. [ 282.801639][T21372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.847768][T21397] validate_nla: 3 callbacks suppressed [ 282.847780][T21397] netlink: 'syz.1.6290': attribute type 4 has an invalid length. [ 283.091209][T21420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6301'. [ 283.091223][T21420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6301'. [ 283.097808][T21420] netlink: 'syz.0.6301': attribute type 4 has an invalid length. [ 283.097819][T21420] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6301'. [ 283.346615][T21436] netlink: 'syz.0.6307': attribute type 9 has an invalid length. [ 283.347534][T21438] xt_IDLETIMER: timeout value is too big [ 283.362916][T21442] bond0: option mode: unable to set because the bond device is up [ 283.369786][T21442] bond0: (slave dummy0): Enslaving as a backup interface with an up link [ 283.374578][ C0] net_ratelimit: 123 callbacks suppressed [ 283.443090][T21452] bond0: option mode: unable to set because the bond device has slaves [ 283.443709][T21452] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 283.507515][T21461] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 283.507690][ T43] audit: type=1400 audit(1792408927.985:907): avc: denied { read } for pid=21459 comm="syz.3.6322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 284.057878][T21528] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6351'. [ 284.060227][T21528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=21528 comm=syz.0.6351 [ 284.061670][ T43] audit: type=1400 audit(1792408928.535:908): avc: denied { create } for pid=21527 comm="syz.0.6351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 284.543758][T21571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.596004][T21571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.658823][T21571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.040912][ T43] audit: type=1326 audit(1792408929.515:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21583 comm="syz.1.6374" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3166b9e559 code=0x7ffc0000 [ 285.041062][ T43] audit: type=1326 audit(1792408929.515:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21583 comm="syz.1.6374" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3166b9e559 code=0x7ffc0000 [ 285.041852][ T43] audit: type=1326 audit(1792408929.515:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21583 comm="syz.1.6374" exe="/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f3166b9e559 code=0x7ffc0000 [ 285.041969][ T43] audit: type=1326 audit(1792408929.515:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21583 comm="syz.1.6374" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3166b9e559 code=0x7ffc0000 [ 285.042099][ T43] audit: type=1326 audit(1792408929.515:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21583 comm="syz.1.6374" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3166b9e559 code=0x7ffc0000 [ 285.043355][ T43] audit: type=1326 audit(1792408929.515:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21583 comm="syz.1.6374" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3166b9e559 code=0x7ffc0000 [ 285.288579][T21621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.342092][T21621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.395588][T21631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.688626][ T43] kauditd_printk_skb: 40 callbacks suppressed [ 285.688641][ T43] audit: type=1326 audit(1792408930.165:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21649 comm="syz.2.6395" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d739e559 code=0x7ffc0000 [ 285.688811][ T43] audit: type=1326 audit(1792408930.165:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21649 comm="syz.2.6395" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d739e559 code=0x7ffc0000 [ 286.162979][ T43] audit: type=1400 audit(1792408930.635:957): avc: denied { mounton } for pid=21695 comm="syz.1.6416" path="/mnt" dev="hugetlbfs" ino=51880 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 286.163209][T21696] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 286.163223][T21696] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 286.163236][T21696] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 286.163245][T21696] One or more global auth toks could not properly register; rc = [-22] [ 286.163272][T21696] Error validating options; rc = [-22] [ 286.163947][ T43] audit: type=1326 audit(1792408930.635:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21695 comm="syz.1.6416" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3166b9e559 code=0x0 [ 286.210104][T21712] tipc: Enabling of bearer rejected, media not registered [ 286.877568][ C3] vcan0: j1939_tp_rxtimer: 0xffff88803805b800: rx timeout, send abort [ 286.879555][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff888036335800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 286.887260][ T43] audit: type=1400 audit(1792408931.365:959): avc: denied { read } for pid=5126 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 286.887304][ T43] audit: type=1400 audit(1792408931.365:960): avc: denied { search } for pid=5126 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.887328][ T43] audit: type=1400 audit(1792408931.365:961): avc: denied { write search } for pid=5126 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.887358][ T43] audit: type=1400 audit(1792408931.365:962): avc: denied { add_name } for pid=5126 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.887390][ T43] audit: type=1400 audit(1792408931.365:963): avc: denied { create } for pid=5126 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 286.887936][ T43] audit: type=1400 audit(1792408931.365:964): avc: denied { append open } for pid=5126 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 287.026331][T21778] can: request_module (can-proto-0) failed. [ 287.027842][T21779] can: request_module (can-proto-0) failed. [ 287.035680][T21778] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 287.042018][T21779] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 287.378801][ C3] vcan0: j1939_tp_rxtimer: 0xffff88803805b800: abort rx timeout. Force session deactivation [ 287.452919][T21823] __nla_validate_parse: 11 callbacks suppressed [ 287.452941][T21823] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6470'. [ 287.523699][T21826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6472'. [ 287.702957][T21844] tc_dump_action: action bad kind [ 287.837125][T21860] CIFS: Witness protocol support is experimental [ 287.837156][T21860] CIFS mount error: No usable UNC path provided in device string! [ 287.837156][T21860] [ 287.837170][T21860] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 288.692240][T21917] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.6510'. [ 288.800628][T21921] net_ratelimit: 246 callbacks suppressed [ 288.975067][ C1] vcan0: j1939_tp_rxtimer: 0xffff888041540c00: rx timeout, send abort [ 288.975294][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888041542800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 289.171043][T21951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6524'. [ 289.311389][T21966] netlink: 'syz.0.6531': attribute type 1 has an invalid length. [ 289.361329][T21966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6531'. [ 289.475191][ C1] vcan0: j1939_tp_rxtimer: 0xffff888041540c00: abort rx timeout. Force session deactivation [ 289.505620][T21987] fuse: fd is not a fuse device [ 289.519479][T21987] geneve1: left promiscuous mode [ 289.519499][T21987] geneve1: entered allmulticast mode [ 289.538138][T21989] netlink: 'syz.3.6542': attribute type 1 has an invalid length. [ 289.564426][T21989] 8021q: adding VLAN 0 to HW filter on device bond21 [ 289.579578][T21989] bond21: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 289.859885][T22022] netlink: 'syz.2.6554': attribute type 1 has an invalid length. [ 289.862417][T22020] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6552'. [ 289.875629][T22022] 8021q: adding VLAN 0 to HW filter on device bond18 [ 289.887895][T22022] bond18: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 290.222382][T22056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6568'. [ 290.222397][T22056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6568'. [ 290.222895][T22056] netlink: 'syz.0.6568': attribute type 4 has an invalid length. [ 290.222909][T22056] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6568'. [ 290.458631][T22077] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6577'. [ 290.496483][T22083] bond18: (slave veth0_to_bond): Releasing backup interface [ 290.626437][T22113] bond21: (slave veth0_to_bond): Releasing backup interface [ 290.661483][T22120] xt_CT: You must specify a L4 protocol and not use inversions on it [ 290.710220][ T43] kauditd_printk_skb: 38 callbacks suppressed [ 290.710237][ T43] audit: type=1400 audit(1792408935.185:1003): avc: denied { write } for pid=22122 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.710277][ T43] audit: type=1400 audit(1792408935.185:1004): avc: denied { unlink } for pid=22122 comm="rm" name="resolv.conf.bond_slave_0.link" dev="tmpfs" ino=2550 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 290.791472][ T43] audit: type=1400 audit(1792408935.265:1005): avc: denied { write } for pid=22131 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.844567][ T43] audit: type=1400 audit(1792408935.315:1006): avc: denied { write } for pid=22143 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.073979][T22161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.128006][T22161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.179445][T22161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.542496][T22171] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 291.619139][ T43] audit: type=1400 audit(1792408936.095:1007): avc: denied { ioctl } for pid=22172 comm="syz.2.6609" path="socket:[52156]" dev="sockfs" ino=52156 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 291.813437][ T43] audit: type=1400 audit(1792408936.285:1008): avc: denied { create } for pid=22193 comm="syz.3.6618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 291.982315][T22216] overlayfs: failed to clone upperpath [ 292.003995][T22220] bond0: (slave bond0): Error: Device is in use and cannot be enslaved [ 292.039828][T22228] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 292.111659][T22237] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 292.496580][T22256] __nla_validate_parse: 13 callbacks suppressed [ 292.496598][T22256] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6642'. [ 292.598889][T22260] siw: device registration error -23 [ 292.598906][T22261] siw: device registration error -23 [ 292.722617][T22271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6648'. [ 292.768677][T22279] : renamed from vlan0 [ 292.861484][ T43] audit: type=1400 audit(1792408937.335:1009): avc: denied { mount } for pid=22292 comm="syz.1.6660" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 292.912621][T22298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6658'. [ 292.987165][T22312] futex_wake_op: syz.2.6664 tries to shift op by 144; fix this program [ 292.989682][T22312] overlayfs: failed to resolve './file1/file0': -2 [ 293.002596][T22315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.006957][T22303] overlayfs: failed to clone upperpath [ 293.054022][T22315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.087583][T22317] IPv6: NLM_F_CREATE should be specified when creating new route [ 293.106603][T22315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.188215][T22324] overlayfs: empty lowerdir [ 293.225583][T22326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6672'. [ 293.380050][T22332] rxe_eth0 speed is unknown, defaulting to 1000 [ 293.486360][T22332] virt_wifi0 speed is unknown, defaulting to 1000 [ 293.488758][T22332] lo speed is unknown, defaulting to 1000 [ 293.490168][T22332] lo speed is unknown, defaulting to 1000 [ 293.501230][T22337] batadv_slave_1: entered promiscuous mode [ 293.507247][T22337] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6676'. [ 293.508190][T22336] batadv_slave_1: left promiscuous mode [ 293.752737][T22356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6681'. [ 293.854739][ T1168] net_ratelimit: 670 callbacks suppressed [ 293.940086][T22366] can: request_module (can-proto-0) failed. [ 293.980086][T22380] bridge: RTM_NEWNEIGH with invalid ether address [ 293.993390][T22381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6689'. [ 293.998011][T22374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6689'. [ 294.451725][T22414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.507524][T22415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.559650][T22414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.761528][T22436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6709'. [ 294.787600][T22438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6710'. [ 294.802472][ T43] audit: type=1400 audit(1792408939.275:1010): avc: denied { audit_read } for pid=22439 comm="syz.0.6711" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 294.813918][T22438] bond11: Invalid ad_actor_system MAC address. [ 294.813931][T22438] bond11: option ad_actor_system: invalid value (65541) [ 294.816849][T22438] bond11 (unregistering): Released all slaves [ 294.853952][ T43] audit: type=1400 audit(1792408939.325:1011): avc: denied { mount } for pid=22442 comm="syz.0.6712" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 294.905965][T22448] tipc: Resetting bearer [ 294.940266][T22448] tipc: Resetting bearer [ 295.009225][T22461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22461 comm=syz.0.6720 [ 295.095514][T22469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=22469 comm=syz.1.6723 [ 295.243135][T22489] netlink: 'syz.1.6733': attribute type 1 has an invalid length. [ 295.578046][T22530] : renamed from dummy0 [ 295.615593][T22535] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 295.633696][T22537] netlink: 'syz.2.6748': attribute type 1 has an invalid length. [ 295.652387][T22540] X.509: signatureAlgorithm (12) differs from tbsCertificate.signature (13) [ 295.660496][T22537] 8021q: adding VLAN 0 to HW filter on device bond19 [ 295.889735][T22565] netlink: 'syz.2.6759': attribute type 7 has an invalid length. [ 296.028615][T22575] bpf: Bad value for 'uid' [ 296.114398][T22579] overlayfs: failed to clone upperpath [ 296.318394][T22587] overlayfs: failed to resolve './file7/file0': -2 [ 296.338716][T22590] netlink: 'syz.3.6770': attribute type 10 has an invalid length. [ 296.388364][T22594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.439792][T22594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.492090][T22595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.177886][T22648] fuse: fd is not a fuse device [ 297.179452][ T43] audit: type=1804 audit(1792408941.655:1012): pid=22648 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.6788" name="file0" dev="tmpfs" ino=8760 res=1 errno=0 [ 297.322525][T22657] rxe_eth0 speed is unknown, defaulting to 1000 [ 297.385904][T22663] Cannot find del_set index 8192 as target [ 297.404323][T22657] virt_wifi0 speed is unknown, defaulting to 1000 [ 297.405997][T22657] lo speed is unknown, defaulting to 1000 [ 297.406879][T22657] lo speed is unknown, defaulting to 1000 [ 297.532493][ T43] audit: type=1400 audit(1792408942.005:1013): avc: denied { getopt } for pid=22668 comm="syz.3.6796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 297.670663][T22687] fuse: fd is not a fuse device [ 297.777374][T22694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=22694 comm=syz.1.6805 [ 297.862358][T22700] __nla_validate_parse: 7 callbacks suppressed [ 297.862368][T22700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6808'. [ 297.862392][T22700] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6808'. [ 297.890076][T22700] geneve2: entered promiscuous mode [ 297.890086][T22700] geneve2: entered allmulticast mode [ 297.914645][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.914738][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.914767][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.914784][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.043642][T22712] overlayfs: failed to clone upperpath [ 298.059390][T22709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6811'. [ 298.153371][T22719] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6815'. [ 298.153982][T22719] overlayfs: failed to resolve 'ower1': -2 [ 298.259914][T22725] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6817'. [ 298.583811][T22737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6821'. [ 298.616063][ T43] audit: type=1400 audit(1792408943.095:1014): avc: denied { read } for pid=22740 comm="syz.1.6824" path="socket:[53878]" dev="sockfs" ino=53878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 298.873928][T22751] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6828'. [ 298.909392][T22755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6829'. [ 299.170844][T22765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6833'. [ 299.192624][T22767] fuse: Unknown parameter '' [ 299.214561][ C3] net_ratelimit: 689 callbacks suppressed [ 299.227448][T22769] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 299.227502][T22769] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 299.227566][T22769] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 299.227618][T22769] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 299.227670][T22769] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 299.227722][T22769] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 299.227784][T22769] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 299.227842][T22769] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 299.227931][T22769] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 299.227986][T22769] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 299.228051][T22769] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 299.228107][T22769] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 299.228160][T22769] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 299.228211][T22769] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 299.228275][T22769] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 299.228327][T22769] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 299.228379][T22769] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 299.228430][T22769] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 299.228493][T22769] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 299.230192][T22769] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 299.230286][T22769] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 299.230378][T22769] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 299.230479][T22769] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 299.230569][T22769] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 299.230643][T22769] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 299.230718][T22769] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 299.230786][T22769] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 299.230842][T22769] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 299.230894][T22769] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 299.230946][T22769] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 299.231009][T22769] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 299.231090][T22769] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 299.231141][T22769] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 299.265647][T22774] netlink: 'syz.3.6836': attribute type 10 has an invalid length. [ 299.296856][T22776] netlink: 'syz.3.6837': attribute type 16 has an invalid length. [ 299.296868][T22776] netlink: 'syz.3.6837': attribute type 17 has an invalid length. [ 299.300644][T22776] 8021q: adding VLAN 0 to HW filter on device .` [ 299.301507][T22776] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.301706][T22776] tipc: Resetting bearer [ 299.301838][T22776] tipc: Resetting bearer [ 299.302754][T22776] tipc: Resetting bearer [ 299.302914][T22776] tipc: Resetting bearer [ 299.433219][T22784] overlayfs: failed to clone upperpath [ 299.770382][T22813] netlink: 'syz.0.6852': attribute type 1 has an invalid length. [ 299.783520][T22813] 8021q: adding VLAN 0 to HW filter on device bond20 [ 299.814962][T22818] mac80211_hwsim hwsim3 wlan1: Caught tx_queue_len zero misconfig [ 300.040219][T22837] bond_slave_0: Caught tx_queue_len zero misconfig [ 300.048378][T22839] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 300.108073][T22846] netlink: 'syz.0.6862': attribute type 1 has an invalid length. [ 300.120359][T22846] 8021q: adding VLAN 0 to HW filter on device bond21 [ 300.124184][T22846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6862'. [ 300.429481][T22868] overlayfs: failed to clone upperpath [ 300.481483][T22872] netlink: 'syz.0.6871': attribute type 1 has an invalid length. [ 300.490959][T22860] autofs: Unknown parameter '' [ 300.493838][T22872] 8021q: adding VLAN 0 to HW filter on device bond22 [ 300.546346][T22878] wg1: Caught tx_queue_len zero misconfig [ 301.073940][T22910] key id 000004d2 not found [ 301.283227][ T43] audit: type=1804 audit(1792408945.755:1015): pid=22916 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.6887" name="file0" dev="tmpfs" ino=8946 res=1 errno=0 [ 301.371817][T22925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.433652][T22924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.449040][T22929] overlayfs: missing 'lowerdir' [ 301.486431][T22924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.564932][T22935] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22) [ 301.755193][T22960] netlink: 'syz.1.6905': attribute type 1 has an invalid length. [ 301.774344][T22960] 8021q: adding VLAN 0 to HW filter on device bond11 [ 302.065409][T22973] batadv_slave_0: Caught tx_queue_len zero misconfig [ 302.066096][T22973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=22973 comm=syz.0.6911 [ 302.101987][T22979] netlink: 'syz.1.6913': attribute type 10 has an invalid length. [ 302.104023][T22979] team0: Device wg2 failed to enter team mode [ 302.104032][T22979] team0: Device wg2 failed to enter team mode [ 302.154999][T22984] netlink: 'syz.1.6915': attribute type 1 has an invalid length. [ 302.169024][T22984] 8021q: adding VLAN 0 to HW filter on device bond12 [ 302.189816][T22989] veth0: Caught tx_queue_len zero misconfig [ 302.233570][T22998] overlayfs: failed to resolve './file1/file0': -2 [ 302.322764][T23006] __vm_enough_memory: pid: 23006, comm: syz.2.6920, bytes: 11727221260288 not enough memory for the allocation [ 302.322874][T23006] __vm_enough_memory: pid: 23006, comm: syz.2.6920, bytes: 11727221260288 not enough memory for the allocation [ 302.916442][T23013] __nla_validate_parse: 12 callbacks suppressed [ 302.916453][T23013] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6925'. [ 302.936632][T23015] netlink: 'syz.3.6926': attribute type 1 has an invalid length. [ 302.963763][T23015] 8021q: adding VLAN 0 to HW filter on device bond22 [ 302.970983][T23015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6926'. [ 303.060902][T23034] bond_slave_0: Caught tx_queue_len zero misconfig [ 303.153182][T23039] netlink: 'syz.0.6935': attribute type 1 has an invalid length. [ 303.155066][T23040] netlink: 'syz.2.6936': attribute type 1 has an invalid length. [ 303.166134][T23039] 8021q: adding VLAN 0 to HW filter on device bond23 [ 303.201377][T23040] 8021q: adding VLAN 0 to HW filter on device bond20 [ 303.204176][T23039] bond23: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 303.205714][T23040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6936'. [ 303.251240][T23047] tipc: Resetting bearer [ 303.355738][T23068] netlink: 'syz.2.6945': attribute type 1 has an invalid length. [ 303.378274][T23068] 8021q: adding VLAN 0 to HW filter on device bond21 [ 303.381752][T23075] netlink: 'syz.0.6948': attribute type 1 has an invalid length. [ 303.382300][T23068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6945'. [ 303.403729][T23075] 8021q: adding VLAN 0 to HW filter on device bond24 [ 303.419479][T23078] tipc: Resetting bearer [ 303.419741][T23078] tipc: Resetting bearer [ 303.423343][T23075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6948'. [ 303.490080][T23088] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6956'. [ 303.524456][ T43] audit: type=1326 audit(1792408947.995:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23079 comm="syz.1.6951" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3166b9e559 code=0x7ffc0000 [ 303.524556][ T43] audit: type=1326 audit(1792408947.995:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23079 comm="syz.1.6951" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3166b9e559 code=0x7ffc0000 [ 303.529689][ T43] audit: type=1326 audit(1792408948.005:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23079 comm="syz.1.6951" exe="/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f3166b9e559 code=0x7ffc0000 [ 303.529736][ T43] audit: type=1326 audit(1792408948.005:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23079 comm="syz.1.6951" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3166b9e559 code=0x7ffc0000 [ 303.529773][ T43] audit: type=1326 audit(1792408948.005:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23079 comm="syz.1.6951" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3166b9e559 code=0x7ffc0000 [ 303.529817][ T43] audit: type=1326 audit(1792408948.005:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23079 comm="syz.1.6951" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3166b9e559 code=0x7ffc0000 [ 303.529856][ T43] audit: type=1326 audit(1792408948.005:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23079 comm="syz.1.6951" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3166b9e559 code=0x7ffc0000 [ 303.551478][T23098] ovs-dp0: entered promiscuous mode [ 303.586955][T23104] netlink: 'syz.3.6961': attribute type 1 has an invalid length. [ 303.601212][T23104] 8021q: adding VLAN 0 to HW filter on device bond23 [ 303.606505][T23104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6961'. [ 303.626434][T23103] bond0: (slave dummy0): Removing an active aggregator [ 303.632834][T23103] bond0: (slave dummy0): Releasing backup interface [ 303.646924][T23110] overlayfs: failed to clone upperpath [ 303.930283][T23127] 8021q: adding VLAN 0 to HW filter on device bond13 [ 303.936336][T23127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6971'. [ 304.046064][ T43] audit: type=1326 audit(1792408948.525:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23131 comm="syz.2.6973" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d739e559 code=0x7ffc0000 [ 304.046106][ T43] audit: type=1326 audit(1792408948.525:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23131 comm="syz.2.6973" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d739e559 code=0x7ffc0000 [ 304.046640][ T43] audit: type=1326 audit(1792408948.525:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23131 comm="syz.2.6973" exe="/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f43d739e559 code=0x7ffc0000 [ 304.048883][T23134] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6981'. [ 304.063295][T23134] fuse: fd is not a fuse device [ 304.232549][T23141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6976'. [ 304.255058][ T5793] net_ratelimit: 381 callbacks suppressed [ 304.255069][ T5793] bond0: (slave dummy0): failed to get link speed/duplex [ 304.296230][T23148] 8021q: adding VLAN 0 to HW filter on device bond14 [ 304.374762][ T12] bond0: (slave dummy0): failed to get link speed/duplex [ 304.455158][T23161] fuse: fd is not a fuse device [ 304.494877][ T5793] bond0: (slave dummy0): failed to get link speed/duplex [ 304.614699][ T12] bond0: (slave dummy0): failed to get link speed/duplex [ 305.048510][T23174] 8021q: adding VLAN 0 to HW filter on device bond15 [ 305.097203][T23183] IPv6: NLM_F_CREATE should be specified when creating new route [ 305.191848][T23197] 8021q: adding VLAN 0 to HW filter on device bond25 [ 305.250463][T23212] IPv6: NLM_F_CREATE should be specified when creating new route [ 305.297182][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880417af800: rx timeout, send abort [ 305.508697][T23228] validate_nla: 5 callbacks suppressed [ 305.508712][T23228] netlink: 'syz.0.7014': attribute type 1 has an invalid length. [ 305.525855][T23228] 8021q: adding VLAN 0 to HW filter on device bond26 [ 305.797245][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880417af800: abort rx timeout. Force session deactivation [ 305.951546][T23252] netlink: 'syz.2.7023': attribute type 1 has an invalid length. [ 305.964576][T23252] 8021q: adding VLAN 0 to HW filter on device bond22 [ 306.037702][T23257] netlink: 'syz.2.7025': attribute type 1 has an invalid length. [ 306.050997][T23257] bridge0: entered promiscuous mode [ 306.323213][T23276] tipc: Resetting bearer [ 306.476826][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027be0400: rx timeout, send abort [ 306.710693][T23319] wg2: Caught tx_queue_len zero misconfig [ 306.779964][T23326] lo: entered promiscuous mode [ 306.976886][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027be0400: abort rx timeout. Force session deactivation [ 309.294611][ T13] net_ratelimit: 393 callbacks suppressed [ 309.294629][ T13] bond0: (slave dummy0): failed to get link speed/duplex [ 309.414619][ T12] bond0: (slave dummy0): failed to get link speed/duplex [ 309.524634][ T13] bond0: (slave dummy0): failed to get link speed/duplex [ 309.634707][ T12] bond0: (slave dummy0): failed to get link speed/duplex [ 309.744607][ T13] bond0: (slave dummy0): failed to get link speed/duplex [ 309.880085][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 309.880103][ T43] audit: type=1400 audit(1792408954.355:1033): avc: denied { write } for pid=23329 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.922039][ T43] audit: type=1400 audit(1792408954.395:1034): avc: denied { write } for pid=23332 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.404629][ T5793] net_ratelimit: 168 callbacks suppressed [ 314.404651][ T5793] bond0: (slave dummy0): failed to get link speed/duplex [ 314.514653][ T5793] bond0: (slave dummy0): failed to get link speed/duplex [ 314.624805][ T5793] bond0: (slave dummy0): failed to get link speed/duplex [ 314.734652][ T5793] bond0: (slave dummy0): failed to get link speed/duplex [ 316.898115][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.898147][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.444766][ T12] net_ratelimit: 215 callbacks suppressed [ 319.444788][ T12] bond0: (slave dummy0): failed to get link speed/duplex [ 319.554877][ T12] bond0: (slave dummy0): failed to get link speed/duplex [ 319.664802][ T5793] bond0: (slave dummy0): failed to get link speed/duplex [ 319.774853][ T5793] bond0: (slave dummy0): failed to get link speed/duplex [ 319.884721][ T5793] bond0: (slave dummy0): failed to get link speed/duplex [ 319.994774][ T12] bond0: (slave dummy0): failed to get link speed/duplex [ 320.706959][ T43] audit: type=1400 audit(1792408965.185:1035): avc: denied { execute } for pid=23336 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 320.709158][ T43] audit: type=1400 audit(1792408965.185:1036): avc: denied { execute_no_trans } for pid=23336 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 320.727781][T23338] __nla_validate_parse: 18 callbacks suppressed [ 320.727793][T23338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7058'. [ 320.863359][ T5737] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 320.867566][ T5737] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 320.869038][ T5737] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 320.870619][ T5737] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 320.871187][ T5737] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 320.898885][ T5746] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 320.901729][ T5746] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 320.902019][ T5746] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 320.902925][ T5746] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 320.903435][ T5746] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 320.937328][ T43] audit: type=1400 audit(1792408965.415:1037): avc: denied { ioctl } for pid=23354 comm="syz.3.7064" path="socket:[55948]" dev="sockfs" ino=55948 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 320.964426][ T1162] tipc: Disabling bearer [ 321.088283][T23388] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7069'. [ 321.143526][ T43] audit: type=1400 audit(1792408965.615:1038): avc: denied { block_suspend } for pid=23391 comm="syz.1.7072" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 321.174366][T23348] rxe_eth0 speed is unknown, defaulting to 1000 [ 321.260729][ T43] audit: type=1400 audit(1792408965.735:1039): avc: denied { listen } for pid=23398 comm="syz.1.7074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 321.260896][ T43] audit: type=1400 audit(1792408965.735:1040): avc: denied { accept } for pid=23398 comm="syz.1.7074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 321.266002][T23348] virt_wifi0 speed is unknown, defaulting to 1000 [ 321.266851][T23348] lo speed is unknown, defaulting to 1000 [ 321.267644][T23348] lo speed is unknown, defaulting to 1000 [ 321.408153][ T12] pimreg3: left allmulticast mode [ 321.410720][ T43] audit: type=1400 audit(1792408965.885:1042): avc: denied { listen } for pid=23408 comm="syz.1.7078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 321.410763][ T43] audit: type=1400 audit(1792408965.875:1041): avc: denied { bind } for pid=23408 comm="syz.1.7078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 321.410795][ T43] audit: type=1400 audit(1792408965.885:1043): avc: denied { read } for pid=23408 comm="syz.1.7078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 321.481480][ T43] audit: type=1400 audit(1792408965.955:1044): avc: denied { write } for pid=23418 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.561407][ T12] .` (unregistering): Released all slaves [ 321.567405][ T12] bond1 (unregistering): Released all slaves [ 321.576937][ T12] bond2 (unregistering): Released all slaves [ 321.586047][ T12] bond3 (unregistering): Released all slaves [ 321.599687][ T12] bond4 (unregistering): (slave bond0): Releasing backup interface [ 321.599720][ T12] bond0 (unregistering): left promiscuous mode [ 321.600752][ T12] bond4 (unregistering): Released all slaves [ 321.620735][ T12] bond0 (unregistering): Released all slaves [ 321.640898][ T12] bond5 (unregistering): Released all slaves [ 321.655256][ T12] bond6 (unregistering): Released all slaves [ 321.663542][ T12] bond7 (unregistering): Released all slaves [ 321.683416][ T12] bond8 (unregistering): Released all slaves [ 321.698848][ T12] bond9 (unregistering): Released all slaves [ 321.720768][ T12] bond10 (unregistering): Released all slaves [ 321.736523][ T12] bond11 (unregistering): Released all slaves [ 321.751908][ T12] bond12 (unregistering): Released all slaves [ 321.769126][ T12] bond13 (unregistering): Released all slaves [ 321.770477][T23424] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7079'. [ 321.787358][ T12] bond14 (unregistering): Released all slaves [ 321.797244][ T12] bond15 (unregistering): Released all slaves [ 321.811925][ T12] bond16 (unregistering): Released all slaves [ 321.831919][ T12] bond17 (unregistering): Released all slaves [ 321.845602][ T12] bond18 (unregistering): Released all slaves [ 321.854213][ T12] bond19 (unregistering): Released all slaves [ 321.873259][ T12] bond20 (unregistering): Released all slaves [ 321.892343][ T12] bond21 (unregistering): Released all slaves [ 321.904074][ T12] bond22 (unregistering): Released all slaves [ 321.926942][ T12] bond23 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 321.928481][ T12] bond23 (unregistering): Released all slaves [ 321.948412][ T12] bond24 (unregistering): Released all slaves [ 321.969116][ T12] bond25 (unregistering): Released all slaves [ 321.985472][ T12] bond26 (unregistering): Released all slaves [ 322.013607][ T5447] 8021q: adding VLAN 0 to HW filter on device eth2 [ 322.143814][T23431] netlink: 'syz.1.7082': attribute type 26 has an invalid length. [ 322.143826][T23431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7082'. [ 322.174132][ T12] tipc: Disabling bearer [ 322.181898][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059899000: rx timeout, send abort [ 322.190770][ T12] tipc: Disabling bearer [ 322.193095][ T12] tipc: Left network mode [ 322.222697][ T12] IPVS: stopping backup sync thread 11738 ... [ 322.681956][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059899000: abort rx timeout. Force session deactivation [ 322.984703][ T5746] Bluetooth: hci4: command tx timeout [ 323.729230][T23456] team0: Mode changed to "random" [ 323.746370][ T5447] 8021q: adding VLAN 0 to HW filter on device eth3 [ 323.942938][T23348] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.943071][T23348] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.943234][T23348] bridge_slave_0: entered allmulticast mode [ 323.947017][T23348] bridge_slave_0: entered promiscuous mode [ 323.949593][T23348] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.949807][T23348] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.949939][T23348] bridge_slave_1: entered allmulticast mode [ 323.951539][T23348] bridge_slave_1: entered promiscuous mode [ 323.999359][T23348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.003268][T23348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.072673][T23348] team0: Port device team_slave_0 added [ 324.083181][T23348] team0: Port device team_slave_1 added [ 324.146963][ T5447] 8021q: adding VLAN 0 to HW filter on device eth4 [ 324.148381][T23348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.148392][T23348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.148412][T23348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.163568][T23348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.163578][T23348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.163600][T23348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.369156][T23348] hsr_slave_0: entered promiscuous mode [ 324.370507][T23348] hsr_slave_1: entered promiscuous mode [ 324.371495][T23348] debugfs: 'hsr0' already exists in 'hsr' [ 324.371512][T23348] Cannot create hsr debugfs directory [ 324.622188][ T12] team0 (unregistering): Port device removed [ 324.667581][T23502] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7101'. [ 324.786647][ T1162] smc: removing ib device syz0 [ 324.825329][ T5447] 8021q: adding VLAN 0 to HW filter on device eth5 [ 324.840494][ T1162] smbdirect: ib_dev[syz0] removed [ 324.927562][T23511] net_ratelimit: 301 callbacks suppressed [ 325.054738][ T5746] Bluetooth: hci4: command tx timeout [ 325.859483][ T43] kauditd_printk_skb: 11 callbacks suppressed [ 325.859501][ T43] audit: type=1400 audit(1792408970.335:1056): avc: denied { write } for pid=23570 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.976247][ T43] audit: type=1400 audit(1792408970.455:1057): avc: denied { write } for pid=23585 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.117030][ T43] audit: type=1400 audit(1792408970.595:1058): avc: denied { write } for pid=23600 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.237932][ T43] audit: type=1400 audit(1792408970.715:1059): avc: denied { write } for pid=23608 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.343171][ T12] IPVS: stop unused estimator thread 0... [ 326.391348][T23348] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 326.406239][T23348] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 326.406835][T23348] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 326.427185][T23348] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 326.428223][T23348] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 326.437050][ T43] audit: type=1400 audit(1792408970.915:1060): avc: denied { write } for pid=23627 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.461127][T23348] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 326.463097][T23348] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 326.481781][T23348] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 326.561557][ T43] audit: type=1400 audit(1792408971.035:1061): avc: denied { write } for pid=23649 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.593706][T23348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.610655][T23348] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.615578][T12350] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.615628][T12350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.625539][T12350] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.625583][T12350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.651044][ T43] audit: type=1400 audit(1792408971.125:1062): avc: denied { write } for pid=23656 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.709353][ T43] audit: type=1400 audit(1792408971.185:1063): avc: denied { write } for pid=23666 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.821564][ T43] audit: type=1400 audit(1792408971.295:1064): avc: denied { write } for pid=23679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.859868][T23677] xt_nfacct: accounting object `syz0' does not exist [ 326.889463][ T43] audit: type=1400 audit(1792408971.365:1065): avc: denied { write } for pid=23686 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.965516][T23348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.999205][T23348] veth0_vlan: entered promiscuous mode [ 327.002733][T23348] veth1_vlan: entered promiscuous mode [ 327.027920][T23348] veth0_macvtap: entered promiscuous mode [ 327.032616][T23348] veth1_macvtap: entered promiscuous mode [ 327.043395][T23348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.049474][T23348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.095185][ T5813] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.095212][ T5813] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.095230][ T5813] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.095248][ T5813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.147571][ T5746] Bluetooth: hci4: command tx timeout [ 327.216128][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.216158][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.293393][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.293407][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.384650][T23740] netlink: 'syz.0.7057': attribute type 10 has an invalid length. [ 327.384662][T23740] netlink: 55 bytes leftover after parsing attributes in process `syz.0.7057'. [ 327.509202][ T5737] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 327.512138][ T5737] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 327.513143][ T5737] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 327.517418][ T5737] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 327.520104][T23749] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7181'. [ 327.521916][ T5737] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 327.840678][T23746] rxe_eth0 speed is unknown, defaulting to 1000 [ 327.949500][T23746] virt_wifi0 speed is unknown, defaulting to 1000 [ 327.950230][T23746] lo speed is unknown, defaulting to 1000 [ 328.329943][T23746] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.329986][T23746] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.330064][T23746] bridge_slave_0: entered allmulticast mode [ 328.330926][T23746] bridge_slave_0: entered promiscuous mode [ 328.332300][T23746] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.332375][T23746] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.332449][T23746] bridge_slave_1: entered allmulticast mode [ 328.333387][T23746] bridge_slave_1: entered promiscuous mode [ 328.363211][T23746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.365775][T23746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.391124][T23746] team0: Port device team_slave_0 added [ 328.393006][T23746] team0: Port device team_slave_1 added [ 328.420223][T23746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.420233][T23746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.420262][T23746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.422030][T23746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.422041][T23746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.422060][T23746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.483978][T23746] hsr_slave_0: entered promiscuous mode [ 328.485175][T23746] hsr_slave_1: entered promiscuous mode [ 328.485899][T23746] debugfs: 'hsr0' already exists in 'hsr' [ 328.485916][T23746] Cannot create hsr debugfs directory [ 328.738119][T23746] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.858078][T23746] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.940757][T23746] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.166425][T23746] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 329.179105][T23746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 329.182057][T23746] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 329.192838][T23746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 329.193253][T23746] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 329.214850][T23746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 329.219953][ T5746] Bluetooth: hci4: command tx timeout [ 329.220541][T23746] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 329.243891][T23746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 329.352591][T23746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.362593][T23746] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.369009][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.369096][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.381888][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.381971][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.614603][ T5746] Bluetooth: hci1: command tx timeout [ 329.716807][T23746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.725334][T23863] FAULT_INJECTION: forcing a failure. [ 329.725334][T23863] name failslab, interval 1, probability 0, space 0, times 0 [ 329.725361][T23863] CPU: 1 UID: 0 PID: 23863 Comm: syz.0.7218 Not tainted syzkaller #0 PREEMPT(full) [ 329.725383][T23863] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 329.725396][T23863] Call Trace: [ 329.725404][T23863] [ 329.725414][T23863] dump_stack_lvl+0x100/0x190 [ 329.725447][T23863] should_fail_ex.cold+0x5/0xa [ 329.725476][T23863] should_failslab+0xc2/0x120 [ 329.725506][T23863] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 329.725534][T23863] ? __alloc_skb+0x140/0x710 [ 329.725560][T23863] __alloc_skb+0x140/0x710 [ 329.725577][T23863] ? __alloc_skb+0x5b7/0x710 [ 329.725596][T23863] ? __pfx___alloc_skb+0x10/0x10 [ 329.725616][T23863] ? igmp_group_added+0x1d9/0x9a0 [ 329.725643][T23863] inet_ifmcaddr_notify+0xc7/0x1b0 [ 329.725666][T23863] ? __pfx_inet_ifmcaddr_notify+0x10/0x10 [ 329.725694][T23863] ? __local_bh_enable_ip+0xa5/0x120 [ 329.725720][T23863] ____ip_mc_inc_group+0x80f/0x10d0 [ 329.725746][T23863] ? __pfx_____ip_mc_inc_group+0x10/0x10 [ 329.725770][T23863] ? ib_device_get_by_netdev+0x1b2/0x530 [ 329.725805][T23863] ip_mc_up+0x154/0x390 [ 329.725831][T23863] inetdev_event+0x6f0/0x17f0 [ 329.725858][T23863] ? ib_netdevice_event+0xfc/0x330 [ 329.725880][T23863] ? __pfx_inetdev_event+0x10/0x10 [ 329.725906][T23863] ? cfg802154_netdev_notifier_call+0x17a/0xad0 [ 329.725936][T23863] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 329.725967][T23863] notifier_call_chain+0x99/0x3f0 [ 329.726001][T23863] call_netdevice_notifiers_info+0xbe/0x110 [ 329.726028][T23863] __dev_notify_flags+0x22c/0x4b0 [ 329.726052][T23863] ? __pfx___dev_notify_flags+0x10/0x10 [ 329.726076][T23863] ? __pfx___dev_change_flags+0x10/0x10 [ 329.726106][T23863] netif_change_flags+0x108/0x160 [ 329.726130][T23863] dev_change_flags+0xba/0x260 [ 329.726156][T23863] devinet_ioctl+0x110b/0x1f10 [ 329.726187][T23863] ? __pfx_devinet_ioctl+0x10/0x10 [ 329.726210][T23863] ? _copy_from_user+0x59/0xd0 [ 329.726243][T23863] inet_ioctl+0x3aa/0x3f0 [ 329.726270][T23863] ? __pfx_inet_ioctl+0x10/0x10 [ 329.726309][T23863] ? tomoyo_path_number_perm+0x188/0x580 [ 329.726346][T23863] sock_do_ioctl+0x118/0x280 [ 329.726372][T23863] ? __pfx_sock_do_ioctl+0x10/0x10 [ 329.726396][T23863] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 329.726427][T23863] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 329.726451][T23863] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 329.726483][T23863] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 329.726518][T23863] sock_ioctl+0x599/0x6b0 [ 329.726581][T23863] ? __pfx_sock_ioctl+0x10/0x10 [ 329.726616][T23863] ? selinux_file_ioctl+0x13b/0x290 [ 329.726641][T23863] ? selinux_file_ioctl+0xb6/0x290 [ 329.726670][T23863] ? __pfx_sock_ioctl+0x10/0x10 [ 329.726699][T23863] __x64_sys_ioctl+0x18e/0x210 [ 329.726724][T23863] do_syscall_64+0x123/0x790 [ 329.726756][T23863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.726778][T23863] RIP: 0033:0x7f79b959e559 [ 329.726802][T23863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.726822][T23863] RSP: 002b:00007f79ba45d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 329.726842][T23863] RAX: ffffffffffffffda RBX: 00007f79b9825fa0 RCX: 00007f79b959e559 [ 329.726856][T23863] RDX: 0000200000000280 RSI: 0000000000008914 RDI: 0000000000000004 [ 329.726868][T23863] RBP: 00007f79b9635ad8 R08: 0000000000000000 R09: 0000000000000000 [ 329.726880][T23863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.726891][T23863] R13: 00007f79b9826038 R14: 00007f79b9825fa0 R15: 00007fff9640b2f8 [ 329.726920][T23863] [ 329.803745][T23746] veth0_vlan: entered promiscuous mode [ 329.823273][T23746] veth1_vlan: entered promiscuous mode [ 329.876330][T23746] veth0_macvtap: entered promiscuous mode [ 329.884016][T23746] veth1_macvtap: entered promiscuous mode [ 329.897207][T23746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.902991][T23746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.934713][ T1168] net_ratelimit: 436 callbacks suppressed [ 329.954222][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.954301][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.954341][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.954373][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.010052][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.010062][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.041929][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.041939][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.310489][ T5737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 330.314686][ T5737] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 330.315947][ T5737] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 330.323785][ T5737] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 330.326975][ T5737] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 330.373993][T23887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7227'. [ 330.667979][T23425] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 330.721778][ T5746] Bluetooth: hci1: unexpected event 0x0e length: 1 < 3 [ 330.759832][T23879] rxe_eth0 speed is unknown, defaulting to 1000 [ 330.789576][T23425] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 330.869631][T23425] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 330.907171][T23879] virt_wifi0 speed is unknown, defaulting to 1000 [ 330.907927][T23879] lo speed is unknown, defaulting to 1000 [ 330.936025][ T5746] Bluetooth: hci1: unexpected event 0x0e length: 1 < 3 [ 331.051694][ T43] kauditd_printk_skb: 16 callbacks suppressed [ 331.051703][ T43] audit: type=1400 audit(1792408975.525:1082): avc: denied { write } for pid=23927 comm="syz.0.7244" name="dynamic_events" dev="tracefs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 331.073639][ T43] audit: type=1400 audit(1792408975.545:1083): avc: denied { unmount } for pid=23348 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 331.191462][ T5746] Bluetooth: hci1: unexpected event 0x0e length: 1 < 3 [ 331.232562][ T43] audit: type=1400 audit(1792408975.705:1084): avc: denied { write } for pid=23943 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.291382][ T43] audit: type=1400 audit(1792408975.765:1085): avc: denied { write } for pid=23954 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.392166][T23425] bond10 (unregistering): (slave erspan1): Releasing backup interface [ 331.394272][T23425] erspan1 (unregistering): left promiscuous mode [ 331.420209][T23425] bond4 (unregistering): (slave gretap1): Releasing active interface [ 331.439029][ T5746] Bluetooth: hci1: unexpected cc 0x2040 length: 0 < 1 [ 331.486062][ T43] audit: type=1400 audit(1792408975.965:1086): avc: denied { validate_trans } for pid=23966 comm="syz.0.7259" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 331.496200][T23425] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 331.566169][T23425] .` (unregistering): Released all slaves [ 331.578236][ T43] audit: type=1400 audit(1792408976.055:1087): avc: denied { create } for pid=23974 comm="syz.2.7263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 331.580691][ T43] audit: type=1400 audit(1792408976.055:1088): avc: denied { write } for pid=23974 comm="syz.2.7263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 331.581064][T23976] ieee802154 phy0 wpan0: encryption failed: -22 [ 331.581511][T23425] bond1 (unregistering): Released all slaves [ 331.610435][T23425] bond2 (unregistering): (slave bond0): Releasing backup interface [ 331.613595][T23425] tipc: Resetting bearer [ 331.617955][T23425] bond2 (unregistering): Released all slaves [ 331.640205][T23425] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 331.642501][T23425] tipc: Resetting bearer [ 331.663678][T23425] tipc: Resetting bearer [ 331.663795][T23425] bond0 (unregistering): Released all slaves [ 331.689184][T23425] bond3 (unregistering): Released all slaves [ 331.718598][T23425] bond4 (unregistering): Released all slaves [ 331.746526][T23425] bond5 (unregistering): Released all slaves [ 331.765293][T23425] bond6 (unregistering): Released all slaves [ 331.786684][T23425] bond7 (unregistering): Released all slaves [ 331.802144][T23425] bond8 (unregistering): Released all slaves [ 331.820985][T23425] bond9 (unregistering): (slave veth3): Releasing active interface [ 331.824453][T23425] bond9 (unregistering): Released all slaves [ 331.847461][T23425] bond10 (unregistering): Released all slaves [ 331.857342][T23425] bond11 (unregistering): Released all slaves [ 331.866701][T23425] bond12 (unregistering): Released all slaves [ 331.876427][T23425] bond13 (unregistering): Released all slaves [ 331.887622][T23425] bond14 (unregistering): Released all slaves [ 331.908859][T23425] bond15 (unregistering): Released all slaves [ 331.927847][T23425] bond16 (unregistering): Released all slaves [ 331.954321][T23425] bond17 (unregistering): Released all slaves [ 331.964149][T24000] ieee802154 phy0 wpan0: encryption failed: -22 [ 331.978171][T23425] bond18 (unregistering): Released all slaves [ 331.999387][T23425] bond19 (unregistering): Released all slaves [ 332.023054][T23425] bond20 (unregistering): Released all slaves [ 332.024302][ T5746] Bluetooth: hci1: unexpected cc 0x2040 length: 0 < 1 [ 332.054005][T23425] bond21 (unregistering): Released all slaves [ 332.100673][T23425] bond22 (unregistering): Released all slaves [ 332.131174][T23425] bond23 (unregistering): Released all slaves [ 332.157603][ T43] audit: type=1400 audit(1792408976.635:1089): avc: denied { read } for pid=24019 comm="syz.0.7284" name="event0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 332.190115][ T5447] 8021q: adding VLAN 0 to HW filter on device eth2 [ 332.197666][ T43] audit: type=1400 audit(1792408976.675:1090): avc: denied { read write } for pid=24026 comm="syz.2.7287" name="rdma_cm" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 332.197708][ T43] audit: type=1400 audit(1792408976.675:1091): avc: denied { open } for pid=24026 comm="syz.2.7287" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 332.397346][T23425] ovs-dp0: left promiscuous mode [ 332.415263][ T5746] Bluetooth: hci3: command tx timeout [ 332.483440][T23425] tipc: Disabling bearer [ 332.485985][T23425] tipc: Disabling bearer [ 332.489655][T23425] tipc: Disabling bearer [ 332.490784][T23425] tipc: Left network mode [ 332.626499][T23879] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.626689][T23879] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.626821][T23879] bridge_slave_0: entered allmulticast mode [ 332.629027][T23879] bridge_slave_0: entered promiscuous mode [ 332.631494][T23879] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.631615][T23879] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.631731][T23879] bridge_slave_1: entered allmulticast mode [ 332.633327][T23879] bridge_slave_1: entered promiscuous mode [ 332.711055][T23879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.718189][T23879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.769010][ T5447] 8021q: adding VLAN 0 to HW filter on device eth3 [ 332.835870][T23879] team0: Port device team_slave_0 added [ 332.837425][T23879] team0: Port device team_slave_1 added [ 332.898585][ T5144] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 332.898606][ T5144] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 332.898616][ T5144] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 332.898663][ T5144] loop6: [ 332.988832][T23879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.988842][T23879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.988863][T23879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.990359][T23879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.990369][T23879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.990392][T23879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.191030][T23879] hsr_slave_0: entered promiscuous mode [ 333.197181][T24121] 9p: Bad value for 'source' [ 333.200099][T23879] hsr_slave_1: entered promiscuous mode [ 333.200599][T23879] debugfs: 'hsr0' already exists in 'hsr' [ 333.200614][T23879] Cannot create hsr debugfs directory [ 333.280086][T23425] hsr_slave_0: left promiscuous mode [ 333.283343][T23425] hsr_slave_1: left promiscuous mode [ 333.613573][T24144] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7334'. [ 333.763418][T24125] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7327'. [ 333.767089][ T5447] 8021q: adding VLAN 0 to HW filter on device eth4 [ 333.874287][T24158] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 333.882636][T24163] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7342'. [ 333.954370][T24168] FAULT_INJECTION: forcing a failure. [ 333.954370][T24168] name failslab, interval 1, probability 0, space 0, times 0 [ 333.954400][T24168] CPU: 2 UID: 0 PID: 24168 Comm: syz.2.7344 Not tainted syzkaller #0 PREEMPT(full) [ 333.954423][T24168] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 333.954436][T24168] Call Trace: [ 333.954443][T24168] [ 333.954452][T24168] dump_stack_lvl+0x100/0x190 [ 333.954515][T24168] should_fail_ex.cold+0x5/0xa [ 333.954574][T24168] should_failslab+0xc2/0x120 [ 333.954605][T24168] __kmalloc_cache_noprof+0x91/0x6d0 [ 333.954626][T24168] ? avc_has_perm_noaudit+0x56/0x470 [ 333.954650][T24168] ? syslog_print_all+0xed/0x3f0 [ 333.954679][T24168] syslog_print_all+0xed/0x3f0 [ 333.954707][T24168] ? __pfx_syslog_print_all+0x10/0x10 [ 333.954733][T24168] ? avc_has_perm+0x135/0x1e0 [ 333.954770][T24168] do_syslog+0x350/0x6d0 [ 333.954798][T24168] ? __pfx_do_syslog+0x10/0x10 [ 333.954844][T24168] __x64_sys_syslog+0x74/0xb0 [ 333.954870][T24168] ? lockdep_hardirqs_on+0x7d/0x110 [ 333.954900][T24168] do_syscall_64+0x123/0x790 [ 333.954932][T24168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.954951][T24168 ** replaying previous printk message ** [ 333.954951][T24168] RIP: 0033:0x7f949999e559 [ 333.954969][T24168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.954987][T24168] RSP: 002b:00007f949a85b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 333.955009][T24168] RAX: ffffffffffffffda RBX: 00007f9499c25fa0 RCX: 00007f949999e559 [ 333.955022][T24168] RDX: 0000000000000019 RSI: 0000200000000100 RDI: 0000000000000003 [ 333.955036][T24168] RBP: 00007f9499a35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 333.955050][T24168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.955063][T24168] R13: 00007f9499c26038 R14: 00007f9499c25fa0 R15: 00007ffd6fc80a98 [ 333.955092][T24168] [ 333.956029][T24168] kcov: kcov_task_exit: t = ffff88802942cb00, kcov->t = ffff88802942cb00 [ 333.957159][T24171] kcov: kcov_start: t = ffff88802c8c0000, size = 524288, area = ffffc90030193000 [ 333.958024][T23879] kobject: 'tx-1' (ffff8880581fe9e0): kobject_add_internal: parent: 'queues', set: 'queues' [ 333.958251][T23879] kobject: 'tx-1' (ffff8880581fe9e0): kobject_uevent_env [ 333.958291][T23879] kobject: 'tx-1' (ffff8880581fe9e0): fill_kobj_path: path = '/devices/virtual/net/geneve1/queues/tx-1' [ 333.958318][T24173] kcov: kcov_start: t = ffff888028f5cb00, size = 524288, area = ffffc90007771000 [ 333.958607][T23879] Registering net sysctl (net ffff88802f048000): net/ipv4/neigh/geneve1 [ 333.958623][T23879] procname=mcast_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88802ed6f960 [ 333.958655][T23879] procname=ucast_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88802ed6f964 [ 333.958684][T23879] procname=app_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88802ed6f968 [ 333.958712][T23879] procname=mcast_resolicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88802ed6f96c [ 333.958740][T23879] procname=retrans_time mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff88802ed6f970 [ 333.958770][T23879] procname=base_reachable_time mode=644 proc_handler=neigh_proc_base_reachable_time data=ffff88802ed6f974 [ 333.958799][T23879] procname=delay_first_probe_time mode=644 proc_handler=neigh_proc_dointvec_jiffies data=ffff88802ed6f978 [ 333.958827][T23879] procname=interval_probe_time_ms mode=644 proc_handler=neigh_proc_dointvec_ms_jiffies_positive data=ffff88802ed6f97c [ 333.958858][T23879] procname=gc_stale_time mode=644 proc_handler=neigh_proc_dointvec_jiffies data=ffff88802ed6f980 [ 333.958887][T23879] procname=unres_qlen_bytes mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88802ed6f984 [ 333.958917][T23879] procname=proxy_qlen mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88802ed6f988 [ 333.958946][T23879] procname=anycast_delay mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff88802ed6f98c [ 333.958975][T23879] procname=proxy_delay mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff88802ed6f990 [ 333.959005][T23879] procname=locktime mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff88802ed6f994 [ 333.959034][T23879] procname=unres_qlen mode=644 proc_handler=neigh_proc_dointvec_unres_qlen data=ffff88802ed6f984 [ 333.959062][T23879] procname=retrans_time_ms mode=644 proc_handler=neigh_proc_dointvec_ms_jiffies data=ffff88802ed6f970 [ 333.959091][T23879] procname=base_reachable_time_ms mode=644 proc_handler=neigh_proc_base_reachable_time data=ffff88802ed6f974 [ 333.959188][T23879] Registering net sysctl (net ffff88802f048000): net/ipv4/conf/geneve1 [ 333.959206][T23879] procname=forwarding mode=644 proc_handler=devinet_sysctl_forward data=ffff888035c97d60 [ 333.959234][T23879] procname=mc_forwarding mode=444 proc_handler=devinet_conf_proc data=ffff888035c97d64 [ 333.959259][T23879] Not writable by anyone [ 333.959267][T23879] procname=bc_forwarding mode=644 proc_handler=devinet_conf_proc data=ffff888035c97ddc [ 333.959294][T23879] procname=accept_redirects mode=644 proc_handler=devinet_conf_proc data=ffff888035c97d6c [ 333.959320][T23879] procname=secure_redirects mode=644 proc_handler=devinet_conf_proc data=ffff888035c97d70 [ 333.959345][T23879] procname=shared_media mode=644 proc_handler=devinet_conf_proc data=ffff888035c97d78 [ 333.959372][T23879] procname=rp_filter mode=644 proc_handler=devinet_conf_proc data=ffff888035c97d7c [ 333.959397][T23879] procname=send_redirects mode=644 proc_handler=devinet_conf_proc data=ffff888035c97d74 [ 333.959423][T23879] procname=accept_source_route mode=644 proc_handler=devinet_conf_proc data=ffff888035c97d80 [ 333.959449][T23879] procname=accept_local mode=644 proc_handler=devinet_conf_proc data=ffff888035c97db8 [ 333.959476][T23879] procname=src_valid_mark mode=644 proc_handler=devinet_conf_proc data=ffff888035c97dbc [ 333.959501][T23879] procname=proxy_arp mode=644 proc_handler=devinet_conf_proc data=ffff888035c97d68 [ 333.959527][T23879] procname=medium_id mode=644 proc_handler=devinet_conf_proc data=ffff888035c97d94 [ 333.959552][T23879] procname=bootp_relay mode=644 proc_handler=devinet_conf_proc data=ffff888035c97d84 [ 333.959578][T23879] procname=log_martians mode=644 proc_handler=devinet_conf_proc data=ffff888035c97d88 [ 333.959604][T23879] procname=tag mode=644 proc_handler=devinet_conf_proc data=ffff888035c97d8c [ 333.959629][T23879] procname=arp_filter mode=644 proc_handler=devinet_conf_proc data=ffff888035c97d90 [ 333.959655][T23879] procname=arp_announce mode=644 proc_handler=devinet_conf_proc data=ffff888035c97da4 [ 333.959681][T23879] procname=arp_ignore mode=644 proc_handler=devinet_conf_proc data=ffff888035c97da8 [ 333.959706][T23879] procname=arp_accept mode=644 proc_handler=devinet_conf_proc data=ffff888035c97db0 [ 333.959731][T23879] procname=arp_notify mode=644 proc_handler=devinet_conf_proc data=ffff888035c97db4 [ 333.959757][T23879] procname=arp_evict_nocarrier mode=644 proc_handler=devinet_conf_proc data=ffff888035c97de0 [ 333.959783][T23879] procname=proxy_arp_pvlan mode=644 proc_handler=devinet_conf_proc data=ffff888035c97dc0 [ 333.959810][T23879] procname=force_igmp_version mode=644 proc_handler=devinet_conf_proc data=ffff888035c97da0 [ 333.959836][T23879] procname=igmpv2_unsolicited_report_interval mode=644 proc_handler=devinet_conf_proc data=ffff888035c97dc8 [ 333.959863][T23879] procname=igmpv3_unsolicited_report_interval mode=644 proc_handler=devinet_conf_proc data=ffff888035c97dcc [ 333.959890][T23879] procname=ignore_routes_with_linkdown mode=644 proc_handler=devinet_conf_proc data=ffff888035c97dd0 [ 333.959917][T23879] procname=drop_gratuitous_arp mode=644 proc_handler=devinet_conf_proc data=ffff888035c97dd8 [ 333.959943][T23879] procname=disable_xfrm mode=644 proc_handler=devinet_conf_proc data=ffff888035c97d98 [ 333.959968][T23879] procname=disable_policy mode=644 proc_handler=devinet_conf_proc data=ffff888035c97d9c [ 333.959994][T23879] procname=promote_secondaries mode=644 proc_handler=devinet_conf_proc data=ffff888035c97dac [ 333.960021][T23879] procname=route_localnet mode=644 proc_handler=devinet_conf_proc data=ffff888035c97dc4 [ 333.960045][T23879] procname=drop_unicast_in_l2_multicast mode=644 proc_handler=devinet_conf_proc data=ffff888035c97dd4 [ 333.960194][T23879] geneve1: bond_netdev_event received NETDEV_REGISTER [ 333.960222][T23879] net geneve1: siw: event 5 [ 333.964169][T23879] Registering net sysctl (net ffff88802f048000): net/ipv6/neigh/geneve1 [ 333.964181][T23879] procname=mcast_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff888023cd2760 [ 333.964207][T23879] procname=ucast_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff888023cd2764 [ 333.964225][T23879] procname=app_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff888023cd2768 [ 333.964242][T23879] procname=mcast_resolicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff888023cd276c [ 333.964260][T23879] procname=retrans_time mode=644 proc_handler=ndisc_ifinfo_sysctl_change data=ffff888023cd2770 [ 333.964277][T23879] procname=base_reachable_time mode=644 proc_handler=ndisc_ifinfo_sysctl_change data=ffff888023cd2774 [ 333.964294][T23879] procname=delay_first_probe_time mode=644 proc_handler=neigh_proc_dointvec_jiffies data=ffff888023cd2778 [ 333.964311][T23879] procname=interval_probe_time_ms mode=644 proc_handler=neigh_proc_dointvec_ms_jiffies_positive data=ffff888023cd277c [ 333.964329][T23879] procname=gc_stale_time mode=644 proc_handler=neigh_proc_dointvec_jiffies data=ffff888023cd2780 [ 333.964346][T23879] procname=unres_qlen_bytes mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff888023cd2784 [ 333.964363][T23879] procname=proxy_qlen mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff888023cd2788 [ 333.964381][T23879] procname=anycast_delay mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff888023cd278c [ 333.964399][T23879] procname=proxy_delay mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff888023cd2790 [ 333.964416][T23879] procname=locktime mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff888023cd2794 [ 333.964434][T23879] procname=unres_qlen mode=644 proc_handler=neigh_proc_dointvec_unres_qlen data=ffff888023cd2784 [ 333.964451][T23879] procname=retrans_time_ms mode=644 proc_handler=ndisc_ifinfo_sysctl_change data=ffff888023cd2770 [ 333.965680][T23879] procname=base_reachable_time_ms mode=644 proc_handler=ndisc_ifinfo_sysctl_change data=ffff888023cd2774 [ 333.965749][T23879] Registering net sysctl (net ffff88802f048000): net/ipv6/conf/geneve1 [ 333.965756][T23879] procname=forwarding mode=644 proc_handler=addrconf_sysctl_forward data=ffff88805999b5e4 [ 333.965771][T23879] procname=hop_limit mode=644 proc_handler=proc_dointvec_minmax data=ffff88805999b5dc [ 333.965791][T23879] procname=mtu mode=644 proc_handler=addrconf_sysctl_mtu data=ffff88805999b5e0 [ 333.965807][T23879] procname=accept_ra mode=644 proc_handler=proc_dointvec data=ffff88805999b5f4 [ 333.965826][T23879] procname=accept_redirects mode=644 proc_handler=proc_dointvec data=ffff88805999b5f8 [ 333.965844][T23879] procname=autoconf mode=644 proc_handler=proc_dointvec data=ffff88805999b5fc [ 333.965862][T23879] procname=dad_transmits mode=644 proc_handler=proc_dointvec data=ffff88805999b600 [ 333.965880][T23879] procname=router_solicitations mode=644 proc_handler=proc_dointvec_minmax data=ffff88805999b604 [ 333.965899][T23879] procname=router_solicitation_interval mode=644 proc_handler=proc_dointvec_jiffies data=ffff88805999b608 [ 333.965913][T23879] procname=router_solicitation_max_interval mode=644 proc_handler=proc_dointvec_jiffies data=ffff88805999b60c [ 333.965926][T23879] procname=router_solicitation_delay mode=644 proc_handler=proc_dointvec_jiffies data=ffff88805999b610 [ 333.965939][T23879] procname=force_mld_version mode=644 proc_handler=proc_dointvec data=ffff88805999b614 [ 333.965957][T23879] procname=mldv1_unsolicited_report_interval mode=644 proc_handler=proc_dointvec_ms_jiffies data=ffff88805999b618 [ 333.965971][T23879] procname=mldv2_unsolicited_report_interval mode=644 proc_handler=proc_dointvec_ms_jiffies data=ffff88805999b61c [ 333.965985][T23879] procname=use_tempaddr mode=644 proc_handler=proc_dointvec data=ffff88805999b620 [ 333.966003][T23879] procname=temp_valid_lft mode=644 proc_handler=proc_dointvec data=ffff88805999b624 [ 333.966021][T23879] procname=temp_prefered_lft mode=644 proc_handler=proc_dointvec data=ffff88805999b628 [ 333.966039][T23879] procname=regen_min_advance mode=644 proc_handler=proc_dointvec data=ffff88805999b62c [ 333.966057][T23879] procname=regen_max_retry mode=644 proc_handler=proc_dointvec data=ffff88805999b630 [ 333.966075][T23879] procname=max_desync_factor mode=644 proc_handler=proc_dointvec data=ffff88805999b634 [ 333.966093][T23879] procname=max_addresses mode=644 proc_handler=proc_dointvec data=ffff88805999b638 [ 333.966111][T23879] procname=accept_ra_defrtr mode=644 proc_handler=proc_dointvec data=ffff88805999b63c [ 333.966129][T23879] procname=ra_defrtr_metric mode=644 proc_handler=proc_douintvec_minmax data=ffff88805999b640 [ 333.966148][T23879] procname=accept_ra_min_hop_limit mode=644 proc_handler=proc_dointvec data=ffff88805999b644 [ 333.966166][T23879] procname=accept_ra_min_lft mode=644 proc_handler=proc_dointvec data=ffff88805999b648 [ 333.966184][T23879] procname=accept_ra_pinfo mode=644 proc_handler=proc_dointvec data=ffff88805999b64c [ 333.966207][T23879] procname=ra_honor_pio_life mode=644 proc_handler=proc_dou8vec_minmax data=ffff88805999b6d6 [ 333.966220][T23879] procname=ra_honor_pio_pflag mode=644 proc_handler=proc_dou8vec_minmax data=ffff88805999b6d7 [ 333.966232][T23879] procname=accept_ra_rtr_pref mode=644 proc_handler=proc_dointvec data=ffff88805999b654 [ 333.966250][T23879] procname=router_probe_interval mode=644 proc_handler=proc_dointvec_jiffies data=ffff88805999b658 [ 333.966262][T23879] procname=accept_ra_rt_info_min_plen mode=644 proc_handler=proc_dointvec data=ffff88805999b65c [ 333.966281][T23879] procname=accept_ra_rt_info_max_plen mode=644 proc_handler=proc_dointvec data=ffff88805999b660 [ 333.966299][T23879] procname=proxy_ndp mode=644 proc_handler=addrconf_sysctl_proxy_ndp data=ffff88805999b5f0 [ 333.966312][T23879] procname=accept_source_route mode=644 proc_handler=proc_dointvec data=ffff88805999b664 [ 333.966330][T23879] procname=optimistic_dad mode=644 proc_handler=proc_dointvec data=ffff88805999b66c [ 333.966348][T23879] procname=use_optimistic mode=644 proc_handler=proc_dointvec data=ffff88805999b670 [ 333.966450][T23425] wireguard: wg0: Interface destroyed [ 333.966640][T23879] procname=mc_forwarding mode=444 proc_handler=proc_dointvec data=ffff88805999b674 [ 333.966661][T23879] Not writable by anyone [ 333.966665][T23879] procname=disable_ipv6 mode=644 proc_handler=addrconf_sysctl_disable data=ffff88805999b5d8 [ 333.966681][T23879] procname=accept_dad mode=644 proc_handler=proc_dointvec data=ffff88805999b67c [ 333.966699][T23879] procname=force_tllao mode=644 proc_handler=proc_dointvec data=ffff88805999b680 [ 333.966717][T23879] procname=ndisc_notify mode=644 proc_handler=proc_dointvec data=ffff88805999b684 [ 333.966735][T23879] procname=suppress_frag_ndisc mode=644 proc_handler=proc_dointvec data=ffff88805999b688 [ 333.966753][T23879] procname=accept_ra_from_local mode=644 proc_handler=proc_dointvec data=ffff88805999b668 [ 333.966771][T23879] procname=accept_ra_mtu mode=644 proc_handler=proc_dointvec data=ffff88805999b68c [ 333.966789][T23879] procname=stable_secret mode=600 proc_handler=addrconf_sysctl_stable_secret data=ffff88805999b698 [ 333.966807][T23879] procname=use_oif_addrs_only mode=644 proc_handler=proc_dointvec data=ffff88805999b6ac [ 333.966825][T23879] procname=ignore_routes_with_linkdown mode=644 proc_handler=addrconf_sysctl_ignore_routes_with_linkdown data=ffff88805999b650 [ 333.966840][T23879] procname=drop_unicast_in_l2_multicast mode=644 proc_handler=proc_dointvec data=ffff88805999b678 [ 333.966859][T23879] procname=drop_unsolicited_na mode=644 proc_handler=proc_dointvec data=ffff88805999b690 [ 333.966877][T23879] procname=keep_addr_on_down mode=644 proc_handler=proc_dointvec data=ffff88805999b6b0 [ 333.966895][T23879] procname=seg6_enabled mode=644 proc_handler=proc_dointvec data=ffff88805999b6b4 [ 333.966913][T23879] procname=seg6_require_hmac mode=644 proc_handler=proc_dointvec data=ffff88805999b6b8 [ 333.966928][T23425] kobject: 'wg0' (ffff88802c4207c0): kobject_cleanup, parent 0000000000000000 [ 333.966947][T23425] kobject: 'wg0' (ffff88802c4207c0): calling ktype release [ 333.966981][T23425] kobject: 'wg0': free name [ 333.967007][T23879] procname=enhanced_dad mode=644 proc_handler=proc_dointvec data=ffff88805999b6bc [ 333.967027][T23879] procname=addr_gen_mode mode=644 proc_handler=addrconf_sysctl_addr_gen_mode data=ffff88805999b6c0 [ 333.967042][T23879] procname=disable_policy mode=644 proc_handler=addrconf_sysctl_disable_policy data=ffff88805999b5ec [ 333.967062][T23879] procname=ndisc_tclass mode=644 proc_handler=proc_dointvec_minmax data=ffff88805999b6c4 [ 333.967081][T23879] procname=rpl_seg_enabled mode=644 proc_handler=proc_dointvec_minmax data=ffff88805999b6c8 [ 333.967100][T23879] procname=ioam6_enabled mode=644 proc_handler=proc_dou8vec_minmax data=ffff88805999b6d4 [ 333.967111][T23879] procname=ioam6_id mode=644 proc_handler=proc_douintvec_minmax data=ffff88805999b6cc [ 333.967130][T23879] procname=ioam6_id_wide mode=644 proc_handler=proc_douintvec data=ffff88805999b6d0 [ 333.967149][T23879] procname=ndisc_evict_nocarrier mode=644 proc_handler=proc_dou8vec_minmax data=ffff88805999b6d5 [ 333.967161][T23879] procname=accept_untracked_na mode=644 proc_handler=proc_dointvec_minmax data=ffff88805999b694 [ 333.967180][T23879] procname=force_forwarding mode=644 proc_handler=addrconf_sysctl_force_forwarding data=ffff88805999b5e8 [ 333.967769][T23425] kobject: 'veth1' (ffff88802484c7c0): kobject_cleanup, parent 0000000000000000 [ 333.967786][T23425] kobject: 'veth1' (ffff88802484c7c0): calling ktype release [ 333.967817][T23425] kobject: 'veth1': free name [ 333.969106][T23425] kobject: 'veth0' (ffff88802484a7c0): kobject_cleanup, parent 0000000000000000 [ 333.969125][T23425] kobject: 'veth0' (ffff88802484a7c0): calling ktype release [ 333.969156][T23425] kobject: 'veth0': free name [ 333.969976][T23879] Registering net sysctl (net ffff88802f048000): net/mpls/conf/geneve1 [ 333.969992][T23879] procname=input mode=644 proc_handler=mpls_conf_proc data=ffff88803735d600 [ 333.970127][T23879] kobject: 'geneve1' (ffff88802e2fa7c0): kobject_uevent_env [ 333.970164][T23879] kobject: 'geneve1' (ffff88802e2fa7c0): fill_kobj_path: path = '/devices/virtual/net/geneve1' [ 333.970667][T23879] device: 'netdevsim3': device_unregister [ 333.970710][T23879] kernfs runtime_status: removing [ 333.970742][T23879] kernfs control: removing [ 333.970766][T23879] kernfs runtime_suspended_time: removing [ 333.971997][T23879] kernfs runtime_active_time: removing [ 333.972026][T23879] kernfs autosuspend_delay_ms: removing [ 333.972066][T23879] kernfs power: removing [ 333.972090][T23879] kernfs uevent: removing [ 333.972113][T23879] kernfs sriov_numvfs: removing [ 333.972138][T23879] kernfs new_port: removing [ 333.972161][T23879] kernfs del_port: removing [ 333.972165][T24171] debugfs: creating file 'netdev@ffff88802c3e0700' [ 333.972189][T23879] kernfs subsystem: removing [ 333.972211][T23879] kernfs netdevsim3: removing [ 333.972234][T23879] bus: 'netdevsim': remove device netdevsim3 [ 333.972249][T23879] kernfs netdevsim3: removing [ 333.972274][T23879] kernfs driver: removing [ 333.995470][T24171] bus: 'gadget': add driver configfs-gadget.g1 [ 333.995503][T24171] kobject: 'configfs-gadget.g1' (ffff88803e3a5000): kobject_add_internal: parent: 'drivers', set: 'drivers' [ 333.995639][T24171] gadget gadget.32: bus: 'gadget': __driver_probe_device: matched device with driver configfs-gadget.g1 [ 333.995659][T24171] gadget gadget.32: bus: 'gadget': really_probe: probing driver configfs-gadget.g1 with device [ 333.995718][T24171] udc usbip-vudc.0: binding gadget driver [g1] [ 333.995781][T24171] configfs-gadget.g1 gadget.32: adding 'uac1_func'/ffff88804cd9e800 to config 'c'/ffff888038921920 [ 333.995856][T24171] ================================================================== [ 333.995861][T24171] BUG: KASAN: global-out-of-bounds in usb_copy_descriptors+0x18d/0x320 [ 333.995880][T24171] Read of size 160 at addr ffffffff9ccca720 by task syz.0.7345/24171 [ 333.995890][T24171] [ 333.995896][T24171] CPU: 0 UID: 0 PID: 24171 Comm: syz.0.7345 Not tainted syzkaller #0 PREEMPT(full) [ 333.995910][T24171] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 333.995918][T24171] Call Trace: [ 333.995923][T24171] [ 333.995927][T24171] dump_stack_lvl+0x100/0x190 [ 333.995946][T24171] print_report+0x13d/0x4b0 [ 333.995963][T24171] ? __virt_addr_valid+0x239/0x430 [ 333.995977][T24171] ? usb_copy_descriptors+0x18d/0x320 [ 333.995990][T24171] kasan_report+0xdf/0x1c0 [ 333.996008][T24171] ? usb_copy_descriptors+0x18d/0x320 [ 333.996022][T24171] kasan_check_range+0x10f/0x1e0 [ 333.996033][T24171] __asan_memcpy+0x23/0x60 [ 333.996046][T24171] usb_copy_descriptors+0x18d/0x320 [ 333.996060][T24171] usb_assign_descriptors+0xd2/0x470 [ 333.996074][T24171] f_audio_bind+0x243a/0x3950 [ 333.996094][T24171] ? __pfx_f_audio_bind+0x10/0x10 [ 333.996116][T24171] usb_add_function+0x219/0x890 [ 333.996135][T24171] ? composite_dev_prepare+0x221/0x420 [ 333.996161][T24171] configfs_composite_bind+0xd83/0x1960 [ 333.996187][T24171] ? kernfs_create_link+0x1bd/0x240 [ 333.996246][T24171] gadget_bind_driver+0x28c/0xbf0 [ 333.996267][T24171] ? __pfx_gadget_bind_driver+0x10/0x10 [ 333.996284][T24171] really_probe+0x241/0xa60 [ 333.996296][T24171] __driver_probe_device+0x210/0x460 [ 333.996306][T24171] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 333.996322][T24171] driver_probe_device+0x4a/0x140 [ 333.996332][T24171] __driver_attach+0x21f/0x5b0 [ 333.996343][T24171] ? __pfx___driver_attach+0x10/0x10 [ 333.996353][T24171] bus_for_each_dev+0x13e/0x1d0 [ 333.996369][T24171] ? __pfx_bus_for_each_dev+0x10/0x10 [ 333.996384][T24171] ? bus_add_driver+0x2b5/0x5b0 [ 333.996400][T24171] bus_add_driver+0x305/0x5b0 [ 333.996416][T24171] driver_register+0x1e2/0x360 [ 333.996446][T24171] usb_gadget_register_driver_owner+0x132/0x210 [ 333.996466][T24171] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 333.996482][T24171] configfs_write_iter+0x302/0x4e0 [ 333.996497][T24171] vfs_write+0x6af/0x1050 [ 333.996513][T24171] ? __pfx_configfs_write_iter+0x10/0x10 [ 333.996527][T24171] ? __pfx_vfs_write+0x10/0x10 [ 333.996539][T24171] ? find_held_lock+0x2b/0x80 [ 333.996562][T24171] ksys_write+0x12a/0x250 [ 333.996575][T24171] ? __pfx_ksys_write+0x10/0x10 [ 333.996591][T24171] do_syscall_64+0x123/0x790 [ 333.996607][T24171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.996620][T24171] RIP: 0033:0x7f79b959e559 [ 333.996629][T24171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.996640][T24171] RSP: 002b:00007f79ba45d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 333.996652][T24171] RAX: ffffffffffffffda RBX: 00007f79b9825fa0 RCX: 00007f79b959e559 [ 333.996660][T24171] RDX: 000000000000000c RSI: 0000200000000700 RDI: 0000000000000005 [ 333.996668][T24171] RBP: 00007f79b9635ad8 R08: 0000000000000000 R09: 0000000000000000 [ 333.996676][T24171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.996683][T24171] R13: 00007f79b9826038 R14: 00007f79b9825fa0 R15: 00007fff9640b2f8 [ 333.996694][T24171] [ 333.996699][T24171] [ 333.996702][T24171] The buggy address belongs to the variable: [ 333.996705][T24171] ac_header_desc+0x0/0x40 [ 333.996729][T24171] [ 333.996732][T24171] The buggy address belongs to the physical page: [ 333.996737][T24171] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ccca [ 333.996752][T24171] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 333.996768][T24171] raw: 00fff00000002000 ffffea0000733288 ffffea0000733288 0000000000000000 [ 333.996792][T24171] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 333.996799][T24171] page dumped because: kasan: bad access detected [ 333.996804][T24171] page_owner info is not present (never set?) [ 333.996808][T24171] [ 333.996810][T24171] Memory state around the buggy address: [ 333.996816][T24171] ffffffff9ccca600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 333.996825][T24171] ffffffff9ccca680: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 333.996832][T24171] >ffffffff9ccca700: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 333.996838][T24171] ^ [ 333.996845][T24171] ffffffff9ccca780: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 333.996852][T24171] ffffffff9ccca800: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 333.996859][T24171] ================================================================== [ 333.996909][T24171] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 334.781947][T24171] CPU: 0 UID: 0 PID: 24171 Comm: syz.0.7345 Not tainted syzkaller #0 PREEMPT(full) [ 334.785702][T24171] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 334.789772][T24171] Call Trace: [ 334.791132][T24171] [ 334.792086][T24171] dump_stack_lvl+0x100/0x190 [ 334.793985][T24171] vpanic+0x553/0x970 [ 334.795667][T24171] ? __pfx_vpanic+0x10/0x10 [ 334.797511][T24171] ? mark_held_locks+0x40/0x70 [ 334.799434][T24171] ? irqentry_exit+0x2c9/0xa90 [ 334.801407][T24171] ? usb_copy_descriptors+0x18d/0x320 [ 334.803366][T24171] panic+0xd1/0xe0 [ 334.804750][T24171] ? __pfx_panic+0x10/0x10 [ 334.806601][T24171] check_panic_on_warn.cold+0x19/0x34 [ 334.808826][T24171] end_report.part.0+0x3a/0x90 [ 334.810807][T24171] kasan_report.cold+0xe/0x18 [ 334.812749][T24171] ? usb_copy_descriptors+0x18d/0x320 [ 334.814909][T24171] kasan_check_range+0x10f/0x1e0 [ 334.816548][T24171] __asan_memcpy+0x23/0x60 [ 334.818385][T24171] usb_copy_descriptors+0x18d/0x320 [ 334.820486][T24171] usb_assign_descriptors+0xd2/0x470 [ 334.822640][T24171] f_audio_bind+0x243a/0x3950 [ 334.824580][T24171] ? __pfx_f_audio_bind+0x10/0x10 [ 334.826660][T24171] usb_add_function+0x219/0x890 [ 334.828678][T24171] ? composite_dev_prepare+0x221/0x420 [ 334.830881][T24171] configfs_composite_bind+0xd83/0x1960 [ 334.833143][T24171] ? kernfs_create_link+0x1bd/0x240 [ 334.835278][T24171] gadget_bind_driver+0x28c/0xbf0 [ 334.837082][T24171] ? __pfx_gadget_bind_driver+0x10/0x10 [ 334.839264][T24171] really_probe+0x241/0xa60 [ 334.841150][T24171] __driver_probe_device+0x210/0x460 [ 334.843240][T24171] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 334.845619][T24171] driver_probe_device+0x4a/0x140 [ 334.847702][T24171] __driver_attach+0x21f/0x5b0 [ 334.849370][T24171] ? __pfx___driver_attach+0x10/0x10 [ 334.851055][T24171] bus_for_each_dev+0x13e/0x1d0 [ 334.852948][T24171] ? __pfx_bus_for_each_dev+0x10/0x10 [ 334.855054][T24171] ? bus_add_driver+0x2b5/0x5b0 [ 334.857004][T24171] bus_add_driver+0x305/0x5b0 [ 334.858895][T24171] driver_register+0x1e2/0x360 [ 334.860768][T24171] usb_gadget_register_driver_owner+0x132/0x210 [ 334.862649][T24171] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 334.864747][T24171] configfs_write_iter+0x302/0x4e0 [ 334.866715][T24171] vfs_write+0x6af/0x1050 [ 334.868405][T24171] ? __pfx_configfs_write_iter+0x10/0x10 [ 334.870197][T24171] ? __pfx_vfs_write+0x10/0x10 [ 334.871807][T24171] ? find_held_lock+0x2b/0x80 [ 334.873723][T24171] ksys_write+0x12a/0x250 [ 334.875418][T24171] ? __pfx_ksys_write+0x10/0x10 [ 334.876872][T24171] do_syscall_64+0x123/0x790 [ 334.878576][T24171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.880858][T24171] RIP: 0033:0x7f79b959e559 [ 334.882604][T24171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.889302][T24171] RSP: 002b:00007f79ba45d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 334.892572][T24171] RAX: ffffffffffffffda RBX: 00007f79b9825fa0 RCX: 00007f79b959e559 [ 334.895232][T24171] RDX: 000000000000000c RSI: 0000200000000700 RDI: 0000000000000005 [ 334.898371][T24171] RBP: 00007f79b9635ad8 R08: 0000000000000000 R09: 0000000000000000 [ 334.901543][T24171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.904554][T24171] R13: 00007f79b9826038 R14: 00007f79b9825fa0 R15: 00007fff9640b2f8 [ 334.907553][T24171] [ 334.909520][T24171] Kernel Offset: disabled [ 334.911296][T24171] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:22:58 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b2d115 RDI=ffffffff9cc7e6a0 RBP=ffffffff9cc7e660 RSP=ffffc90004d36f40 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3966666666666552 R12=0000000000000000 R13=0000000000000032 R14=000000000000000e R15=ffffc90004d37258 RIP=ffffffff85b2d13f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f79ba45d6c0 ffffffff 00c00000 GS =0000 ffff8880d4946000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5d5674fe9c CR3=000000002e2cc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffff00 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff9640b7e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff9640b7e6 00007fff9640b7ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79b9636102 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79b963613c ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79b96362a0 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79b963612e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3667732f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1544500c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79b97f65f8 00007f79b97f65c8 00007f79b97f6600 00007f79b97f65e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000001 RDX=ffff888028f5cb00 RSI=ffffffff81ff936e RDI=ffff888028f5cb00 RBP=ffff88806a243cc0 RSP=ffffc9000d0ff550 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffed10051ebc13 R13=0000000000000003 R14=ffffed100d448799 R15=0000000000000001 RIP=ffffffff81ff9370 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4a46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000035875000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0000010 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005603d729f600 00005603d729f600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff983058d0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f72703d72656c64 6e61685f636f7270 203434363d65646f 6d206e656c705f6e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3835363730623136 3038383866666666 3d61746164207365 696666696a5f6365 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 76746e696f645f63 6f72703d72656c64 6e61685f636f7270 203434363d65646f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d206c6176726574 6e695f65626f7270 5f726574756f723d 656d616e636f7270 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020205d39373833 32545b5d30323439 35382e3333332020 5b203a6c656e7265 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000002 RDX=ffff8880202a0000 RSI=ffffffff81ffbdfe RDI=ffff8880202a0000 RBP=ffffc90000157cd8 RSP=ffffc90000157bc0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff88806a533de0 R12=ffff88806a43d280 R13=ffffed100d487a51 R14=ffff88806a43d288 R15=0000000000000001 RIP=ffffffff81ffbe00 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4b46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9499bf32f8 CR3=000000000fb96000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003072 656c6c616b7a7973 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5919dc36 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5919dc36 00007ffc5919dc3c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3166c36102 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3166c3613c ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3166c362a0 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3166c3612e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3166df6600 00007f3166df65e0 00007f3166df65e8 00007f3166df6618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3166df65f8 00007f3166df65c8 00007f3166df6600 00007f3166df65e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88806a243ce0 RCX=0000000000000003 RDX=ffff88802bc74b00 RSI=ffffffff81ff8ff5 RDI=ffff88802bc74b00 RBP=ffff88806a243ce8 RSP=ffffc90005916710 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000003 R13=ffffed100d44879d R14=0000000000000001 R15=0000000000000000 RIP=ffffffff81ff8ff7 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4c46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c30062e CR3=00000000641a6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 307a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff9640b7e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff9640b7e6 00007fff9640b7ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79b9636102 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79b963613c ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79b96362a0 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79b963612e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000