last executing test programs: 684.268049ms ago: executing program 1 (id=1939): sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)=ANY=[@ANYBLOB="00030000", @ANYRES16=0x0, @ANYBLOB="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"], 0x300}, 0x1, 0x0, 0x0, 0x4049044}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) mprotect(&(0x7f000044a000/0x4000)=nil, 0x4000, 0x2000000) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) unshare(0x2040600) r2 = memfd_create(&(0x7f0000000480)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4) fstatfs(r2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000040)=0xffff, 0x4) r3 = accept4(r1, &(0x7f0000000080)=@caif=@util, &(0x7f0000000280)=0x80, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="fcdbdf2502201007f40000060000010008000100ac7427c87f104a4c5800000008000b00fdffffff080004000800000008000200ac1414aa0c000c40000000000080000300"/80], 0x50}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) 620.805944ms ago: executing program 1 (id=1940): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0xbacf, {0x1, 0x0, 0x0, 0x0, 0x4, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x10, 0x6}}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x9eff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 620.41451ms ago: executing program 1 (id=1942): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x4, 0x0, 0xa6b9}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x4}, 0x1, {0x8100}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x2}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)}, 0x4040044) 567.474653ms ago: executing program 3 (id=1944): r0 = fsopen(&(0x7f0000000100)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="670000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) timer_create(0x3, &(0x7f0000000100)={0x0, 0x11, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000140)) ioctl$TCFLSH(r1, 0x400455c8, 0x20000000008) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000000040)) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 567.335166ms ago: executing program 3 (id=1945): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000070000000c"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 482.696127ms ago: executing program 3 (id=1946): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000070000000c"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) (fail_nth: 1) 481.850534ms ago: executing program 1 (id=1947): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x87}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}}, 0x14b6deac033214c2) (async) munmap(&(0x7f0000fde000/0x4000)=nil, 0x4000) (async, rerun: 64) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) (rerun: 64) munmap(&(0x7f0000584000/0x800000)=nil, 0x800000) write$binfmt_misc(r0, &(0x7f0000000340)="ab35661059df4f0e52d36672eb04eb5bc04200ebb7eb22e98594f8b26303e34b577781aa15e0584ca05dd1a3cc8c461e05740abdbdf4428876b7713274de46bf36d0680bc70d3a697b6840ee61e6e93b1304657ff57d4deca570df7d13db7b9a3b6dc202cfaeb4fa10c1dc5ca626984c2e0e826d28ae3548587d5aa651e03f5481fbe16fdfc123fe46cad30ea75affddd538cd22f3bf283383e2ad16421f7ed2b05b9d002e744a02f695d60cdc", 0xad) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f2e000/0x4000)=nil, 0x4000) munmap(&(0x7f0000c00000/0x400000)=nil, 0x400000) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async, rerun: 64) r7 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) (rerun: 64) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000400)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd000000011000", [0x8, 0xfffffffffffffffc]}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) (async, rerun: 32) socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r8 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000540)={0x2, 0xc, 0x2, 0x5, 0x5, 0x0, [{0x8, 0x9, 0x8001, '\x00', 0xb}, {0x200, 0x1, 0x2, '\x00', 0x4}, {0x8, 0x1, 0x7, '\x00', 0x800}, {0xfd0, 0x9, 0x4}, {0x6, 0x7, 0x1, '\x00', 0x880}]}) (async) getsockname$packet(r8, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="380000001000370400", @ANYRES32=r9, @ANYBLOB="01f50500000000001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4011}, 0x40004) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @multicast2}}}], 0x20}}], 0x1, 0x80) 415.47761ms ago: executing program 3 (id=1948): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0xc0ed0000, &(0x7f0000000280)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000340)={0x21}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r1, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) 415.157736ms ago: executing program 1 (id=1949): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00001e0001ff000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x23}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 299.837241ms ago: executing program 2 (id=1950): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x1, 0x0, 0x0, 0x67, 0x1ff, {0x5, 0x4, 0x1, 0x2, 0x69d2, 0x66, 0xfff, 0x4, 0x21, 0x8, @multicast1, @multicast2}}}}}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) 299.163433ms ago: executing program 0 (id=1951): r0 = socket(0x10, 0x3, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)) (async) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x0, 0x8) timer_settime(r1, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="e40c6086eeb1019dd0f96c8c76e27029d9d59759c7025eb3b3eeb1e630c70d7b66a3bae124f23b08949f0c2b221a965c9bca14196f4025fc4be7c2aad6cff0118eaeb4277bd3182e79ee4dbe6d6180fbd1f792a011165bc7f45a36bd5cc46a225894019056c77406678295c356c88b662cf7feaed18e7a5fdfaddd5ff9740876da60752dd0718aa309d7d6c825c80892c4492fc02334c4f4ab9c204718d683", 0x9f}, {&(0x7f0000000140)="dcfeaf2a4c85c8a7fe18ccd810e87a3685006afdc5f3a47d87ea521a2e7c8aa5939fe2756686480ec835e8cb142e393aa21c192dd07973f24ce8950cf8a96c837b3eb08ec5a3d77b11916ee2b3befc5fec254bbe45a21f5dbf95b79b428093a0abc453b214f2b0af9c22328aaa79ed486ac4b27f319ddc1724a0f5cdeaf897b6e0ff7ad8ee9e5c9e282d6c00b5aba84111fd7682f8462e6201a001618849", 0x9e}, {&(0x7f0000000200)="586756327b2d872cbda9e07331e23d171b404691379903322964895ed2fa1b4247ebab57a564bbc51a1c16c206887e77f1470e307b56f59ff354d79ca2419ceed245af5077a14214bfb3d4cfe633077a1877be37ef62bf12c072721df8a4bcaa25b19e916b2b51bf7e6b4766c595c67a5a3267ac01918bab52af2d21fe17f59e46ba38be30eba2ae472517a96b21e719571f4aea31efd492f0c65161c8772d5322656dd035fc39a0d7adb9381c67e6a37f42cd9cd420c4bc583eb7f004e40bb4ba2c60ea08a6e301d3d9c92b29f1a5ab38ad", 0xd2}, {&(0x7f0000000300)="a04828f4ea0dac78699efed62d542750fb0b89bf6acc8ba270fb115d24125cac1c6b489b557d1da45e369f529e25fc0fbde3702ec58662eec19ccef6c45b447e4d02fb22087780583e43c306cc41e462300690a80cd4b337", 0x58}, {&(0x7f0000000600)="094a495e0b9316a1f6e22a9129a9435f9ce38216c51b6320c10eeb34376c56b55d126bac9b5e64ecea8ea3e55d94e72ef5eb8fedb1ddaf7e8021f36deef0365cbb3b0d6585c5610f1c43d669bf5a9657d122a66e1384264e021a3b934df616a370d434979dddc801a7bc2e8e83cc9714e9c9a9edf4", 0x75}, {&(0x7f0000000400)="b8b9cfe32511a6ee76566de05b521d80b9ae31d523bb44e452aa8f53647c1fdc89314f9f6b3a6a0b1eb8f2538e852ece54ee0845b6ce85448ead136bd766697e10bffe3ce5b30bbb1803fdcd9a4347f41fcc6275f725eb39c1ebeab634272dfdb77d083b1a034b5cea10e4c81c6d7d7928ca0707f68f6c6022a8d84ef52ee9242dacb2f06da0a9077685fedfc17954a68576f7cd4bee8990f0e239e8", 0x9c}, {&(0x7f00000004c0)="430ef697d53a6bbb41d61edcc944281c04212297347dad3faf1cb445e6d9228b2196cb02d4c89aac036e3c7dc687b40fd9e20a80c5680a337e486792b2ca418b7c2b3206dcf23dd1879edf5321c508231aa2dab6ddd5e9e4e9e91f24ac38dff288b47b8b15c18a46af8ca7019850b41b850f2bd6c888e1bbcc9f15e8d90bad129cec0015f76bea369e16ba5691e4ef28718bb6524db760d9b0c55676233f303375f46b9774679de7dd64d898455bacf95a456121c6b313062d6403", 0xbb}], 0x7, &(0x7f0000000740)="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", 0x133, 0x4000}, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 299.070963ms ago: executing program 2 (id=1952): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe800000000000000000000000003baa"], 0x0) 298.699222ms ago: executing program 1 (id=1953): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_subtree(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000000)) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) syz_usb_connect$uac1(0x2, 0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000106b1d010140000102030109028c00030156c0020904000000010100000a24010101bb0201021124060104050700090008000300020003052405060f0c24020203120250800009010b24060502020a004ef1000904010000010200000904010101010200000905010920009301050725010005480f090402000001020000090402010101020000090582"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x42300, 0x0) prlimit64(0x0, 0x7, &(0x7f0000002640)={0x3, 0xa5b1}, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000003b40)=0x1c) geteuid() fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) sendmsg$nl_netfilter(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6c0000000004010328bd7000fbdbdf250a0000090c00c600f9940a5e050000004c00e9802d00ad80f5fdf951cc7942d28db83a0700000000003ab1debc8c39b691c4508857f7c300007d3f7684da8b1a8000000008002a00", @ANYRES32=r4, @ANYBLOB="08002600030000000800d90075d1a5bde1a2d68d9a8139e9a3a5b1867d62a84da55f6f397c6d140e2d9fb8d4a523b2d864ca50b10f1f5f19b0e1d02836c68193d21dfd51db00cc8a7d8df8e2767a6be999fe69ef20ecce1730b8368f06f248d64f2130", @ANYRES32=r4, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0xc0) 225.742876ms ago: executing program 2 (id=1954): mkdir(&(0x7f00000001c0)='./file1\x00', 0x2) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x54f5}}, './file1\x00'}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="66b833000000440f20c066350f000000440f22c00f21f86635000002000f23f8440f20c00f013c440f22c03e0fc7310fc738baf80c66b8460de88e3e0f31bafc0ced0f01c8e3002e0f001336dde50f1c23d0d021f866351000000c0fa9f8", 0x5e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 225.547579ms ago: executing program 3 (id=1955): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x4, 0x0, 0xa6b9}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x4}, 0x1, {0x8100}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x2}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)}, 0x4040044) 224.109728ms ago: executing program 2 (id=1956): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b", 0x2}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f0000000540)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}], 0x1}}], 0x3, 0x4000000) sendmmsg$inet(r0, &(0x7f0000008540)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000600)="142a840d", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000008c0)="fb14dfc9", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000016c0)='C', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000005040)='\r', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001380)="9afc", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000006040)="b4", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002e80)="c7", 0x1}], 0x1}, 0x1f}, {{0x0, 0x0, &(0x7f0000008400)=[{&(0x7f0000008240)="f0", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000008480)=[{&(0x7f0000008440)="fe20", 0x2}], 0x1}}], 0x9, 0x8000) 150.357348ms ago: executing program 2 (id=1957): syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x0, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20048000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="900000001000030500000000000000008c000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) 150.072473ms ago: executing program 0 (id=1958): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x7, 0xc, 0xffffffff, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xfffffffffffffcaa}, {0xc}}}]}]}, 0xe94}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000480)={&(0x7f00000003c0)="321a", 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000180)='@', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000000080)={r4}) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 54.841618ms ago: executing program 0 (id=1959): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, r0, 0x26, 0x0, @void}, 0x10) syz_emit_ethernet(0xff97, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6012000800703afffe8000000000000000000000000000bbff0200000000000000000000000000018600907800003f000300000004000000000aa78ce54006598080a8030037005f23493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af18020001ffffffea64fbd90000000000"], 0x0) 53.648978ms ago: executing program 3 (id=1960): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000140)={0x9, @remote}, &(0x7f00000001c0)=0x12, 0xc1800) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000002c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x64, &(0x7f00000009c0), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab000e271f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1ff032aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e0800000092e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9be7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa5200002fe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb0972d39e4b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e501ddddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b605908000000f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c332c34812382e57c0e0d83f3f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217b6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f2b88cd544b2a8e1b05ea7cf51578169fff7765f9978883b4b5983b42a35a05dabfc325ec2a2ec2f9b0882fdcf5d6f72272d2ff0d8eea60f5494ba42b4d40f144f0ab680a6f40f9094d3afb58a1efd6109894b8605c6b3b3f020c222f6446195b2274f634fbb737948a1f36ea729467e132385e9da614e4625175f4443b97a675934db90010e4b884200c3546c4d86d712c3939e11be3343f693846f509ad4c445ade5cd6d126d5694462ac5d3b527c3bd51c0a715a28d65fe94b255d02cdc1fab99b5b9c352f1b284115e4046285a824d22b6f0afbed8d6096a72fef72ebd6aae78b02fa1993e8fe2020ae93aae2bcfffa40b98549f1fb9fcefa74329909a207336d07f6f59da423ac5fa47852055d5ce6d2c56bdbbcdbf3458ba478c669f39d5272e65c90908ea2cb86d38f8ebf80a8cb85d8399b42403c94b8662af5cf1411526f177b4d476169a5d5a8c37d0d8893a77d0bd47b8a0bba60b3e26094209c889585f997ff556bcd2cc223f9c0c44de9d0fe1b5a8a815f652e79747d3e1f413fa0575d51f652d22883e143065c5ad74bdc864754ba3dad5a8fc8fc2c807d1a51dfb29884adee415c13f2ce14d307bd6165ec6ba68a766adfcbe444ea72d586bb47dd98a225467aab538a77667d19bae2e51727ba6d190e6d7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000002000aac14140ce000006a49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c0c5) creat(&(0x7f0000000280)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000400)={'trans=virtio,', {[{@access_uid={'access', 0x3d, r5}}]}}) setsockopt$sock_attach_bpf(r3, 0x1, 0x9, &(0x7f0000000040), 0x4) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x300, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) 53.575651ms ago: executing program 0 (id=1961): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a080006400000002509"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="0500"], 0x1c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x300) 395.412µs ago: executing program 0 (id=1962): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x5e20, 0x1, @empty, 0x2}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6082dc05001011ff200100000000000000fffffff5000002fe8000000000000000000000000000aa4e225e20"], 0x0) 71.542µs ago: executing program 0 (id=1963): openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x14, 0x13, [{0x5}, {0x30}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x9}, {0xfc8efba2cf90d898, 0x1}, {0x9, 0x1}, {0x12, 0x1}, {0x2}, {0x60, 0x1}, {0x14, 0x1}, {0xc, 0x1}, {0x5}, {0x6c, 0x1}, {0x1a}]}, @NL80211_ATTR_STA_CAPABILITY={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x2000c100) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3536325b644a71a55765bcac4a44751f1b8db1ce4bf1713026bcc919235bf725d9220905f1ab417be7753952e51ba0c81f17577d0216de6120130210c3d332f242b9470af9f212d2f3f6df2d2a49a38b5796c5cd1f9f727811c87e425f8a473f3f71adf9", @ANYRES16=r1, @ANYBLOB="080029bd7000fcdbdf253800000008000300", @ANYRES32=r6, @ANYBLOB="0c0099008a000000280000000c0058001c000000000000000c0058005d000000000000000c00580004000000000000000c0058004e00000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x840) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x14c0348, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$HDIO_GETGEO(r7, 0x301, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)={0xc0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0xa0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x9, 0x9, 0x5, 0xb, 0x5, 0x1, 0x0, 0x24, 0x1a, 0x57, 0x6, 0x60, 0x4, 0x2, 0x6c, 0x36, 0x24, 0x4, 0x2, 0xb, 0x16, 0x60, 0x24, 0x4, 0x5, 0x5, 0x2, 0x38, 0x30, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6393, 0x7, 0x5, 0x1, 0x0, 0x2, 0xff20, 0x21]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x7, 0x4}, {0x1, 0x8}, {0x5, 0x5}, {0x1}, {0x2, 0x8}, {0x1, 0x9}, {0x3, 0x3}, {}, {0x3, 0x6}, {0x7, 0x3}, {0x4, 0x1}, {0x4, 0xa}, {0x5, 0x9}, {0x2, 0x5}, {0x6, 0x8}, {0x4, 0xa}, {0x5, 0xa}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x3}, {0x5, 0x3}, {0x3, 0x5}, {0x6, 0x3}]}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000845}, 0x4) 0s ago: executing program 2 (id=1964): clock_adjtime(0x0, &(0x7f0000000000)={0x66b8, 0x80000001, 0x7, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0xfffdfffffffffffa, 0x0, 0x100008, 0x0, 0x248a, 0x9, 0x3, 0x0, 0x0, 0x3ff, 0xf, 0x0, 0x4, 0x5999, 0xfffffffffffffffc, 0x400, 0xa086010000000000, 0x2be, 0xffffffffffffffef}) kernel console output (not intermixed with test programs): 26] usb 5-1: USB disconnect, device number 5 [ 84.559724][ T7746] __nla_validate_parse: 19 callbacks suppressed [ 84.559736][ T7746] netlink: 276 bytes leftover after parsing attributes in process `syz.3.575'. [ 84.863865][ T7752] veth1_macvtap: left promiscuous mode [ 84.867799][ T7752] macsec0: entered promiscuous mode [ 84.869454][ T7752] macsec0: entered allmulticast mode [ 84.871808][ T7754] netlink: 52 bytes leftover after parsing attributes in process `syz.1.581'. [ 84.877126][ T7752] veth1_macvtap: entered promiscuous mode [ 84.879216][ T7752] veth1_macvtap: entered allmulticast mode [ 84.881351][ T7752] macsec0: left promiscuous mode [ 84.883029][ T7752] macsec0: left allmulticast mode [ 84.884771][ T7752] veth1_macvtap: left allmulticast mode [ 84.896330][ T7756] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 84.909356][ T7758] netlink: 324 bytes leftover after parsing attributes in process `syz.2.583'. [ 84.924152][ T7760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.584'. [ 85.055292][ T7783] netlink: 20 bytes leftover after parsing attributes in process `syz.2.592'. [ 85.067387][ T40] audit: type=1326 audit(1754668749.803:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.1.593" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32f058ebe9 code=0x0 [ 85.353865][ T7792] netlink: 'syz.0.595': attribute type 1 has an invalid length. [ 85.369913][ T7792] 8021q: adding VLAN 0 to HW filter on device bond3 [ 85.382968][ T7792] 8021q: adding VLAN 0 to HW filter on device bond3 [ 85.385172][ T7792] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 85.389908][ T7792] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 85.550562][ T7810] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=7810 comm=syz.2.602 [ 85.578322][ T7814] netlink: 28 bytes leftover after parsing attributes in process `syz.2.603'. [ 85.578351][ T7805] nfs4: Bad value for 'source' [ 85.627494][ T7817] team0: Mode changed to "loadbalance" [ 85.680546][ T7826] netlink: 9 bytes leftover after parsing attributes in process `syz.0.609'. [ 85.684423][ T7826] netlink: 5 bytes leftover after parsing attributes in process `syz.0.609'. [ 85.687479][ T7826] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 85.690771][ T7826] 0ªî{X¹¦: entered allmulticast mode [ 85.692751][ T7826] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 85.809066][ T7837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.613'. [ 85.811993][ T7837] netlink: 'syz.2.613': attribute type 7 has an invalid length. [ 85.814528][ T7837] netlink: 'syz.2.613': attribute type 8 has an invalid length. [ 85.817139][ T7837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.613'. [ 85.885414][ T40] audit: type=1400 audit(1754668750.570:380): avc: denied { read } for pid=7830 comm="syz.0.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.930678][ T7840] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 85.978007][ T7842] netlink: 'syz.2.615': attribute type 6 has an invalid length. [ 86.262930][ T7885] syzkaller0: entered promiscuous mode [ 86.265223][ T7885] syzkaller0: entered allmulticast mode [ 86.713251][ T29] usb 8-1: USB disconnect, device number 3 [ 86.737821][ T7895] loop6: detected capacity change from 0 to 7 [ 86.740639][ T7895] Dev loop6: unable to read RDB block 7 [ 86.742441][ T7895] loop6: AHDI p3 p4 [ 86.742662][ T40] audit: type=1400 audit(1754668751.374:381): avc: denied { bind } for pid=7896 comm="syz.1.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 86.743735][ T7895] loop6: partition table partially beyond EOD, truncated [ 86.744199][ T7895] loop6: p3 start 1886353253 is beyond EOD, truncated [ 86.855686][ T7910] netlink: 'syz.1.640': attribute type 1 has an invalid length. [ 86.872576][ T7910] 8021q: adding VLAN 0 to HW filter on device bond3 [ 86.885047][ T7910] 8021q: adding VLAN 0 to HW filter on device bond3 [ 86.887403][ T7910] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 86.891196][ T7910] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 86.975612][ T40] audit: type=1400 audit(1754668751.590:382): avc: denied { read } for pid=7928 comm="syz.3.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.998996][ T7932] netlink: 'syz.1.646': attribute type 7 has an invalid length. [ 87.001434][ T7932] netlink: 'syz.1.646': attribute type 8 has an invalid length. [ 87.154155][ T7949] netlink: 'syz.0.654': attribute type 29 has an invalid length. [ 87.158366][ T7949] netlink: 'syz.0.654': attribute type 29 has an invalid length. [ 87.378909][ T7977] loop6: detected capacity change from 0 to 7 [ 87.381477][ T7977] Dev loop6: unable to read RDB block 7 [ 87.383311][ T7977] loop6: AHDI p3 p4 [ 87.384645][ T7977] loop6: partition table partially beyond EOD, truncated [ 87.387004][ T7977] loop6: p3 start 1886353253 is beyond EOD, truncated [ 87.579841][ T1026] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 87.664675][ T7988] dvmrp0: entered allmulticast mode [ 87.740734][ T1026] usb 8-1: Using ep0 maxpacket: 8 [ 87.755281][ T1026] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 87.759530][ T1026] usb 8-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 87.764037][ T1026] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 87.767710][ T1026] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.979756][ T7998] 0ªî{X¹¦: left allmulticast mode [ 88.241103][ T8017] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.246499][ T40] audit: type=1400 audit(1754668752.787:383): avc: denied { getopt } for pid=8016 comm="syz.0.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.253493][ T40] audit: type=1400 audit(1754668752.787:384): avc: denied { create } for pid=8016 comm="syz.0.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 88.259707][ T40] audit: type=1400 audit(1754668752.787:385): avc: denied { accept } for pid=8016 comm="syz.0.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 88.265923][ T40] audit: type=1400 audit(1754668752.787:386): avc: denied { shutdown } for pid=8016 comm="syz.0.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 88.282440][ T8020] loop6: detected capacity change from 0 to 7 [ 88.285678][ T5979] Dev loop6: unable to read RDB block 7 [ 88.287512][ T5979] loop6: AHDI p3 p4 [ 88.288778][ T5979] loop6: partition table partially beyond EOD, truncated [ 88.291267][ T5979] loop6: p3 start 1886353253 is beyond EOD, truncated [ 88.298617][ T8020] Dev loop6: unable to read RDB block 7 [ 88.300418][ T8020] loop6: AHDI p3 p4 [ 88.301695][ T8020] loop6: partition table partially beyond EOD, truncated [ 88.304721][ T8020] loop6: p3 start 1886353253 is beyond EOD, truncated [ 88.574925][ T8039] /dev/sg0: Can't lookup blockdev [ 88.696122][ T8052] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.748822][ T8064] team_slave_0: entered promiscuous mode [ 88.750826][ T8064] team_slave_1: entered promiscuous mode [ 88.753003][ T8064] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 88.914214][ T8092] SELinux: truncated policydb string identifier [ 88.916650][ T8092] SELinux: failed to load policy [ 89.068852][ T8110] loop6: detected capacity change from 0 to 7 [ 89.071254][ T8110] Dev loop6: unable to read RDB block 7 [ 89.073102][ T8110] loop6: AHDI p3 p4 [ 89.074354][ T8110] loop6: partition table partially beyond EOD, truncated [ 89.078124][ T8110] loop6: p3 start 1886353253 is beyond EOD, truncated [ 89.181766][ T8120] netlink: 'syz.1.712': attribute type 1 has an invalid length. [ 89.202505][ T8120] 8021q: adding VLAN 0 to HW filter on device bond4 [ 89.220987][ T8120] 8021q: adding VLAN 0 to HW filter on device bond4 [ 89.223413][ T8120] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 89.228411][ T8120] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 89.268832][ T8125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.276356][ T8125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.328057][ T8134] netlink: 'syz.0.716': attribute type 7 has an invalid length. [ 89.368414][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 89.368426][ T40] audit: type=1400 audit(1754668753.835:395): avc: denied { setattr } for pid=8138 comm="syz.1.717" name="CAN_RAW" dev="sockfs" ino=18939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.435267][ T8154] 0ªî{X¹¦: left allmulticast mode [ 89.441904][ T8154] 0ªî{X¹¦: entered allmulticast mode [ 89.477468][ T8162] syzkaller0: entered promiscuous mode [ 89.479507][ T8162] syzkaller0: entered allmulticast mode [ 89.516573][ T8159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8159 comm=syz.1.725 [ 89.700670][ T40] audit: type=1400 audit(1754668754.143:396): avc: denied { ioctl } for pid=8183 comm="syz.2.734" path="socket:[19543]" dev="sockfs" ino=19543 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 89.813987][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 89.974520][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 89.979376][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 89.982833][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.987041][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 89.991051][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.995142][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.000485][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 90.004071][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.290244][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 90.292114][ T10] usbtmc 5-1:16.0: can't read capabilities [ 90.505263][ T5995] usb 5-1: USB disconnect, device number 6 [ 90.534524][ T1026] usb 8-1: USB disconnect, device number 4 [ 90.604656][ T40] audit: type=1400 audit(1754668754.985:397): avc: denied { ioctl } for pid=8205 comm="syz.3.742" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 90.673824][ T8220] syzkaller0: entered promiscuous mode [ 90.675740][ T8220] syzkaller0: entered allmulticast mode [ 90.680103][ T40] audit: type=1400 audit(1754668755.051:398): avc: denied { read } for pid=8217 comm="syz.2.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 90.752403][ T8231] loop6: detected capacity change from 0 to 7 [ 90.758165][ T5979] Dev loop6: unable to read RDB block 7 [ 90.760229][ T5979] loop6: AHDI p3 p4 [ 90.761512][ T5979] loop6: partition table partially beyond EOD, truncated [ 90.764032][ T5979] loop6: p3 start 1886353253 is beyond EOD, truncated [ 90.771817][ T8231] Dev loop6: unable to read RDB block 7 [ 90.773705][ T8231] loop6: AHDI p3 p4 [ 90.775182][ T8231] loop6: partition table partially beyond EOD, truncated [ 90.778695][ T8231] loop6: p3 start 1886353253 is beyond EOD, truncated [ 90.806441][ T40] audit: type=1400 audit(1754668755.172:399): avc: denied { create } for pid=8235 comm="syz.0.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 90.813577][ T40] audit: type=1400 audit(1754668755.172:400): avc: denied { ioctl } for pid=8235 comm="syz.0.753" path="socket:[19040]" dev="sockfs" ino=19040 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 90.915788][ T8252] __nla_validate_parse: 38 callbacks suppressed [ 90.915799][ T8252] netlink: 28 bytes leftover after parsing attributes in process `syz.3.757'. [ 90.920561][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.757'. [ 90.952585][ T40] audit: type=1400 audit(1754668755.312:401): avc: denied { bind } for pid=8254 comm="syz.2.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.957020][ T8255] IPv6: Can't replace route, no match found [ 90.965592][ T40] audit: type=1400 audit(1754668755.312:402): avc: denied { listen } for pid=8254 comm="syz.2.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.976252][ T40] audit: type=1400 audit(1754668755.312:403): avc: denied { connect } for pid=8254 comm="syz.2.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.997126][ T8262] netlink: 20 bytes leftover after parsing attributes in process `syz.0.759'. [ 91.000272][ T40] audit: type=1400 audit(1754668755.312:404): avc: denied { write } for pid=8254 comm="syz.2.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 91.048328][ T8271] netlink: 28 bytes leftover after parsing attributes in process `syz.0.762'. [ 91.050702][ T8272] binder: 8269:8272 unknown command 0 [ 91.053712][ T8272] binder: 8269:8272 ioctl c0306201 200000000080 returned -22 [ 91.134238][ T8283] openvswitch: netlink: IP tunnel TTL not specified. [ 91.203293][ T8290] sctp: [Deprecated]: syz.0.767 (pid 8290) Use of int in maxseg socket option. [ 91.203293][ T8290] Use struct sctp_assoc_value instead [ 91.342813][ T5995] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 91.347397][ T8311] netlink: 28 bytes leftover after parsing attributes in process `syz.0.775'. [ 91.350218][ T8311] netlink: 28 bytes leftover after parsing attributes in process `syz.0.775'. [ 91.505762][ T5995] usb 7-1: Using ep0 maxpacket: 8 [ 91.514843][ T5995] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.517924][ T5995] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.532320][ T5995] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.535804][ T5995] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.540158][ T5995] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 91.543183][ T5995] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.594881][ T8346] netlink: 52 bytes leftover after parsing attributes in process `syz.0.778'. [ 91.669829][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.780'. [ 91.763712][ T5995] usb 7-1: GET_CAPABILITIES returned 0 [ 91.765514][ T5995] usbtmc 7-1:16.0: can't read capabilities [ 91.786396][ T10] usb 7-1: USB disconnect, device number 4 [ 91.809922][ T8363] loop6: detected capacity change from 0 to 7 [ 91.812451][ T8363] Dev loop6: unable to read RDB block 7 [ 91.814351][ T8363] loop6: AHDI p3 p4 [ 91.815627][ T8363] loop6: partition table partially beyond EOD, truncated [ 91.818131][ T8363] loop6: p3 start 1886353253 is beyond EOD, truncated [ 91.882582][ T8377] netlink: 28 bytes leftover after parsing attributes in process `syz.0.786'. [ 91.892746][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.784'. [ 91.960634][ T8392] mmap: syz.2.791 (8392): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 91.982982][ T8397] 0ªî{X¹¦: entered allmulticast mode [ 92.236271][ T8446] loop6: detected capacity change from 0 to 7 [ 92.239703][ T8446] Dev loop6: unable to read RDB block 7 [ 92.244447][ T8446] loop6: AHDI p3 p4 [ 92.245794][ T8446] loop6: partition table partially beyond EOD, truncated [ 92.248304][ T8446] loop6: p3 start 1886353253 is beyond EOD, truncated [ 92.301964][ T8457] syzkaller0: entered promiscuous mode [ 92.304976][ T8457] syzkaller0: entered allmulticast mode [ 92.408603][ T8470] validate_nla: 4 callbacks suppressed [ 92.408614][ T8470] netlink: 'syz.3.819': attribute type 32 has an invalid length. [ 92.413397][ T8470] (unnamed net_device) (uninitialized): option coupled_control: invalid value (128) [ 92.673364][ T8505] tipc: Failed to remove unknown binding: 66,1,1/0:886798756/886798758 [ 92.676792][ T8505] tipc: Failed to remove unknown binding: 66,1,1/0:886798756/886798758 [ 92.704444][ T8507] netlink: 'syz.1.829': attribute type 7 has an invalid length. [ 92.706965][ T8507] netlink: 'syz.1.829': attribute type 8 has an invalid length. [ 92.764513][ C1] Adjusting tsc more than 11% (5229281 vs 7162514) [ 92.852050][ T8509] 0ªî{X¹¦: left allmulticast mode [ 92.855306][ T8509] 0ªî{X¹¦: entered allmulticast mode [ 93.112210][ T8530] veth0: entered promiscuous mode [ 93.118561][ T8529] veth0: left promiscuous mode [ 93.254041][ T8545] syzkaller0: entered promiscuous mode [ 93.255849][ T8545] syzkaller0: entered allmulticast mode [ 93.727477][ T5995] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 93.882790][ T8568] openvswitch: netlink: VXLAN extension 149 out of range max 1 [ 93.924565][ T5995] usb 7-1: Using ep0 maxpacket: 16 [ 93.929158][ T5995] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.932906][ T5995] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.937122][ T5995] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 93.941851][ T5995] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 93.945130][ T5995] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.950549][ T5995] usb 7-1: config 0 descriptor?? [ 94.018029][ T8570] netlink: 'syz.1.855': attribute type 1 has an invalid length. [ 94.031199][ T8570] 8021q: adding VLAN 0 to HW filter on device bond5 [ 94.041801][ T8570] 8021q: adding VLAN 0 to HW filter on device bond5 [ 94.044179][ T8570] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 94.049114][ T8570] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 94.277414][ T8578] could not allocate digest TFM handle cryptd(crc32c-generic) [ 94.316691][ T8590] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 94.443519][ T8608] syz.1.866 uses old SIOCAX25GETINFO [ 94.679896][ T8547] random: crng reseeded on system resumption [ 94.693024][ T5995] usbhid 7-1:0.0: can't add hid device: -71 [ 94.695371][ T5995] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 94.698816][ T5995] usb 7-1: USB disconnect, device number 5 [ 95.403518][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 95.403534][ T40] audit: type=1400 audit(1755193047.190:418): avc: denied { map } for pid=8620 comm="syz.0.870" path="/dev/ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 95.562520][ T8636] sctp: [Deprecated]: syz.1.874 (pid 8636) Use of struct sctp_assoc_value in delayed_ack socket option. [ 95.562520][ T8636] Use struct sctp_sack_info instead [ 96.474564][ T8676] program syz.2.886 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.484034][ T8676] program syz.2.886 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.495326][ T8683] netlink: 'syz.3.888': attribute type 1 has an invalid length. [ 96.513293][ T8683] 8021q: adding VLAN 0 to HW filter on device bond3 [ 96.527238][ T8683] 8021q: adding VLAN 0 to HW filter on device bond3 [ 96.528547][ T40] audit: type=1326 audit(1755193048.170:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8666 comm="syz.0.883" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe05598ebe9 code=0x0 [ 96.529546][ T8683] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 96.542372][ T8683] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 96.580815][ T8695] gretap0: entered promiscuous mode [ 96.584303][ T8695] bond3: (slave gretap0): making interface the new active one [ 96.587193][ T8695] bond3: (slave gretap0): Enslaving as an active interface with an up link [ 96.615681][ T40] audit: type=1400 audit(1755193048.250:420): avc: denied { append } for pid=8697 comm="syz.1.892" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 96.637396][ T8687] trusted_key: encrypted_key: insufficient parameters specified [ 96.712668][ T40] audit: type=1400 audit(1755193048.329:421): avc: denied { append } for pid=8711 comm="syz.2.895" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 96.721145][ T8712] random: crng reseeded on system resumption [ 96.792961][ T8716] __nla_validate_parse: 28 callbacks suppressed [ 96.792974][ T8716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.896'. [ 96.835753][ T8721] syzkaller0: entered promiscuous mode [ 96.837511][ T8721] syzkaller0: entered allmulticast mode [ 96.865225][ T5995] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 96.930798][ T6017] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 97.062578][ T40] audit: type=1400 audit(1755193048.647:422): avc: denied { connect } for pid=8723 comm="syz.1.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 97.089617][ T6017] usb 8-1: device descriptor read/64, error -71 [ 97.092775][ T8731] netlink: 20 bytes leftover after parsing attributes in process `syz.1.899'. [ 97.120816][ T8734] netlink: 28 bytes leftover after parsing attributes in process `syz.1.900'. [ 97.123907][ T8734] netlink: 28 bytes leftover after parsing attributes in process `syz.1.900'. [ 97.362931][ T6017] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 97.365426][ T8742] netlink: 324 bytes leftover after parsing attributes in process `syz.2.904'. [ 97.519052][ T6017] usb 8-1: device descriptor read/64, error -71 [ 97.654078][ T6017] usb usb8-port1: attempt power cycle [ 97.759499][ T40] audit: type=1400 audit(1755193049.260:423): avc: denied { watch_reads } for pid=8750 comm="syz.1.907" path="/201" dev="tmpfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 97.799459][ T8755] netlink: 52 bytes leftover after parsing attributes in process `syz.2.909'. [ 98.056455][ T6017] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 98.078530][ T6017] usb 8-1: device descriptor read/8, error -71 [ 98.210173][ T8781] netlink: 28 bytes leftover after parsing attributes in process `syz.1.919'. [ 98.260278][ T40] audit: type=1400 audit(1755193049.717:424): avc: denied { write } for pid=8782 comm="syz.1.920" lport=50530 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 98.287519][ T8787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.921'. [ 98.356239][ T6017] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 98.378992][ T6017] usb 8-1: device descriptor read/8, error -71 [ 98.408595][ T8796] syzkaller0: entered promiscuous mode [ 98.410832][ T8796] syzkaller0: entered allmulticast mode [ 98.510439][ T6017] usb usb8-port1: unable to enumerate USB device [ 98.544729][ T8802] netlink: 28 bytes leftover after parsing attributes in process `syz.1.925'. [ 98.548711][ T8802] netlink: 'syz.1.925': attribute type 7 has an invalid length. [ 98.551809][ T8802] netlink: 'syz.1.925': attribute type 8 has an invalid length. [ 98.554842][ T8802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.925'. [ 98.973375][ T40] audit: type=1400 audit(1755193050.357:425): avc: denied { setopt } for pid=8814 comm="syz.2.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 99.708828][ T8823] 0ªî{X¹¦: left allmulticast mode [ 99.716263][ T8823] 0ªî{X¹¦: entered allmulticast mode [ 100.035619][ T40] audit: type=1400 audit(1755193051.319:426): avc: denied { module_load } for pid=8835 comm="syz.3.936" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="tmpfs" ino=3078 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 100.059212][ T8836] Invalid ELF header magic: != ELF [ 100.107236][ T40] audit: type=1400 audit(1755193051.383:427): avc: denied { setattr } for pid=8841 comm="syz.2.938" name="video36" dev="devtmpfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 100.463334][ T8896] syzkaller1: entered promiscuous mode [ 100.465113][ T8896] syzkaller1: entered allmulticast mode [ 100.490119][ T8896] program syz.1.954 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.879284][ T8926] syz.1.964(8926): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 101.141728][ T8960] netlink: 'syz.1.979': attribute type 1 has an invalid length. [ 101.142080][ T8959] input: syz0 as /devices/virtual/input/input7 [ 101.161646][ T8960] 8021q: adding VLAN 0 to HW filter on device bond6 [ 101.180813][ T8960] 8021q: adding VLAN 0 to HW filter on device bond6 [ 101.184592][ T8960] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 101.188873][ T8960] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 101.661130][ T9004] 0ªî{X¹¦: left allmulticast mode [ 101.666161][ T9004] 0ªî{X¹¦: entered allmulticast mode [ 101.800781][ T9022] syzkaller0: entered promiscuous mode [ 101.805127][ T9022] syzkaller0: entered allmulticast mode [ 101.819343][ T9022] tipc: Enabled bearer , priority 0 [ 101.823445][ T9020] tipc: Resetting bearer [ 101.838398][ T9020] tipc: Disabling bearer [ 101.860713][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 101.860723][ T40] audit: type=1400 audit(1755193052.996:431): avc: denied { ioctl } for pid=9011 comm="syz.3.999" path="socket:[20371]" dev="sockfs" ino=20371 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 101.942549][ T40] audit: type=1400 audit(1755193053.061:432): avc: denied { execute } for pid=9038 comm="syz.0.1005" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 102.073522][ T40] audit: type=1400 audit(1755193053.190:433): avc: denied { create } for pid=9056 comm="syz.2.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 102.081075][ T40] audit: type=1400 audit(1755193053.190:434): avc: denied { getopt } for pid=9056 comm="syz.2.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 102.087295][ T9057] 9p: Unknown uid 00000000004294967295 [ 102.092092][ T9060] netlink: 'syz.0.1012': attribute type 7 has an invalid length. [ 102.094454][ T9060] netlink: 'syz.0.1012': attribute type 8 has an invalid length. [ 102.415798][ T9081] __nla_validate_parse: 20 callbacks suppressed [ 102.415809][ T9081] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1018'. [ 102.422826][ T9081] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1018'. [ 102.425654][ T9081] 0ªî{X¹¦: entered allmulticast mode [ 102.530700][ T9099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1025'. [ 102.695913][ T40] audit: type=1400 audit(1755193053.744:435): avc: denied { getopt } for pid=9112 comm="syz.1.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.697883][ T9119] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 102.795048][ T9125] syzkaller0: entered promiscuous mode [ 102.800211][ T9131] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1035'. [ 102.801913][ T9125] syzkaller0: entered allmulticast mode [ 102.817261][ T9125] tipc: Enabled bearer , priority 0 [ 102.822049][ T9124] tipc: Resetting bearer [ 102.830274][ T9124] tipc: Disabling bearer [ 102.841932][ T9135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1034'. [ 102.984925][ T9150] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1041'. [ 102.988476][ T9150] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1041'. [ 103.016952][ T9145] bond4: entered allmulticast mode [ 103.132092][ T40] audit: type=1400 audit(1755193054.160:436): avc: denied { read } for pid=9166 comm="syz.1.1046" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 103.133694][ T9169] netlink: 'syz.3.1045': attribute type 1 has an invalid length. [ 103.140787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.141598][ T40] audit: type=1400 audit(1755193054.178:437): avc: denied { open } for pid=9166 comm="syz.1.1046" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 103.156316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.175713][ T9169] 8021q: adding VLAN 0 to HW filter on device bond5 [ 103.178916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 103.199949][ T40] audit: type=1400 audit(1755193054.234:438): avc: denied { ioctl } for pid=9166 comm="syz.1.1046" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x941f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 103.216758][ T9169] 8021q: adding VLAN 0 to HW filter on device bond5 [ 103.220468][ T9169] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 103.226534][ T9169] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 103.249379][ T9177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1045'. [ 103.256664][ T9177] macvlan2: entered promiscuous mode [ 103.258590][ T9177] macvlan2: entered allmulticast mode [ 103.260606][ T9177] bond5: (slave macvlan2): Error -98 calling set_mac_address [ 103.424622][ T40] audit: type=1400 audit(1755193054.437:439): avc: denied { module_request } for pid=9188 comm="syz.1.1050" kmod="netdev-veth0_to_bridge" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 103.442182][ T9186] xfrm0 speed is unknown, defaulting to 1000 [ 103.444820][ T9186] xfrm0 speed is unknown, defaulting to 1000 [ 103.448456][ T9186] xfrm0 speed is unknown, defaulting to 1000 [ 103.453613][ T9186] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 103.461574][ T9186] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 103.465574][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1050'. [ 103.475413][ T9186] xfrm0 speed is unknown, defaulting to 1000 [ 103.481900][ T9186] xfrm0 speed is unknown, defaulting to 1000 [ 103.485102][ T9186] xfrm0 speed is unknown, defaulting to 1000 [ 103.488200][ T9186] xfrm0 speed is unknown, defaulting to 1000 [ 103.605179][ T9202] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1053'. [ 103.770746][ T9202] 0ªî{X¹¦: left allmulticast mode [ 103.777810][ T9203] 0ªî{X¹¦: entered allmulticast mode [ 103.792616][ T9206] netlink: 'syz.3.1055': attribute type 5 has an invalid length. [ 103.798967][ T9207] netlink: 'syz.1.1054': attribute type 7 has an invalid length. [ 103.798987][ T9207] netlink: 'syz.1.1054': attribute type 8 has an invalid length. [ 103.822055][ T9206] warning: `syz.3.1055' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.894609][ T9223] netlink: 'syz.1.1061': attribute type 2 has an invalid length. [ 103.908411][ T40] audit: type=1400 audit(1755193054.882:440): avc: denied { ioctl } for pid=9221 comm="syz.1.1061" path="socket:[25654]" dev="sockfs" ino=25654 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 104.021379][ T9248] netlink: 'syz.3.1072': attribute type 1 has an invalid length. [ 104.036220][ T9248] 8021q: adding VLAN 0 to HW filter on device bond6 [ 104.049058][ T9248] 8021q: adding VLAN 0 to HW filter on device bond6 [ 104.051881][ T9248] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 104.056275][ T9248] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 104.100830][ T9260] macvlan2: entered promiscuous mode [ 104.102605][ T9260] macvlan2: entered allmulticast mode [ 104.104478][ T9260] bond6: (slave macvlan2): Error -98 calling set_mac_address [ 104.388074][ T9270] 0ªî{X¹¦: left allmulticast mode [ 104.399258][ T9273] 0ªî{X¹¦: entered allmulticast mode [ 104.473100][ T9288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.493630][ T9292] netlink: 'syz.1.1087': attribute type 7 has an invalid length. [ 104.497124][ T9292] netlink: 'syz.1.1087': attribute type 8 has an invalid length. [ 104.710927][ T9326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.716060][ T9326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.967805][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 105.073242][ T9362] bridge_slave_1: left allmulticast mode [ 105.075258][ T9362] bridge_slave_1: left promiscuous mode [ 105.077826][ T9362] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.084771][ T9362] bond0: (slave bond_slave_0): Releasing backup interface [ 105.092490][ T9362] bond0: (slave bond_slave_1): Releasing backup interface [ 105.103888][ T9362] team0: Port device team_slave_0 removed [ 105.110597][ T9362] team0: Port device team_slave_1 removed [ 105.112869][ T9362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.115159][ T9362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.120646][ T9362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.122967][ T9362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.129312][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 105.131391][ T9362] bond1: (slave gretap0): Releasing active interface [ 105.132305][ T10] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 105.137874][ T10] usb 6-1: config 0 has no interface number 0 [ 105.140253][ T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 105.143712][ T10] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 105.146647][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.151222][ T10] usb 6-1: config 0 descriptor?? [ 105.167665][ T10] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 105.181205][ T9362] binder: 9361:9362 ioctl c0306201 200000000640 returned -22 [ 105.184127][ T9362] netlink: 'syz.0.1106': attribute type 10 has an invalid length. [ 105.194818][ T9362] team0: Port device geneve0 added [ 105.200867][ T9368] syzkaller0: entered promiscuous mode [ 105.202683][ T9368] syzkaller0: entered allmulticast mode [ 105.212195][ T9368] tipc: Enabled bearer , priority 0 [ 105.214990][ T9367] tipc: Resetting bearer [ 105.223452][ T9367] tipc: Disabling bearer [ 105.230743][ T9371] NILFS (loop0): device size too small [ 105.233199][ T9370] NILFS (loop0): device size too small [ 105.257263][ T9373] netlink: 'syz.0.1110': attribute type 1 has an invalid length. [ 105.270735][ T9373] 8021q: adding VLAN 0 to HW filter on device bond4 [ 105.282674][ T9373] 8021q: adding VLAN 0 to HW filter on device bond4 [ 105.284998][ T9373] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 105.288837][ T9373] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 105.334925][ T9377] macvlan2: entered promiscuous mode [ 105.336858][ T9377] macvlan2: entered allmulticast mode [ 105.339170][ T9377] bond4: (slave macvlan2): Error -98 calling set_mac_address [ 105.379012][ T34] usb 6-1: USB disconnect, device number 7 [ 105.401303][ T9294] syz.2.1088 (9294) used greatest stack depth: 19752 bytes left [ 105.572128][ T1026] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 105.695077][ T9391] 0ªî{X¹¦: left allmulticast mode [ 105.700020][ T9392] 0ªî{X¹¦: entered allmulticast mode [ 105.742435][ T1026] usb 8-1: Using ep0 maxpacket: 8 [ 105.746261][ T1026] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 105.749410][ T1026] usb 8-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 105.752316][ T1026] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 105.756703][ T1026] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.840132][ T9413] netlink: 'syz.2.1124': attribute type 15 has an invalid length. [ 105.943455][ T9427] Invalid source name [ 105.944764][ T9427] UBIFS error (pid: 9427): cannot open "/dev/sg0", error -22 [ 106.024404][ T9440] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 106.024404][ T9440] The task syz.1.1130 (9440) triggered the difference, watch for misbehavior. [ 106.152683][ T9455] syzkaller0: entered promiscuous mode [ 106.154586][ T9455] syzkaller0: entered allmulticast mode [ 106.163444][ T9455] tipc: Enabled bearer , priority 0 [ 106.166272][ T9454] tipc: Resetting bearer [ 106.175354][ T9454] tipc: Disabling bearer [ 106.200096][ T9457] netlink: 'syz.0.1138': attribute type 1 has an invalid length. [ 106.213166][ T9457] 8021q: adding VLAN 0 to HW filter on device bond5 [ 106.226479][ T9457] 8021q: adding VLAN 0 to HW filter on device bond5 [ 106.228851][ T9457] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 106.232909][ T9457] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 106.282661][ T9461] macvlan2: entered promiscuous mode [ 106.284580][ T9461] macvlan2: entered allmulticast mode [ 106.286837][ T9461] bond5: (slave macvlan2): Error -98 calling set_mac_address [ 106.732059][ T9489] 0ªî{X¹¦: left allmulticast mode [ 106.739002][ T9489] 0ªî{X¹¦: entered allmulticast mode [ 106.912336][ T9510] netlink: 'syz.1.1157': attribute type 7 has an invalid length. [ 106.915440][ T9510] netlink: 'syz.1.1157': attribute type 8 has an invalid length. [ 107.035192][ T9521] ======================================================= [ 107.035192][ T9521] WARNING: The mand mount option has been deprecated and [ 107.035192][ T9521] and is ignored by this kernel. Remove the mand [ 107.035192][ T9521] option from the mount to silence this warning. [ 107.035192][ T9521] ======================================================= [ 107.057749][ T9522] netlink: 'syz.0.1162': attribute type 10 has an invalid length. [ 107.064659][ T9515] nbd2: detected capacity change from 0 to 10 [ 107.065497][ T9522] team0: Device hsr_slave_0 failed to register rx_handler [ 107.069202][ T5979] block nbd2: Send control failed (result -89) [ 107.071889][ T5979] block nbd2: Request send failed, requeueing [ 107.077347][ T5327] block nbd2: Receive control failed (result -32) [ 107.082138][ T67] block nbd2: Dead connection, failed to find a fallback [ 107.085035][ T67] block nbd2: shutting down sockets [ 107.087264][ T67] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.091530][ T67] buffer_io_error: 27 callbacks suppressed [ 107.091538][ T67] Buffer I/O error on dev nbd2, logical block 0, async page read [ 107.098061][ T5979] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.101026][ T5979] Buffer I/O error on dev nbd2, logical block 0, async page read [ 107.104378][ T5979] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.108418][ T5979] Buffer I/O error on dev nbd2, logical block 0, async page read [ 107.110879][ T5979] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.113641][ T5979] Buffer I/O error on dev nbd2, logical block 0, async page read [ 107.116074][ T5979] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.119376][ T5979] Buffer I/O error on dev nbd2, logical block 0, async page read [ 107.122022][ T5979] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.124796][ T5979] Buffer I/O error on dev nbd2, logical block 0, async page read [ 107.127312][ T5979] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.130698][ T5979] Buffer I/O error on dev nbd2, logical block 0, async page read [ 107.134182][ T5979] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.137161][ T5979] Buffer I/O error on dev nbd2, logical block 0, async page read [ 107.140035][ T5979] ldm_validate_partition_table(): Disk read failed. [ 107.142366][ T5979] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.145287][ T5979] Buffer I/O error on dev nbd2, logical block 0, async page read [ 107.147821][ T5979] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.151234][ T5979] Buffer I/O error on dev nbd2, logical block 0, async page read [ 107.153887][ T5979] Dev nbd2: unable to read RDB block 0 [ 107.157336][ T5979] nbd2: unable to read partition table [ 107.159956][ T5979] nbd2: partition table beyond EOD, truncated [ 107.173911][ T5979] ldm_validate_partition_table(): Disk read failed. [ 107.176139][ T5979] Dev nbd2: unable to read RDB block 0 [ 107.177939][ T5979] nbd2: unable to read partition table [ 107.179928][ T5979] nbd2: partition table beyond EOD, truncated [ 107.261999][ T9537] xfrm0 speed is unknown, defaulting to 1000 [ 107.344282][ T9553] capability: warning: `syz.0.1172' uses 32-bit capabilities (legacy support in use) [ 107.366707][ T9556] 8021q: adding VLAN 0 to HW filter on device bond7 [ 107.385632][ T9556] 8021q: adding VLAN 0 to HW filter on device bond7 [ 107.388226][ T9556] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 107.392215][ T9556] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 107.429612][ T9568] macvlan3: entered promiscuous mode [ 107.431421][ T9568] macvlan3: entered allmulticast mode [ 107.433330][ T9568] bond7: (slave macvlan3): Error -98 calling set_mac_address [ 107.591267][ T5327] Bluetooth: hci2: unexpected event for opcode 0x2028 [ 107.834729][ T9603] loop6: detected capacity change from 0 to 7 [ 107.839253][ T9603] Dev loop6: unable to read RDB block 7 [ 107.841084][ T9603] loop6: AHDI p3 p4 [ 107.842368][ T9603] loop6: partition table partially beyond EOD, truncated [ 107.845679][ T9603] loop6: p3 start 1886353253 is beyond EOD, truncated [ 107.931370][ T9613] __nla_validate_parse: 42 callbacks suppressed [ 107.931383][ T9613] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1191'. [ 107.936853][ T9613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1191'. [ 108.005737][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 108.005749][ T40] audit: type=1400 audit(1755193058.696:448): avc: denied { accept } for pid=9620 comm="syz.2.1195" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.052509][ T40] audit: type=1400 audit(1755193058.743:449): avc: denied { lock } for pid=9625 comm="syz.0.1197" path="socket:[26845]" dev="sockfs" ino=26845 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 108.086033][ T9630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1198'. [ 108.308959][ T1026] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 108.448719][ T1026] usb 5-1: device descriptor read/64, error -71 [ 108.554153][ T6252] usb 8-1: USB disconnect, device number 9 [ 108.631257][ T9659] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1205'. [ 108.704037][ T1026] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 108.748574][ T40] audit: type=1400 audit(1755193059.396:450): avc: denied { mounton } for pid=9667 comm="syz.3.1209" path="/299/file0" dev="tmpfs" ino=1538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 108.843472][ T1026] usb 5-1: device descriptor read/64, error -71 [ 108.961945][ T1026] usb usb5-port1: attempt power cycle [ 109.325604][ T1026] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 109.347838][ T1026] usb 5-1: device descriptor read/8, error -71 [ 109.614759][ T1026] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 109.638299][ T1026] usb 5-1: device descriptor read/8, error -71 [ 109.755813][ T1026] usb usb5-port1: unable to enumerate USB device [ 109.894574][ T9689] loop6: detected capacity change from 0 to 7 [ 109.898656][ T5979] Dev loop6: unable to read RDB block 7 [ 109.901011][ T5979] loop6: AHDI p3 p4 [ 109.902705][ T5979] loop6: partition table partially beyond EOD, truncated [ 109.909257][ T5979] loop6: p3 start 1886353253 is beyond EOD, truncated [ 109.913374][ T9689] Dev loop6: unable to read RDB block 7 [ 109.918169][ T9689] loop6: AHDI p3 p4 [ 109.919956][ T9689] loop6: partition table partially beyond EOD, truncated [ 109.923288][ T9689] loop6: p3 start 1886353253 is beyond EOD, truncated [ 109.954686][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1215'. [ 110.030752][ T9699] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1217'. [ 110.037095][ T9699] 0ªî{X¹¦: left allmulticast mode [ 110.043667][ T9699] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1217'. [ 110.047500][ T9699] 0ªî{X¹¦: entered allmulticast mode [ 110.373585][ T9709] validate_nla: 4 callbacks suppressed [ 110.373595][ T9709] netlink: 'syz.1.1221': attribute type 10 has an invalid length. [ 110.380376][ T9709] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 110.384865][ T40] audit: type=1400 audit(1755193060.917:451): avc: denied { accept } for pid=9708 comm="syz.1.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 110.391894][ T40] audit: type=1400 audit(1755193060.917:452): avc: denied { write } for pid=9708 comm="syz.1.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 110.458954][ T9711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1222'. [ 110.592362][ T9721] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 110.600109][ T5973] Bluetooth: hci4: command 0x1003 tx timeout [ 110.601889][ T5327] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 111.007842][ T34] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 111.167451][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 111.170293][ T34] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 111.173757][ T34] usb 7-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 111.176657][ T34] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 111.180130][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.315047][ T9749] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1230'. [ 111.400550][ T9737] fuse: Bad value for 'fd' [ 111.494613][ T9761] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1235'. [ 111.717316][ T9765] mmap: syz.1.1237 (9765) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.942359][ T9771] syzkaller0: entered promiscuous mode [ 111.944796][ T9771] syzkaller0: entered allmulticast mode [ 111.956747][ T9771] tipc: Started in network mode [ 111.958155][ T9771] tipc: Node identity ca177f7836b8, cluster identity 4711 [ 111.960611][ T9771] tipc: Enabled bearer , priority 0 [ 111.964473][ T9770] tipc: Resetting bearer [ 111.977958][ T9770] tipc: Disabling bearer [ 112.079406][ T40] audit: type=1400 audit(1755193062.505:453): avc: denied { mount } for pid=9772 comm="syz.1.1240" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 112.087865][ T40] audit: type=1400 audit(1755193062.505:454): avc: denied { watch watch_reads } for pid=9772 comm="syz.1.1240" path="/298/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 112.157248][ T9777] loop6: detected capacity change from 0 to 7 [ 112.160314][ T5979] Dev loop6: unable to read RDB block 7 [ 112.162149][ T5979] loop6: AHDI p3 p4 [ 112.164215][ T5979] loop6: partition table partially beyond EOD, truncated [ 112.166702][ T5979] loop6: p3 start 1886353253 is beyond EOD, truncated [ 112.170128][ T9777] Dev loop6: unable to read RDB block 7 [ 112.171972][ T9777] loop6: AHDI p3 p4 [ 112.173286][ T9777] loop6: partition table partially beyond EOD, truncated [ 112.176832][ T9777] loop6: p3 start 1886353253 is beyond EOD, truncated [ 112.249991][ T9785] netlink: 'syz.1.1243': attribute type 32 has an invalid length. [ 112.263360][ T9789] 0ªî{X¹¦: left allmulticast mode [ 112.268733][ T9789] 0ªî{X¹¦: entered allmulticast mode [ 112.306404][ T9794] netlink: 'syz.3.1246': attribute type 21 has an invalid length. [ 112.310609][ T9794] IPv6: NLM_F_CREATE should be specified when creating new route [ 112.315143][ T9794] IPv6: Can't replace route, no match found [ 112.316230][ T9792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9792 comm=syz.1.1247 [ 112.318623][ T9794] openvswitch: netlink: Flow key attribute not present in set flow. [ 112.423691][ T9802] netem: change failed [ 112.450676][ T9811] FAULT_INJECTION: forcing a failure. [ 112.450676][ T9811] name failslab, interval 1, probability 0, space 0, times 1 [ 112.456393][ T9811] CPU: 0 UID: 0 PID: 9811 Comm: syz.0.1253 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 112.456409][ T9811] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 112.456415][ T9811] Call Trace: [ 112.456419][ T9811] [ 112.456423][ T9811] dump_stack_lvl+0x16c/0x1f0 [ 112.456462][ T9811] should_fail_ex+0x512/0x640 [ 112.456476][ T9811] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 112.456489][ T9811] should_failslab+0xc2/0x120 [ 112.456502][ T9811] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 112.456513][ T9811] ? __alloc_skb+0x2b2/0x380 [ 112.456530][ T9811] __alloc_skb+0x2b2/0x380 [ 112.456545][ T9811] ? __pfx___alloc_skb+0x10/0x10 [ 112.456564][ T9811] alloc_skb_with_frags+0xe0/0x860 [ 112.456578][ T9811] sock_alloc_send_pskb+0x7fb/0x990 [ 112.456592][ T9811] ? avc_has_perm+0x144/0x1f0 [ 112.456609][ T9811] ? __pfx_avc_has_perm+0x10/0x10 [ 112.456626][ T9811] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 112.456642][ T9811] ? sock_has_perm+0x259/0x2f0 [ 112.456654][ T9811] ? __pfx_sock_has_perm+0x10/0x10 [ 112.456672][ T9811] hci_sock_sendmsg+0x1c7/0x25f0 [ 112.456690][ T9811] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 112.456719][ T9811] sock_write_iter+0x4ff/0x5b0 [ 112.456734][ T9811] ? __pfx_sock_write_iter+0x10/0x10 [ 112.456750][ T9811] ? bpf_lsm_file_permission+0x9/0x10 [ 112.456764][ T9811] ? security_file_permission+0x71/0x210 [ 112.456779][ T9811] ? rw_verify_area+0xcf/0x6c0 [ 112.456796][ T9811] vfs_write+0x6c4/0x1150 [ 112.456807][ T9811] ? __pfx_sock_write_iter+0x10/0x10 [ 112.456820][ T9811] ? __pfx_vfs_write+0x10/0x10 [ 112.456830][ T9811] ? find_held_lock+0x2b/0x80 [ 112.456852][ T9811] ksys_write+0x1f8/0x250 [ 112.456862][ T9811] ? __pfx_ksys_write+0x10/0x10 [ 112.456877][ T9811] do_syscall_64+0xcd/0x4c0 [ 112.456893][ T9811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.456904][ T9811] RIP: 0033:0x7fe05598ebe9 [ 112.456913][ T9811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.456923][ T9811] RSP: 002b:00007fe05679f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 112.456933][ T9811] RAX: ffffffffffffffda RBX: 00007fe055bb5fa0 RCX: 00007fe05598ebe9 [ 112.456940][ T9811] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000004 [ 112.456946][ T9811] RBP: 00007fe05679f090 R08: 0000000000000000 R09: 0000000000000000 [ 112.456952][ T9811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.456958][ T9811] R13: 00007fe055bb6038 R14: 00007fe055bb5fa0 R15: 00007ffd39927378 [ 112.456971][ T9811] [ 112.542624][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.550336][ T9816] netlink: 'syz.3.1255': attribute type 21 has an invalid length. [ 112.593993][ T40] audit: type=1400 audit(1755193062.982:455): avc: denied { mount } for pid=9823 comm="syz.0.1257" name="/" dev="rpc_pipefs" ino=27062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 112.604180][ T40] audit: type=1400 audit(1755193062.982:456): avc: denied { mounton } for pid=9823 comm="syz.0.1257" path="/327/file0" dev="rpc_pipefs" ino=27062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 112.622040][ T40] audit: type=1400 audit(1755193063.001:457): avc: denied { unmount } for pid=5963 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 112.638096][ T9833] netlink: 'syz.0.1262': attribute type 1 has an invalid length. [ 112.651993][ T9833] 8021q: adding VLAN 0 to HW filter on device bond6 [ 112.670760][ T9833] 8021q: adding VLAN 0 to HW filter on device bond6 [ 112.673168][ T9833] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 112.677301][ T9833] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 112.717070][ T9840] macvlan2: entered promiscuous mode [ 112.718896][ T9840] macvlan2: entered allmulticast mode [ 112.721102][ T9840] bond6: (slave macvlan2): Error -98 calling set_mac_address [ 112.743576][ T9842] syzkaller0: entered promiscuous mode [ 112.745848][ T9842] syzkaller0: entered allmulticast mode [ 112.755104][ T9842] tipc: Enabled bearer , priority 0 [ 112.758423][ T9841] tipc: Resetting bearer [ 112.769234][ T9841] tipc: Disabling bearer [ 112.847695][ T1026] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 112.883488][ T9850] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 112.910012][ T9853] loop6: detected capacity change from 0 to 7 [ 112.913371][ T9853] Dev loop6: unable to read RDB block 7 [ 112.915700][ T9853] loop6: AHDI p3 p4 [ 112.916977][ T9853] loop6: partition table partially beyond EOD, truncated [ 112.920142][ T9853] loop6: p3 start 1886353253 is beyond EOD, truncated [ 113.008058][ T1026] usb 8-1: Using ep0 maxpacket: 8 [ 113.012361][ T1026] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 113.015784][ T1026] usb 8-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 113.019491][ T1026] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 113.023031][ T1026] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.257122][ T9858] 0ªî{X¹¦: left allmulticast mode [ 113.262601][ T9859] 0ªî{X¹¦: entered allmulticast mode [ 113.312865][ T9867] __nla_validate_parse: 9 callbacks suppressed [ 113.312882][ T9867] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1275'. [ 113.319298][ T9867] netlink: 'syz.1.1275': attribute type 7 has an invalid length. [ 113.322540][ T9867] netlink: 'syz.1.1275': attribute type 8 has an invalid length. [ 113.325750][ T9867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1275'. [ 113.334447][ T9869] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1276'. [ 113.650758][ T9881] netlink: 'syz.0.1279': attribute type 15 has an invalid length. [ 113.822191][ T9885] syzkaller1: entered promiscuous mode [ 113.824065][ T9885] syzkaller1: entered allmulticast mode [ 113.973561][ T6252] usb 7-1: USB disconnect, device number 6 [ 113.996064][ T9892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1284'. [ 114.026835][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 114.026846][ T40] audit: type=1400 audit(1755193064.328:459): avc: denied { setopt } for pid=9895 comm="syz.2.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.081161][ T40] audit: type=1400 audit(1755193064.375:460): avc: denied { create } for pid=9895 comm="syz.2.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 114.087276][ T40] audit: type=1400 audit(1755193064.375:461): avc: denied { ioctl } for pid=9895 comm="syz.2.1286" path="socket:[28747]" dev="sockfs" ino=28747 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 114.096156][ T40] audit: type=1400 audit(1755193064.375:462): avc: denied { create } for pid=9895 comm="syz.2.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 114.106751][ T40] audit: type=1400 audit(1755193064.375:463): avc: denied { connect } for pid=9895 comm="syz.2.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 114.125537][ T9907] netlink: 'syz.0.1288': attribute type 15 has an invalid length. [ 114.219979][ T9917] netlink: 'syz.2.1290': attribute type 1 has an invalid length. [ 114.239921][ T9917] 8021q: adding VLAN 0 to HW filter on device bond4 [ 114.254057][ T9917] 8021q: adding VLAN 0 to HW filter on device bond4 [ 114.256239][ T9917] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 114.261105][ T9917] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 114.299508][ T9922] IPVS: length: 250 != 8 [ 114.304127][ T9921] syzkaller0: entered promiscuous mode [ 114.304225][ T9926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1290'. [ 114.305874][ T9921] syzkaller0: entered allmulticast mode [ 114.317983][ T9926] macvlan2: entered promiscuous mode [ 114.319629][ T9926] macvlan2: entered allmulticast mode [ 114.321440][ T9926] bond4: (slave macvlan2): Error -98 calling set_mac_address [ 114.329119][ T9921] tipc: Enabled bearer , priority 0 [ 114.332093][ T9919] tipc: Resetting bearer [ 114.346484][ T9919] tipc: Disabling bearer [ 114.362011][ T9930] loop6: detected capacity change from 0 to 7 [ 114.365288][ T9930] Dev loop6: unable to read RDB block 7 [ 114.367243][ T9930] loop6: AHDI p3 p4 [ 114.368528][ T9930] loop6: partition table partially beyond EOD, truncated [ 114.371614][ T9930] loop6: p3 start 1886353253 is beyond EOD, truncated [ 114.394597][ T9932] cgroup: noprefix used incorrectly [ 114.398416][ T9932] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1295'. [ 114.402070][ T9934] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1296'. [ 114.402099][ T9934] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1296'. [ 114.481162][ T9932] bond0 (unregistering): Released all slaves [ 114.508778][ T9940] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1298'. [ 114.514673][ T9939] unknown channel width for channel at 909000KHz? [ 114.729521][ T9955] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1305'. [ 114.947490][ T9955] 0ªî{X¹¦: left allmulticast mode [ 114.952583][ T9956] 0ªî{X¹¦: entered allmulticast mode [ 114.983162][ T40] audit: type=1400 audit(1755193065.216:464): avc: denied { bind } for pid=9957 comm="syz.0.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 115.071707][ T40] audit: type=1400 audit(1755193065.291:465): avc: denied { create } for pid=9974 comm="syz.0.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.082303][ T40] audit: type=1400 audit(1755193065.291:466): avc: denied { write } for pid=9974 comm="syz.0.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.091434][ T40] audit: type=1400 audit(1755193065.291:467): avc: denied { nlmsg_write } for pid=9974 comm="syz.0.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.117591][ T9976] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 115.189507][ T40] audit: type=1400 audit(1755193065.403:468): avc: denied { write } for pid=9989 comm="syz.0.1317" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 115.277250][ T9995] 8021q: adding VLAN 0 to HW filter on device bond7 [ 115.289427][ T9995] 8021q: adding VLAN 0 to HW filter on device bond7 [ 115.291841][ T9995] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 115.295828][ T9995] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 115.340813][ T9997] macvlan2: entered promiscuous mode [ 115.342540][ T9997] macvlan2: entered allmulticast mode [ 115.344417][ T9997] bond7: (slave macvlan2): Error -98 calling set_mac_address [ 115.404416][ T2302] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 115.470183][T10001] 9pnet_fd: Insufficient options for proto=fd [ 115.506814][T10003] loop6: detected capacity change from 0 to 7 [ 115.509219][T10003] Dev loop6: unable to read RDB block 7 [ 115.512757][T10003] loop6: AHDI p3 p4 [ 115.514341][T10003] loop6: partition table partially beyond EOD, truncated [ 115.518107][T10003] loop6: p3 start 1886353253 is beyond EOD, truncated [ 115.559449][T10005] syzkaller0: entered promiscuous mode [ 115.561664][T10005] syzkaller0: entered allmulticast mode [ 115.571758][T10005] tipc: Enabled bearer , priority 0 [ 115.575569][T10004] tipc: Resetting bearer [ 115.584079][T10004] tipc: Disabling bearer [ 115.586585][ T2302] usb 6-1: Using ep0 maxpacket: 8 [ 115.589635][ T2302] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 115.592796][ T2302] usb 6-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 115.595527][ T2302] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 115.598361][ T2302] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.812173][ T29] usb 8-1: USB disconnect, device number 10 [ 115.915069][T10024] overlayfs: failed lookup in upper (306/file1, name='file0', err=-40): overlapping layers [ 116.378957][T10045] block nbd1: shutting down sockets [ 116.752809][T10065] 0ªî{X¹¦: left allmulticast mode [ 116.773080][T10067] validate_nla: 5 callbacks suppressed [ 116.773091][T10067] netlink: 'syz.0.1344': attribute type 7 has an invalid length. [ 116.774108][T10065] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 116.775281][T10067] netlink: 'syz.0.1344': attribute type 8 has an invalid length. [ 116.789265][T10065] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 116.962744][T10085] netlink: 'syz.3.1350': attribute type 1 has an invalid length. [ 116.978003][T10090] loop6: detected capacity change from 0 to 7 [ 116.980859][T10090] Dev loop6: unable to read RDB block 7 [ 116.982667][T10090] loop6: AHDI p3 p4 [ 116.983216][T10085] 8021q: adding VLAN 0 to HW filter on device bond7 [ 116.985162][T10090] loop6: partition table partially beyond EOD, truncated [ 116.989709][T10090] loop6: p3 start 1886353253 is beyond EOD, truncated [ 116.999974][T10085] 8021q: adding VLAN 0 to HW filter on device bond7 [ 117.002224][T10085] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 117.006041][T10085] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 117.033646][T10092] syzkaller0: entered promiscuous mode [ 117.035448][T10092] syzkaller0: entered allmulticast mode [ 117.044795][T10094] usb usb8: usbfs: process 10094 (syz.0.1354) did not claim interface 0 before use [ 117.059344][T10095] macvlan2: entered promiscuous mode [ 117.061097][T10095] macvlan2: entered allmulticast mode [ 117.063640][T10095] bond7: (slave macvlan2): Error -98 calling set_mac_address [ 117.403938][ T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 117.475913][T10124] FAULT_INJECTION: forcing a failure. [ 117.475913][T10124] name failslab, interval 1, probability 0, space 0, times 0 [ 117.483124][T10124] CPU: 2 UID: 0 PID: 10124 Comm: syz.3.1366 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 117.483150][T10124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 117.483160][T10124] Call Trace: [ 117.483166][T10124] [ 117.483173][T10124] dump_stack_lvl+0x16c/0x1f0 [ 117.483205][T10124] should_fail_ex+0x512/0x640 [ 117.483225][T10124] should_failslab+0xc2/0x120 [ 117.483246][T10124] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 117.483265][T10124] ? __alloc_skb+0x2b2/0x380 [ 117.483291][T10124] ? __pfx___mutex_lock+0x10/0x10 [ 117.483309][T10124] __alloc_skb+0x2b2/0x380 [ 117.483333][T10124] ? __pfx___alloc_skb+0x10/0x10 [ 117.483367][T10124] hci_sock_sendmsg+0x1a6f/0x25f0 [ 117.483397][T10124] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 117.483428][T10124] sock_write_iter+0x4ff/0x5b0 [ 117.483449][T10124] ? __pfx_sock_write_iter+0x10/0x10 [ 117.483477][T10124] ? bpf_lsm_file_permission+0x9/0x10 [ 117.483499][T10124] ? security_file_permission+0x71/0x210 [ 117.483524][T10124] ? rw_verify_area+0xcf/0x6c0 [ 117.483554][T10124] vfs_write+0x6c4/0x1150 [ 117.483573][T10124] ? __pfx_sock_write_iter+0x10/0x10 [ 117.483594][T10124] ? __pfx_vfs_write+0x10/0x10 [ 117.483609][T10124] ? find_held_lock+0x2b/0x80 [ 117.483648][T10124] ksys_write+0x1f8/0x250 [ 117.483665][T10124] ? __pfx_ksys_write+0x10/0x10 [ 117.483690][T10124] do_syscall_64+0xcd/0x4c0 [ 117.483714][T10124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.483731][T10124] RIP: 0033:0x7fc823f8ebe9 [ 117.483746][T10124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.483763][T10124] RSP: 002b:00007fc824d16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 117.483780][T10124] RAX: ffffffffffffffda RBX: 00007fc8241b5fa0 RCX: 00007fc823f8ebe9 [ 117.483791][T10124] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000004 [ 117.483800][T10124] RBP: 00007fc824d16090 R08: 0000000000000000 R09: 0000000000000000 [ 117.483810][T10124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.483820][T10124] R13: 00007fc8241b6038 R14: 00007fc8241b5fa0 R15: 00007fff3fc70dd8 [ 117.483844][T10124] [ 117.562163][ C2] vkms_vblank_simulate: vblank timer overrun [ 117.585684][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 117.588743][ T24] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 117.591898][ T24] usb 7-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 117.594674][ T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 117.595384][T10126] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 117.597525][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.603192][T10126] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 117.605955][T10126] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 117.608488][T10126] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 117.618664][T10126] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002 [ 117.723084][T10135] netlink: 'syz.3.1370': attribute type 15 has an invalid length. [ 118.007854][T10148] 0ªî{X¹¦: left allmulticast mode [ 118.012553][T10148] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 118.016244][T10148] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 118.050373][T10150] netlink: 'syz.3.1376': attribute type 7 has an invalid length. [ 118.052899][T10150] netlink: 'syz.3.1376': attribute type 8 has an invalid length. [ 118.330620][T10169] syzkaller0: entered promiscuous mode [ 118.332497][T10169] syzkaller0: entered allmulticast mode [ 118.341120][T10169] tipc: Enabled bearer , priority 0 [ 118.343975][T10168] tipc: Resetting bearer [ 118.353989][T10168] tipc: Disabling bearer [ 118.373322][ T24] usb 6-1: USB disconnect, device number 8 [ 118.394615][T10177] netlink: 'syz.0.1387': attribute type 1 has an invalid length. [ 118.407324][T10177] 8021q: adding VLAN 0 to HW filter on device bond8 [ 118.430118][T10177] 8021q: adding VLAN 0 to HW filter on device bond8 [ 118.433309][T10177] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 118.438846][T10177] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 118.476358][T10180] macvlan2: entered promiscuous mode [ 118.478479][T10180] macvlan2: entered allmulticast mode [ 118.480834][T10180] bond8: (slave macvlan2): Error -98 calling set_mac_address [ 118.698853][T10197] kvm: pic: non byte write [ 118.744165][T10210] __nla_validate_parse: 33 callbacks suppressed [ 118.744177][T10210] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1398'. [ 118.747388][T10197] kvm: pic: non byte write [ 118.949883][T10230] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1407'. [ 118.953965][T10230] 0ªî{X¹¦: left allmulticast mode [ 118.961174][T10230] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1407'. [ 118.964144][T10230] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 118.968329][T10230] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 118.996075][T10236] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1409'. [ 119.001367][T10236] netlink: 'syz.1.1409': attribute type 7 has an invalid length. [ 119.004081][T10236] netlink: 'syz.1.1409': attribute type 8 has an invalid length. [ 119.006616][T10236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1409'. [ 119.030695][T10197] kvm: pic: non byte write [ 119.121122][T10241] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1411'. [ 119.747489][T10259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1417'. [ 119.815443][T10265] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1419'. [ 119.819784][T10265] xfs: Unknown parameter 'usrquota/tun' [ 119.892631][T10267] netlink: 'syz.1.1420': attribute type 1 has an invalid length. [ 119.905950][T10267] 8021q: adding VLAN 0 to HW filter on device bond8 [ 119.917623][T10267] 8021q: adding VLAN 0 to HW filter on device bond8 [ 119.919785][T10267] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 119.923500][T10267] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 119.971315][T10271] macvlan3: entered promiscuous mode [ 119.973712][T10271] macvlan3: entered allmulticast mode [ 119.976229][T10271] bond8: (slave macvlan3): Error -98 calling set_mac_address [ 120.071665][T10280] : entered promiscuous mode [ 120.160635][T10287] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1428'. [ 120.166481][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 120.166492][ T40] audit: type=1400 audit(1755193070.060:483): avc: denied { read } for pid=10286 comm="syz.1.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.272992][T10296] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1432'. [ 120.276964][T10296] 0ªî{X¹¦: left allmulticast mode [ 120.284735][T10296] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 120.288289][T10296] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 120.364040][ T6017] usb 7-1: USB disconnect, device number 7 [ 120.386230][T10309] IPv6: sit1: Disabled Multicast RS [ 120.438504][ T40] audit: type=1400 audit(1755193070.313:484): avc: denied { read append } for pid=10308 comm="syz.2.1438" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 120.448302][T10316] sctp: [Deprecated]: syz.2.1438 (pid 10316) Use of int in max_burst socket option. [ 120.448302][T10316] Use struct sctp_assoc_value instead [ 120.486460][ T40] audit: type=1400 audit(1755193070.360:485): avc: denied { accept } for pid=10312 comm="syz.1.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 120.597799][ T40] audit: type=1400 audit(1755193070.462:486): avc: denied { mounton } for pid=10312 comm="syz.1.1440" path="/346/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 120.597816][T10313] fuse: Unknown parameter '' [ 121.034366][ T1148] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.055500][ T40] audit: type=1400 audit(1755193070.893:487): avc: denied { append } for pid=10356 comm="syz.3.1454" name="pfkey" dev="proc" ino=4026533230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 121.087103][T10361] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 121.159029][T10365] 8021q: adding VLAN 0 to HW filter on device bond8 [ 121.171595][T10365] 8021q: adding VLAN 0 to HW filter on device bond8 [ 121.173931][T10365] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 121.174383][ T40] audit: type=1400 audit(1755193071.005:488): avc: denied { create } for pid=10370 comm="syz.0.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 121.177831][T10365] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 121.183464][ T40] audit: type=1400 audit(1755193071.005:489): avc: denied { connect } for pid=10370 comm="syz.0.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 121.208798][T10373] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 121.213036][T10373] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 121.223604][T10374] macvlan2: entered promiscuous mode [ 121.225404][T10374] macvlan2: entered allmulticast mode [ 121.227367][T10374] bond8: (slave macvlan2): Error -98 calling set_mac_address [ 121.321604][T10379] Unsupported ieee802154 address type: 0 [ 121.350037][ T40] audit: type=1400 audit(1755193071.173:490): avc: denied { bind } for pid=10382 comm="syz.3.1463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 121.517006][T10391] pipefs: Unknown parameter 'norecovery' [ 121.648687][ T5995] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 121.809226][ T5995] usb 8-1: Using ep0 maxpacket: 8 [ 121.814069][ T5995] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 121.817941][ T5995] usb 8-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 121.821526][ T5995] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 121.824890][ T5995] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.607847][ T40] audit: type=1400 audit(1755193072.342:491): avc: denied { create } for pid=10415 comm="syz.0.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 122.649081][T10420] FAULT_INJECTION: forcing a failure. [ 122.649081][T10420] name failslab, interval 1, probability 0, space 0, times 0 [ 122.653322][T10420] CPU: 2 UID: 0 PID: 10420 Comm: syz.0.1475 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 122.653339][T10420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 122.653345][T10420] Call Trace: [ 122.653350][T10420] [ 122.653354][T10420] dump_stack_lvl+0x16c/0x1f0 [ 122.653407][T10420] should_fail_ex+0x512/0x640 [ 122.653423][T10420] should_failslab+0xc2/0x120 [ 122.653437][T10420] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 122.653448][T10420] ? trace_kmem_cache_alloc+0x28/0xc0 [ 122.653462][T10420] ? kmem_cache_alloc_node_noprof+0x225/0x3b0 [ 122.653472][T10420] ? __alloc_skb+0x2b2/0x380 [ 122.653489][T10420] __alloc_skb+0x2b2/0x380 [ 122.653504][T10420] ? __pfx___alloc_skb+0x10/0x10 [ 122.653519][T10420] ? __alloc_skb+0x200/0x380 [ 122.653533][T10420] ? __pfx___alloc_skb+0x10/0x10 [ 122.653550][T10420] create_monitor_ctrl_event+0x3b/0x450 [ 122.653580][T10420] mgmt_cmd_complete+0x2de/0x550 [ 122.653598][T10420] user_pairing_resp+0x31f/0x560 [ 122.653616][T10420] ? __pfx_user_pairing_resp+0x10/0x10 [ 122.653630][T10420] ? __hci_dev_get+0x16a/0x270 [ 122.653648][T10420] user_confirm_reply+0xbd/0x130 [ 122.653661][T10420] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 122.653677][T10420] hci_sock_sendmsg+0x1522/0x25f0 [ 122.653695][T10420] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 122.653714][T10420] sock_write_iter+0x4ff/0x5b0 [ 122.653727][T10420] ? __pfx_sock_write_iter+0x10/0x10 [ 122.653743][T10420] ? bpf_lsm_file_permission+0x9/0x10 [ 122.653757][T10420] ? security_file_permission+0x71/0x210 [ 122.653772][T10420] ? rw_verify_area+0xcf/0x6c0 [ 122.653790][T10420] vfs_write+0x6c4/0x1150 [ 122.653801][T10420] ? __pfx_sock_write_iter+0x10/0x10 [ 122.653814][T10420] ? __pfx_vfs_write+0x10/0x10 [ 122.653824][T10420] ? find_held_lock+0x2b/0x80 [ 122.653848][T10420] ksys_write+0x1f8/0x250 [ 122.653859][T10420] ? __pfx_ksys_write+0x10/0x10 [ 122.653873][T10420] do_syscall_64+0xcd/0x4c0 [ 122.653891][T10420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.653902][T10420] RIP: 0033:0x7fe05598ebe9 [ 122.653911][T10420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.653921][T10420] RSP: 002b:00007fe05679f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 122.653932][T10420] RAX: ffffffffffffffda RBX: 00007fe055bb5fa0 RCX: 00007fe05598ebe9 [ 122.653938][T10420] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000004 [ 122.653944][T10420] RBP: 00007fe05679f090 R08: 0000000000000000 R09: 0000000000000000 [ 122.653950][T10420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.653956][T10420] R13: 00007fe055bb6038 R14: 00007fe055bb5fa0 R15: 00007ffd39927378 [ 122.653969][T10420] [ 122.988845][ T34] xfrm0 speed is unknown, defaulting to 1000 [ 123.066656][T10451] xt_socket: unknown flags 0x20 [ 123.093609][T10455] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 123.096454][T10455] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 123.777315][T10465] validate_nla: 71 callbacks suppressed [ 123.777327][T10465] netlink: 'syz.1.1492': attribute type 1 has an invalid length. [ 123.791761][T10465] 8021q: adding VLAN 0 to HW filter on device bond9 [ 123.804030][T10465] 8021q: adding VLAN 0 to HW filter on device bond9 [ 123.806882][T10465] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 123.811814][T10465] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 123.857081][T10467] macvlan3: entered promiscuous mode [ 123.858822][T10467] macvlan3: entered allmulticast mode [ 123.860692][T10467] bond9: (slave macvlan3): Error -98 calling set_mac_address [ 124.009421][T10473] loop6: detected capacity change from 0 to 7 [ 124.012989][ T5979] Dev loop6: unable to read RDB block 7 [ 124.015007][ T5979] loop6: AHDI p3 p4 [ 124.016286][ T5979] loop6: partition table partially beyond EOD, truncated [ 124.018871][ T5979] loop6: p3 start 1886353253 is beyond EOD, truncated [ 124.026469][T10473] Dev loop6: unable to read RDB block 7 [ 124.028253][T10473] loop6: AHDI p3 p4 [ 124.029636][T10473] loop6: partition table partially beyond EOD, truncated [ 124.032555][T10473] loop6: p3 start 1886353253 is beyond EOD, truncated [ 124.139000][T10490] __nla_validate_parse: 20 callbacks suppressed [ 124.139012][T10490] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1502'. [ 124.234926][T10496] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1505'. [ 124.239363][T10496] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1505'. [ 124.242239][T10496] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 124.244942][T10496] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 124.274884][T10498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1506'. [ 124.277804][T10498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1506'. [ 124.373362][T10503] syzkaller0: entered promiscuous mode [ 124.375617][T10503] syzkaller0: entered allmulticast mode [ 124.387764][T10503] tipc: Enabled bearer , priority 0 [ 124.390667][T10502] tipc: Resetting bearer [ 124.401557][T10502] tipc: Disabling bearer [ 124.614309][ T5995] usb 8-1: USB disconnect, device number 11 [ 124.633191][T10515] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1513'. [ 124.636129][T10515] netlink: 'syz.3.1513': attribute type 7 has an invalid length. [ 124.638659][T10515] netlink: 'syz.3.1513': attribute type 8 has an invalid length. [ 124.641170][T10515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1513'. [ 124.756897][T10521] FAULT_INJECTION: forcing a failure. [ 124.756897][T10521] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 124.763036][T10521] CPU: 2 UID: 0 PID: 10521 Comm: syz.3.1516 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 124.763052][T10521] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 124.763058][T10521] Call Trace: [ 124.763062][T10521] [ 124.763066][T10521] dump_stack_lvl+0x16c/0x1f0 [ 124.763087][T10521] should_fail_ex+0x512/0x640 [ 124.763100][T10521] _copy_to_user+0x32/0xd0 [ 124.763113][T10521] simple_read_from_buffer+0xcb/0x170 [ 124.763125][T10521] proc_fail_nth_read+0x197/0x240 [ 124.763139][T10521] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.763152][T10521] ? rw_verify_area+0xcf/0x6c0 [ 124.763168][T10521] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.763180][T10521] vfs_read+0x1e1/0xc60 [ 124.763192][T10521] ? __pfx___mutex_lock+0x10/0x10 [ 124.763202][T10521] ? __pfx_vfs_read+0x10/0x10 [ 124.763216][T10521] ? __fget_files+0x20e/0x3c0 [ 124.763231][T10521] ksys_read+0x12a/0x250 [ 124.763242][T10521] ? __pfx_ksys_read+0x10/0x10 [ 124.763262][T10521] do_syscall_64+0xcd/0x4c0 [ 124.763273][T10521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.763284][T10521] RIP: 0033:0x7fc823f8d5fc [ 124.763293][T10521] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 124.763304][T10521] RSP: 002b:00007fc824d16030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 124.763314][T10521] RAX: ffffffffffffffda RBX: 00007fc8241b5fa0 RCX: 00007fc823f8d5fc [ 124.763321][T10521] RDX: 000000000000000f RSI: 00007fc824d160a0 RDI: 0000000000000003 [ 124.763327][T10521] RBP: 00007fc824d16090 R08: 0000000000000000 R09: 0000000000000000 [ 124.763333][T10521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 124.763338][T10521] R13: 00007fc8241b6038 R14: 00007fc8241b5fa0 R15: 00007fff3fc70dd8 [ 124.763351][T10521] [ 125.447581][ T40] audit: type=1326 audit(1755193074.999:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10547 comm="syz.3.1528" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc823f8ebe9 code=0x0 [ 125.522297][T10556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1532'. [ 125.554608][T10563] netlink: 'syz.3.1528': attribute type 23 has an invalid length. [ 125.555361][T10562] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1534'. [ 125.583189][T10565] Bluetooth: hci0: load_link_keys: too big key_count value 3072 [ 125.611104][T10567] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1536'. [ 125.636184][T10569] netlink: 'syz.2.1537': attribute type 3 has an invalid length. [ 125.664448][T10571] loop6: detected capacity change from 0 to 7 [ 125.667476][ T5979] Dev loop6: unable to read RDB block 7 [ 125.670083][ T5979] loop6: AHDI p3 p4 [ 125.671538][ T5979] loop6: partition table partially beyond EOD, truncated [ 125.673992][ T5979] loop6: p3 start 1886353253 is beyond EOD, truncated [ 125.676868][T10571] Dev loop6: unable to read RDB block 7 [ 125.678761][T10571] loop6: AHDI p3 p4 [ 125.680746][T10571] loop6: partition table partially beyond EOD, truncated [ 125.683143][T10571] loop6: p3 start 1886353253 is beyond EOD, truncated [ 125.743153][T10575] netlink: 'syz.2.1540': attribute type 1 has an invalid length. [ 125.756148][T10575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.769953][T10575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.772310][T10575] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 125.777019][T10575] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 125.815565][T10584] tmpfs: Group quota block hardlimit too large. [ 125.817636][ T40] audit: type=1400 audit(1755193075.345:493): avc: denied { remount } for pid=10583 comm="syz.0.1543" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 125.820366][T10586] macvlan2: entered promiscuous mode [ 125.825488][T10586] macvlan2: entered allmulticast mode [ 125.827534][T10586] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 126.000794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 126.186290][T10611] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 126.189539][T10611] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 126.362463][T10621] syzkaller0: entered promiscuous mode [ 126.364338][T10621] syzkaller0: entered allmulticast mode [ 126.381784][T10621] tipc: Enabled bearer , priority 0 [ 126.386031][T10618] tipc: Resetting bearer [ 126.392952][T10618] tipc: Disabling bearer [ 126.892686][ T40] audit: type=1400 audit(1755193076.355:494): avc: denied { remount } for pid=10643 comm="syz.0.1569" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 127.042106][T10659] loop6: detected capacity change from 0 to 7 [ 127.045027][T10659] Dev loop6: unable to read RDB block 7 [ 127.046825][T10659] loop6: AHDI p3 p4 [ 127.048270][T10659] loop6: partition table partially beyond EOD, truncated [ 127.051042][T10659] loop6: p3 start 1886353253 is beyond EOD, truncated [ 127.051931][T10654] openvswitch: netlink: Message has 5 unknown bytes. [ 127.159309][T10671] netlink: 'syz.0.1580': attribute type 1 has an invalid length. [ 127.171658][T10671] 8021q: adding VLAN 0 to HW filter on device bond9 [ 127.185493][T10671] 8021q: adding VLAN 0 to HW filter on device bond9 [ 127.187516][T10675] netlink: 'syz.3.1581': attribute type 1 has an invalid length. [ 127.189029][T10671] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 127.195377][T10671] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 127.242728][T10675] veth5: entered promiscuous mode [ 127.246575][T10675] bond9: (slave veth5): Enslaving as a backup interface with a down link [ 127.253276][T10677] macvlan2: entered promiscuous mode [ 127.255373][T10677] macvlan2: entered allmulticast mode [ 127.257647][T10677] bond9: (slave macvlan2): Error -98 calling set_mac_address [ 127.385858][T10690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.389499][T10690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.402559][T10695] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 127.406605][T10695] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 127.487225][T10703] syzkaller0: entered promiscuous mode [ 127.489353][T10703] syzkaller0: entered allmulticast mode [ 127.503141][T10703] tipc: Enabled bearer , priority 0 [ 127.506061][T10702] tipc: Resetting bearer [ 127.516232][T10702] tipc: Disabling bearer [ 127.636261][ T29] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 127.785714][T10719] netlink: 'syz.2.1599': attribute type 7 has an invalid length. [ 127.788189][T10719] netlink: 'syz.2.1599': attribute type 8 has an invalid length. [ 127.796748][ T29] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 127.801823][ T29] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.805315][ T29] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.812764][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.815718][ T29] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.818785][ T29] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.822276][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.827664][ T29] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.831037][ T29] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.834500][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.840208][ T29] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.843083][ T29] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.846457][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.849293][ T29] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.852790][ T29] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.855747][T10727] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 127.858967][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.860159][T10727] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 127.860406][T10727] vhci_hcd vhci_hcd.0: Device attached [ 127.864606][ T29] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.867809][T10727] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 127.870703][ T29] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.878670][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.883739][ T29] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.886577][ T29] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.889933][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.893710][ T29] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.896573][ T29] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.899929][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.904014][ T29] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 127.907118][ T29] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 127.909846][ T29] usb 5-1: Product: syz [ 127.911453][ T29] usb 5-1: Manufacturer: syz [ 127.913425][ T29] usb 5-1: SerialNumber: syz [ 127.919297][ T29] usb 5-1: config 0 descriptor?? [ 127.927602][ T29] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 127.933570][T10728] vhci_hcd: connection closed [ 127.934274][ T60] vhci_hcd: stop threads [ 127.937701][ T60] vhci_hcd: release socket [ 127.939155][ T60] vhci_hcd: disconnect device [ 127.999440][ T40] audit: type=1400 audit(1755193077.384:495): avc: denied { mount } for pid=10734 comm="syz.3.1606" name="/" dev="ramfs" ino=31191 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 128.024635][T10751] geneve2: entered promiscuous mode [ 128.026417][T10751] geneve2: entered allmulticast mode [ 128.140329][ T2302] usb 5-1: USB disconnect, device number 12 [ 128.146125][ T2302] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 128.239447][T10764] loop6: detected capacity change from 0 to 7 [ 128.241901][T10764] Dev loop6: unable to read RDB block 7 [ 128.243677][T10764] loop6: AHDI p3 p4 [ 128.245044][T10764] loop6: partition table partially beyond EOD, truncated [ 128.247474][T10764] loop6: p3 start 1886353253 is beyond EOD, truncated [ 128.296977][T10768] openvswitch: netlink: Flow key attr not present in new flow. [ 128.322612][T10772] input: syz0 as /devices/virtual/input/input8 [ 128.327648][ T40] audit: type=1400 audit(1755193077.693:496): avc: denied { read } for pid=5361 comm="acpid" name="js0" dev="devtmpfs" ino=3013 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.335343][ T40] audit: type=1400 audit(1755193077.693:497): avc: denied { open } for pid=5361 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3013 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.343691][ T40] audit: type=1400 audit(1755193077.693:498): avc: denied { ioctl } for pid=5361 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3013 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.505593][T10790] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 128.508442][T10790] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 128.843767][ T2302] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 128.917113][T10809] syzkaller0: entered promiscuous mode [ 128.919469][T10809] syzkaller0: entered allmulticast mode [ 129.006535][ T2302] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.011240][ T2302] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 129.015258][ T2302] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.021514][ T2302] usb 8-1: config 0 descriptor?? [ 129.240604][ T40] audit: type=1400 audit(1755193078.553:499): avc: denied { ioctl } for pid=10794 comm="syz.3.1626" path="socket:[32871]" dev="sockfs" ino=32871 ioctlcmd=0x8b22 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 129.272205][ T40] audit: type=1400 audit(1755193078.581:500): avc: denied { wake_alarm } for pid=10815 comm="syz.0.1635" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 129.282740][T10816] validate_nla: 1 callbacks suppressed [ 129.282750][T10816] netlink: 'syz.0.1635': attribute type 10 has an invalid length. [ 129.307000][T10816] syz.0.1635 (10816) used greatest stack depth: 19656 bytes left [ 129.363829][ T40] audit: type=1400 audit(1755193078.666:501): avc: denied { setopt } for pid=10819 comm="syz.1.1637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 129.455088][ T40] audit: type=1400 audit(1755193078.750:502): avc: denied { getopt } for pid=10794 comm="syz.3.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 129.532179][T10833] __nla_validate_parse: 25 callbacks suppressed [ 129.532190][T10833] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1643'. [ 129.780174][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1647'. [ 129.783052][T10842] netlink: 'syz.2.1647': attribute type 21 has an invalid length. [ 129.827255][ T34] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 129.833108][T10795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1626'. [ 129.895948][T10849] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1650'. [ 129.962749][T10853] syzkaller0: entered promiscuous mode [ 129.965137][T10853] syzkaller0: entered allmulticast mode [ 129.977208][T10853] tipc: Enabled bearer , priority 0 [ 129.981394][T10852] tipc: Resetting bearer [ 129.987809][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 129.991563][ T34] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 129.994873][ T34] usb 6-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 129.995881][T10852] tipc: Disabling bearer [ 129.997754][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 130.003191][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.272191][T10863] xfrm0 speed is unknown, defaulting to 1000 [ 130.276388][ T5327] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 130.279834][ T5327] Bluetooth: hci1: Injecting HCI hardware error event [ 130.284105][ T5327] Bluetooth: hci1: hardware error 0x00 [ 130.305696][T10867] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1658'. [ 130.329461][T10872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1659'. [ 130.332800][T10872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=10872 comm=syz.2.1659 [ 130.336835][T10872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10872 comm=syz.2.1659 [ 130.341424][T10872] netlink: 'syz.2.1659': attribute type 1 has an invalid length. [ 130.691593][T10889] can0: slcan on ptm0. [ 130.833070][T10888] can0 (unregistered): slcan off ptm0. [ 130.947603][T10902] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1669'. [ 130.950800][T10902] netlink: 'syz.0.1669': attribute type 7 has an invalid length. [ 130.953449][T10902] netlink: 'syz.0.1669': attribute type 8 has an invalid length. [ 130.956036][T10902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1669'. [ 131.174404][T10911] loop6: detected capacity change from 0 to 7 [ 131.177746][T10911] Dev loop6: unable to read RDB block 7 [ 131.179690][T10911] loop6: AHDI p3 p4 [ 131.181163][T10911] loop6: partition table partially beyond EOD, truncated [ 131.183630][T10911] loop6: p3 start 1886353253 is beyond EOD, truncated [ 131.305281][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1675'. [ 131.308164][T10919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1675'. [ 131.341587][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 131.341603][ T40] audit: type=1400 audit(1755193080.518:506): avc: denied { bind } for pid=10920 comm="syz.0.1676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 131.587415][T10935] can: request_module (can-proto-0) failed. [ 131.649015][T10940] syzkaller0: entered promiscuous mode [ 131.651371][T10940] syzkaller0: entered allmulticast mode [ 131.785236][ T2302] usbhid 8-1:0.0: can't add hid device: -71 [ 131.787273][ T2302] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 131.792285][ T2302] usb 8-1: USB disconnect, device number 12 [ 131.801471][T10945] netlink: 'syz.3.1687': attribute type 1 has an invalid length. [ 131.816367][T10945] 8021q: adding VLAN 0 to HW filter on device bond10 [ 131.828140][T10945] 8021q: adding VLAN 0 to HW filter on device bond10 [ 131.830522][T10945] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 131.834688][T10945] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 131.881044][T10948] macvlan2: entered promiscuous mode [ 131.882756][T10948] macvlan2: entered allmulticast mode [ 131.884583][T10948] bond10: (slave macvlan2): Error -98 calling set_mac_address [ 132.003405][T10960] netlink: 'syz.2.1692': attribute type 1 has an invalid length. [ 132.016284][T10960] 8021q: adding VLAN 0 to HW filter on device bond5 [ 132.030812][T10960] vlan2: entered promiscuous mode [ 132.032509][T10960] bond5: entered promiscuous mode [ 132.034171][T10960] vlan2: entered allmulticast mode [ 132.035792][T10960] bond5: entered allmulticast mode [ 132.038776][ T40] audit: type=1400 audit(1755193081.163:507): avc: denied { create } for pid=10958 comm="syz.2.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 132.046365][T10960] bond5: (slave gretap1): making interface the new active one [ 132.046379][ T40] audit: type=1400 audit(1755193081.163:508): avc: denied { write } for pid=10958 comm="syz.2.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 132.048712][T10960] gretap1: entered promiscuous mode [ 132.056973][T10960] gretap1: entered allmulticast mode [ 132.059860][T10960] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 132.112690][ T40] audit: type=1400 audit(1755193081.238:509): avc: denied { audit_write } for pid=10967 comm="syz.2.1696" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 132.118656][T10968] qnx4: no qnx4 filesystem (no root dir). [ 132.133081][ T40] audit: type=1400 audit(1755193081.257:510): avc: denied { setopt } for pid=10967 comm="syz.2.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 132.145627][T10968] NILFS (nullb0): couldn't find nilfs on the device [ 132.446948][T10993] netlink: 'syz.2.1706': attribute type 7 has an invalid length. [ 132.449438][T10993] netlink: 'syz.2.1706': attribute type 8 has an invalid length. [ 132.452939][T10995] tmpfs: Unknown parameter 'usrquota' [ 132.499999][ T5327] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 132.515762][T10999] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 132.519610][T10999] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 132.786157][ T10] usb 6-1: USB disconnect, device number 9 [ 132.789274][T11005] loop6: detected capacity change from 0 to 7 [ 132.792827][ T5979] Dev loop6: unable to read RDB block 7 [ 132.795188][ T5979] loop6: AHDI p3 p4 [ 132.796687][ T5979] loop6: partition table partially beyond EOD, truncated [ 132.799430][ T5979] loop6: p3 start 1886353253 is beyond EOD, truncated [ 132.804636][T11005] Dev loop6: unable to read RDB block 7 [ 132.806467][T11005] loop6: AHDI p3 p4 [ 132.807739][T11005] loop6: partition table partially beyond EOD, truncated [ 132.810344][T11005] loop6: p3 start 1886353253 is beyond EOD, truncated [ 132.819901][T11011] syzkaller0: entered promiscuous mode [ 132.824466][T11011] syzkaller0: entered allmulticast mode [ 133.001705][T11034] netlink: 'syz.2.1722': attribute type 1 has an invalid length. [ 133.015874][T11034] 8021q: adding VLAN 0 to HW filter on device bond6 [ 133.029279][T11034] 8021q: adding VLAN 0 to HW filter on device bond6 [ 133.031621][T11034] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 133.035888][T11034] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 133.080177][T11036] macvlan2: entered promiscuous mode [ 133.081932][T11036] macvlan2: entered allmulticast mode [ 133.083829][T11036] bond6: (slave macvlan2): Error -98 calling set_mac_address [ 133.106726][ T40] audit: type=1400 audit(1755193082.164:511): avc: denied { append } for pid=11037 comm="syz.3.1723" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 133.141938][T11038] Bluetooth: MGMT ver 1.23 [ 133.501069][T11062] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 133.505015][T11062] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 133.626208][T11081] vxcan0: tx drop: invalid da for name 0x0004000000000001 [ 133.995193][T11128] 8021q: adding VLAN 0 to HW filter on device bond11 [ 134.007673][T11128] 8021q: adding VLAN 0 to HW filter on device bond11 [ 134.010444][T11128] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 134.014585][T11128] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 134.060006][T11135] macvlan2: entered promiscuous mode [ 134.061934][T11135] macvlan2: entered allmulticast mode [ 134.063897][T11135] bond11: (slave macvlan2): Error -98 calling set_mac_address [ 134.114402][ T40] audit: type=1400 audit(1755193083.109:512): avc: denied { listen } for pid=11139 comm="syz.1.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 134.124645][T11140] Malformed UNC in devname [ 134.124645][T11140] [ 134.127642][T11140] CIFS: VFS: Malformed UNC in devname [ 134.199209][T11151] NCSI netlink: No device for ifindex 0 [ 134.311145][T11170] loop6: detected capacity change from 0 to 7 [ 134.314079][ T5979] Dev loop6: unable to read RDB block 7 [ 134.315907][ T5979] loop6: AHDI p3 p4 [ 134.320318][ T5979] loop6: partition table partially beyond EOD, truncated [ 134.323015][ T5979] loop6: p3 start 1886353253 is beyond EOD, truncated [ 134.329300][T11170] Dev loop6: unable to read RDB block 7 [ 134.331318][T11170] loop6: AHDI p3 p4 [ 134.332644][T11170] loop6: partition table partially beyond EOD, truncated [ 134.335150][T11170] loop6: p3 start 1886353253 is beyond EOD, truncated [ 134.408716][T11180] Bluetooth: hci0: load_link_keys: too big key_count value 3072 [ 134.420131][T11162] block nbd1: shutting down sockets [ 134.627228][T11202] Bluetooth: hci0: load_link_keys: too big key_count value 3072 [ 134.755237][T11225] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 134.761155][T11225] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 134.806809][T11232] Bluetooth: hci0: load_link_keys: too big key_count value 3072 [ 134.873589][T11240] validate_nla: 8 callbacks suppressed [ 134.873599][T11240] netlink: 'syz.1.1784': attribute type 7 has an invalid length. [ 134.878858][T11240] netlink: 'syz.1.1784': attribute type 8 has an invalid length. [ 134.948933][T11244] loop6: detected capacity change from 0 to 7 [ 134.952486][ T5979] Dev loop6: unable to read RDB block 7 [ 134.954466][ T5979] loop6: AHDI p3 p4 [ 134.956039][ T5979] loop6: partition table partially beyond EOD, truncated [ 134.959225][ T5979] loop6: p3 start 1886353253 is beyond EOD, truncated [ 134.963344][T11244] Dev loop6: unable to read RDB block 7 [ 134.965183][T11244] loop6: AHDI p3 p4 [ 134.966494][T11244] loop6: partition table partially beyond EOD, truncated [ 134.969202][T11244] loop6: p3 start 1886353253 is beyond EOD, truncated [ 135.010997][T11250] __nla_validate_parse: 41 callbacks suppressed [ 135.011008][T11250] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1789'. [ 135.034954][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 135.039808][T11254] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1791'. [ 135.204642][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 135.208461][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 135.210693][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 135.213591][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.217643][ T10] usb 5-1: config 0 descriptor?? [ 135.255050][T11274] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1799'. [ 135.425878][T11283] syzkaller0: entered promiscuous mode [ 135.427772][T11283] syzkaller0: entered allmulticast mode [ 135.435840][T11228] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1778'. [ 135.440337][T11283] tipc: Enabled bearer , priority 0 [ 135.443406][T11282] tipc: Resetting bearer [ 135.453424][T11282] tipc: Disabling bearer [ 135.496255][T11228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.499068][T11228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.502153][T11228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.506123][T11228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.524043][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 135.526598][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 135.531364][ T10] usb 5-1: USB disconnect, device number 13 [ 135.570143][T11292] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1805'. [ 135.576912][T11292] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1805'. [ 135.583082][T11292] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 135.587070][T11292] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 135.658468][T11303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11303 comm=syz.3.1809 [ 135.690557][T11306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1810'. [ 135.693526][T11306] netlink: 'syz.2.1810': attribute type 7 has an invalid length. [ 135.695959][T11306] netlink: 'syz.2.1810': attribute type 8 has an invalid length. [ 135.698458][T11306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1810'. [ 135.720885][T11309] netlink: 'syz.3.1812': attribute type 1 has an invalid length. [ 135.735633][T11309] 8021q: adding VLAN 0 to HW filter on device bond12 [ 135.750542][T11309] 8021q: adding VLAN 0 to HW filter on device bond12 [ 135.753071][T11309] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 135.757368][T11309] bond12: (slave vxcan3): Error -95 calling set_mac_address [ 135.767945][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1813'. [ 135.770954][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1813'. [ 135.803185][T11313] macvlan2: entered promiscuous mode [ 135.808396][T11313] macvlan2: entered allmulticast mode [ 135.811897][T11313] bond12: (slave macvlan2): Error -98 calling set_mac_address [ 136.138947][T11352] syzkaller0: entered promiscuous mode [ 136.140815][T11352] syzkaller0: entered allmulticast mode [ 136.219188][ T40] audit: type=1400 audit(1755193085.073:513): avc: denied { read } for pid=11356 comm="syz.2.1833" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 136.231076][ T40] audit: type=1400 audit(1755193085.073:514): avc: denied { open } for pid=11356 comm="syz.2.1833" path="/479/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 136.235236][T11361] block device autoloading is deprecated and will be removed. [ 136.244213][ T40] audit: type=1400 audit(1755193085.101:515): avc: denied { ioctl } for pid=11356 comm="syz.2.1833" path="/479/file0/file0" dev="fuse" ino=64 ioctlcmd=0x921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 136.316232][T11373] netlink: 'syz.2.1840': attribute type 7 has an invalid length. [ 136.319632][T11373] netlink: 'syz.2.1840': attribute type 8 has an invalid length. [ 136.426145][ T5327] Bluetooth: Frame is too long (len 12, expected len 4) [ 136.455783][T11394] loop6: detected capacity change from 0 to 7 [ 136.458812][ T5979] Dev loop6: unable to read RDB block 7 [ 136.460814][ T5979] loop6: AHDI p3 p4 [ 136.462088][ T5979] loop6: partition table partially beyond EOD, truncated [ 136.464606][ T5979] loop6: p3 start 1886353253 is beyond EOD, truncated [ 136.470813][T11394] Dev loop6: unable to read RDB block 7 [ 136.472654][T11394] loop6: AHDI p3 p4 [ 136.473957][T11394] loop6: partition table partially beyond EOD, truncated [ 136.478168][T11394] loop6: p3 start 1886353253 is beyond EOD, truncated [ 136.692528][T11423] overlayfs: missing 'workdir' [ 136.832729][T11439] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 136.924629][T11447] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 136.927556][T11447] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 136.958072][ T5995] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 136.987840][T11452] pim6reg: entered allmulticast mode [ 136.989731][T11452] pim6reg: left allmulticast mode [ 137.045086][T11453] netlink: 'syz.3.1875': attribute type 1 has an invalid length. [ 137.077771][T11456] loop6: detected capacity change from 0 to 7 [ 137.080631][ T5979] Dev loop6: unable to read RDB block 7 [ 137.082413][ T5979] loop6: AHDI p3 p4 [ 137.083708][ T5979] loop6: partition table partially beyond EOD, truncated [ 137.086008][ T5979] loop6: p3 start 1886353253 is beyond EOD, truncated [ 137.089599][T11456] Dev loop6: unable to read RDB block 7 [ 137.091507][T11456] loop6: AHDI p3 p4 [ 137.092824][T11456] loop6: partition table partially beyond EOD, truncated [ 137.095159][T11456] loop6: p3 start 1886353253 is beyond EOD, truncated [ 137.118410][ T5995] usb 5-1: Using ep0 maxpacket: 8 [ 137.123393][ T5995] usb 5-1: config 0 interface 0 has no altsetting 0 [ 137.125512][ T5995] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 137.128503][ T5995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.132546][ T5995] usb 5-1: config 0 descriptor?? [ 137.136703][T11460] netlink: 'syz.3.1878': attribute type 1 has an invalid length. [ 137.163614][T11460] 8021q: adding VLAN 0 to HW filter on device bond13 [ 137.177467][T11460] 8021q: adding VLAN 0 to HW filter on device bond13 [ 137.179883][T11460] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address [ 137.184112][T11460] bond13: (slave vxcan3): Error -95 calling set_mac_address [ 137.340366][T11472] loop2: detected capacity change from 0 to 7 [ 137.344983][T11472] Dev loop2: unable to read RDB block 7 [ 137.346873][T11472] loop2: unable to read partition table [ 137.348806][T11472] loop2: partition table beyond EOD, truncated [ 137.351500][T11472] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 137.353125][T11425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.358130][T11425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.567438][ T24] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 137.727797][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 137.731044][ T24] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 137.734312][ T24] usb 8-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 137.737320][ T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 137.740258][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.039904][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 138.039915][ T40] audit: type=1400 audit(1755193086.785:518): avc: denied { read } for pid=11494 comm="syz.2.1890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 138.116043][T11501] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 138.119134][T11501] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 138.379315][ T40] audit: type=1400 audit(1755193087.094:519): avc: denied { map } for pid=11510 comm="syz.2.1898" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 138.619886][ T40] audit: type=1400 audit(1755193087.327:520): avc: denied { getopt } for pid=11521 comm="syz.1.1902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 138.673531][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.675709][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.684027][ T40] audit: type=1400 audit(1755193087.383:521): avc: denied { create } for pid=11525 comm="syz.1.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 138.686051][T11526] program syz.1.1905 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.919304][ T40] audit: type=1400 audit(1755193087.608:522): avc: denied { watch watch_reads } for pid=11535 comm="syz.1.1908" path="pipe:[35895]" dev="pipefs" ino=35895 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 139.097332][ T40] audit: type=1326 audit(1755193087.776:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11539 comm="syz.1.1909" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32f058ebe9 code=0x0 [ 139.632411][T11544] loop6: detected capacity change from 0 to 7 [ 139.635055][T11544] Dev loop6: unable to read RDB block 7 [ 139.636823][T11544] loop6: AHDI p3 p4 [ 139.638069][T11544] loop6: partition table partially beyond EOD, truncated [ 139.640342][T11544] loop6: p3 start 1886353253 is beyond EOD, truncated [ 139.840770][T11556] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 139.843900][T11556] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 139.933891][ T5995] usbhid 5-1:0.0: can't add hid device: -71 [ 139.935835][ T5995] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 139.939497][ T5995] usb 5-1: USB disconnect, device number 14 [ 140.044200][T11580] openvswitch: netlink: nsh attr 0 has unexpected len 4 expected 0 [ 140.046704][T11580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.052917][T11580] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 140.056450][T11580] netlink: 'syz.1.1926': attribute type 21 has an invalid length. [ 140.084624][T11585] loop6: detected capacity change from 0 to 7 [ 140.087015][T11585] Dev loop6: unable to read RDB block 7 [ 140.088866][T11585] loop6: AHDI p3 p4 [ 140.090166][T11585] loop6: partition table partially beyond EOD, truncated [ 140.093356][T11585] loop6: p3 start 1886353253 is beyond EOD, truncated [ 140.528807][ T34] usb 8-1: USB disconnect, device number 13 [ 140.543397][T11610] __nla_validate_parse: 30 callbacks suppressed [ 140.543410][T11610] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1938'. [ 140.549352][T11610] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1938'. [ 140.552549][T11610] 0ªî{X¹¦: entered allmulticast mode [ 140.598680][T11620] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1943'. [ 140.648489][T11624] Bluetooth: hci0: load_link_keys: too big key_count value 3072 [ 140.672273][T11626] FAULT_INJECTION: forcing a failure. [ 140.672273][T11626] name failslab, interval 1, probability 0, space 0, times 0 [ 140.676232][T11626] CPU: 0 UID: 0 PID: 11626 Comm: syz.3.1946 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 140.676247][T11626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 140.676253][T11626] Call Trace: [ 140.676257][T11626] [ 140.676261][T11626] dump_stack_lvl+0x16c/0x1f0 [ 140.676296][T11626] should_fail_ex+0x512/0x640 [ 140.676310][T11626] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 140.676323][T11626] should_failslab+0xc2/0x120 [ 140.676336][T11626] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 140.676347][T11626] ? __alloc_skb+0x2b2/0x380 [ 140.676364][T11626] __alloc_skb+0x2b2/0x380 [ 140.676378][T11626] ? __pfx___alloc_skb+0x10/0x10 [ 140.676398][T11626] alloc_skb_with_frags+0xe0/0x860 [ 140.676412][T11626] sock_alloc_send_pskb+0x7fb/0x990 [ 140.676426][T11626] ? avc_has_perm+0x144/0x1f0 [ 140.676443][T11626] ? __pfx_avc_has_perm+0x10/0x10 [ 140.676464][T11626] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 140.676481][T11626] ? sock_has_perm+0x259/0x2f0 [ 140.676492][T11626] ? __pfx_sock_has_perm+0x10/0x10 [ 140.676504][T11626] hci_sock_sendmsg+0x1c7/0x25f0 [ 140.676522][T11626] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 140.676540][T11626] sock_write_iter+0x4ff/0x5b0 [ 140.676552][T11626] ? __pfx_sock_write_iter+0x10/0x10 [ 140.676568][T11626] ? bpf_lsm_file_permission+0x9/0x10 [ 140.676582][T11626] ? security_file_permission+0x71/0x210 [ 140.676597][T11626] ? rw_verify_area+0xcf/0x6c0 [ 140.676614][T11626] vfs_write+0x6c4/0x1150 [ 140.676625][T11626] ? __pfx_sock_write_iter+0x10/0x10 [ 140.676638][T11626] ? __pfx_vfs_write+0x10/0x10 [ 140.676648][T11626] ? find_held_lock+0x2b/0x80 [ 140.676669][T11626] ksys_write+0x1f8/0x250 [ 140.676680][T11626] ? __pfx_ksys_write+0x10/0x10 [ 140.676694][T11626] do_syscall_64+0xcd/0x4c0 [ 140.676711][T11626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.676721][T11626] RIP: 0033:0x7fc823f8ebe9 [ 140.676731][T11626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.676741][T11626] RSP: 002b:00007fc824d16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 140.676751][T11626] RAX: ffffffffffffffda RBX: 00007fc8241b5fa0 RCX: 00007fc823f8ebe9 [ 140.676758][T11626] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000004 [ 140.676764][T11626] RBP: 00007fc824d16090 R08: 0000000000000000 R09: 0000000000000000 [ 140.676770][T11626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.676776][T11626] R13: 00007fc8241b6038 R14: 00007fc8241b5fa0 R15: 00007fff3fc70dd8 [ 140.676789][T11626] [ 140.736644][ T46] wlan1: Trigger new scan to find an IBSS to join [ 140.773828][T11636] validate_nla: 2 callbacks suppressed [ 140.773840][T11636] netlink: 'syz.1.1949': attribute type 1 has an invalid length. [ 140.790878][T11636] 8021q: adding VLAN 0 to HW filter on device bond10 [ 140.811904][T11636] 8021q: adding VLAN 0 to HW filter on device bond10 [ 140.814245][T11636] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 140.818357][T11636] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 140.895712][T11642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1951'. [ 140.918201][ T40] audit: type=1400 audit(1755193089.479:524): avc: denied { write } for pid=11644 comm="syz.1.1953" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 140.951994][ T40] audit: type=1400 audit(1755193089.507:525): avc: denied { mount } for pid=11648 comm="syz.2.1954" name="/" dev="autofs" ino=37015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 140.990141][ T40] audit: type=1400 audit(1755193089.544:526): avc: denied { unmount } for pid=5972 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 141.045397][T11655] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1957'. [ 141.048246][T11655] netlink: 'syz.2.1957': attribute type 7 has an invalid length. [ 141.050658][T11655] netlink: 'syz.2.1957': attribute type 8 has an invalid length. [ 141.054911][T11655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1957'. [ 141.083808][T11657] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1958'. [ 141.087172][T11657] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1958'. [ 141.152163][T11661] 9p: Unknown uid 00000000004294967295 [ 141.158604][T11663] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1961'. [ 141.170115][ T5995] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 141.271285][T11674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1966'. [ 141.281642][ T840] ------------[ cut here ]------------ [ 141.283888][ T840] refcount_t: underflow; use-after-free. [ 141.285914][ T840] WARNING: CPU: 0 PID: 840 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 141.289091][ T840] Modules linked in: [ 141.290509][ T840] CPU: 0 UID: 0 PID: 840 Comm: kworker/0:2 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 141.296541][ T840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 141.300297][ T840] Workqueue: md_misc mddev_delayed_delete [ 141.302148][ T840] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 141.304110][ T840] Code: ff 89 de e8 a8 f0 d8 fc 84 db 0f 85 66 ff ff ff e8 bb f5 d8 fc c6 05 3c c2 b0 0b 01 90 48 c7 c7 00 80 15 8c e8 47 94 97 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 98 f5 d8 fc 0f b6 1d 17 c2 b0 0b 31 [ 141.310314][ T840] RSP: 0018:ffffc90005077c10 EFLAGS: 00010286 [ 141.312296][ T840] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a3358 [ 141.314782][ T840] RDX: ffff88802682c880 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 141.317209][ T840] RBP: ffff8880256bc130 R08: 0000000000000001 R09: 0000000000000000 [ 141.319774][ T840] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880256bc134 [ 141.322329][ T840] R13: dffffc0000000000 R14: ffff8880256bc130 R15: ffffc90005077d10 [ 141.324818][ T840] FS: 0000000000000000(0000) GS:ffff8880d66c4000(0000) knlGS:0000000000000000 [ 141.327605][ T840] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.329713][ T840] CR2: 000000110c44c271 CR3: 000000003bf6c000 CR4: 0000000000352ef0 [ 141.332352][ T840] Call Trace: [ 141.333434][ T840] [ 141.334536][ T840] kobject_put+0x230/0x5a0 [ 141.335959][ T840] process_one_work+0x9cc/0x1b70 [ 141.337536][ T840] ? __pfx_disk_events_workfn+0x10/0x10 [ 141.339309][ T840] ? __pfx_process_one_work+0x10/0x10 [ 141.341179][ T840] ? assign_work+0x1a0/0x250 [ 141.342698][ T840] worker_thread+0x6c8/0xf10 [ 141.344201][ T840] ? __kthread_parkme+0x19e/0x250 [ 141.345847][ T840] ? __pfx_worker_thread+0x10/0x10 [ 141.347476][ T840] kthread+0x3c5/0x780 [ 141.348777][ T840] ? __pfx_kthread+0x10/0x10 [ 141.350297][ T840] ? rcu_is_watching+0x12/0xc0 [ 141.351964][ T840] ? __pfx_kthread+0x10/0x10 [ 141.353472][ T840] ret_from_fork+0x5d4/0x6f0 [ 141.354978][ T840] ? __pfx_kthread+0x10/0x10 [ 141.356453][ T840] ret_from_fork_asm+0x1a/0x30 [ 141.357978][ T840] [ 141.358321][ T5995] usb 6-1: unable to get BOS descriptor or descriptor too short [ 141.358983][ T840] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 141.358993][ T840] CPU: 0 UID: 0 PID: 840 Comm: kworker/0:2 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 141.359007][ T840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 141.359015][ T840] Workqueue: md_misc mddev_delayed_delete [ 141.359033][ T840] Call Trace: [ 141.359037][ T840] [ 141.359042][ T840] dump_stack_lvl+0x3d/0x1f0 [ 141.359060][ T840] vpanic+0x6e8/0x7a0 [ 141.359077][ T840] ? __pfx_vpanic+0x10/0x10 [ 141.359097][ T840] ? refcount_warn_saturate+0x14a/0x210 [ 141.359109][ T840] panic+0xca/0xd0 [ 141.359125][ T840] ? __pfx_panic+0x10/0x10 [ 141.359145][ T840] ? check_panic_on_warn+0x1f/0xb0 [ 141.359155][ T840] check_panic_on_warn+0xab/0xb0 [ 141.359165][ T840] __warn+0xf6/0x3c0 [ 141.359174][ T840] ? __pfx_vprintk_emit+0x10/0x10 [ 141.359188][ T840] ? refcount_warn_saturate+0x14a/0x210 [ 141.359200][ T840] report_bug+0x3c3/0x580 [ 141.359215][ T840] ? refcount_warn_saturate+0x14a/0x210 [ 141.359227][ T840] handle_bug+0x184/0x210 [ 141.359238][ T840] exc_invalid_op+0x17/0x50 [ 141.359250][ T840] asm_exc_invalid_op+0x1a/0x20 [ 141.359261][ T840] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 141.359273][ T840] Code: ff 89 de e8 a8 f0 d8 fc 84 db 0f 85 66 ff ff ff e8 bb f5 d8 fc c6 05 3c c2 b0 0b 01 90 48 c7 c7 00 80 15 8c e8 47 94 97 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 98 f5 d8 fc 0f b6 1d 17 c2 b0 0b 31 [ 141.359283][ T840] RSP: 0018:ffffc90005077c10 EFLAGS: 00010286 [ 141.359292][ T840] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a3358 [ 141.359299][ T840] RDX: ffff88802682c880 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 141.359306][ T840] RBP: ffff8880256bc130 R08: 0000000000000001 R09: 0000000000000000 [ 141.359312][ T840] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880256bc134 [ 141.359319][ T840] R13: dffffc0000000000 R14: ffff8880256bc130 R15: ffffc90005077d10 [ 141.359329][ T840] ? __warn_printk+0x198/0x350 [ 141.359345][ T840] ? __warn_printk+0x1a5/0x350 [ 141.359363][ T840] kobject_put+0x230/0x5a0 [ 141.359375][ T840] process_one_work+0x9cc/0x1b70 [ 141.359390][ T840] ? __pfx_disk_events_workfn+0x10/0x10 [ 141.359413][ T840] ? __pfx_process_one_work+0x10/0x10 [ 141.359428][ T840] ? assign_work+0x1a0/0x250 [ 141.359440][ T840] worker_thread+0x6c8/0xf10 [ 141.359455][ T840] ? __kthread_parkme+0x19e/0x250 [ 141.359472][ T840] ? __pfx_worker_thread+0x10/0x10 [ 141.359484][ T840] kthread+0x3c5/0x780 [ 141.359494][ T840] ? __pfx_kthread+0x10/0x10 [ 141.359505][ T840] ? rcu_is_watching+0x12/0xc0 [ 141.359519][ T840] ? __pfx_kthread+0x10/0x10 [ 141.359530][ T840] ret_from_fork+0x5d4/0x6f0 [ 141.359540][ T840] ? __pfx_kthread+0x10/0x10 [ 141.359551][ T840] ret_from_fork_asm+0x1a/0x30 [ 141.359569][ T840] [ 141.361934][ T840] Kernel Offset: disabled VM DIAGNOSIS: 16:00:08 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000050 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85636695 RDI=ffffffff9b106160 RBP=ffffffff9b106120 RSP=ffffc90005077580 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000050 R14=ffffffff9b106120 R15=ffffffff85636630 RIP=ffffffff856366bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c44c271 CR3=000000003bf6c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000316e616c77 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd39927886 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd39927886 00007ffd3992788c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe055a12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe055a12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe055a12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe055a12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe055a12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe055a12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000004e 0058000c00000000 000000040058000c 000000000000005d ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f9ad713f3f478a5f 427ec81178729f1f cdc596578ba30004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a47b942f232d3c3 1002132061de1602 7d57171fc8a01be5 523975e77b41abf1 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000015d389 RBX=0000000000000001 RCX=ffffffff8b92ac29 RDX=0000000000000000 RSI=ffffffff8de4e7a9 RDI=ffffffff8c161100 RBP=ffffed1003bd1488 RSP=ffffc90000177dc8 R8 =0000000000000001 R9 =ffffed100d4a6655 R10=ffff88806a5332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801de8a440 R14=ffffffff90aaff90 R15=0000000000000000 RIP=ffffffff81000280 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001980 CR3=000000002f52e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555d7e6bb0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555d7b5803 000055555d7b56e0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555d7bb66a 000055555d7bb500 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01ffffffffffffff ffef080480032008 0006100020100006 00719a000200070e ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8b2408078c030100 0002040607880300 0000280808078003 0780040280030280 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5010000290030100 0006080607b00300 0300080000000525 dfdbfc0000000033 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080606015e8c01 8002000700080060 0300100050030010 0040030210003003 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0466a0030008 006690030fffffff ffffff0466800301 a010000004010000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010fffffffffffff 0400100002100066 8004010000000806 0a0156e601800000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 070282080066f003 00080066e0030010 0066d0030fffffff ffffff0466c00300 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 100066b0030fffff ffffffff0466a003 0008006690030fff ffffffffff046680 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0301a01000000401 000000080606015e 8c01800200070008 0060030010005003 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000001c82c1 RBX=0000000000000002 RCX=ffffffff8b92ac29 RDX=0000000000000000 RSI=ffffffff8de4e7a9 RDI=ffffffff8c161100 RBP=ffffed1003bd1910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801de8c880 R14=ffffffff90aaff90 R15=0000000000000000 RIP=ffffffff8b92978f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc823f74980 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0003000800000005 25dfdbfc00000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff3fc712e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff3fc712e6 00007fff3fc712ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc824012e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc824012e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc824012e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc824012e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc824012ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc824012fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8241874a8 00007fc8241874a0 00007fc824187498 00007fc824187470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc824ced100 00007fc824187460 00007fc824187478 0000000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8241874b8 00007fc8241874b0 00007fc8241874a8 00007fc8241874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffffea0000928080 RCX=ffffffff8218d828 RDX=1ffffd4000125011 RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc90003b07670 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=dffffc0000000000 R13=ffff8880292d83a0 R14=ffffea0000928080 R15=0000000000000000 RIP=ffffffff81bb8e90 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe05677df98 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd39927700 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd39927886 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd39927886 00007ffd3992788c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe055a12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe055a12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe055a12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe055a12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe055a12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe055a12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000