last executing test programs: 50.143478094s ago: executing program 2 (id=572): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x154c0, 0x5c0a0}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000001300f5d10300"/20, @ANYRES32=r3, @ANYBLOB="0000000b6dc8b4eb08000d0006000010"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f00000001c0)) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009005f12108461b2000008000c00028006000200010000000800050068cc22c8c852d31f6e8828c4ba6d155aee39e6023b9bba31c90bc66a5ce78180b8", @ANYRES32=r12, @ANYBLOB], 0x44}}, 0x0) r13 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r13, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r14], 0x5c}}, 0x40) close_range(r5, r4, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0}) keyctl$clear(0x7, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000c600010025000000851000000100000095000000000000008500000000000000950000000000000037d5156ea22a6894dfa1a3db3224270e7a4817f311a5eb16179e548775f46c2220048dd284ef97635fca87b1c5a42a591a0128af07fdaf"], &(0x7f0000000100)='GPL\x00', 0x5}, 0x94) ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, &(0x7f00000000c0)=0x6) 49.993023011s ago: executing program 2 (id=574): r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp6\x00') preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000001680)=""/4094, 0xffe}], 0x1, 0x9f, 0x106) ppoll(&(0x7f0000000080)=[{r0, 0x4020}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={[0x1]}, 0x8) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r3, &(0x7f0000010140)={0x2020}, 0x2036) ioctl$KVM_RUN(r3, 0xae80, 0x0) unshare(0x6a040000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@metacopy_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000000340)={@any, 0x7, 0x3ff, 0x1, 0x7ff, 0x543c, "bff4f1fabcb85ed48daefd6ca9d2524375b8c7277e729061d02b18406a501b3202bcdfcb7f3770add328ddf8694e3bf048186838d68fef85e4b3975782769bd43bd2569f6ecf283c998cafbe4cbac28ae275100b82092b375024e5ff809d53e119ae55ee8f33100e9483de825b18eb2d0267a64a9dc1be830ce057eb1c5cc363"}) 49.940675793s ago: executing program 2 (id=578): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = getpgrp(0x0) r3 = epoll_create(0x8) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000000)={r3, r0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x13, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000) 49.940395459s ago: executing program 2 (id=579): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x2, 0x1a) sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x33}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4d}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) syz_emit_ethernet(0x7e, &(0x7f0000000240)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e90110", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "271e46", 0x0, 0x33, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@routing={0x29, 0x2, 0x1, 0x0, 0x0, [@private2]}]}}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x9, 0x0, 0x8001, 0x3ff, 0xfffffff1}, &(0x7f00000000c0)=0x14) 49.871597154s ago: executing program 2 (id=582): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) readv(0xffffffffffffffff, &(0x7f00000025c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/239, 0xffffffda}, {&(0x7f00000013c0)=""/195, 0xc3}, {&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f00000014c0)=""/4096, 0x1052}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f00000024c0)=""/251, 0xfb}, {&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000240)=""/56, 0x38}], 0x9) 49.813964795s ago: executing program 2 (id=583): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x501fc1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x400}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) 34.023313522s ago: executing program 32 (id=583): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x501fc1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x400}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) 4.52011926s ago: executing program 3 (id=1300): creat(&(0x7f0000001200)='./file0\x00', 0x187) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x61f285}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r5, &(0x7f00000000c0)='!', 0xb7f40}]) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000480)={0x50, 0xfffffffffffffffe, 0x7, {0x7, 0x2b, 0x22, 0x44, 0x7ff, 0x200, 0x200, 0x4, 0x0, 0x0, 0x20, 0x50000}}, &(0x7f0000000640)={0x18, 0x0, 0x1, {0xcfc}}, &(0x7f0000000680)={0x18, 0x0, 0x1ff, {0x200000}}, &(0x7f00000006c0)={0x18, 0x0, 0x80000000, {0x3c5e}}, &(0x7f0000000700)={0x18, 0x0, 0x6, {0x4}}, &(0x7f0000000740)={0x28, 0xfffffffffffffff5, 0x100000000, {{0x7ff, 0x2db, 0x2, r4}}}, &(0x7f00000007c0)={0x60, 0x0, 0x6, {{0x101, 0x6, 0x1, 0x10, 0x2, 0x7ff, 0x2, 0x40}}}, &(0x7f0000000840)={0x18, 0x0, 0x3, {0x3}}, &(0x7f0000000880)={0x13, 0x0, 0x6, {'\x98&\x00'}}, &(0x7f00000008c0)={0x20, 0x0, 0xfffffffffffffff7}, &(0x7f0000000900)={0x78, 0x0, 0x6, {0xffffffffffffffff, 0x2, 0x0, {0x4, 0xb, 0x8000000000000001, 0x8, 0x1000, 0x6, 0x40, 0x1, 0x6, 0xa000, 0x0, r2, r3, 0x4, 0x6}}}, &(0x7f0000000980)={0x90, 0x0, 0xf98, {0x4, 0x2, 0x4, 0x0, 0x5, 0x8, {0x4, 0x7, 0xffffffffffff0a31, 0x0, 0x2, 0x8001, 0x80, 0x9, 0xfffffffd, 0x0, 0x800, r2, r3, 0x4, 0x2}}}, &(0x7f0000000a40)={0x90, 0x0, 0x1, [{0x4, 0x9, 0x0, 0x4}, {0x6, 0xc9, 0xa, 0xb5c, '/dev/fuse\x00'}, {0x4, 0xb, 0x4, 0x4, '/*I#'}, {0x4, 0x3, 0x6, 0x6, '[*\'./&'}]}, &(0x7f0000000b00)={0x1f0, 0xfffffffffffffffe, 0x0, [{{0x4, 0x2, 0x6, 0x10001, 0x0, 0x3, {0x3, 0xba, 0x9, 0x800, 0x9, 0x8, 0xffff, 0xfd, 0x9, 0xa000, 0x7, 0x0, r3, 0x4743d844, 0xc21}}, {0x4, 0x3, 0x0, 0xb3}}, {{0x4, 0x0, 0x6e47, 0x8000, 0x9, 0x3, {0x5, 0xffffffffffffff95, 0x2, 0x8, 0x5, 0x9, 0x3978, 0x7, 0x8, 0xa000, 0x1, r2, 0x0, 0x1, 0x7}}, {0x3, 0x6, 0x3, 0x9, '9(('}}, {{0x4, 0x2, 0x4, 0x6, 0xf, 0x3, {0x1, 0x80, 0x6, 0x0, 0x4, 0x101, 0x9, 0x40, 0x7, 0x1000, 0x41, 0x0, r3, 0x4, 0x8}}, {0x5, 0x7fff, 0xa, 0x23, '/dev/fuse\x00'}}]}, &(0x7f0000000d80)={0xa0, 0xffffffffffffffda, 0x800, {{0x4, 0x1, 0x3, 0x101, 0x2, 0x3, {0x4, 0x8be, 0xe1, 0x5, 0x800000000000, 0x8, 0x51, 0xf6e8, 0x6, 0x4000, 0x7, 0x0, r3, 0x3, 0x9}}, {0x0, 0x15}}}, &(0x7f0000000f00)={0x20, 0x0, 0x8, {0x1, 0x4, 0x0, 0x6}}, &(0x7f0000000f40)={0x130, 0xfffffffffffffffe, 0x8, {0x400, 0xf125, 0x0, '\x00', {0x4081, 0x8, 0x0, 0xeeb5, r2, r3, 0x4000, '\x00', 0x80000001, 0x1ff, 0x2, 0x8, {0x9, 0x9}, {0x5, 0x2}, {0x6, 0x5}, {0x7fffffff, 0x5}, 0x7, 0x3, 0x4, 0x4fd}}}}) 2.858318918s ago: executing program 0 (id=1354): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x2710, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x800}]}}]}, 0x38}}, 0x0) 2.857585351s ago: executing program 0 (id=1357): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="310300000000fbdbdf250b00000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000000) syz_emit_ethernet(0x23, &(0x7f0000000040)={@random="efb7f252d3df", @remote, @val={@void}, {@llc_tr={0x11, {@llc={0x42, 0x42, 'E', "97eb9a2254c6ab1014101a5aba50"}}}}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000007c0)={0x6, 0x2, 0x2, 0x422, 0x7fffffff, 0x6, 0xd, 0x4, r5}, &(0x7f0000000800)=0x20) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) poll(&(0x7f0000000040)=[{r0, 0x15014}], 0x1, 0xad5) syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYBLOB="821fef47374e8eed03ae26c9bceccf42f16a7812c3fd68c7561c5a7c3d987651607e5543acfba4a0bb4d39fab9e6cdfff4e3a36c1fb148c9a1b57bfb6091709556d673150baad7c93f3a9aa76e29488a3b49ef98b1f3e9a31486ffe4c2e12ce1f48b3452ea2b8e7d515fdd3fbd984c6742ae69579b4a4688fcd334b422f771bedbfd37396f91450b1aa40433925585bf62b1133b21468d99e5fd6b2aa664c3a716c578506b5d32e5b9a52fc53d1724fa"], 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x30002, 0x0) write$tun(r7, &(0x7f0000000280)={@void, @val={0x2, 0x4, 0x40, 0x0, 0x6, 0xb}, @ipv4=@tipc={{0x2b, 0x4, 0x3, 0x24, 0xdc, 0x65, 0x0, 0x8, 0x6, 0x0, @multicast2, @local, {[@timestamp_prespec={0x44, 0x2c, 0x70, 0x3, 0x8, [{@rand_addr=0x64010100, 0x81}, {@broadcast}, {@empty, 0x2}, {@broadcast, 0xa7}, {@broadcast, 0x46f}]}, @timestamp={0x44, 0xc, 0x77, 0x0, 0xd, [0xfffffffa, 0x7]}, @generic={0x7, 0xe, "456318c1018f56fc9969e77d"}, @lsrr={0x83, 0x7, 0x41, [@empty]}, @cipso={0x86, 0x47, 0x3, [{0x0, 0x11, "a1378cea4ca0095c738d6d7f473730"}, {0x1, 0x11, "a157ee649d8ce0a55b1f178f289bea"}, {0x2, 0x5, "5fcc05"}, {0x6, 0x8, "95f74337e540"}, {0x6, 0x12, "f0fc2fcd2da8446fbb99ff3563275fb0"}]}, @end]}}, @payload_mcast={{{{{{0x30, 0x0, 0x0, 0x0, 0x1, 0xb, 0x0, 0x2, 0x2, 0x0, 0x1, 0xf, 0x7, 0x1, 0x4000, 0x8, 0x1, 0x4e23, 0x4e22}, 0x1, 0x1}, 0x2, 0x5}}}, [0x0, 0x0, 0x0, 0x0]}}}, 0xe6) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x3, 0x4}, 0x20) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/softlockup_count', 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r8, 0x29, 0x32, &(0x7f0000000080)={@private0, r9}, 0x14) recvfrom(r8, 0x0, 0x0, 0x10000, &(0x7f00000005c0)=@xdp={0x2c, 0x1, r9, 0x27}, 0x80) setsockopt$inet6_int(r8, 0x29, 0x21, &(0x7f0000001200)=0x4, 0x4) sendto$inet6(r8, &(0x7f00000000c0)="800034ca2793b73c", 0x8, 0x4c084, &(0x7f00000003c0)={0xa, 0xfffd, 0x81, @local, 0xb2fb}, 0x1c) 1.962432025s ago: executing program 0 (id=1388): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffd, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x22, 0x7c, 0x0, @loopback}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r1 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x4211, r1) ptrace$setregs(0xf, r1, 0x3, &(0x7f0000000040)="52c3dbfe88ed1671f1") 1.962124232s ago: executing program 0 (id=1389): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004", 0x23}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) prlimit64(r5, 0x0, &(0x7f0000000040)={0x1, 0xfffffffffffffff9}, &(0x7f0000000080)) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000000)) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) 1.313369167s ago: executing program 4 (id=1397): r0 = socket(0x2, 0x80805, 0x0) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) pwrite64(r1, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r4 = syz_open_dev$hidraw(&(0x7f0000000180), 0x7, 0x109800) write$hidraw(r4, &(0x7f0000000240)="0b45c6c3d90d27e5bdf2adaeb8b3ffc3420b90dbae68ed16f7362a1f30f968d09a7784fbd733652bc972e15b844075ad7fe32fca5be0bce5dc57", 0x3a) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x20, 0x1a, 0xa01, 0x0, 0x0, {0xa}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x7, 0x0, 0x0, 0x0, @str='\x1d@\x00'}]}]}, 0x20}}, 0x0) shutdown(r2, 0x0) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000080)={r6, @in6={{0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20000004}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='vcan0\x00', 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r9, 0x1, 0x10000, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x3c}}, 0x0) connect$pppl2tp(r0, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @empty}, 0x1, 0x4, 0x0, 0x4}}, 0x26) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000)={r6, 0x8}, 0x8) 1.312426368s ago: executing program 4 (id=1398): mremap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x6, 0x80000) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000007000/0x4000)=nil, &(0x7f000000a000/0x2000)=nil, 0x4000, 0x2}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000740)=@newtaction={0x1a0, 0x30, 0x9, 0x0, 0x0, {}, [{0x18c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {0x0, 0x0, 0xfe}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x100, 0x2, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xc4, 0x81, 0x5, 0x9, 0x5}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file2\x00'}]}, {0x8b, 0x6, "34cd612c7a0ab41aeee4f2749c717405930291dd10c14ec41a0491357d7c632f458556e624bdab00958fafb08c18760601b0943a67d82a91d915c3984342a367d3b2e58cea49cb7452d570292ec56138e6a1ba36da3d664c8523216a7b39db943810932dbdc81b60f442a6febd49c70976736c5a483baea68dd16a08fa7222f24f93b11f380ddb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}]}]}, 0x1a0}}, 0x0) connect$phonet_pipe(r2, &(0x7f0000000000)={0x23, 0x16, 0x4, 0x3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000730000000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, 0x0, &(0x7f00000005c0)='GPL\x00'}, 0x94) syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r4, 0x0, 0xd0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 1.266192883s ago: executing program 4 (id=1399): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000)={r2, 0x8}, 0x8) 1.264617205s ago: executing program 4 (id=1400): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f0000000040)=[{r0, 0x20}, {r0, 0x13}], 0x2, 0x0, 0x0, 0x0) (fail_nth: 12) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) 1.262081166s ago: executing program 3 (id=1401): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000040)={@none, 0x1}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRESHEX=r0], 0x1c}}, 0x804) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000040)={@none, 0x1}) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRESHEX=r0], 0x1c}}, 0x804) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async) 1.182963257s ago: executing program 3 (id=1402): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x0, 0x4, {@ip4=@broadcast}}}]}, 0x38}}, 0x20044050) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000700000061114c000000000085000000cf00000095"], 0x0, 0x7, 0x0, 0x0, 0x41100}, 0x94) setpriority(0x2, 0xff, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@updpolicy={0xcc, 0x1b, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xf, 0x0, 0x9, 0x0, 0x3}, {0x0, 0x2, 0x2}, 0x2, 0x8}, [@srcaddr={0x14, 0xd, @in=@local}]}, 0xcc}}, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000003740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x6308}}}}}}, 0x0) 1.18240772s ago: executing program 3 (id=1403): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/rcu_stall_count', 0x141a82, 0x84) sendfile(r0, r0, &(0x7f0000000000)=0x1, 0x4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x3, 0x2) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r4, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@sha1={0x1, "39b20152c9325aa98c79de4746063682ec6542f6"}, 0x15, 0x1) execve(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x2, 0x80, 0x7, 0xa34, 0x81}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={r6, 0x4}, &(0x7f00000001c0)=0x8) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="b220", @ANYRES16=r8, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r9, @ANYBLOB="0b002a00dd05616263646500"], 0x28}}, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r7, 0x80047210, &(0x7f00000000c0)) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRESOCT=r8, @ANYBLOB="0500130092848b000a00060008021100000100000600100080050000060012"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 974.934832ms ago: executing program 3 (id=1404): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000003000000000000000500000d"], 0x0, 0x4b}, 0x20) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000100)={0x0, 0x747, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 974.503365ms ago: executing program 4 (id=1405): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@delsa={0x3c, 0x11, 0x1, 0x0, 0x0, {@in6=@empty}, [@srcaddr={0x14, 0xd, @in=@local}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000000)={'wlan1\x00'}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@delsa={0x3c, 0x11, 0x1, 0x0, 0x0, {@in6=@empty}, [@srcaddr={0x14, 0xd, @in=@local}]}, 0x3c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000000)={'wlan1\x00'}) (async) 963.883426ms ago: executing program 0 (id=1407): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x413a, 0x40, &(0x7f00000000c0)=']', 0x1, 0x6, 0x75, 0x6, 0x8, 0x79, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @random="4489a2bc242d", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x1, 0x0, @broadcast=0xac14140a, @broadcast=0xac1414bb, {[@timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@local}, {@loopback}, {@rand_addr=0x64010102}, {@dev}, {@empty}, {@broadcast, 0x8000}]}, @cipso={0x86, 0xa, 0x0, [{0x0, 0x2}, {0x0, 0x2}]}]}}}}}}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r4, 0x4008ae48, &(0x7f0000000040)=0xeeee0000) dup(r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x20}}, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r5, &(0x7f0000000000)="b8d2b38d5ed1de47a60d8128f1596940861bc74b9db65ba8bfc0dd", 0x1b) 963.62555ms ago: executing program 4 (id=1408): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0xfff2, 0x8}, {0xffff, 0xffff}, {0xf, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001540)={0x0, &(0x7f0000001200)=[@wrmsr={0x1e, 0x20, {0xc0011038, 0x5}}, @cpuid={0x14, 0x18, {0x800, 0x9}}, @uexit={0x0, 0x18, 0x2}, @wrmsr={0x1e, 0x20, {0xa76, 0xfffffffffffffffc}}, @cpuid={0x14, 0x18, {0x8, 0x8}}, @cpuid={0x14, 0x18, {0x2, 0x1}}, @cpuid={0x14, 0x18, {0xfffffffe, 0x7}}, @code={0xa, 0x40, {"f2430f121b0f019d007000002e0f01d10f78fac481f16cb24e000000470f300fc77be40f23310f01c3c4a3694be000"}}, @uexit={0x0, 0x18}, @wr_crn={0x46, 0x20, {0x8, 0xb}}, @rdmsr={0x32, 0x18, {0xb19}}, @cpuid={0x14, 0x18, {0x2, 0xffffffff}}, @wr_crn={0x46, 0x20, {0x4, 0x80000000}}, @uexit={0x0, 0x18, 0x100000001}, @uexit={0x0, 0x18, 0x4}, @wr_crn={0x46, 0x20, {0xb, 0x6}}, @uexit={0x0, 0x18, 0x2}, @rdmsr={0x32, 0x18, {0xc001103a}}, @wr_crn={0x46, 0x20, {0x4, 0xadec}}, @uexit={0x0, 0x18, 0x3}, @wrmsr={0x1e, 0x20, {0x900, 0x101}}, @uexit={0x0, 0x18, 0xffffffff80000000}, @code={0xa, 0x4f, {"67410f21cc26640f01c20f01b100880000400f3808be005000000f59e30f20d835200000000f22d866b829008ee8c4a17d6fc9c482118c5d00460f78348a"}}, @wr_crn={0x46, 0x20, {0x4, 0x8257}}, @rdmsr={0x32, 0x18, {0xa1a}}, @rdmsr={0x32, 0x18, {0x340}}, @rdmsr={0x32, 0x18, {0xa3c}}], 0x327}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r4, 0x4068aea3, &(0x7f00000015c0)={0xa3, 0x0, &(0x7f0000001580)}) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) r5 = syz_io_uring_complete(0x0) ioctl$CDROMEJECT(r5, 0x5309) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f00000000c0)=0x58, 0xa) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001180)={&(0x7f00009a5000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/4096, 0x1000, 0x1, &(0x7f0000000040)=""/152, 0x98}, &(0x7f00000011c0)=0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a20000000000a05000000000000002000010000000900010073797a3000000000440000000b0a03000000000000000000010000090900020073797a31000000000900010073797a300000001800118008000100647578000c000280080001400000001014000000060a0104000000000000000001000004140000001100010000000000000000000500000adce8"], 0xa0}}, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0xff8e}}, 0x40) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000048f000/0x1000)=nil, 0x1000, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 533.316308ms ago: executing program 1 (id=1416): r0 = syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) read(r1, &(0x7f0000000340)=""/167, 0xa7) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r4, &(0x7f0000000380)="ca091cc2e088", 0xffe3) r5 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r5, &(0x7f00000002c0)="eb", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000000)={r7, 0x1}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000400)={r7, @in6={{0xa, 0x4e22, 0xf1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80}}}, &(0x7f00000000c0)=0x84) close(r3) r8 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r8, &(0x7f0000000180)="01", 0x1) close(r8) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/partitions\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r10, &(0x7f0000000040)=ANY=[], 0x78) close(r10) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000001c0), 0x80000001, 0x90200) fdatasync(r9) 215.529064ms ago: executing program 1 (id=1417): syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty=0xe0, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 215.150886ms ago: executing program 1 (id=1418): creat(&(0x7f0000001200)='./file0\x00', 0x187) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x61f285}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r5, &(0x7f00000000c0)='!', 0xb7f40}]) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000480)={0x50, 0xfffffffffffffffe, 0x7, {0x7, 0x2b, 0x22, 0x44, 0x7ff, 0x200, 0x200, 0x4, 0x0, 0x0, 0x20, 0x50000}}, &(0x7f0000000640)={0x18, 0x0, 0x1, {0xcfc}}, &(0x7f0000000680)={0x18, 0x0, 0x1ff, {0x200000}}, &(0x7f00000006c0)={0x18, 0x0, 0x80000000, {0x3c5e}}, &(0x7f0000000700)={0x18, 0x0, 0x6, {0x4}}, &(0x7f0000000740)={0x28, 0xfffffffffffffff5, 0x100000000, {{0x7ff, 0x2db, 0x2, r4}}}, &(0x7f00000007c0)={0x60, 0x0, 0x6, {{0x101, 0x6, 0x1, 0x10, 0x2, 0x7ff, 0x2, 0x40}}}, &(0x7f0000000840)={0x18, 0x0, 0x3, {0x3}}, &(0x7f0000000880)={0x13, 0x0, 0x6, {'\x98&\x00'}}, &(0x7f00000008c0)={0x20, 0x0, 0xfffffffffffffff7}, &(0x7f0000000900)={0x78, 0x0, 0x6, {0xffffffffffffffff, 0x2, 0x0, {0x4, 0xb, 0x8000000000000001, 0x8, 0x1000, 0x6, 0x40, 0x1, 0x6, 0xa000, 0x0, r2, r3, 0x4, 0x6}}}, &(0x7f0000000980)={0x90, 0x0, 0xf98, {0x4, 0x2, 0x4, 0x0, 0x5, 0x8, {0x4, 0x7, 0xffffffffffff0a31, 0x0, 0x2, 0x8001, 0x80, 0x9, 0xfffffffd, 0x0, 0x800, r2, r3, 0x4, 0x2}}}, &(0x7f0000000a40)={0x90, 0x0, 0x1, [{0x4, 0x9, 0x0, 0x4}, {0x6, 0xc9, 0xa, 0xb5c, '/dev/fuse\x00'}, {0x4, 0xb, 0x4, 0x4, '/*I#'}, {0x4, 0x3, 0x6, 0x6, '[*\'./&'}]}, &(0x7f0000000b00)={0x1f0, 0xfffffffffffffffe, 0x0, [{{0x4, 0x2, 0x6, 0x10001, 0x0, 0x3, {0x3, 0xba, 0x9, 0x800, 0x9, 0x8, 0xffff, 0xfd, 0x9, 0xa000, 0x7, 0x0, r3, 0x4743d844, 0xc21}}, {0x4, 0x3, 0x0, 0xb3}}, {{0x4, 0x0, 0x6e47, 0x8000, 0x9, 0x3, {0x5, 0xffffffffffffff95, 0x2, 0x8, 0x5, 0x9, 0x3978, 0x7, 0x8, 0xa000, 0x1, r2, 0x0, 0x1, 0x7}}, {0x3, 0x6, 0x3, 0x9, '9(('}}, {{0x4, 0x2, 0x4, 0x6, 0xf, 0x3, {0x1, 0x80, 0x6, 0x0, 0x4, 0x101, 0x9, 0x40, 0x7, 0x1000, 0x41, 0x0, r3, 0x4, 0x8}}, {0x5, 0x7fff, 0xa, 0x23, '/dev/fuse\x00'}}]}, &(0x7f0000000d80)={0xa0, 0xffffffffffffffda, 0x800, {{0x4, 0x1, 0x3, 0x101, 0x2, 0x3, {0x4, 0x8be, 0xe1, 0x5, 0x800000000000, 0x8, 0x51, 0xf6e8, 0x6, 0x4000, 0x7, 0x0, r3, 0x3, 0x9}}, {0x0, 0x15}}}, &(0x7f0000000f00)={0x20, 0x0, 0x8, {0x1, 0x4, 0x0, 0x6}}, &(0x7f0000000f40)={0x130, 0xfffffffffffffffe, 0x8, {0x400, 0xf125, 0x0, '\x00', {0x4081, 0x8, 0x0, 0xeeb5, r2, r3, 0x4000, '\x00', 0x80000001, 0x1ff, 0x2, 0x8, {0x9, 0x9}, {0x5, 0x2}, {0x6, 0x5}, {0x7fffffff, 0x5}, 0x7, 0x3, 0x4, 0x4fd}}}}) 112.8027ms ago: executing program 3 (id=1419): r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0xc2141) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0385720, &(0x7f0000000000)={0x1}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x2001) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)={0x44, r3, 0x1, 0x70bd2a, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x5}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200040d0}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd4, r3, 0x8, 0x70bd26, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xe82a}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0x7ff}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xffff}, {0x8, 0x15, 0x2}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x4000011) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000500)) socket$netlink(0x10, 0x3, 0x0) 53.181322ms ago: executing program 0 (id=1420): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@nat={'nat\x00', 0x670, 0x5, 0x3e0, 0xa4, 0x0, 0xfeffffff, 0x2f8, 0x0, 0x39c, 0x39c, 0xffffffff, 0x39c, 0x39c, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0xffffffff, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x7ffffffe, {0x12, @dev={0xac, 0x14, 0x14, 0x3f}, @private=0xa010102, @port=0x4e24, @gre_key=0x6}}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {0x0, 0x7}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x8, 0x0, 0x1}}, @common=@ah={{0x2c}, {[0x2], 0x1}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x2f8}}, {{@uncond, 0x0, 0xc0, 0xf4, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x1}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0xd00, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {0xff}, 0x84}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id=0x40}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x43c) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000001c0)={r3, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000380)={r3, @in6={{0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x1e}, 0xe}}}, 0x84) syz_io_uring_setup(0x3e06, &(0x7f00000000c0)={0x0, 0xc463, 0x0, 0x2, 0x2de}, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0x101000, 0x0) r4 = syz_io_uring_setup(0x94, &(0x7f0000000140)={0x0, 0xc5f2, 0x40, 0xfffffffe, 0x324}, &(0x7f0000000280)=0x0, &(0x7f0000000100)) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x20000011}, 0x8000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRESOCT=0x0, @ANYRESOCT=r4, @ANYRES32=0x0, @ANYRES64=r2, @ANYBLOB="00000000000008a00000000000000400"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a"], 0x22) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x4000, 0x4) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20040020) r8 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r8, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}}], 0x45, 0x8000041) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="2a1004000000000008001b00000900007d46335ec2a6ade25dc03d002b288866d85678baa03156731c7d91ff272ee6b50130472a572f6b2733de1bd15a2ec78f0ac2a8ed431c92233020451a5a53ab0d5c2921da704a34ca02719faa14519c36b17c"], 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000) 52.818417ms ago: executing program 1 (id=1421): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x0, 0x4, {@ip4=@broadcast}}}]}, 0x38}}, 0x20044050) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000700000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100}, 0x94) setpriority(0x2, 0xff, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@updpolicy={0xcc, 0x1b, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xf, 0x0, 0x9, 0x0, 0x3}, {0x0, 0x2, 0x2}, 0x2, 0x8}, [@srcaddr={0x14, 0xd, @in=@local}]}, 0xcc}}, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000003740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x6308}}}}}}, 0x0) 909.302µs ago: executing program 1 (id=1422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000080)=0xff, 0x4) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x38, 0xd, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "8ca0345cf84e34f017838b6048b5e7cf", 0x7}}}, 0x1a) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003240)=@gettaction={0x28, 0x5a, 0x1, 0x70bd2c, 0x1, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x200004c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x20, 0x0, [{}, {@dev}]}}) 0s ago: executing program 1 (id=1423): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000100)=0x1) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000380)={0x3c, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) kernel console output (not intermixed with test programs): nterface 0 altsetting 43 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 55.718544][ T5981] usb 7-1: config 1 interface 0 altsetting 43 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 55.721930][ T5981] usb 7-1: config 1 interface 0 altsetting 43 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 55.727177][ T5981] usb 7-1: config 1 interface 0 has no altsetting 0 [ 55.738020][ T5981] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 55.740845][ T5981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.743348][ T5981] usb 7-1: Product: syz [ 55.745028][ T5981] usb 7-1: Manufacturer: syz [ 55.746510][ T5981] usb 7-1: SerialNumber: syz [ 55.751781][ T6521] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 55.754192][ T6521] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 55.761635][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.183'. [ 55.810036][ T40] kauditd_printk_skb: 50 callbacks suppressed [ 55.810047][ T40] audit: type=1400 audit(1753999525.393:312): avc: denied { getopt } for pid=6550 comm="syz.1.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.818219][ T40] audit: type=1800 audit(1753999525.403:313): pid=6551 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.186" name="nullb0" dev="tmpfs" ino=408 res=0 errno=0 [ 55.851420][ T40] audit: type=1400 audit(1753999525.433:314): avc: denied { getopt } for pid=6553 comm="syz.1.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.876193][ T6558] evm: overlay not supported [ 55.910521][ T6562] fuse: Bad value for 'rootmode' [ 55.964491][ T5981] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 55.970176][ T5981] usb 7-1: USB disconnect, device number 3 [ 56.041363][ T40] audit: type=1400 audit(1753999525.623:315): avc: denied { write } for pid=6575 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.051274][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.195'. [ 56.105855][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.195'. [ 56.233435][ T40] audit: type=1400 audit(1753999525.813:316): avc: denied { execute_no_trans } for pid=6586 comm="syz.1.198" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1027 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 56.646199][ T40] audit: type=1400 audit(1753999526.233:317): avc: denied { read } for pid=6591 comm="syz.0.200" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 56.651521][ T6592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 56.653270][ T40] audit: type=1400 audit(1753999526.233:318): avc: denied { open } for pid=6591 comm="syz.0.200" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 56.660513][ T6592] binder: 6591:6592 ioctl 4004af61 200000000080 returned -22 [ 56.664606][ T40] audit: type=1400 audit(1753999526.233:319): avc: denied { ioctl } for pid=6591 comm="syz.0.200" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 56.675929][ T40] audit: type=1400 audit(1753999526.233:320): avc: denied { set_context_mgr } for pid=6591 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 56.682060][ T40] audit: type=1400 audit(1753999526.253:321): avc: denied { ioctl } for pid=6591 comm="syz.0.200" path="socket:[11456]" dev="sockfs" ino=11456 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.867543][ T6603] fuse: Bad value for 'rootmode' [ 56.898976][ T6605] netlink: 'syz.3.204': attribute type 2 has an invalid length. [ 56.967318][ T6611] vxcan1: entered promiscuous mode [ 56.974166][ T6611] ======================================================= [ 56.974166][ T6611] WARNING: The mand mount option has been deprecated and [ 56.974166][ T6611] and is ignored by this kernel. Remove the mand [ 56.974166][ T6611] option from the mount to silence this warning. [ 56.974166][ T6611] ======================================================= [ 57.172082][ T6638] fuse: Bad value for 'rootmode' [ 57.196538][ T6635] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 57.209898][ T6641] tipc: Invalid UDP bearer configuration [ 57.209923][ T6641] tipc: Enabling of bearer rejected, failed to enable media [ 57.307209][ T63] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 57.309268][ T6652] netlink: 40 bytes leftover after parsing attributes in process `syz.2.220'. [ 57.351347][ T6654] netlink: 60 bytes leftover after parsing attributes in process `syz.2.221'. [ 57.354420][ T6654] unsupported nlmsg_type 40 [ 57.575129][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'. [ 57.578034][ T6668] netlink: 20 bytes leftover after parsing attributes in process `syz.2.223'. [ 57.678247][ T6671] netlink: 108 bytes leftover after parsing attributes in process `syz.2.224'. [ 57.765915][ T46] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xda [ 57.785754][ T63] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 57.789960][ T63] Bluetooth: hci1: Injecting HCI hardware error event [ 57.793418][ T63] Bluetooth: hci1: hardware error 0x00 [ 58.114263][ T6680] netlink: 'syz.0.226': attribute type 21 has an invalid length. [ 58.599532][ T6690] fuse: Unknown parameter 'use00000000000000000000' [ 59.109639][ T6707] syz_tun: entered allmulticast mode [ 59.119416][ T6706] syz_tun: left allmulticast mode [ 59.172742][ T6715] fuse: Unknown parameter 'use00000000000000000000' [ 59.414590][ T29] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 59.555499][ T6725] net_ratelimit: 79 callbacks suppressed [ 59.555510][ T6725] netlink: zone id is out of range [ 59.563228][ T6725] netlink: zone id is out of range [ 59.565288][ T6725] netlink: zone id is out of range [ 59.567574][ T6725] netlink: zone id is out of range [ 59.569269][ T6725] netlink: zone id is out of range [ 59.570888][ T6725] netlink: zone id is out of range [ 59.572495][ T6725] netlink: zone id is out of range [ 59.574039][ T6725] netlink: zone id is out of range [ 59.575796][ T6725] netlink: zone id is out of range [ 59.577421][ T6725] netlink: zone id is out of range [ 59.586550][ T29] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 59.589990][ T29] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 59.593927][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 59.597800][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 59.601586][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 59.608117][ T29] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 59.611302][ T29] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 59.615539][ T29] usb 5-1: Product: syz [ 59.617337][ T29] usb 5-1: Manufacturer: syz [ 59.628015][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 59.630099][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 59.636961][ T29] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 59.639376][ T29] cdc_wdm 5-1:1.0: Unknown control protocol [ 59.864687][ T63] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 59.879714][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 59.880186][ T3244] usb 5-1: USB disconnect, device number 6 [ 59.881951][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 59.886282][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 60.092815][ T6713] geneve2: entered promiscuous mode [ 60.094594][ T6713] geneve2: entered allmulticast mode [ 60.408982][ T6737] overlayfs: failed to clone upperpath [ 60.443574][ T6745] fuse: Unknown parameter 'use00000000000000000000' [ 60.604125][ T6758] __nla_validate_parse: 5 callbacks suppressed [ 60.604135][ T6758] netlink: 2 bytes leftover after parsing attributes in process `syz.3.251'. [ 60.698662][ T6763] netlink: 6 bytes leftover after parsing attributes in process `syz.3.253'. [ 60.713406][ T6763] kvm: apic: phys broadcast and lowest prio [ 60.727475][ T6766] netlink: 20 bytes leftover after parsing attributes in process `syz.0.254'. [ 60.977878][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 60.977893][ T40] audit: type=1400 audit(1753999530.563:362): avc: denied { create } for pid=6770 comm="syz.0.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 60.986954][ T40] audit: type=1400 audit(1753999530.563:363): avc: denied { connect } for pid=6770 comm="syz.0.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 61.007012][ T40] audit: type=1400 audit(1753999530.593:364): avc: denied { ioctl } for pid=6772 comm="syz.0.257" path="socket:[11077]" dev="sockfs" ino=11077 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 61.007567][ T6773] netlink: 20 bytes leftover after parsing attributes in process `syz.0.257'. [ 61.017943][ T6773] netlink: 20 bytes leftover after parsing attributes in process `syz.0.257'. [ 61.099707][ T40] audit: type=1400 audit(1753999530.683:365): avc: denied { create } for pid=6774 comm="syz.0.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 61.106213][ T40] audit: type=1400 audit(1753999530.683:366): avc: denied { write } for pid=6774 comm="syz.0.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 61.152571][ T6777] comedi comedi0: Minor 1026 is invalid! [ 61.268458][ T40] audit: type=1400 audit(1753999530.853:367): avc: denied { map } for pid=6778 comm="syz.1.259" path="socket:[11770]" dev="sockfs" ino=11770 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.275652][ T40] audit: type=1400 audit(1753999530.853:368): avc: denied { read accept } for pid=6778 comm="syz.1.259" path="socket:[11770]" dev="sockfs" ino=11770 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.298115][ T6781] fuse: Unknown parameter 'user_i00000000000000000000' [ 61.384913][ T63] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 61.389190][ T63] Bluetooth: hci2: Injecting HCI hardware error event [ 61.392903][ T63] Bluetooth: hci2: hardware error 0x00 [ 61.516177][ T40] audit: type=1400 audit(1753999531.103:369): avc: denied { mounton } for pid=6787 comm="syz.2.263" path="mnt:[4026532867]" dev="nsfs" ino=4026532867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.632478][ T40] audit: type=1400 audit(1753999531.213:370): avc: denied { ioctl } for pid=6797 comm="syz.2.267" path="net:[4026533005]" dev="nsfs" ino=4026533005 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.665430][ T6803] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 61.699034][ T6807] fuse: Unknown parameter 'user_i00000000000000000000' [ 61.767612][ T40] audit: type=1400 audit(1753999531.353:371): avc: denied { connect } for pid=6808 comm="syz.3.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 61.885365][ T6816] block nbd2: shutting down sockets [ 61.990414][ T5948] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 62.070517][ T6835] fuse: Unknown parameter 'user_i00000000000000000000' [ 62.155903][ T5948] Bluetooth: hci0: unexpected event 0x01 length: 32 > 1 [ 62.214297][ T6845] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.218974][ T6845] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.243886][ T6847] netlink: 'syz.0.283': attribute type 1 has an invalid length. [ 62.246675][ T6847] NCSI netlink: No device for ifindex 0 [ 62.257410][ T6845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.263970][ T6845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.324490][ T101] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.328012][ T101] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.332199][ T101] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.339535][ T101] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.343558][ T6852] netlink: 'syz.1.285': attribute type 15 has an invalid length. [ 62.364205][ T6856] tipc: Started in network mode [ 62.366093][ T6856] tipc: Node identity ae6f7ff81101, cluster identity 4711 [ 62.368747][ T6856] tipc: Enabled bearer , priority 0 [ 62.371836][ T6856] syzkaller0: entered promiscuous mode [ 62.373785][ T6856] syzkaller0: entered allmulticast mode [ 62.378065][ T6858] netlink: 'syz.1.288': attribute type 39 has an invalid length. [ 62.379057][ T6856] tipc: Resetting bearer [ 62.458184][ T6854] tipc: Resetting bearer [ 62.464377][ T6854] tipc: Disabling bearer [ 62.467028][ T6859] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 62.469752][ T6859] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 62.472939][ T6859] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 62.475730][ T6859] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 62.681353][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.290'. [ 62.685736][ T6867] netlink: 'syz.1.290': attribute type 39 has an invalid length. [ 62.712779][ T6869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.292'. [ 62.748875][ T6874] fuse: Unknown parameter 'user_id00000000000000000000' [ 62.859932][ T6878] syz_tun: entered allmulticast mode [ 62.954804][ T6881] overlayfs: failed to clone upperpath [ 63.474595][ T63] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 63.477650][ T6893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6893 comm=syz.1.299 [ 63.481924][ T6895] netlink: 28 bytes leftover after parsing attributes in process `syz.1.299'. [ 63.531890][ T6901] netlink: 'syz.1.301': attribute type 4 has an invalid length. [ 63.563488][ T6908] fuse: Unknown parameter 'user_id00000000000000000000' [ 63.695094][ T6877] syz_tun: left allmulticast mode [ 63.725827][ T6913] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 63.754203][ T6915] fuse: Bad value for 'user_id' [ 63.756969][ T6915] fuse: Bad value for 'user_id' [ 63.787842][ T6917] overlayfs: failed to clone upperpath [ 63.877639][ T6926] netlink: 1 bytes leftover after parsing attributes in process `syz.1.310'. [ 63.973105][ T6931] netlink: 60 bytes leftover after parsing attributes in process `syz.1.312'. [ 64.041496][ T6945] fuse: Unknown parameter 'user_id00000000000000000000' [ 64.246736][ T6961] overlay: filesystem on ./bus not supported as upperdir [ 64.338304][ T6967] (unnamed net_device) (uninitialized): (slave batadv0): Device is not bonding slave [ 64.343748][ T6967] (unnamed net_device) (uninitialized): option active_slave: invalid value (batadv0) [ 64.427409][ T6970] overlayfs: failed to clone upperpath [ 64.503104][ T6976] netlink: 'syz.1.327': attribute type 10 has an invalid length. [ 64.507098][ T6976] team0: Device bond0 is up. Set it down before adding it as a team port [ 64.538823][ T6982] fuse: Bad value for 'fd' [ 64.601827][ T6986] overlayfs: failed to clone upperpath [ 64.665098][ T6990] netlink: 'syz.1.333': attribute type 4 has an invalid length. [ 64.737291][ T6998] overlayfs: failed to clone upperpath [ 64.997883][ T7012] dummy0: entered allmulticast mode [ 65.623445][ T7019] batadv_slave_1: entered promiscuous mode [ 65.652980][ T7019] netlink: 'syz.1.343': attribute type 10 has an invalid length. [ 65.655731][ T7019] team0: Device bond0 is up. Set it down before adding it as a team port [ 65.658997][ T7019] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.665203][ T7018] batadv_slave_1: left promiscuous mode [ 65.691906][ T7021] fuse: Bad value for 'fd' [ 65.899660][ T7044] FAULT_INJECTION: forcing a failure. [ 65.899660][ T7044] name failslab, interval 1, probability 0, space 0, times 0 [ 65.904102][ T7044] CPU: 2 UID: 0 PID: 7044 Comm: syz.0.352 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 65.904117][ T7044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.904124][ T7044] Call Trace: [ 65.904127][ T7044] [ 65.904132][ T7044] dump_stack_lvl+0x16c/0x1f0 [ 65.904152][ T7044] should_fail_ex+0x512/0x640 [ 65.904168][ T7044] ? fs_reclaim_acquire+0xae/0x150 [ 65.904185][ T7044] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 65.904198][ T7044] should_failslab+0xc2/0x120 [ 65.904212][ T7044] __kmalloc_noprof+0xd2/0x510 [ 65.904226][ T7044] tomoyo_realpath_from_path+0xc2/0x6e0 [ 65.904240][ T7044] ? tomoyo_profile+0x47/0x60 [ 65.904255][ T7044] tomoyo_path_number_perm+0x245/0x580 [ 65.904272][ T7044] ? tomoyo_path_number_perm+0x237/0x580 [ 65.904290][ T7044] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 65.904308][ T7044] ? find_held_lock+0x2b/0x80 [ 65.904334][ T7044] ? find_held_lock+0x2b/0x80 [ 65.904346][ T7044] ? hook_file_ioctl_common+0x145/0x410 [ 65.904364][ T7044] ? __fget_files+0x20e/0x3c0 [ 65.904377][ T7044] security_file_ioctl+0x9b/0x240 [ 65.904390][ T7044] __x64_sys_ioctl+0xb7/0x210 [ 65.904407][ T7044] do_syscall_64+0xcd/0x4c0 [ 65.904419][ T7044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.904430][ T7044] RIP: 0033:0x7f289a98eb69 [ 65.904439][ T7044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.904449][ T7044] RSP: 002b:00007f289b842038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.904460][ T7044] RAX: ffffffffffffffda RBX: 00007f289abb5fa0 RCX: 00007f289a98eb69 [ 65.904467][ T7044] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 65.904473][ T7044] RBP: 00007f289b842090 R08: 0000000000000000 R09: 0000000000000000 [ 65.904479][ T7044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.904485][ T7044] R13: 0000000000000000 R14: 00007f289abb5fa0 R15: 00007ffc0137cd38 [ 65.904499][ T7044] [ 65.904503][ T7044] ERROR: Out of memory at tomoyo_realpath_from_path. [ 65.969545][ C2] vkms_vblank_simulate: vblank timer overrun [ 65.978967][ T7047] __nla_validate_parse: 1 callbacks suppressed [ 65.978977][ T7047] netlink: 36 bytes leftover after parsing attributes in process `syz.2.347'. [ 65.985268][ T7047] netlink: 16 bytes leftover after parsing attributes in process `syz.2.347'. [ 65.988774][ T7047] netlink: 36 bytes leftover after parsing attributes in process `syz.2.347'. [ 65.992231][ T7047] netlink: 36 bytes leftover after parsing attributes in process `syz.2.347'. [ 66.006819][ T7044] kvm: MONITOR instruction emulated as NOP! [ 66.201057][ T7060] fuse: Bad value for 'fd' [ 66.708947][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 66.708963][ T40] audit: type=1400 audit(1753999536.293:407): avc: denied { bind } for pid=7078 comm="syz.1.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.722004][ T40] audit: type=1400 audit(1753999536.293:408): avc: denied { setopt } for pid=7078 comm="syz.1.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.763767][ T7083] vxcan1: entered allmulticast mode [ 66.800927][ T7085] fuse: Unknown parameter '0x0000000000000004' [ 67.071937][ T40] audit: type=1400 audit(1753999536.653:409): avc: denied { connect } for pid=7097 comm="syz.1.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 67.118124][ T7094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.368'. [ 67.149974][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.372'. [ 67.214155][ T7114] fuse: Unknown parameter '0x0000000000000004' [ 67.269189][ T40] audit: type=1400 audit(1753999536.853:410): avc: denied { write } for pid=7117 comm="syz.0.376" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 67.277854][ T40] audit: type=1400 audit(1753999536.853:411): avc: denied { create } for pid=7117 comm="syz.0.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 67.278356][ T7118] 9p: Unknown uid 00000000004294967295 [ 67.286040][ T40] audit: type=1400 audit(1753999536.853:412): avc: denied { getopt } for pid=7117 comm="syz.0.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 67.297180][ T7120] tap0: tun_chr_ioctl cmd 1074025675 [ 67.299554][ T7120] tap0: persist enabled [ 67.302600][ T7120] tap0: tun_chr_ioctl cmd 1074025675 [ 67.304316][ T7120] tap0: persist enabled [ 67.339683][ T7125] overlayfs: failed to clone upperpath [ 67.381068][ T40] audit: type=1400 audit(1753999536.963:413): avc: denied { watch } for pid=7130 comm="syz.0.382" path="/75/bus/file1" dev="overlay" ino=428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 67.668301][ T7135] netlink: 96 bytes leftover after parsing attributes in process `syz.3.383'. [ 67.739777][ T7139] netlink: 'syz.3.384': attribute type 4 has an invalid length. [ 67.743484][ T40] audit: type=1400 audit(1753999537.323:414): avc: denied { append } for pid=7138 comm="syz.3.384" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 67.746834][ T7140] program syz.3.384 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.847229][ T7148] netlink: 'syz.2.387': attribute type 1 has an invalid length. [ 67.896526][ T7151] fuse: Unknown parameter '0x0000000000000004' [ 68.023956][ T7156] Invalid logical block size (2560) [ 68.227337][ T7177] fuse: Unknown parameter '0x0000000000000004' [ 68.236417][ T40] audit: type=1400 audit(1753999537.823:415): avc: denied { getopt } for pid=7178 comm="syz.1.398" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.260125][ T7181] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.400'. [ 68.299854][ T7185] netem: incorrect ge model size [ 68.301549][ T7185] netem: change failed [ 68.303710][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'. [ 68.392413][ T7197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.406'. [ 68.496475][ T7211] fuse: Unknown parameter '0x0000000000000004' [ 68.713216][ T7227] netlink: 'syz.3.420': attribute type 1 has an invalid length. [ 68.748077][ T7227] macvlan2: entered promiscuous mode [ 68.749806][ T7227] macvlan2: entered allmulticast mode [ 68.751908][ T7227] bond1: entered promiscuous mode [ 68.752335][ T40] audit: type=1400 audit(1753999538.333:416): avc: denied { map_create } for pid=7229 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 68.753842][ T7227] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 68.765945][ T7227] bond1: left promiscuous mode [ 68.883153][ T7238] Process accounting resumed [ 68.937026][ T7243] fuse: Unknown parameter '0x0000000000000004' [ 69.097803][ T7255] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 69.183388][ T7259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 69.361755][ T61] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 69.505293][ T7204] net_ratelimit: 473 callbacks suppressed [ 69.505305][ T7204] Set syz1 is full, maxelem 65536 reached [ 69.514682][ T61] usb 7-1: Using ep0 maxpacket: 16 [ 69.518598][ T61] usb 7-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 69.523813][ T61] usb 7-1: config 1 interface 0 has no altsetting 0 [ 69.529219][ T61] usb 7-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.40 [ 69.532088][ T61] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.534658][ T61] usb 7-1: Product: а [ 69.536023][ T61] usb 7-1: Manufacturer: á¼ŒË°á‡¼Ãžï©¢ä¦¦é“¦æ® á®‡ï˜±ï˜†ã›šíŒœã¤½Ýæ–‡ëŸƒíž¼ç…ஜᒘ玑Ⲿë·î¯”åž½ážâˆ‘é—©á®ì¼œâŸîˆ…িꇎᄻ嗪഼爟å¨èƒ…墶å¼ï¥¤æ®ƒä„¸å©‡ê®±æ£å‚显﹌଀곩꺅绾䊪娷꓇漣赥ẗ츹떉á²à¢»ç¦™ì¯ºá³Šæ‰ã†šèº–ꑬ镑ꩴá¨ê£—ꦽ漀ꃷäˆè´¶å¼æ…Ⳬ៲䞆뀭ఆԘ뱪좡跃 [ 69.545211][ T61] usb 7-1: SerialNumber: ㉠[ 69.586988][ T7267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 69.719334][ T7277] fuse: Unknown parameter 'fd0x0000000000000004' [ 69.757228][ T61] usbhid 7-1:1.0: can't add hid device: -71 [ 69.759183][ T61] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 69.762870][ T61] usb 7-1: USB disconnect, device number 4 [ 70.114743][ T59] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 70.237383][ T7311] overlayfs: failed to resolve './file0': -2 [ 70.265698][ T7313] fuse: Unknown parameter 'fd0x0000000000000004' [ 70.284593][ T59] usb 8-1: Using ep0 maxpacket: 32 [ 70.290204][ T59] usb 8-1: config 0 has an invalid interface number: 247 but max is 0 [ 70.292904][ T59] usb 8-1: config 0 has no interface number 0 [ 70.300989][ T59] usb 8-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 70.303856][ T59] usb 8-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 70.307392][ T59] usb 8-1: Product: syz [ 70.308736][ T59] usb 8-1: Manufacturer: syz [ 70.311602][ T59] usb 8-1: config 0 descriptor?? [ 70.418283][ T7321] tipc: Enabled bearer , priority 0 [ 70.422278][ T7320] tipc: Disabling bearer [ 70.473781][ T7319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7319 comm=syz.2.454 [ 71.070656][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.072974][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.631150][ T29] usb 8-1: USB disconnect, device number 2 [ 71.964416][ T7346] fuse: Unknown parameter 'fd0x0000000000000004' [ 72.151054][ T40] kauditd_printk_skb: 85 callbacks suppressed [ 72.151064][ T40] audit: type=1400 audit(1753999541.733:502): avc: denied { create } for pid=7349 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 72.159475][ T40] audit: type=1400 audit(1753999541.733:503): avc: denied { listen } for pid=7349 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 72.165798][ T40] audit: type=1400 audit(1753999541.733:504): avc: denied { create } for pid=7349 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 72.172175][ T40] audit: type=1400 audit(1753999541.733:505): avc: denied { bind } for pid=7349 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 72.179098][ T40] audit: type=1400 audit(1753999541.733:506): avc: denied { setopt } for pid=7349 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 72.185441][ T40] audit: type=1400 audit(1753999541.733:507): avc: denied { accept } for pid=7349 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 72.191560][ T40] audit: type=1400 audit(1753999541.743:508): avc: denied { write } for pid=7349 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 72.199275][ T40] audit: type=1400 audit(1753999541.753:509): avc: denied { read } for pid=7349 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 72.205207][ T40] audit: type=1400 audit(1753999541.753:510): avc: denied { accept } for pid=7349 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 72.211185][ T40] audit: type=1400 audit(1753999541.763:511): avc: denied { mount } for pid=7351 comm="syz.1.466" name="/" dev="autofs" ino=14931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 72.415344][ T7363] __nla_validate_parse: 4 callbacks suppressed [ 72.415354][ T7363] netlink: 48 bytes leftover after parsing attributes in process `syz.0.469'. [ 73.137939][ T7370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.471'. [ 73.140771][ T7370] netlink: 244 bytes leftover after parsing attributes in process `syz.3.471'. [ 73.714643][ T61] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 73.865925][ T61] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 73.868735][ T61] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 73.872008][ T61] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 73.874962][ T61] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 73.878369][ T61] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 73.884973][ T61] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 73.888445][ T61] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 73.891792][ T61] usb 7-1: Product: syz [ 73.893575][ T61] usb 7-1: Manufacturer: syz [ 73.900685][ T61] cdc_wdm 7-1:1.0: skipping garbage [ 73.902398][ T61] cdc_wdm 7-1:1.0: skipping garbage [ 73.906723][ T61] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 73.908651][ T61] cdc_wdm 7-1:1.0: Unknown control protocol [ 74.206453][ T7396] hfs: unable to load iocharset "io#harset" [ 74.627932][ T9] usb 7-1: USB disconnect, device number 5 [ 75.024370][ T7421] netlink: 20 bytes leftover after parsing attributes in process `syz.1.492'. [ 75.029860][ T7421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 75.235968][ T7432] sch_fq: defrate 0 ignored. [ 75.261958][ T7438] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 75.406986][ T7448] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 75.432836][ T7448] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2856151591 (22849212728 ns) > initial count (5743301600 ns). Using initial count to start timer. [ 75.440487][ T7448] kvm: Disabled LAPIC found during irq injection [ 75.549952][ T7455] veth0_vlan: left promiscuous mode [ 75.551801][ T7455] vlan0: entered promiscuous mode [ 75.553496][ T7455] veth0_vlan: entered promiscuous mode [ 75.730947][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.507'. [ 75.734162][ T7463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.507'. [ 75.808759][ T7470] loop6: detected capacity change from 0 to 524287999 [ 75.812858][ T7154] Buffer I/O error on dev loop6, logical block 0, async page read [ 75.815739][ T7154] Buffer I/O error on dev loop6, logical block 0, async page read [ 75.818290][ T7154] Buffer I/O error on dev loop6, logical block 0, async page read [ 75.820818][ T7154] Buffer I/O error on dev loop6, logical block 0, async page read [ 75.823280][ T7154] Buffer I/O error on dev loop6, logical block 0, async page read [ 75.825999][ T7154] Buffer I/O error on dev loop6, logical block 0, async page read [ 75.828550][ T7154] Buffer I/O error on dev loop6, logical block 0, async page read [ 75.831070][ T7154] Buffer I/O error on dev loop6, logical block 0, async page read [ 75.833677][ T7154] ldm_validate_partition_table(): Disk read failed. [ 75.836898][ T7154] Buffer I/O error on dev loop6, logical block 0, async page read [ 75.839590][ T7154] Buffer I/O error on dev loop6, logical block 0, async page read [ 75.842175][ T7154] Dev loop6: unable to read RDB block 0 [ 75.844222][ T7154] loop6: unable to read partition table [ 75.849154][ T7470] ldm_validate_partition_table(): Disk read failed. [ 75.851970][ T7470] Dev loop6: unable to read RDB block 0 [ 75.854387][ T7470] loop6: unable to read partition table [ 75.857033][ T7470] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 75.900997][ T7476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.510'. [ 75.903783][ T7476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.907359][ T7476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.173361][ T7480] netlink: 'syz.3.512': attribute type 39 has an invalid length. [ 76.294699][ T34] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 76.373112][ T7485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.455002][ T34] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 76.457587][ T34] usb 5-1: can't read configurations, error -61 [ 76.470801][ T7491] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 76.540688][ T7496] fuse: Unknown parameter '' [ 76.584631][ T34] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 76.636607][ T7495] mmap: syz.3.518 (7495): VmData 25841664 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 76.725693][ T7506] tipc: Enabling of bearer rejected, failed to enable media [ 76.738768][ T34] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 76.741647][ T34] usb 5-1: can't read configurations, error -61 [ 76.743788][ T34] usb usb5-port1: attempt power cycle [ 76.766006][ T7511] input: syz0 as /devices/virtual/input/input9 [ 76.793299][ T7509] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 77.016697][ T7527] netlink: 24 bytes leftover after parsing attributes in process `syz.1.531'. [ 77.084575][ T34] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 77.097473][ T7535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.106768][ T34] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 77.109215][ T34] usb 5-1: can't read configurations, error -61 [ 77.234602][ T34] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 77.256750][ T34] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 77.259321][ T34] usb 5-1: can't read configurations, error -61 [ 77.261545][ T34] usb usb5-port1: unable to enumerate USB device [ 77.599705][ T40] kauditd_printk_skb: 74 callbacks suppressed [ 77.599718][ T40] audit: type=1400 audit(1753999547.183:586): avc: denied { read } for pid=7539 comm="syz.3.536" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 77.608735][ T40] audit: type=1400 audit(1753999547.183:587): avc: denied { open } for pid=7539 comm="syz.3.536" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 77.651328][ T40] audit: type=1400 audit(1753999547.233:588): avc: denied { map } for pid=7539 comm="syz.3.536" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.930467][ T40] audit: type=1400 audit(1753999547.513:589): avc: denied { execute } for pid=7560 comm="syz.2.545" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 78.037944][ T40] audit: type=1400 audit(1753999547.623:590): avc: denied { execute } for pid=7571 comm="syz.1.548" path="/dev/nullb0" dev="tmpfs" ino=408 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 78.049381][ T40] audit: type=1800 audit(1753999547.623:591): pid=7572 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.548" name="nullb0" dev="tmpfs" ino=408 res=0 errno=0 [ 78.178054][ T40] audit: type=1400 audit(1753999547.763:592): avc: denied { name_bind } for pid=7581 comm="syz.2.551" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 78.316103][ T7589] Set syz1 is full, maxelem 65536 reached [ 78.318186][ T7589] netlink: 32 bytes leftover after parsing attributes in process `syz.1.554'. [ 78.329276][ T7589] bond2: entered promiscuous mode [ 78.331131][ T7589] 8021q: adding VLAN 0 to HW filter on device bond2 [ 79.141228][ T40] audit: type=1400 audit(1753999548.723:593): avc: denied { create } for pid=7599 comm="syz.0.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 79.210531][ T40] audit: type=1400 audit(1753999548.793:594): avc: denied { write } for pid=7608 comm="syz.0.562" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 79.247194][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.564'. [ 79.249000][ T7616] netlink: 'syz.1.565': attribute type 5 has an invalid length. [ 79.250121][ T7615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.564'. [ 79.252553][ T7616] netlink: 'syz.1.565': attribute type 7 has an invalid length. [ 79.261266][ T46] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.261312][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.564'. [ 79.264107][ T46] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.267279][ T7615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.564'. [ 79.273916][ T7616] : entered promiscuous mode [ 79.275921][ T46] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.278789][ T46] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.306516][ T7621] sctp: [Deprecated]: syz.0.567 (pid 7621) Use of int in max_burst socket option. [ 79.306516][ T7621] Use struct sctp_assoc_value instead [ 79.313755][ T40] audit: type=1326 audit(1753999548.893:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7619 comm="syz.0.567" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f289a98eb69 code=0x0 [ 79.343688][ T7624] fuse: Unknown parameter '$-ƒÞOîÌn«çTîÅŒ²í⿉' [ 79.429165][ T7631] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 79.439346][ T7631] syz_tun: refused to change device tx_queue_len [ 79.445647][ T7631] netlink: 'syz.2.572': attribute type 1 has an invalid length. [ 79.464648][ T63] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 79.469037][ T63] Bluetooth: hci3: Injecting HCI hardware error event [ 79.472497][ T63] Bluetooth: hci3: hardware error 0x00 [ 79.607263][ T7638] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 79.882756][ T5948] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 80.394702][ T7674] netlink: 'syz.0.588': attribute type 1 has an invalid length. [ 80.418531][ T7674] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 80.442392][ T7674] veth3: entered promiscuous mode [ 80.447559][ T7674] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 81.316346][ T53] cfg80211: failed to load regulatory.db [ 81.409584][ T7683] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 81.544955][ T63] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 81.568224][ T7689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.925328][ T7702] netlink: 20 bytes leftover after parsing attributes in process `syz.1.598'. [ 82.056358][ T7705] netlink: 'syz.1.599': attribute type 1 has an invalid length. [ 82.157091][ T7709] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 82.848534][ T7715] vxcan0: tx drop: invalid da for name 0xfffffffffffffff5 [ 83.037194][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 83.037204][ T40] audit: type=1400 audit(1753999552.623:622): avc: denied { search } for pid=5656 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.045824][ T40] audit: type=1400 audit(1753999552.623:623): avc: denied { search } for pid=5656 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.052549][ T40] audit: type=1400 audit(1753999552.623:624): avc: denied { search } for pid=5656 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.059451][ T40] audit: type=1400 audit(1753999552.623:625): avc: denied { read } for pid=5656 comm="dhcpcd" name="n106" dev="tmpfs" ino=3579 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.067576][ T40] audit: type=1400 audit(1753999552.623:626): avc: denied { open } for pid=5656 comm="dhcpcd" path="/run/udev/data/n106" dev="tmpfs" ino=3579 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.075353][ T40] audit: type=1400 audit(1753999552.623:627): avc: denied { getattr } for pid=5656 comm="dhcpcd" path="/run/udev/data/n106" dev="tmpfs" ino=3579 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.082492][ T40] audit: type=1400 audit(1753999552.643:628): avc: denied { bind } for pid=7717 comm="syz.0.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.097197][ T40] audit: type=1400 audit(1753999552.683:629): avc: denied { write } for pid=7717 comm="syz.0.604" path="socket:[17044]" dev="sockfs" ino=17044 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.104401][ T40] audit: type=1400 audit(1753999552.683:630): avc: denied { ioctl } for pid=7717 comm="syz.0.604" path="socket:[17044]" dev="sockfs" ino=17044 ioctlcmd=0x1265 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.112220][ T40] audit: type=1400 audit(1753999552.683:631): avc: denied { read } for pid=7717 comm="syz.0.604" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 83.415834][ T7741] fuse: Unknown parameter 'rhotmodº' [ 84.037489][ T7758] netlink: 32 bytes leftover after parsing attributes in process `syz.0.622'. [ 84.523048][ T7774] netlink: 700 bytes leftover after parsing attributes in process `syz.1.627'. [ 85.456285][ T7808] 9pnet_fd: Insufficient options for proto=fd [ 86.188464][ T7834] tipc: Enabling of bearer rejected, failed to enable media [ 86.335172][ T7845] input: syz1 as /devices/virtual/input/input10 [ 86.393827][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.656'. [ 86.394326][ T7853] netlink: 112 bytes leftover after parsing attributes in process `syz.1.656'. [ 86.420214][ T7857] netlink: 'syz.1.657': attribute type 1 has an invalid length. [ 86.777049][ T7878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7878 comm=syz.1.664 [ 87.493074][ T7886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.667'. [ 87.714390][ T7905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.674'. [ 87.718779][ T7905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.674'. [ 87.809441][ T7908] netlink: 28 bytes leftover after parsing attributes in process `syz.3.675'. [ 87.859140][ T7910] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 87.861757][ T7910] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 87.866344][ T7910] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 87.882014][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.678'. [ 87.973323][ T7922] netlink: 168 bytes leftover after parsing attributes in process `syz.3.680'. [ 88.231458][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 88.231468][ T40] audit: type=1400 audit(1753999557.813:673): avc: denied { create } for pid=7935 comm="syz.1.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 88.241834][ T40] audit: type=1400 audit(1753999557.823:674): avc: denied { write } for pid=7935 comm="syz.1.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 88.583894][ T40] audit: type=1400 audit(1753999558.163:675): avc: denied { write } for pid=7944 comm="syz.0.689" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 88.590338][ T7945] dummy0: entered promiscuous mode [ 88.597231][ T7945] bond0: entered promiscuous mode [ 88.598842][ T7945] bond_slave_0: entered promiscuous mode [ 88.600774][ T7945] bond_slave_1: entered promiscuous mode [ 88.603359][ T7945] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 88.607313][ T7945] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 88.700563][ T40] audit: type=1400 audit(1753999558.283:676): avc: denied { read append } for pid=7948 comm="syz.0.690" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 88.707745][ T40] audit: type=1400 audit(1753999558.283:677): avc: denied { open } for pid=7948 comm="syz.0.690" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 88.799662][ T40] audit: type=1400 audit(1753999558.383:678): avc: denied { remount } for pid=7950 comm="syz.0.691" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 89.105923][ T40] audit: type=1400 audit(1753999558.693:679): avc: denied { setopt } for pid=7968 comm="syz.1.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.161358][ T7974] __nla_validate_parse: 3 callbacks suppressed [ 89.161370][ T7974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'. [ 89.166809][ T7974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.699'. [ 89.278942][ T40] audit: type=1400 audit(1753999558.863:680): avc: denied { mount } for pid=7980 comm="syz.1.702" name="/" dev="hugetlbfs" ino=18336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 89.582958][ T40] audit: type=1400 audit(1753999559.163:681): avc: denied { read write } for pid=7982 comm="syz.0.703" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 89.590218][ T40] audit: type=1400 audit(1753999559.163:682): avc: denied { open } for pid=7982 comm="syz.0.703" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 89.590450][ T53] hid-generic 0792:10000:0097.0002: item fetching failed at offset 5/6 [ 89.601163][ T53] hid-generic 0792:10000:0097.0002: probe with driver hid-generic failed with error -22 [ 90.877088][ T8017] fuse: Unknown parameter 'rouvmode' [ 92.088809][ T8042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 92.122117][ T8044] overlayfs: failed to clone upperpath [ 92.126642][ T8044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.722'. [ 92.597705][ T8055] netlink: 24 bytes leftover after parsing attributes in process `syz.1.727'. [ 95.543929][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 95.543943][ T40] audit: type=1400 audit(1753999565.123:689): avc: denied { execute } for pid=8105 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 95.555642][ T40] audit: type=1400 audit(1753999565.133:690): avc: denied { execute_no_trans } for pid=8105 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 95.612737][ T8107] fuse: Unknown parameter 'rootmo¹de' [ 95.617999][ T40] audit: type=1400 audit(1753999565.203:691): avc: denied { read } for pid=8106 comm="syz.1.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.674313][ T5948] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.678415][ T5948] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.682343][ T5948] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.686907][ T5948] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.689583][ T5948] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.696811][ T40] audit: type=1400 audit(1753999565.283:692): avc: denied { mounton } for pid=8112 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 95.778127][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'. [ 95.815877][ T1142] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.828526][ T8112] chnl_net:caif_netlink_parms(): no params data found [ 95.901873][ T8112] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.904149][ T8112] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.907466][ T8112] bridge_slave_0: entered allmulticast mode [ 95.910711][ T8112] bridge_slave_0: entered promiscuous mode [ 95.923108][ T1142] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.929741][ T8112] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.932218][ T8112] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.935854][ T8112] bridge_slave_1: entered allmulticast mode [ 95.939009][ T8112] bridge_slave_1: entered promiscuous mode [ 95.974286][ T8112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.979532][ T8112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.030987][ T1142] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.039617][ T8112] team0: Port device team_slave_0 added [ 96.041658][ T8132] netlink: 'syz.1.750': attribute type 1 has an invalid length. [ 96.044976][ T8132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.750'. [ 96.048284][ T8132] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.051767][ T8132] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.054705][ T8132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.059134][ T8112] team0: Port device team_slave_1 added [ 96.097044][ T40] audit: type=1400 audit(1753999565.683:693): avc: denied { execute_no_trans } for pid=8134 comm="syz.1.751" path="/323/file2" dev="tmpfs" ino=1776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.122893][ T1142] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.131982][ T8112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.133300][ T8137] netlink: 'syz.1.752': attribute type 1 has an invalid length. [ 96.135935][ T8112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.146829][ T8112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.151140][ T8112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.153396][ T8112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.161960][ T8112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.202491][ T8112] hsr_slave_0: entered promiscuous mode [ 96.206865][ T8112] hsr_slave_1: entered promiscuous mode [ 96.209915][ T8112] debugfs: 'hsr0' already exists in 'hsr' [ 96.212308][ T8112] Cannot create hsr debugfs directory [ 96.306307][ T1142] bridge_slave_1: left allmulticast mode [ 96.308302][ T1142] bridge_slave_1: left promiscuous mode [ 96.310663][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.315924][ T1142] bridge_slave_0: left allmulticast mode [ 96.318298][ T1142] bridge_slave_0: left promiscuous mode [ 96.320730][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.596609][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.602943][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.608593][ T1142] bond0 (unregistering): Released all slaves [ 96.729240][ T8112] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.733790][ T8112] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.739893][ T8112] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.746834][ T40] audit: type=1400 audit(1753999566.333:694): avc: denied { read open } for pid=8167 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.757547][ T40] audit: type=1400 audit(1753999566.333:695): avc: denied { getattr } for pid=8167 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.766158][ T40] audit: type=1400 audit(1753999566.333:696): avc: denied { add_name } for pid=8164 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.773149][ T40] audit: type=1400 audit(1753999566.333:697): avc: denied { create } for pid=8164 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.780425][ T40] audit: type=1400 audit(1753999566.333:698): avc: denied { write } for pid=8164 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=3806 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.797619][ T8112] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.856301][ T8112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.866990][ T8181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46823 sclass=netlink_route_socket pid=8181 comm=syz.3.761 [ 96.872728][ T8112] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.878872][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.881125][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.886748][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.889059][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.943863][ T8184] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 97.011613][ T1142] hsr_slave_0: left promiscuous mode [ 97.013701][ T1142] hsr_slave_1: left promiscuous mode [ 97.016517][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.018846][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.021522][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.023824][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.040667][ T1142] veth1_macvtap: left promiscuous mode [ 97.042606][ T1142] veth0_macvtap: left promiscuous mode [ 97.044396][ T1142] veth1_vlan: left promiscuous mode [ 97.202630][ T8198] overlayfs: failed to clone lowerpath [ 97.704878][ T63] Bluetooth: hci4: command tx timeout [ 97.813894][ T8203] FAULT_INJECTION: forcing a failure. [ 97.813894][ T8203] name failslab, interval 1, probability 0, space 0, times 0 [ 97.817802][ T8203] CPU: 3 UID: 0 PID: 8203 Comm: syz.3.765 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 97.817818][ T8203] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.817824][ T8203] Call Trace: [ 97.817835][ T8203] [ 97.817839][ T8203] dump_stack_lvl+0x16c/0x1f0 [ 97.817872][ T8203] should_fail_ex+0x512/0x640 [ 97.817891][ T8203] ? fs_reclaim_acquire+0xae/0x150 [ 97.817908][ T8203] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 97.817920][ T8203] should_failslab+0xc2/0x120 [ 97.817933][ T8203] __kmalloc_noprof+0xd2/0x510 [ 97.817949][ T8203] tomoyo_realpath_from_path+0xc2/0x6e0 [ 97.817963][ T8203] ? tomoyo_profile+0x47/0x60 [ 97.817978][ T8203] tomoyo_path_number_perm+0x245/0x580 [ 97.817994][ T8203] ? tomoyo_path_number_perm+0x237/0x580 [ 97.818013][ T8203] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 97.818031][ T8203] ? find_held_lock+0x2b/0x80 [ 97.818057][ T8203] ? find_held_lock+0x2b/0x80 [ 97.818069][ T8203] ? hook_file_ioctl_common+0x145/0x410 [ 97.818087][ T8203] ? __fget_files+0x20e/0x3c0 [ 97.818100][ T8203] security_file_ioctl+0x9b/0x240 [ 97.818113][ T8203] __x64_sys_ioctl+0xb7/0x210 [ 97.818130][ T8203] do_syscall_64+0xcd/0x4c0 [ 97.818141][ T8203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.818153][ T8203] RIP: 0033:0x7f841bd8eb69 [ 97.818162][ T8203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.818173][ T8203] RSP: 002b:00007f841cb3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.818183][ T8203] RAX: ffffffffffffffda RBX: 00007f841bfb5fa0 RCX: 00007f841bd8eb69 [ 97.818190][ T8203] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 97.818196][ T8203] RBP: 00007f841cb3f090 R08: 0000000000000000 R09: 0000000000000000 [ 97.818203][ T8203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.818209][ T8203] R13: 0000000000000000 R14: 00007f841bfb5fa0 R15: 00007ffd246470c8 [ 97.818223][ T8203] [ 97.818228][ T8203] ERROR: Out of memory at tomoyo_realpath_from_path. [ 98.039332][ T8213] fuse: Bad value for 'group_id' [ 98.040944][ T8213] fuse: Bad value for 'group_id' [ 98.049583][ T8112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.084329][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.769'. [ 98.116125][ T8223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.770'. [ 98.223724][ T8112] veth0_vlan: entered promiscuous mode [ 98.232003][ T8112] veth1_vlan: entered promiscuous mode [ 98.258005][ T8112] veth0_macvtap: entered promiscuous mode [ 98.263735][ T8112] veth1_macvtap: entered promiscuous mode [ 98.272794][ T8112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.280690][ T8112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.287388][ T46] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.290125][ T46] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.293096][ T46] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.297580][ T46] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.351105][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.354464][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.370034][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.372572][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.432525][ T8249] netlink: 'syz.4.773': attribute type 32 has an invalid length. [ 98.503617][ T8262] netlink: 'syz.0.775': attribute type 21 has an invalid length. [ 98.989085][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.784'. [ 98.992633][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.784'. [ 98.995971][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.784'. [ 99.011142][ T8311] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 99.031032][ T8316] netlink: 16 bytes leftover after parsing attributes in process `syz.1.785'. [ 99.032713][ T8311] comedi comedi0: Minor -2147450880 is invalid! [ 99.033798][ T8316] netlink: 92 bytes leftover after parsing attributes in process `syz.1.785'. [ 99.094249][ T8322] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=288 sclass=netlink_route_socket pid=8322 comm=syz.1.785 [ 99.099047][ T8322] veth1_macvtap: left promiscuous mode [ 99.100800][ T8322] macsec0: entered promiscuous mode [ 99.102489][ T8322] macsec0: entered allmulticast mode [ 99.110536][ T8322] veth1_macvtap: entered promiscuous mode [ 99.112392][ T8322] veth1_macvtap: entered allmulticast mode [ 99.114402][ T8322] macsec0: left promiscuous mode [ 99.116515][ T8322] macsec0: left allmulticast mode [ 99.118141][ T8322] veth1_macvtap: left allmulticast mode [ 99.211362][ T8335] delete_channel: no stack [ 99.531116][ T8356] No source specified [ 99.651241][ T8365] comedi comedi0: dt2801: I/O port conflict (0x3,2) [ 99.784723][ T63] Bluetooth: hci4: command tx timeout [ 99.832052][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.804'. [ 99.867347][ T8316] 9pnet_fd: p9_fd_create_tcp (8316): problem connecting socket to 127.0.0.1 [ 99.990378][ T8384] 9pnet_fd: Insufficient options for proto=fd [ 100.018045][ T8391] 9pnet_fd: Insufficient options for proto=fd [ 100.046824][ T8393] cgroup: Unknown subsys name 'subj_user' [ 100.048945][ T8393] cgroup: Unknown subsys name 'subj_user' [ 100.853015][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 100.853027][ T40] audit: type=1400 audit(1753999570.438:720): avc: denied { getopt } for pid=8415 comm="syz.4.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 100.864024][ T40] audit: type=1400 audit(1753999570.448:721): avc: denied { ioctl } for pid=8415 comm="syz.4.818" path="socket:[19314]" dev="sockfs" ino=19314 ioctlcmd=0x8981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 100.929440][ T8423] netlink: 'syz.1.820': attribute type 1 has an invalid length. [ 100.954966][ T8423] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 101.020180][ T40] audit: type=1400 audit(1753999570.608:722): avc: denied { sqpoll } for pid=8438 comm="syz.4.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 101.392261][ T8456] __nla_validate_parse: 1 callbacks suppressed [ 101.392271][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.832'. [ 101.396999][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.832'. [ 101.646376][ T8464] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=8464 comm=syz.0.835 [ 101.864631][ T63] Bluetooth: hci4: command tx timeout [ 102.022245][ T8481] netlink: 272 bytes leftover after parsing attributes in process `syz.1.841'. [ 102.044825][ T40] audit: type=1400 audit(1753999571.628:723): avc: denied { ioctl } for pid=8478 comm="syz.4.842" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 102.086534][ T3244] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 102.097102][ T8487] netlink: 'syz.4.845': attribute type 1 has an invalid length. [ 102.173988][ T8493] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 102.178426][ T8493] overlayfs: missing 'lowerdir' [ 102.214499][ T8495] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 102.256623][ T8505] netlink: 'syz.1.850': attribute type 3 has an invalid length. [ 102.259692][ T8505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=8505 comm=syz.1.850 [ 102.268725][ T3244] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 102.271779][ T3244] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.276391][ T3244] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 102.279299][ T3244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.329407][ T8511] geneve3: entered promiscuous mode [ 102.366027][ T8514] tipc: Failed to obtain node identity [ 102.367869][ T8514] tipc: Enabling of bearer rejected, failed to enable media [ 102.485873][ T3244] usb 5-1: usb_control_msg returned -32 [ 102.487720][ T3244] usbtmc 5-1:16.0: can't read capabilities [ 102.657256][ T40] audit: type=1400 audit(1753999572.248:724): avc: denied { ioctl } for pid=8518 comm="syz.1.854" path="socket:[20362]" dev="sockfs" ino=20362 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 102.725662][ T8525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.857'. [ 102.732223][ T8525] netlink: 'syz.1.857': attribute type 1 has an invalid length. [ 102.856260][ T40] audit: type=1400 audit(1753999572.448:725): avc: denied { mount } for pid=8469 comm="syz.0.838" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 102.859558][ T8530] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 102.876159][ T5981] usb 5-1: USB disconnect, device number 11 [ 102.878437][ T40] audit: type=1400 audit(1753999572.468:726): avc: denied { unmount } for pid=5950 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 103.237387][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.862'. [ 103.240204][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.862'. [ 103.807575][ T40] audit: type=1400 audit(1753999573.398:727): avc: denied { watch_mount } for pid=8554 comm="syz.1.866" path="/365" dev="tmpfs" ino=2004 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 103.835033][ T8559] openvswitch: netlink: VXLAN extension 149 out of range max 1 [ 103.898822][ T8562] netlink: 76 bytes leftover after parsing attributes in process `syz.0.869'. [ 103.925100][ T8567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.871'. [ 103.945364][ T8567] netlink: 16 bytes leftover after parsing attributes in process `syz.0.871'. [ 103.955603][ T63] Bluetooth: hci4: command tx timeout [ 103.990180][ T40] audit: type=1400 audit(1753999573.578:728): avc: denied { getopt } for pid=8566 comm="syz.0.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.020379][ T8576] netlink: 28 bytes leftover after parsing attributes in process `syz.0.874'. [ 104.062260][ T40] audit: type=1400 audit(1753999573.648:729): avc: denied { write } for pid=8581 comm="syz.1.875" lport=58713 faddr=::ffff:100.1.1.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 104.101774][ T8584] SELinux: Context system_u:object_r:devlog_t:s0 is not valid (left unmapped). [ 104.159360][ T8589] netlink: 'syz.0.874': attribute type 8 has an invalid length. [ 104.505762][ T8632] netlink: 'syz.0.894': attribute type 8 has an invalid length. [ 104.768628][ T8644] random: crng reseeded on system resumption [ 105.911054][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 105.911065][ T40] audit: type=1400 audit(1753999575.498:759): avc: denied { ioctl } for pid=8692 comm="syz.3.915" path="net:[4026532875]" dev="nsfs" ino=4026532875 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 105.959730][ T40] audit: type=1400 audit(1753999575.548:760): avc: denied { map } for pid=8701 comm="syz.0.919" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 106.151483][ T8728] netlink: 'syz.0.928': attribute type 1 has an invalid length. [ 106.154403][ T8728] nbd: error processing sock list [ 106.251367][ T8733] FAULT_INJECTION: forcing a failure. [ 106.251367][ T8733] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 106.256330][ T8733] CPU: 1 UID: 0 PID: 8733 Comm: syz.0.929 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 106.256345][ T8733] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.256352][ T8733] Call Trace: [ 106.256356][ T8733] [ 106.256360][ T8733] dump_stack_lvl+0x16c/0x1f0 [ 106.256395][ T8733] should_fail_ex+0x512/0x640 [ 106.256418][ T8733] _copy_from_user+0x2e/0xd0 [ 106.256436][ T8733] kvm_arch_vcpu_ioctl+0x5a8/0x52d0 [ 106.256465][ T8733] ? stack_trace_save+0x8e/0xc0 [ 106.256482][ T8733] ? stack_depot_save_flags+0x28/0xa40 [ 106.256498][ T8733] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 106.256511][ T8733] ? __lock_acquire+0xb8a/0x1c90 [ 106.256529][ T8733] ? kasan_save_stack+0x42/0x60 [ 106.256540][ T8733] ? kasan_save_stack+0x33/0x60 [ 106.256550][ T8733] ? kasan_save_track+0x14/0x30 [ 106.256559][ T8733] ? kasan_save_free_info+0x3b/0x60 [ 106.256575][ T8733] ? __kasan_slab_free+0x51/0x70 [ 106.256586][ T8733] ? kfree+0x2b4/0x4d0 [ 106.256600][ T8733] ? tomoyo_path_number_perm+0x470/0x580 [ 106.256617][ T8733] ? security_file_ioctl+0x9b/0x240 [ 106.256628][ T8733] ? __x64_sys_ioctl+0xb7/0x210 [ 106.256643][ T8733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.256656][ T8733] ? __lock_acquire+0xb8a/0x1c90 [ 106.256677][ T8733] ? __mutex_trylock_common+0xe9/0x250 [ 106.256695][ T8733] ? __pfx___mutex_trylock_common+0x10/0x10 [ 106.256713][ T8733] ? __pfx___might_resched+0x10/0x10 [ 106.256733][ T8733] ? kasan_quarantine_put+0x10a/0x240 [ 106.256744][ T8733] ? lockdep_hardirqs_on+0x7c/0x110 [ 106.256761][ T8733] ? __pfx___mutex_lock+0x10/0x10 [ 106.256777][ T8733] ? tomoyo_path_number_perm+0x18d/0x580 [ 106.256797][ T8733] ? kvm_vcpu_ioctl+0x1236/0x1690 [ 106.256810][ T8733] kvm_vcpu_ioctl+0x1236/0x1690 [ 106.256825][ T8733] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 106.256840][ T8733] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 106.256854][ T8733] ? do_vfs_ioctl+0x128/0x14f0 [ 106.256869][ T8733] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 106.256884][ T8733] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 106.256902][ T8733] ? hook_file_ioctl_common+0x145/0x410 [ 106.256921][ T8733] ? selinux_file_ioctl+0x180/0x270 [ 106.256932][ T8733] ? selinux_file_ioctl+0xb4/0x270 [ 106.256944][ T8733] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 106.256959][ T8733] __x64_sys_ioctl+0x18e/0x210 [ 106.256975][ T8733] do_syscall_64+0xcd/0x4c0 [ 106.256986][ T8733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.256997][ T8733] RIP: 0033:0x7f289a98eb69 [ 106.257006][ T8733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.257017][ T8733] RSP: 002b:00007f289b842038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.257027][ T8733] RAX: ffffffffffffffda RBX: 00007f289abb5fa0 RCX: 00007f289a98eb69 [ 106.257034][ T8733] RDX: 00002000000000c0 RSI: 000000004068aea3 RDI: 0000000000000005 [ 106.257041][ T8733] RBP: 00007f289b842090 R08: 0000000000000000 R09: 0000000000000000 [ 106.257047][ T8733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.257053][ T8733] R13: 0000000000000000 R14: 00007f289abb5fa0 R15: 00007ffc0137cd38 [ 106.257067][ T8733] [ 106.578906][ T8751] __nla_validate_parse: 5 callbacks suppressed [ 106.578919][ T8751] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.936'. [ 106.589751][ T8753] overlayfs: failed to clone upperpath [ 106.610336][ T8755] fuse: Unknown parameter 'fD' [ 106.848095][ T8764] binder: BINDER_SET_CONTEXT_MGR already set [ 106.848118][ T8764] binder: 8763:8764 ioctl 40046207 0 returned -16 [ 106.917317][ T8769] binder: 8763:8769 ioctl c0306201 2000000003c0 returned -14 [ 107.015947][ T8772] tipc: Started in network mode [ 107.017638][ T8772] tipc: Node identity ac1414aa, cluster identity 4711 [ 107.021682][ T8772] tipc: Enabled bearer , priority 10 [ 107.024249][ T8772] tipc: Enabled bearer , priority 0 [ 107.071974][ T8774] netlink: 'syz.4.944': attribute type 1 has an invalid length. [ 107.076880][ T8774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.944'. [ 107.127073][ T8776] 8021q: VLANs not supported on wg1 [ 107.187554][ T8779] veth1_macvtap: left promiscuous mode [ 107.187569][ T8779] macsec0: entered promiscuous mode [ 107.187577][ T8779] macsec0: entered allmulticast mode [ 107.190182][ T8779] veth1_macvtap: entered promiscuous mode [ 107.190194][ T8779] veth1_macvtap: entered allmulticast mode [ 107.190707][ T8779] macsec0: left promiscuous mode [ 107.190788][ T8779] macsec0: left allmulticast mode [ 107.190796][ T8779] veth1_macvtap: left allmulticast mode [ 107.200947][ T8783] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20004 [ 107.319019][ T8788] netlink: 20 bytes leftover after parsing attributes in process `syz.1.948'. [ 107.347028][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.949'. [ 107.371284][ T40] audit: type=1400 audit(1753999576.958:761): avc: denied { ioctl } for pid=8791 comm="syz.1.950" path="socket:[24889]" dev="sockfs" ino=24889 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.610830][ T8799] netlink: 'syz.1.953': attribute type 1 has an invalid length. [ 107.611212][ T8799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.953'. [ 107.671103][ T40] audit: type=1400 audit(1753999577.258:762): avc: denied { mounton } for pid=8804 comm="syz.3.955" path="/186/file1" dev="autofs" ino=24329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 107.753074][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.961'. [ 107.778288][ T8821] netlink: 'syz.1.962': attribute type 1 has an invalid length. [ 107.788113][ T8821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.962'. [ 107.797426][ T8821] macvlan2: entered promiscuous mode [ 107.799187][ T8821] macvlan2: entered allmulticast mode [ 107.801380][ T8821] bond5: entered promiscuous mode [ 107.803403][ T8821] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 107.807499][ T8821] bond5: left promiscuous mode [ 107.950006][ T8829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.963'. [ 108.080193][ T8840] gfs2: Unknown parameter 'syzkaller' [ 108.135519][ T1330] tipc: Node number set to 2886997162 [ 108.239670][ T8848] netlink: 'syz.1.973': attribute type 1 has an invalid length. [ 108.252586][ T8848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.973'. [ 108.259115][ T8848] macvlan2: entered promiscuous mode [ 108.260842][ T8848] macvlan2: entered allmulticast mode [ 108.263028][ T8848] bond6: entered promiscuous mode [ 108.264975][ T8848] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 108.269273][ T8848] bond6: left promiscuous mode [ 108.486118][ T8858] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 108.505403][ T40] audit: type=1400 audit(1753999578.098:763): avc: denied { unmount } for pid=5950 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 108.527465][ T40] audit: type=1400 audit(1753999578.118:764): avc: denied { read } for pid=8859 comm="syz.0.977" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 108.534340][ T40] audit: type=1400 audit(1753999578.118:765): avc: denied { open } for pid=8859 comm="syz.0.977" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 108.542503][ T40] audit: type=1400 audit(1753999578.118:766): avc: denied { ioctl } for pid=8859 comm="syz.0.977" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 108.550773][ T40] audit: type=1400 audit(1753999578.118:767): avc: denied { connect } for pid=8859 comm="syz.0.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 108.692567][ T8866] binder: 8865:8866 ioctl c0306201 200000000180 returned -22 [ 108.747171][ T8871] syzkaller0: entered promiscuous mode [ 108.748972][ T8871] syzkaller0: entered allmulticast mode [ 108.803786][ T8874] netlink: 'syz.4.982': attribute type 1 has an invalid length. [ 108.816767][ T8874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.982'. [ 108.822747][ T8874] macvlan2: entered promiscuous mode [ 108.824412][ T8874] macvlan2: entered allmulticast mode [ 108.826993][ T8874] bond3: entered promiscuous mode [ 108.828847][ T8874] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 108.836728][ T8879] dlm: no local IP address has been set [ 108.838927][ T8879] dlm: cannot start dlm midcomms -107 [ 108.839204][ T8874] bond3: left promiscuous mode [ 108.860143][ T8879] geneve2: entered promiscuous mode [ 108.862599][ T101] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.865372][ T101] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.872295][ T101] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.875960][ T101] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.309548][ T40] audit: type=1400 audit(1753999578.898:768): avc: denied { mounton } for pid=8917 comm="syz.4.994" path="/60/file0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 109.383723][ T8918] overlayfs: cannot append lower layer [ 109.413996][ T8929] netlink: 'syz.4.996': attribute type 1 has an invalid length. [ 109.443359][ T63] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 109.840206][ T8941] FAULT_INJECTION: forcing a failure. [ 109.840206][ T8941] name failslab, interval 1, probability 0, space 0, times 0 [ 109.844090][ T8941] CPU: 1 UID: 0 PID: 8941 Comm: syz.0.1000 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 109.844109][ T8941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.844115][ T8941] Call Trace: [ 109.844119][ T8941] [ 109.844123][ T8941] dump_stack_lvl+0x16c/0x1f0 [ 109.844159][ T8941] should_fail_ex+0x512/0x640 [ 109.844179][ T8941] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 109.844194][ T8941] should_failslab+0xc2/0x120 [ 109.844207][ T8941] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 109.844219][ T8941] ? __alloc_skb+0x2b2/0x380 [ 109.844237][ T8941] __alloc_skb+0x2b2/0x380 [ 109.844252][ T8941] ? __pfx___alloc_skb+0x10/0x10 [ 109.844270][ T8941] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 109.844291][ T8941] netlink_alloc_large_skb+0x69/0x130 [ 109.844303][ T8941] netlink_sendmsg+0x6a1/0xdd0 [ 109.844315][ T8941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.844331][ T8941] ____sys_sendmsg+0xa98/0xc70 [ 109.844345][ T8941] ? copy_msghdr_from_user+0x10a/0x160 [ 109.844361][ T8941] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.844380][ T8941] ___sys_sendmsg+0x134/0x1d0 [ 109.844398][ T8941] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.844413][ T8941] ? __lock_acquire+0x622/0x1c90 [ 109.844442][ T8941] ? __mutex_unlock_slowpath+0xa0/0x800 [ 109.844457][ T8941] __sys_sendmsg+0x16d/0x220 [ 109.844474][ T8941] ? __pfx___sys_sendmsg+0x10/0x10 [ 109.844499][ T8941] do_syscall_64+0xcd/0x4c0 [ 109.844524][ T8941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.844536][ T8941] RIP: 0033:0x7f289a98eb69 [ 109.844544][ T8941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.844555][ T8941] RSP: 002b:00007f289b842038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.844567][ T8941] RAX: ffffffffffffffda RBX: 00007f289abb5fa0 RCX: 00007f289a98eb69 [ 109.844574][ T8941] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 109.844580][ T8941] RBP: 00007f289b842090 R08: 0000000000000000 R09: 0000000000000000 [ 109.844586][ T8941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.844593][ T8941] R13: 0000000000000000 R14: 00007f289abb5fa0 R15: 00007ffc0137cd38 [ 109.844607][ T8941] [ 110.254865][ T8957] overlay: ./file0 is not a directory [ 110.302750][ T8960] netlink: 'syz.4.1005': attribute type 1 has an invalid length. [ 110.336456][ T8964] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 110.543680][ T8981] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 110.678703][ T8992] netlink: 'syz.4.1016': attribute type 1 has an invalid length. [ 110.925980][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 110.925990][ T40] audit: type=1400 audit(1753999580.518:773): avc: denied { bind } for pid=9016 comm="syz.0.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.063823][ T9025] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 111.095437][ T9027] netlink: 'syz.0.1025': attribute type 2 has an invalid length. [ 111.305410][ T9035] netlink: 'syz.3.1028': attribute type 1 has an invalid length. [ 111.320569][ T9035] macvlan2: entered promiscuous mode [ 111.322265][ T9035] macvlan2: entered allmulticast mode [ 111.323346][ T40] audit: type=1400 audit(1753999580.908:774): avc: denied { ioctl } for pid=9031 comm="syz.0.1027" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x941c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 111.324357][ T9035] bond2: entered promiscuous mode [ 111.333503][ T9035] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 111.338323][ T9035] bond2: left promiscuous mode [ 111.749576][ T9053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.832166][ T9063] netlink: 'syz.1.1037': attribute type 1 has an invalid length. [ 111.844350][ T9063] __nla_validate_parse: 6 callbacks suppressed [ 111.844360][ T9063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1037'. [ 111.852360][ T9063] macvlan2: entered promiscuous mode [ 111.854073][ T9063] macvlan2: entered allmulticast mode [ 111.857383][ T9063] bond7: entered promiscuous mode [ 111.859309][ T9063] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 111.868660][ T9063] bond7: left promiscuous mode [ 112.083661][ T9082] overlayfs: failed to resolve './file0': -2 [ 113.009686][ T9095] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 113.036733][ T40] audit: type=1400 audit(1753999582.628:775): avc: denied { map } for pid=9096 comm="syz.0.1044" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 113.045117][ T40] audit: type=1400 audit(1753999582.628:776): avc: denied { execute } for pid=9096 comm="syz.0.1044" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 113.072397][ T9102] netlink: 'syz.1.1046': attribute type 1 has an invalid length. [ 113.084784][ T9102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1046'. [ 113.090746][ T9102] macvlan2: entered promiscuous mode [ 113.092538][ T9102] macvlan2: entered allmulticast mode [ 113.094758][ T9102] bond8: entered promiscuous mode [ 113.097400][ T9102] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 113.102282][ T9102] bond8: left promiscuous mode [ 113.737472][ T9114] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 113.742674][ T9115] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 113.811962][ T9119] @: renamed from vlan0 (while UP) [ 113.814627][ T34] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 113.966506][ T34] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 113.969810][ T34] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 113.972874][ T34] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.978653][ T34] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 113.981673][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.984133][ T34] usb 9-1: Product: syz [ 113.985634][ T34] usb 9-1: Manufacturer: syz [ 113.987114][ T34] usb 9-1: SerialNumber: syz [ 113.991761][ T34] hub 9-1:1.0: bad descriptor, ignoring hub [ 113.993631][ T34] hub 9-1:1.0: probe with driver hub failed with error -5 [ 114.177996][ T9130] netlink: 'syz.0.1056': attribute type 1 has an invalid length. [ 114.191214][ T9130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1056'. [ 114.195887][ T34] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 114.197156][ T9130] macvlan2: entered promiscuous mode [ 114.200879][ T9130] macvlan2: entered allmulticast mode [ 114.203062][ T9130] bond2: entered promiscuous mode [ 114.204998][ T9130] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 114.209083][ T9130] bond2: left promiscuous mode [ 114.395659][ T40] audit: type=1400 audit(1753999583.988:777): avc: denied { read write } for pid=9111 comm="syz.4.1050" name="lp0" dev="devtmpfs" ino=3034 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 114.402877][ T40] audit: type=1400 audit(1753999583.988:778): avc: denied { open } for pid=9111 comm="syz.4.1050" path="/dev/usb/lp0" dev="devtmpfs" ino=3034 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 114.539779][ T9142] netlink: 'syz.3.1059': attribute type 29 has an invalid length. [ 114.544000][ T9142] netlink: 'syz.3.1059': attribute type 1 has an invalid length. [ 114.547142][ T9142] netlink: 'syz.3.1059': attribute type 101 has an invalid length. [ 114.549669][ T9142] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1059'. [ 114.792225][ T9155] netlink: 'syz.1.1065': attribute type 1 has an invalid length. [ 114.805465][ T9155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1065'. [ 114.811308][ T9155] macvlan2: entered promiscuous mode [ 114.813001][ T9155] macvlan2: entered allmulticast mode [ 114.815600][ T9155] bond9: entered promiscuous mode [ 114.817510][ T9155] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 114.821264][ T9155] bond9: left promiscuous mode [ 115.004843][ T9167] macsec0: entered promiscuous mode [ 115.008049][ T9167] macsec0: entered allmulticast mode [ 115.009766][ T9167] veth1_macvtap: entered allmulticast mode [ 115.152806][ T9181] netlink: 'syz.1.1074': attribute type 1 has an invalid length. [ 115.166186][ T9181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1074'. [ 115.173450][ T9181] macvlan2: entered promiscuous mode [ 115.175281][ T9181] macvlan2: entered allmulticast mode [ 115.177785][ T9181] bond10: entered promiscuous mode [ 115.180315][ T9181] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 115.184315][ T9181] bond10: left promiscuous mode [ 115.263469][ T40] audit: type=1400 audit(1753999584.848:779): avc: denied { unlink } for pid=9185 comm="syz.0.1075" name="#d" dev="tmpfs" ino=1191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 115.270686][ T40] audit: type=1400 audit(1753999584.848:780): avc: denied { mount } for pid=9185 comm="syz.0.1075" name="/" dev="overlay" ino=1187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 115.275962][ T24] usb 9-1: USB disconnect, device number 2 [ 115.281111][ T24] usblp0: removed [ 115.342541][ T9191] overlayfs: failed to resolve './file0/file0': -2 [ 115.420937][ T40] audit: type=1400 audit(1753999585.008:781): avc: denied { create } for pid=9194 comm="syz.0.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 115.428491][ T40] audit: type=1400 audit(1753999585.018:782): avc: denied { sys_admin } for pid=9194 comm="syz.0.1078" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 115.471184][ T9202] cgroup: name respecified [ 115.500039][ T9202] kvm: kvm [9201]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0x405 [ 115.518454][ T9202] kvm: kvm [9201]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x186) = 0x2c05 [ 115.521447][ T9202] kvm: kvm [9201]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x187) = 0x6505 [ 115.536099][ T9202] kvm_intel: kvm [9201]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x1d9) = 0xa705 [ 115.803269][ T9215] netlink: 'syz.4.1086': attribute type 1 has an invalid length. [ 115.816222][ T9215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1086'. [ 115.822115][ T9215] macvlan2: entered promiscuous mode [ 115.823824][ T9215] macvlan2: entered allmulticast mode [ 115.826067][ T9215] bond4: entered promiscuous mode [ 115.828801][ T9215] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 115.832621][ T9215] bond4: left promiscuous mode [ 115.859578][ T9218] dlm: no locking on control device [ 115.861758][ T9219] dlm: no locking on control device [ 116.000826][ T9231] FAULT_INJECTION: forcing a failure. [ 116.000826][ T9231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.006508][ T9231] CPU: 1 UID: 0 PID: 9231 Comm: syz.4.1092 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 116.006524][ T9231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 116.006531][ T9231] Call Trace: [ 116.006536][ T9231] [ 116.006540][ T9231] dump_stack_lvl+0x16c/0x1f0 [ 116.006576][ T9231] should_fail_ex+0x512/0x640 [ 116.006598][ T9231] _copy_from_user+0x2e/0xd0 [ 116.006616][ T9231] binder_ioctl+0x57a/0x7380 [ 116.006634][ T9231] ? tomoyo_path_number_perm+0x18d/0x580 [ 116.006656][ T9231] ? __pfx_binder_ioctl+0x10/0x10 [ 116.006669][ T9231] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.006684][ T9231] ? do_vfs_ioctl+0x128/0x14f0 [ 116.006700][ T9231] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 116.006716][ T9231] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 116.006733][ T9231] ? hook_file_ioctl_common+0x145/0x410 [ 116.006752][ T9231] ? selinux_file_ioctl+0x180/0x270 [ 116.006763][ T9231] ? selinux_file_ioctl+0xb4/0x270 [ 116.006778][ T9231] ? __pfx_binder_ioctl+0x10/0x10 [ 116.006796][ T9231] __x64_sys_ioctl+0x18e/0x210 [ 116.006823][ T9231] do_syscall_64+0xcd/0x4c0 [ 116.006862][ T9231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.006882][ T9231] RIP: 0033:0x7f7b9d38eb69 [ 116.006897][ T9231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.006915][ T9231] RSP: 002b:00007f7b9e174038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.006930][ T9231] RAX: ffffffffffffffda RBX: 00007f7b9d5b5fa0 RCX: 00007f7b9d38eb69 [ 116.006937][ T9231] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 116.006943][ T9231] RBP: 00007f7b9e174090 R08: 0000000000000000 R09: 0000000000000000 [ 116.006950][ T9231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.006956][ T9231] R13: 0000000000000000 R14: 00007f7b9d5b5fa0 R15: 00007ffff78de058 [ 116.006970][ T9231] [ 116.006974][ T9231] binder: 9230:9231 ioctl c0306201 2000000001c0 returned -14 [ 116.173069][ T9239] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1094'. [ 116.173167][ T9239] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1094'. [ 116.349844][ T9246] netlink: 'syz.1.1097': attribute type 1 has an invalid length. [ 116.363476][ T9246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1097'. [ 116.372704][ T9246] macvlan2: entered promiscuous mode [ 116.372723][ T9246] macvlan2: entered allmulticast mode [ 116.374020][ T9246] bond11: entered promiscuous mode [ 116.374573][ T9246] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 116.376811][ T9246] bond11: left promiscuous mode [ 116.528934][ T9258] binder: BINDER_SET_CONTEXT_MGR already set [ 116.528945][ T9258] binder: 9257:9258 ioctl 4018620d 200000000040 returned -16 [ 116.619599][ T9270] netlink: 'syz.1.1106': attribute type 1 has an invalid length. [ 116.631687][ T9270] macvlan2: entered promiscuous mode [ 116.631700][ T9270] macvlan2: entered allmulticast mode [ 116.632129][ T9270] bond12: entered promiscuous mode [ 116.632396][ T9270] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 116.634433][ T9270] bond12: left promiscuous mode [ 117.114648][ T3244] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 117.230296][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 117.230307][ T40] audit: type=1400 audit(1753999586.818:785): avc: denied { setopt } for pid=9295 comm="syz.4.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 117.267698][ T3244] usb 8-1: config 0 has an invalid interface number: 235 but max is 0 [ 117.270649][ T3244] usb 8-1: config 0 has no interface number 0 [ 117.272726][ T3244] usb 8-1: config 0 interface 235 has no altsetting 0 [ 117.278033][ T3244] usb 8-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 117.280998][ T3244] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.283601][ T3244] usb 8-1: Product: syz [ 117.285400][ T3244] usb 8-1: Manufacturer: syz [ 117.286945][ T3244] usb 8-1: SerialNumber: syz [ 117.289615][ T3244] usb 8-1: config 0 descriptor?? [ 117.630061][ T3244] usb 8-1: USB disconnect, device number 3 [ 117.708281][ T9304] __nla_validate_parse: 2 callbacks suppressed [ 117.708292][ T9304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1117'. [ 117.952332][ T40] audit: type=1400 audit(1753999587.538:786): avc: denied { map } for pid=9311 comm="syz.0.1120" path="/proc/609/net/netstat" dev="proc" ino=4026533166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 118.177880][ T9315] validate_nla: 1 callbacks suppressed [ 118.177891][ T9315] netlink: 'syz.4.1121': attribute type 10 has an invalid length. [ 118.183534][ T9315] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1121'. [ 118.187263][ T9315] team0: entered promiscuous mode [ 118.188879][ T9315] team_slave_0: entered promiscuous mode [ 118.190899][ T9315] team_slave_1: entered promiscuous mode [ 118.193429][ T9315] bridge0: port 3(team0) entered blocking state [ 118.196646][ T9315] bridge0: port 3(team0) entered disabled state [ 118.198871][ T9315] team0: entered allmulticast mode [ 118.200594][ T9315] team_slave_0: entered allmulticast mode [ 118.203000][ T9315] team_slave_1: entered allmulticast mode [ 118.209038][ T9315] bridge0: port 3(team0) entered blocking state [ 118.211687][ T9315] bridge0: port 3(team0) entered listening state [ 118.244881][ T40] audit: type=1400 audit(1753999587.838:787): avc: denied { ioctl } for pid=9327 comm="syz.4.1125" path="socket:[23424]" dev="sockfs" ino=23424 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 118.252670][ T40] audit: type=1400 audit(1753999587.838:788): avc: denied { getattr } for pid=9327 comm="syz.4.1125" lport=43202 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 118.332022][ T9333] netlink: 'syz.1.1126': attribute type 1 has an invalid length. [ 118.335733][ T9333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1126'. [ 118.387650][ T9339] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1129'. [ 118.393132][ T9339] netlink: 'syz.1.1129': attribute type 1 has an invalid length. [ 118.451646][ T9342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1129'. [ 118.479675][ T9344] IPVS: Error connecting to the multicast addr [ 118.505984][ T40] audit: type=1400 audit(1753999588.098:789): avc: denied { read } for pid=9349 comm="syz.0.1132" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 118.513172][ T9350] ata1.00: invalid multi_count 1 ignored [ 118.513343][ T40] audit: type=1400 audit(1753999588.098:790): avc: denied { open } for pid=9349 comm="syz.0.1132" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 118.522432][ T40] audit: type=1400 audit(1753999588.098:791): avc: denied { ioctl } for pid=9349 comm="syz.0.1132" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 118.648468][ T9354] netlink: 'syz.1.1134': attribute type 1 has an invalid length. [ 118.756285][ T9363] netlink: 'syz.1.1137': attribute type 1 has an invalid length. [ 118.759460][ T9363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1137'. [ 119.133527][ T9384] netlink: 'syz.4.1146': attribute type 1 has an invalid length. [ 119.136770][ T9384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1146'. [ 119.164207][ T40] audit: type=1400 audit(1753999588.748:792): avc: denied { connect } for pid=9385 comm="syz.4.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 119.166265][ T9386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1148'. [ 119.170874][ T40] audit: type=1400 audit(1753999588.748:793): avc: denied { ioctl } for pid=9385 comm="syz.4.1148" path="socket:[27160]" dev="sockfs" ino=27160 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 119.173537][ T9386] netlink: 'syz.4.1148': attribute type 18 has an invalid length. [ 119.189939][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.190404][ T9386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1148'. [ 119.192915][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.196661][ T9386] netlink: 'syz.4.1148': attribute type 18 has an invalid length. [ 119.199052][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.206039][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.253924][ T9391] tipc: Enabling of bearer rejected, media not registered [ 119.277640][ T40] audit: type=1400 audit(1753999588.868:794): avc: denied { write } for pid=9390 comm="syz.4.1149" path="socket:[27924]" dev="sockfs" ino=27924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 119.310073][ T9394] FAULT_INJECTION: forcing a failure. [ 119.310073][ T9394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.315151][ T9394] CPU: 3 UID: 0 PID: 9394 Comm: syz.3.1151 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 119.315178][ T9394] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.315186][ T9394] Call Trace: [ 119.315196][ T9394] [ 119.315201][ T9394] dump_stack_lvl+0x16c/0x1f0 [ 119.315233][ T9394] should_fail_ex+0x512/0x640 [ 119.315255][ T9394] _copy_to_user+0x32/0xd0 [ 119.315276][ T9394] simple_read_from_buffer+0xcb/0x170 [ 119.315296][ T9394] proc_fail_nth_read+0x197/0x240 [ 119.315308][ T9394] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.315321][ T9394] ? rw_verify_area+0xcf/0x680 [ 119.315337][ T9394] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.315348][ T9394] vfs_read+0x1e4/0xc60 [ 119.315367][ T9394] ? __pfx___mutex_lock+0x10/0x10 [ 119.315378][ T9394] ? __pfx_vfs_read+0x10/0x10 [ 119.315399][ T9394] ? __fget_files+0x20e/0x3c0 [ 119.315414][ T9394] ksys_read+0x12a/0x250 [ 119.315424][ T9394] ? __pfx_ksys_read+0x10/0x10 [ 119.315437][ T9394] do_syscall_64+0xcd/0x4c0 [ 119.315449][ T9394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.315461][ T9394] RIP: 0033:0x7f841bd8d57c [ 119.315470][ T9394] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 119.315481][ T9394] RSP: 002b:00007f841cb3f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 119.315492][ T9394] RAX: ffffffffffffffda RBX: 00007f841bfb5fa0 RCX: 00007f841bd8d57c [ 119.315499][ T9394] RDX: 000000000000000f RSI: 00007f841cb3f0a0 RDI: 0000000000000005 [ 119.315505][ T9394] RBP: 00007f841cb3f090 R08: 0000000000000000 R09: 0000000000000000 [ 119.315511][ T9394] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.315518][ T9394] R13: 0000000000000000 R14: 00007f841bfb5fa0 R15: 00007ffd246470c8 [ 119.315532][ T9394] [ 119.382290][ C3] vkms_vblank_simulate: vblank timer overrun [ 119.511206][ T9411] netlink: 'syz.3.1156': attribute type 1 has an invalid length. [ 119.515324][ T9411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1156'. [ 119.545547][ T9414] netlink: 'syz.0.1157': attribute type 1 has an invalid length. [ 119.559179][ T9414] 8021q: adding VLAN 0 to HW filter on device bond3 [ 119.582532][ T9414] veth7: entered promiscuous mode [ 119.588680][ T9414] bond3: (slave veth7): Enslaving as an active interface with a down link [ 119.937357][ T9439] tipc: Started in network mode [ 119.938959][ T9439] tipc: Node identity ac1414aa, cluster identity 4711 [ 119.941408][ T9439] tipc: Enabled bearer , priority 10 [ 120.102577][ T9447] orangefs_devreq_open: device cannot be opened in blocking mode [ 120.291268][ T9454] binder: 9453:9454 ioctl c0306201 0 returned -14 [ 120.293412][ T9454] binder: 9453:9454 ioctl c0306201 0 returned -14 [ 121.054580][ T3244] tipc: Node number set to 2886997162 [ 121.284012][ T9515] mkiss: ax0: crc mode is auto. [ 121.502775][ T9522] kvm: pic: non byte write [ 121.505021][ T9522] kvm: pic: non byte write [ 121.507351][ T9522] kvm: pic: non byte write [ 121.509672][ T9522] kvm: pic: non byte write [ 121.512000][ T9522] kvm: pic: non byte write [ 121.726409][ T9541] trusted_key: encrypted_key: key trusted:‘8s‰X not found [ 121.732573][ T9541] No source specified [ 121.737503][ T9541] hugetlbfs: Bad value '?' for mount option 'nr_inodes' [ 121.737503][ T9541] [ 122.272921][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 122.273006][ T40] audit: type=1400 audit(1753999591.858:816): avc: denied { accept } for pid=9585 comm="syz.4.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 122.298448][ T40] audit: type=1400 audit(1753999591.888:817): avc: denied { ioctl } for pid=9578 comm="syz.0.1217" path="socket:[29343]" dev="sockfs" ino=29343 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 122.346145][ T40] audit: type=1400 audit(1753999591.938:818): avc: denied { append } for pid=9590 comm="syz.0.1222" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 122.346701][ T9591] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1222' sets config #1 [ 122.363051][ T40] audit: type=1400 audit(1753999591.948:819): avc: denied { getopt } for pid=9590 comm="syz.0.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 122.611315][ T40] audit: type=1400 audit(1753999592.198:820): avc: denied { bind } for pid=9601 comm="syz.0.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 123.403686][ T9628] fuse: Bad value for 'group_id' [ 123.405502][ T9628] fuse: Bad value for 'group_id' [ 123.446824][ T9634] validate_nla: 8 callbacks suppressed [ 123.446839][ T9634] netlink: 'syz.1.1236': attribute type 1 has an invalid length. [ 123.453310][ T9634] __nla_validate_parse: 15 callbacks suppressed [ 123.453323][ T9634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1236'. [ 123.468726][ T40] audit: type=1400 audit(1753999593.058:821): avc: denied { append } for pid=9635 comm="syz.4.1238" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 123.567196][ T9645] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9645 comm=syz.4.1242 [ 123.571375][ T9645] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=9645 comm=syz.4.1242 [ 123.574227][ T9649] libceph: resolve '40' (ret=-3): failed [ 123.578809][ T40] audit: type=1400 audit(1753999593.168:822): avc: denied { bind } for pid=9644 comm="syz.4.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 123.600842][ T40] audit: type=1400 audit(1753999593.188:823): avc: denied { create } for pid=9652 comm="syz.0.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 123.610836][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1245'. [ 123.613996][ T40] audit: type=1400 audit(1753999593.198:824): avc: denied { write } for pid=9652 comm="syz.0.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 123.614966][ T9653] rdma_op ffff88802916a9f0 conn xmit_rdma 0000000000000000 [ 123.623494][ T40] audit: type=1400 audit(1753999593.208:825): avc: denied { ioctl } for pid=9652 comm="syz.0.1245" path="socket:[28475]" dev="sockfs" ino=28475 ioctlcmd=0x9410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 123.656615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.659940][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.672315][ T9663] netlink: 'syz.0.1248': attribute type 1 has an invalid length. [ 123.675249][ T9663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1248'. [ 123.685590][ T9660] netlink: 'syz.4.1249': attribute type 7 has an invalid length. [ 123.688900][ T9660] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1249'. [ 123.723092][ T9670] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 123.727781][ T9670] VFS: Can't find a romfs filesystem on dev nullb0. [ 123.727781][ T9670] [ 123.823242][ T9673] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1254'. [ 123.865682][ T9690] netlink: 'syz.3.1259': attribute type 1 has an invalid length. [ 123.869144][ T9690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1259'. [ 123.881978][ T9692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1260'. [ 123.885688][ T9692] openvswitch: netlink: Flow key attr not present in new flow. [ 123.999026][ T9713] openvswitch: netlink: Unknown key attributes 2 [ 124.085310][ T9719] fuse: Unknown parameter 'group_id<ƒ¾~x_'×[ìáZ)ú¥‰C†4900000000000000000000' [ 124.126953][ T9724] netlink: 'syz.1.1271': attribute type 1 has an invalid length. [ 124.135287][ T9724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1271'. [ 124.242104][ T9734] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 124.465545][ T9752] netlink: 'syz.3.1280': attribute type 1 has an invalid length. [ 124.469514][ T9752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1280'. [ 124.518080][ T9754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1281'. [ 124.655136][ T9764] autofs: Unknown parameter './file0' [ 124.669825][ T9764] 9pnet_fd: Insufficient options for proto=fd [ 124.782712][ T9770] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.785855][ T9770] IPv6: NLM_F_CREATE should be set when creating new route [ 124.788798][ T9770] IPv6: NLM_F_CREATE should be set when creating new route [ 124.791551][ T9770] IPv6: NLM_F_CREATE should be set when creating new route [ 124.796755][ T9770] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.834611][ T9772] netlink: 'syz.3.1289': attribute type 1 has an invalid length. [ 124.870276][ T9774] syzkaller1: entered promiscuous mode [ 124.872384][ T9774] syzkaller1: entered allmulticast mode [ 125.027675][ T9793] Invalid logical block size (4608) [ 125.089346][ T9803] netlink: 'syz.0.1299': attribute type 1 has an invalid length. [ 125.169986][ T9816] overlayfs: failed to clone lowerpath [ 125.175452][ T9816] overlayfs: failed to clone upperpath [ 125.466133][ T9838] netlink: 'syz.4.1312': attribute type 1 has an invalid length. [ 125.568932][ T9846] exfat: Unknown parameter 'discarde*½p' [ 125.698137][ T9868] netlink: 'syz.0.1322': attribute type 1 has an invalid length. [ 126.032364][ T9905] 8021q: VLANs not supported on wg0 [ 126.139156][ T9910] FAULT_INJECTION: forcing a failure. [ 126.139156][ T9910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.143457][ T9910] CPU: 1 UID: 0 PID: 9910 Comm: syz.4.1337 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 126.143473][ T9910] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 126.143480][ T9910] Call Trace: [ 126.143485][ T9910] [ 126.143489][ T9910] dump_stack_lvl+0x16c/0x1f0 [ 126.143526][ T9910] should_fail_ex+0x512/0x640 [ 126.143548][ T9910] _copy_to_user+0x32/0xd0 [ 126.143567][ T9910] simple_read_from_buffer+0xcb/0x170 [ 126.143586][ T9910] proc_fail_nth_read+0x197/0x240 [ 126.143599][ T9910] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 126.143611][ T9910] ? rw_verify_area+0xcf/0x680 [ 126.143627][ T9910] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 126.143639][ T9910] vfs_read+0x1e4/0xc60 [ 126.143657][ T9910] ? __pfx___mutex_lock+0x10/0x10 [ 126.143668][ T9910] ? __pfx_vfs_read+0x10/0x10 [ 126.143689][ T9910] ? __fget_files+0x20e/0x3c0 [ 126.143704][ T9910] ksys_read+0x12a/0x250 [ 126.143714][ T9910] ? __pfx_ksys_read+0x10/0x10 [ 126.143728][ T9910] do_syscall_64+0xcd/0x4c0 [ 126.143740][ T9910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.143751][ T9910] RIP: 0033:0x7f7b9d38d57c [ 126.143761][ T9910] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 126.143772][ T9910] RSP: 002b:00007f7b9e174030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 126.143782][ T9910] RAX: ffffffffffffffda RBX: 00007f7b9d5b5fa0 RCX: 00007f7b9d38d57c [ 126.143789][ T9910] RDX: 000000000000000f RSI: 00007f7b9e1740a0 RDI: 0000000000000004 [ 126.143795][ T9910] RBP: 00007f7b9e174090 R08: 0000000000000000 R09: 0000000000000000 [ 126.143802][ T9910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.143808][ T9910] R13: 0000000000000000 R14: 00007f7b9d5b5fa0 R15: 00007ffff78de058 [ 126.143822][ T9910] [ 126.387522][ T9923] ip6erspan0: entered promiscuous mode [ 126.413096][ T9927] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 126.424445][ T9927] overlayfs: failed to clone upperpath [ 126.606110][ T9949] FAULT_INJECTION: forcing a failure. [ 126.606110][ T9949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.610202][ T9949] CPU: 2 UID: 0 PID: 9949 Comm: syz.0.1350 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 126.610217][ T9949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 126.610224][ T9949] Call Trace: [ 126.610228][ T9949] [ 126.610232][ T9949] dump_stack_lvl+0x16c/0x1f0 [ 126.610253][ T9949] should_fail_ex+0x512/0x640 [ 126.610271][ T9949] _copy_to_user+0x32/0xd0 [ 126.610290][ T9949] simple_read_from_buffer+0xcb/0x170 [ 126.610310][ T9949] proc_fail_nth_read+0x197/0x240 [ 126.610322][ T9949] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 126.610335][ T9949] ? rw_verify_area+0xcf/0x680 [ 126.610350][ T9949] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 126.610362][ T9949] vfs_read+0x1e4/0xc60 [ 126.610381][ T9949] ? __pfx___mutex_lock+0x10/0x10 [ 126.610392][ T9949] ? __pfx_vfs_read+0x10/0x10 [ 126.610412][ T9949] ? __fget_files+0x20e/0x3c0 [ 126.610428][ T9949] ksys_read+0x12a/0x250 [ 126.610437][ T9949] ? __pfx_ksys_read+0x10/0x10 [ 126.610451][ T9949] do_syscall_64+0xcd/0x4c0 [ 126.610463][ T9949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.610475][ T9949] RIP: 0033:0x7f289a98d57c [ 126.610484][ T9949] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 126.610495][ T9949] RSP: 002b:00007f289b842030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 126.610506][ T9949] RAX: ffffffffffffffda RBX: 00007f289abb5fa0 RCX: 00007f289a98d57c [ 126.610513][ T9949] RDX: 000000000000000f RSI: 00007f289b8420a0 RDI: 0000000000000005 [ 126.610519][ T9949] RBP: 00007f289b842090 R08: 0000000000000000 R09: 0000000000000000 [ 126.610525][ T9949] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 126.610531][ T9949] R13: 0000000000000000 R14: 00007f289abb5fa0 R15: 00007ffc0137cd38 [ 126.610545][ T9949] [ 126.706478][ T9953] netlink: zone id is out of range [ 126.708208][ T9953] netlink: zone id is out of range [ 126.709836][ T9953] netlink: zone id is out of range [ 126.716283][ T9955] fuse: Unknown parameter '' [ 126.719746][ T9953] ip6gre2: entered allmulticast mode [ 126.752538][ T9963] mac80211_hwsim hwsim12 `ëÿÿ: renamed from wlan1 (while UP) [ 126.761925][ T9963] netlink: zone id is out of range [ 126.772765][ T9963] netlink: set zone limit has 4 unknown bytes [ 127.004301][ T9994] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 127.012553][ T9994] CIFS mount error: No usable UNC path provided in device string! [ 127.012553][ T9994] [ 127.016691][ T9994] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 127.026940][ T9996] ptrace attach of "/syz-executor exec"[5954] was attempted by "/syz-executor exec"[9996] [ 127.047277][ T9998] FAULT_INJECTION: forcing a failure. [ 127.047277][ T9998] name failslab, interval 1, probability 0, space 0, times 0 [ 127.051553][ T9998] CPU: 3 UID: 0 PID: 9998 Comm: syz.4.1372 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 127.051570][ T9998] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.051577][ T9998] Call Trace: [ 127.051581][ T9998] [ 127.051585][ T9998] dump_stack_lvl+0x16c/0x1f0 [ 127.051607][ T9998] should_fail_ex+0x512/0x640 [ 127.051623][ T9998] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 127.051636][ T9998] should_failslab+0xc2/0x120 [ 127.051650][ T9998] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 127.051661][ T9998] ? security_file_alloc+0x34/0x2b0 [ 127.051677][ T9998] security_file_alloc+0x34/0x2b0 [ 127.051690][ T9998] init_file+0x93/0x4c0 [ 127.051704][ T9998] alloc_empty_file+0x73/0x1e0 [ 127.051718][ T9998] path_openat+0xda/0x2cb0 [ 127.051730][ T9998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.051747][ T9998] ? __pfx_path_openat+0x10/0x10 [ 127.051759][ T9998] ? __lock_acquire+0xb8a/0x1c90 [ 127.051781][ T9998] do_filp_open+0x20b/0x470 [ 127.051792][ T9998] ? __pfx_do_filp_open+0x10/0x10 [ 127.051816][ T9998] ? alloc_fd+0x471/0x7d0 [ 127.051830][ T9998] do_sys_openat2+0x11b/0x1d0 [ 127.051844][ T9998] ? __pfx_do_sys_openat2+0x10/0x10 [ 127.051860][ T9998] ? __fget_files+0x20e/0x3c0 [ 127.051887][ T9998] __x64_sys_openat+0x174/0x210 [ 127.051907][ T9998] ? __pfx___x64_sys_openat+0x10/0x10 [ 127.051920][ T9998] ? ksys_write+0x1ac/0x250 [ 127.051935][ T9998] do_syscall_64+0xcd/0x4c0 [ 127.051948][ T9998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.051958][ T9998] RIP: 0033:0x7f7b9d38eb69 [ 127.051967][ T9998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.051978][ T9998] RSP: 002b:00007f7b9e174038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 127.051989][ T9998] RAX: ffffffffffffffda RBX: 00007f7b9d5b5fa0 RCX: 00007f7b9d38eb69 [ 127.051995][ T9998] RDX: 0000000000000280 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 127.052002][ T9998] RBP: 00007f7b9e174090 R08: 0000000000000000 R09: 0000000000000000 [ 127.052008][ T9998] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 127.052014][ T9998] R13: 0000000000000000 R14: 00007f7b9d5b5fa0 R15: 00007ffff78de058 [ 127.052036][ T9998] [ 127.124191][ C3] vkms_vblank_simulate: vblank timer overrun [ 127.156364][T10004] overlayfs: failed to clone upperpath [ 127.160734][T10006] openvswitch: netlink: Tunnel attr 2 has unexpected len 0 expected 4 [ 127.203713][T10012] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 127.206822][T10012] overlayfs: missing 'lowerdir' [ 128.179598][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 128.179609][ T40] audit: type=1400 audit(1753999597.768:850): avc: denied { write } for pid=10051 comm="syz.4.1395" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 128.189363][ T40] audit: type=1400 audit(1753999597.768:851): avc: denied { open } for pid=10051 comm="syz.4.1395" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 128.416207][T10066] FAULT_INJECTION: forcing a failure. [ 128.416207][T10066] name failslab, interval 1, probability 0, space 0, times 0 [ 128.421290][T10066] CPU: 3 UID: 0 PID: 10066 Comm: syz.4.1400 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 128.421305][T10066] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.421313][T10066] Call Trace: [ 128.421317][T10066] [ 128.421321][T10066] dump_stack_lvl+0x16c/0x1f0 [ 128.421343][T10066] should_fail_ex+0x512/0x640 [ 128.421364][T10066] ? __kmalloc_noprof+0xbf/0x510 [ 128.421382][T10066] ? constrain_params_by_rules+0x175/0xca0 [ 128.421400][T10066] should_failslab+0xc2/0x120 [ 128.421423][T10066] __kmalloc_noprof+0xd2/0x510 [ 128.421461][T10066] constrain_params_by_rules+0x175/0xca0 [ 128.421482][T10066] ? mark_held_locks+0x49/0x80 [ 128.421506][T10066] ? lockdep_hardirqs_on+0x7c/0x110 [ 128.421532][T10066] ? stack_depot_save_flags+0x3e0/0xa40 [ 128.421556][T10066] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 128.421573][T10066] ? kfree+0x2b4/0x4d0 [ 128.421603][T10066] ? __kasan_kmalloc+0xaa/0xb0 [ 128.421619][T10066] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0 [ 128.421639][T10066] ? snd_pcm_oss_change_params_locked+0x13f9/0x3a30 [ 128.421655][T10066] ? snd_pcm_oss_make_ready+0xe6/0x1b0 [ 128.421681][T10066] ? snd_interval_refine+0x2fa/0x580 [ 128.421706][T10066] snd_pcm_hw_refine+0x7de/0xad0 [ 128.421728][T10066] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 128.421758][T10066] ? _snd_pcm_hw_param_min+0x259/0x630 [ 128.421782][T10066] snd_pcm_hw_param_near.constprop.0+0x58a/0x8e0 [ 128.421807][T10066] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 128.421828][T10066] ? __asan_memset+0x23/0x50 [ 128.421851][T10066] ? calc_src_frames.isra.0+0x187/0x1d0 [ 128.421878][T10066] snd_pcm_oss_change_params_locked+0x13f9/0x3a30 [ 128.421912][T10066] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 128.421934][T10066] ? __pfx___mutex_lock+0x10/0x10 [ 128.421968][T10066] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 128.421987][T10066] snd_pcm_oss_set_trigger.isra.0+0x211/0x6b0 [ 128.422004][T10066] ? lockdep_hardirqs_on+0x7c/0x110 [ 128.422030][T10066] snd_pcm_oss_poll+0x549/0xaf0 [ 128.422050][T10066] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 128.422066][T10066] ? __fget_files+0x20e/0x3c0 [ 128.422086][T10066] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 128.422098][T10066] do_sys_poll+0x559/0xdf0 [ 128.422121][T10066] ? __pfx_do_sys_poll+0x10/0x10 [ 128.422152][T10066] ? find_held_lock+0x2b/0x80 [ 128.422168][T10066] ? __pfx_pollwake+0x10/0x10 [ 128.422186][T10066] ? __pfx_pollwake+0x10/0x10 [ 128.422203][T10066] ? __pfx_pollwake+0x10/0x10 [ 128.422221][T10066] ? __pfx_pollwake+0x10/0x10 [ 128.422251][T10066] ? __mutex_unlock_slowpath+0x163/0x800 [ 128.422264][T10066] ? set_user_sigmask+0x21b/0x2b0 [ 128.422282][T10066] ? __pfx_set_user_sigmask+0x10/0x10 [ 128.422294][T10066] ? __fget_files+0x20e/0x3c0 [ 128.422306][T10066] __x64_sys_ppoll+0x254/0x2d0 [ 128.422318][T10066] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 128.422327][T10066] ? ksys_write+0x1ac/0x250 [ 128.422337][T10066] ? __pfx_ksys_write+0x10/0x10 [ 128.422351][T10066] do_syscall_64+0xcd/0x4c0 [ 128.422363][T10066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.422374][T10066] RIP: 0033:0x7f7b9d38eb69 [ 128.422383][T10066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.422395][T10066] RSP: 002b:00007f7b9e174038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 128.422405][T10066] RAX: ffffffffffffffda RBX: 00007f7b9d5b5fa0 RCX: 00007f7b9d38eb69 [ 128.422412][T10066] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000040 [ 128.422419][T10066] RBP: 00007f7b9e174090 R08: 0000000000000000 R09: 0000000000000000 [ 128.422425][T10066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 128.422431][T10066] R13: 0000000000000000 R14: 00007f7b9d5b5fa0 R15: 00007ffff78de058 [ 128.422445][T10066] [ 128.563833][ C3] vkms_vblank_simulate: vblank timer overrun [ 128.588199][ T40] audit: type=1400 audit(1753999598.178:852): avc: denied { ioctl } for pid=10079 comm="syz.4.1405" path="socket:[31584]" dev="sockfs" ino=31584 ioctlcmd=0x8b30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 128.642258][T10091] usb usb8: usbfs: process 10091 (syz.0.1407) did not claim interface 0 before use [ 128.652160][T10094] __nla_validate_parse: 24 callbacks suppressed [ 128.652170][T10094] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.1408'. [ 128.701801][T10097] ieee802154 phy0 wpan0: encryption failed: -22 [ 128.912271][T10104] validate_nla: 10 callbacks suppressed [ 128.912281][T10104] netlink: 'syz.1.1412': attribute type 1 has an invalid length. [ 128.918099][T10104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1412'. [ 128.963576][T10107] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.032390][ T40] audit: type=1400 audit(1753999598.618:853): avc: denied { read } for pid=10112 comm="syz.1.1416" path="socket:[31686]" dev="sockfs" ino=31686 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 129.527647][T10124] netlink: 'syz.1.1421': attribute type 1 has an invalid length. [ 129.531689][T10124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1421'. [ 129.583431][T10128] netlink: 'syz.1.1422': attribute type 1 has an invalid length. [ 129.613421][T10134] ------------[ cut here ]------------ [ 129.615815][T10134] WARNING: CPU: 3 PID: 10134 at net/mac80211/rate.c:53 rate_control_rate_init+0x5c0/0x720 [ 129.618913][T10134] Modules linked in: [ 129.620409][T10134] CPU: 3 UID: 0 PID: 10134 Comm: syz.1.1423 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 129.625842][T10134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 129.629153][T10134] RIP: 0010:rate_control_rate_init+0x5c0/0x720 [ 129.631131][T10134] Code: 48 8d 35 00 00 00 00 e8 ee 36 95 f6 e8 19 51 9f f6 e9 25 fe ff ff e8 1f 03 b9 f6 90 0f 0b 90 e9 17 fe ff ff e8 11 03 b9 f6 90 <0f> 0b 90 eb b1 e8 06 03 b9 f6 e8 f1 1a 9e f6 31 ff 89 c3 89 c6 e8 [ 129.637060][T10134] RSP: 0018:ffffc900039a7218 EFLAGS: 00010283 [ 129.638963][T10134] RAX: 00000000000008d0 RBX: ffff888037e7c000 RCX: ffffc90007712000 [ 129.641522][T10134] RDX: 0000000000080000 RSI: ffffffff8b02802f RDI: 0000000000000005 [ 129.643971][T10134] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 129.646458][T10134] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880345ba560 [ 129.648930][T10134] R13: ffff888039c18e40 R14: ffff888039c44000 R15: 0000000000000000 [ 129.652063][T10134] FS: 00007f365aada6c0(0000) GS:ffff8880d6a19000(0000) knlGS:0000000000000000 [ 129.655839][T10134] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.658639][T10134] CR2: 00007f3659b74900 CR3: 0000000031caa000 CR4: 0000000000352ef0 [ 129.661841][T10134] Call Trace: [ 129.663272][T10134] [ 129.664132][T10134] rate_control_rate_init_all_links+0x76/0x1e0 [ 129.665990][T10134] sta_apply_auth_flags.constprop.0+0x4bb/0x510 [ 129.667999][T10134] sta_apply_parameters+0xc37/0x18b0 [ 129.669818][T10134] ieee80211_add_station+0x3fa/0x6c0 [ 129.671673][T10134] nl80211_new_station+0x1502/0x1c90 [ 129.673357][T10134] ? __pfx_nl80211_new_station+0x10/0x10 [ 129.675364][T10134] ? nl80211_pre_doit+0x1b0/0xb10 [ 129.676961][T10134] genl_family_rcv_msg_doit+0x206/0x2f0 [ 129.678686][T10134] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 129.680614][T10134] ? bpf_lsm_capable+0x9/0x10 [ 129.682095][T10134] ? security_capable+0x7e/0x260 [ 129.683691][T10134] ? ns_capable+0xd7/0x110 [ 129.685195][T10134] genl_rcv_msg+0x55c/0x800 [ 129.686616][T10134] ? __pfx_genl_rcv_msg+0x10/0x10 [ 129.688217][T10134] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 129.689930][T10134] ? __pfx_nl80211_new_station+0x10/0x10 [ 129.691735][T10134] ? __pfx_nl80211_post_doit+0x10/0x10 [ 129.693446][T10134] netlink_rcv_skb+0x155/0x420 [ 129.695065][T10134] ? __pfx_genl_rcv_msg+0x10/0x10 [ 129.696640][T10134] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 129.698296][T10134] ? netlink_deliver_tap+0x1ae/0xd30 [ 129.699993][T10134] genl_rcv+0x28/0x40 [ 129.701251][T10134] netlink_unicast+0x5aa/0x870 [ 129.702755][T10134] ? __pfx_netlink_unicast+0x10/0x10 [ 129.704435][T10134] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 129.706400][T10134] netlink_sendmsg+0x8d1/0xdd0 [ 129.707960][T10134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.709665][T10134] ____sys_sendmsg+0xa98/0xc70 [ 129.711380][T10134] ? copy_msghdr_from_user+0x10a/0x160 [ 129.713087][T10134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.715124][T10134] ? __pfx_futex_wake_mark+0x10/0x10 [ 129.716968][T10134] ___sys_sendmsg+0x134/0x1d0 [ 129.718660][T10134] ? futex_private_hash_put+0x176/0x300 [ 129.720615][T10134] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.722241][T10134] ? __lock_acquire+0x622/0x1c90 [ 129.723871][T10134] __sys_sendmsg+0x16d/0x220 [ 129.725438][T10134] ? __pfx___sys_sendmsg+0x10/0x10 [ 129.727058][T10134] ? __x64_sys_futex+0x1e0/0x4c0 [ 129.728621][T10134] ? fdget+0x187/0x210 [ 129.730164][T10134] do_syscall_64+0xcd/0x4c0 [ 129.731729][T10134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.733564][T10134] RIP: 0033:0x7f3659b8eb69 [ 129.735080][T10134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.741171][T10134] RSP: 002b:00007f365aada038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.743750][T10134] RAX: ffffffffffffffda RBX: 00007f3659db5fa0 RCX: 00007f3659b8eb69 [ 129.746280][T10134] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 129.748736][T10134] RBP: 00007f3659c11df1 R08: 0000000000000000 R09: 0000000000000000 [ 129.751578][T10134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.754015][T10134] R13: 0000000000000000 R14: 00007f3659db5fa0 R15: 00007ffe50ef4f98 [ 129.756571][T10134] [ 129.757600][T10134] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 129.760037][T10134] CPU: 3 UID: 0 PID: 10134 Comm: syz.1.1423 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 129.763608][T10134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 129.766962][T10134] Call Trace: [ 129.768026][T10134] [ 129.768965][T10134] dump_stack_lvl+0x3d/0x1f0 [ 129.770501][T10134] vpanic+0x6a3/0x780 [ 129.771778][T10134] ? __pfx_vpanic+0x10/0x10 [ 129.773213][T10134] ? rate_control_rate_init+0x5c0/0x720 [ 129.774974][T10134] panic+0xca/0xd0 [ 129.776160][T10134] ? __pfx_panic+0x10/0x10 [ 129.777587][T10134] check_panic_on_warn+0xab/0xb0 [ 129.779159][T10134] __warn+0xf6/0x3c0 [ 129.780681][T10134] ? rate_control_rate_init+0x5c0/0x720 [ 129.782409][T10134] report_bug+0x3c3/0x580 [ 129.783780][T10134] ? rate_control_rate_init+0x5c0/0x720 [ 129.785533][T10134] handle_bug+0x184/0x210 [ 129.786901][T10134] exc_invalid_op+0x17/0x50 [ 129.788343][T10134] asm_exc_invalid_op+0x1a/0x20 [ 129.789895][T10134] RIP: 0010:rate_control_rate_init+0x5c0/0x720 [ 129.791817][T10134] Code: 48 8d 35 00 00 00 00 e8 ee 36 95 f6 e8 19 51 9f f6 e9 25 fe ff ff e8 1f 03 b9 f6 90 0f 0b 90 e9 17 fe ff ff e8 11 03 b9 f6 90 <0f> 0b 90 eb b1 e8 06 03 b9 f6 e8 f1 1a 9e f6 31 ff 89 c3 89 c6 e8 [ 129.797726][T10134] RSP: 0018:ffffc900039a7218 EFLAGS: 00010283 [ 129.799656][T10134] RAX: 00000000000008d0 RBX: ffff888037e7c000 RCX: ffffc90007712000 [ 129.802082][T10134] RDX: 0000000000080000 RSI: ffffffff8b02802f RDI: 0000000000000005 [ 129.804520][T10134] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 129.807018][T10134] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880345ba560 [ 129.809456][T10134] R13: ffff888039c18e40 R14: ffff888039c44000 R15: 0000000000000000 [ 129.811897][T10134] ? rate_control_rate_init+0x5bf/0x720 [ 129.813620][T10134] ? rate_control_rate_init+0x5bf/0x720 [ 129.815389][T10134] rate_control_rate_init_all_links+0x76/0x1e0 [ 129.817325][T10134] sta_apply_auth_flags.constprop.0+0x4bb/0x510 [ 129.819475][T10134] sta_apply_parameters+0xc37/0x18b0 [ 129.821282][T10134] ieee80211_add_station+0x3fa/0x6c0 [ 129.822954][T10134] nl80211_new_station+0x1502/0x1c90 [ 129.824620][T10134] ? __pfx_nl80211_new_station+0x10/0x10 [ 129.826410][T10134] ? nl80211_pre_doit+0x1b0/0xb10 [ 129.828007][T10134] genl_family_rcv_msg_doit+0x206/0x2f0 [ 129.829942][T10134] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 129.832160][T10134] ? bpf_lsm_capable+0x9/0x10 [ 129.833632][T10134] ? security_capable+0x7e/0x260 [ 129.835202][T10134] ? ns_capable+0xd7/0x110 [ 129.836635][T10134] genl_rcv_msg+0x55c/0x800 [ 129.838060][T10134] ? __pfx_genl_rcv_msg+0x10/0x10 [ 129.839659][T10134] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 129.841331][T10134] ? __pfx_nl80211_new_station+0x10/0x10 [ 129.843082][T10134] ? __pfx_nl80211_post_doit+0x10/0x10 [ 129.844775][T10134] netlink_rcv_skb+0x155/0x420 [ 129.846308][T10134] ? __pfx_genl_rcv_msg+0x10/0x10 [ 129.847903][T10134] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 129.849699][T10134] ? netlink_deliver_tap+0x1ae/0xd30 [ 129.851736][T10134] genl_rcv+0x28/0x40 [ 129.852993][T10134] netlink_unicast+0x5aa/0x870 [ 129.854484][T10134] ? __pfx_netlink_unicast+0x10/0x10 [ 129.856180][T10134] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 129.858051][T10134] netlink_sendmsg+0x8d1/0xdd0 [ 129.859572][T10134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.861226][T10134] ____sys_sendmsg+0xa98/0xc70 [ 129.862732][T10134] ? copy_msghdr_from_user+0x10a/0x160 [ 129.864438][T10134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.866132][T10134] ? __pfx_futex_wake_mark+0x10/0x10 [ 129.867809][T10134] ___sys_sendmsg+0x134/0x1d0 [ 129.869346][T10134] ? futex_private_hash_put+0x176/0x300 [ 129.871351][T10134] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.872972][T10134] ? __lock_acquire+0x622/0x1c90 [ 129.874530][T10134] __sys_sendmsg+0x16d/0x220 [ 129.876021][T10134] ? __pfx___sys_sendmsg+0x10/0x10 [ 129.877613][T10134] ? __x64_sys_futex+0x1e0/0x4c0 [ 129.879200][T10134] ? fdget+0x187/0x210 [ 129.880522][T10134] do_syscall_64+0xcd/0x4c0 [ 129.881942][T10134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.883818][T10134] RIP: 0033:0x7f3659b8eb69 [ 129.885210][T10134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.891428][T10134] RSP: 002b:00007f365aada038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.893989][T10134] RAX: ffffffffffffffda RBX: 00007f3659db5fa0 RCX: 00007f3659b8eb69 [ 129.896466][T10134] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 129.898913][T10134] RBP: 00007f3659c11df1 R08: 0000000000000000 R09: 0000000000000000 [ 129.901353][T10134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.903785][T10134] R13: 0000000000000000 R14: 00007f3659db5fa0 R15: 00007ffe50ef4f98 [ 129.906217][T10134] [ 129.907836][T10134] Kernel Offset: disabled [ 129.909212][T10134] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:06:39 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff8b8b14a8 RDX=ffff888028b4a440 RSI=0000000000000002 RDI=0000000000000005 RBP=fffff520006e0e64 RSP=ffffc90003707250 R8 =0000000000000005 R9 =0000000000000002 R10=0000000000000000 R11=0000000000000001 R12=dffffc0000000000 R13=0000000000000000 R14=ffffc90003707320 R15=ffff888054a639c0 RIP=ffffffff81bb8340 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6719000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fec280e66c8 CR3=000000004db04000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd24647450 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd246475d6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd246475d6 00007ffd246475dc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f841be12e0a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f841be12e17 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f841be12e11 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f841be12e25 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f841be12eab ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f841be12f89 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000003 RBX=ffff888048221598 RCX=ffffffff819807cc RDX=ffff8880482215a8 RSI=0000000000000004 RDI=ffffc90004ff7590 RBP=1ffff920009feeae RSP=ffffc90004ff7568 R8 =0000000000000001 R9 =fffff520009feeb2 R10=0000000000000003 R11=0000000000000001 R12=ffff8880482215a0 R13=ffff8880482215a8 R14=0000000000000001 R15=0000000000000001 RIP=ffffffff8198081c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6819000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001080 CR3=000000002a19a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000003bf12 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556bbacfd7 000055556bbac8e0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556bba5b8f 000055556bba5360 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556bbab624 000055556bbab620 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0e98030008000e90 03018d8ae5cac096 c7ece104000e8c03 0000000404060e88 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04000eac03100400 0ea8030004000ea4 030002000ea20326 02000ea003000800 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000ec4031404000e c0032604000ebc03 0804000eb8030000 000608060eb00306 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002000ed0030002 000ece032202000e cc030402000eca03 1002000ec8030c04 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100042800401 000002080606015d ce048382080042e0 0300100042d00300 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 100042c003021000 42b0037810004190 030204000ef00324 04000eec030c0400 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0ee803168004000e e0032004000edc03 0c04000ed8030202 000ed2030002000e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d0030002000ece03 2202000ecc030402 000eca031002000e c8030c04000ec403 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000014777d RBX=0000000000000002 RCX=ffffffff8b8c8c69 RDX=0000000000000000 RSI=ffffffff8de155a8 RDI=ffffffff8c15fc80 RBP=ffffed1003bd6910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000001 R12=0000000000000002 R13=ffff88801deb4880 R14=ffffffff90a7c490 R15=0000000000000000 RIP=ffffffff8b8c77cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6919000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2f276f8e9c CR3=0000000062f9c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff78de3e0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff78de566 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff78de566 00007ffff78de56c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b9d412e0a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b9d412e17 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b9d412e11 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b9d412e25 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b9d412eab ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b9d412f89 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85620e35 RDI=ffffffff9b0c11e0 RBP=ffffffff9b0c11a0 RSP=ffffc900039a6b80 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=000000000000002e R14=ffffffff9b0c11a0 R15=ffffffff85620dd0 RIP=ffffffff85620e5f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f365aada6c0 ffffffff 00c00000 GS =0000 ffff8880d6a19000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3659b74900 CR3=0000000031caa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe50ef54a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe50ef54a6 00007ffe50ef54ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3659c12e0a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3659c12e17 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3659c12e11 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3659c12e25 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3659c12eab ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3659c12f89 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000366f65 6469762f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000154c46 474a550c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000