last executing test programs: 2m43.430675808s ago: executing program 1 (id=686): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000001000)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x7b2, 0x20, 0x10000000fffff}, 0x2f) write$cgroup_pressure(r1, &(0x7f0000000100)={'some', 0x20, 0x10, 0x20, 0x400}, 0x2f) 2m43.430439176s ago: executing program 1 (id=687): bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x3, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TXQLEN={0x8, 0xd, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 2m43.055345068s ago: executing program 1 (id=696): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x2, 0x0, 0x0, 'queue1\x00', 0x7}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 2m42.94093635s ago: executing program 1 (id=690): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x8) 2m42.881436892s ago: executing program 1 (id=691): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001380)={0x1c, r0, 0x1, 0x70bd27, 0x4, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x20044800) 2m42.793426285s ago: executing program 1 (id=693): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, r1, 0x6, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r0, r1, 0x6, 0x0, @val=@netfilter={0xa, 0x0, 0x3}}, 0x3c) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r1, 0x6, 0x1, 0x0, &(0x7f0000000480)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 2m42.712227161s ago: executing program 32 (id=693): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, r1, 0x6, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r0, r1, 0x6, 0x0, @val=@netfilter={0xa, 0x0, 0x3}}, 0x3c) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r1, 0x6, 0x1, 0x0, &(0x7f0000000480)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 2m5.723558259s ago: executing program 3 (id=1275): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/82, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74, 0x8080000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000026c0)=ANY=[@ANYBLOB="2000000010000107feffffff000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1}, 0x80000007}], 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) 2m5.66721182s ago: executing program 3 (id=1276): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) r4 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0) syz_usb_disconnect(r4) syz_usb_disconnect(r3) r5 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) 2m2.758330368s ago: executing program 3 (id=1303): socket$unix(0x1, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 2m2.736807784s ago: executing program 3 (id=1304): socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2048) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0x3) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) r2 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x207a98, 0x0, 0x0, 0x0, 0x0) 2m2.604332315s ago: executing program 3 (id=1306): syz_open_procfs(0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_io_uring_setup(0x49f, 0x0, 0x0, 0x0) eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_clone3(&(0x7f0000000200)={0x4000000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008804"]) 2m2.257416183s ago: executing program 3 (id=1312): openat$kvm(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e", 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m2.154811558s ago: executing program 33 (id=1312): openat$kvm(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e", 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m50.391527029s ago: executing program 0 (id=1499): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 1m48.931602996s ago: executing program 0 (id=1540): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) sendmsg$unix(r1, &(0x7f0000000840)={&(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0xa, 0x800}, 0x4000080) close(r0) 1m48.810507895s ago: executing program 0 (id=1542): setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 1m48.68094557s ago: executing program 0 (id=1544): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r0 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x8, 0x1, 0x0, "d2ea61bf62041dae026e9e8203614554307c83d774dfc0fb62602f9a84c3bbe4", 0x32315559}) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) chroot(&(0x7f0000000100)='.\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0xd4a4b0a0f18409a3, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) statx(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1000, 0xa00, &(0x7f0000000280)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000077c0)={0x2020}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006480)={0x10}, 0x0, 0x0, 0x0}) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) 1m48.591666921s ago: executing program 0 (id=1545): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x20}, 0xc) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0xa043}], 0x1) 1m48.401302773s ago: executing program 0 (id=1547): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f58004"]) 1m48.252359862s ago: executing program 34 (id=1547): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f58004"]) 1.120487848s ago: executing program 6 (id=4726): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0903, 0x2b, '\x00', @value=0x6}}) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="00830400"]) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000005c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "c40a176d007ff802c9197a3b3765bca72513efb31a41e3fd8f63f407d7ad0228c9fc5e42d7decf8f636bf92919fd904d70816530861c65a57f9d6b320c781a2cf6e0486de0dcbcd59c773c4d1cff0fbf05007aca4bbead238e80c24e652aa19b9f032fd6b6128f90000000000000000000"}, 0x75) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006001000000010"], 0x68}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(0xffffffffffffffff, 0x3b87, &(0x7f0000002300)={0x18, 0x1, 0x0, 0x0, r3, 0x100003}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$FUSE(r1, &(0x7f00000065c0)={0x2020}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x1f, 0x300) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002480), 0x8000, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x2) 889.549171ms ago: executing program 4 (id=4729): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_delvlan={0x17, 0x70, 0x1, 0x0, 0x2, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x43, 0x4}}}]}, 0x24}, 0x1, 0x0, 0xfff0, 0x4040004}, 0x0) 820.597095ms ago: executing program 4 (id=4730): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x3, {0xe, 0x8, "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", 0x7f, 0x3, 0x9, 0x5, 0x5, 0x9, 0xb}, r1}}, 0x128) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r3, 0x400, 0x70bd27, 0x400, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x80) r4 = fcntl$dupfd(r0, 0x406, r0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xc4, r5, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x10}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5c}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10000}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000580)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4001}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x168, r3, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0x78, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "1d888b0bf31b39c8e42febecd88892ef"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_KEY={0xc8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "41749bc4b6136fac8d6528906473ecb5"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e28b9115c827dc7a57982cd29e25debf6cde0aed3563d89ce992f210d81a3eb5"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "5da19ec1b7c702e7ca159bded05f2fc4afca68315972032a31c0870eb6fb1799"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_ID={0x44, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x400c1}, 0x20000001) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, r7, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x62}}}}, [""]}, 0x28}}, 0x20000080) r9 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_buf(r9, 0x29, 0xc9, &(0x7f0000000940)=""/232, &(0x7f0000000a40)=0xe8) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000b00)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000a80)=[{0x8, 0x0, [0xbd, 0x8, 0x200, 0xfffffff7, 0x1, 0x6, 0x54e, 0xff, 0x7, 0x1, 0x3, 0x40, 0x7, 0xfffffff7, 0x8]}], r1, 0x1, 0x1, 0x48}}, 0x20) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r4) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x7c, r10, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x4e}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x26}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x39c}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x80}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3a}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f0000000cc0)={0x10000, 0x22b7}) r11 = creat(&(0x7f0000000d00)='./file0\x00', 0xa0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r12, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x30, r10, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4d}}}}, [@NL80211_ATTR_DURATION={0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x18000}, 0x840) fchdir(r9) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x50, r5, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd47a}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffff7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffc}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0xc000) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000f80), 0x121403, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r11, &(0x7f0000001000)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x40080}, 0xc010) ioctl$HIDIOCGRAWINFO(r4, 0x80084803, &(0x7f0000001040)=""/90) 760.279912ms ago: executing program 4 (id=4733): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0x3, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5c0, 0xfdc, 0x3, 0xfffffffb, 0x1ff}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0xf000000, 0x4040011}, 0x0) 759.968359ms ago: executing program 5 (id=4734): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0xa000, 0x134) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x25, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1ab8ff00000000bfa100000000000007010000f0ffffffb702000002000000b70300000000000085000000c700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) preadv(r1, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/254, 0xfe}], 0x1, 0x8, 0xfff) 700.60824ms ago: executing program 5 (id=4735): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000108000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="0040000080a004000c002b8008000100", @ANYRES32, @ANYBLOB="08001b00"], 0x34}}, 0x0) (fail_nth: 6) 510.60159ms ago: executing program 4 (id=4737): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x258, 0x4c, 0x232, 0x258, 0x0, 0x388, 0x2e8, 0x2e8, 0x388, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [0xff9c], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv4=@dev}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 510.446924ms ago: executing program 5 (id=4738): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) (async) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000000340)={r0, 0x77c, 0x8bf9, "39d44a705fc77533e9e0cb64623686f7a71c90caccfeccfd449bac58b83c4a76b9d2ef6c74ad68f1065dc094a29f5c00c87614a80ff34d48efd34debd82829d608dc47f80bd2102b54e7e26c06544776f3d315f0933da6e4321f0864e77b17fb21b8cf2e38df643080e6f1bf7fd3bc317971a451581ae2b131db22037d4c7d579f51c6560e8d25d3d7d4c9cb1955d81c41617c09c6846c75b8e62381fd9a8797"}) close_range(r4, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) 510.224836ms ago: executing program 4 (id=4739): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_delvlan={0x17, 0x70, 0x1, 0x0, 0x2, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x43, 0x4}}}]}, 0x24}, 0x1, 0x0, 0x34000, 0x4040004}, 0x0) 448.827293ms ago: executing program 4 (id=4741): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000c80)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffc, 0x1]}}) (async) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0xd, 0x2, 0x4, 0x8, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x7, 0x8, 0x3}}) (rerun: 32) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000180)='`', 0x5dc, 0x0, &(0x7f0000000740)={0x6, 0x0, r4, 0x1, 0x0, 0x6, @random="4a99fee2084d"}, 0x14) 448.55143ms ago: executing program 2 (id=4743): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f00000001c0)=@file={0xd9e15df59dbb69bf, './cgroup\x00'}, 0xfffffffffffffe1f) bind$inet(r1, &(0x7f0000000000)={0x2, 0x24, @empty}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x4) setsockopt$inet_int(r3, 0x0, 0x17, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0), 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c000440000010c6f7a0b5ec0c0005"], 0xec}}, 0x8890) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, &(0x7f0000000200)={[{@size={'size', 0x3d, [0x65]}}]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0xa000, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000000), 0x2, 0x0) preadv(r6, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/254, 0xfe}], 0x1, 0x8, 0xfff) 448.511834ms ago: executing program 5 (id=4744): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x59, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000001210003b1528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000100000400028008000300000000000500110001"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) 390.441671ms ago: executing program 5 (id=4745): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 390.143522ms ago: executing program 2 (id=4746): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB="090000000000fed6f5cc7a15ada4ffb13089baf2643b790000", @ANYRES32=r1, @ANYBLOB="10005080040006000500020004000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8}, 0x24000804) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB="090000000000fed6f5cc7a15ada4ffb13089baf2643b790000", @ANYRES32=r1, @ANYBLOB="10005080040006000500020004000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8}, 0x24000804) (async) 310.069466ms ago: executing program 2 (id=4747): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) syz_clone(0x0, 0x0, 0xf5ff, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921bc111a262f295a8eb540", 0x7fffeffd}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x0) syz_pidfd_open(r0, 0x0) r4 = syz_open_procfs(r0, &(0x7f0000000000)='net/unix\x00') pread64(r4, &(0x7f0000000180)=""/15, 0xfffffe9c, 0xb6) 240.642259ms ago: executing program 6 (id=4748): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000040)=0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 100.719349ms ago: executing program 6 (id=4749): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0xffffffffffffffff, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 100.583095ms ago: executing program 2 (id=4750): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0x3, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5c0, 0xfdc, 0x3, 0xfffffffb, 0x1ff}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x15000000, 0x4040011}, 0x0) 40.40686ms ago: executing program 6 (id=4751): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000108000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="0040000080a004000c002b8008000100", @ANYRES32, @ANYBLOB="08001b00"], 0x34}}, 0x0) (fail_nth: 7) 40.071352ms ago: executing program 6 (id=4752): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0, @ANYBLOB="00000000042004001c002b8008000800", @ANYRES32, @ANYBLOB="080003001900000008000100", @ANYRES32], 0x44}}, 0x8004) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000900)={&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @dev, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000029000000040000000000000000000000280000000000000029000000050000000002020100000000fc00000000000000000000000000000018"], 0x58}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xa, 0xfff3}, {0xfff2, 0xfff1}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000094}, 0x4044040) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0x1}}, 0x120) write$UHID_INPUT2(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="4c000000c8c4829ea0d0fd658dbf42180000"], 0x6) r9 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r9, 0x541b, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r10 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$alg(r10, &(0x7f0000000140), 0x4924b68, 0x0) 39.910243ms ago: executing program 2 (id=4753): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x258, 0x4c, 0x232, 0x258, 0x0, 0x388, 0x2e8, 0x2e8, 0x388, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [0x40000], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv4=@dev}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 1.545093ms ago: executing program 5 (id=4754): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f00000001c0)='./file0\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=""/117, 0x75) syz_open_dev$hidraw(&(0x7f0000002400), 0x0, 0x2b82) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='ufs\x00', 0x204009, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff8100f05991d117b080dc7192d3677d03410008004500001c0000000000889078ac1e0001ac1414aa12009078fffffffc"], 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x1010, r0, 0x61a2a000) 372.085µs ago: executing program 2 (id=4755): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) lseek(r0, 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) 0s ago: executing program 6 (id=4756): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0903, 0x2b, '\x00', @value=0x6}}) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="00830400"]) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000005c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x71}, "c40a176d007ff802c9197a3b3765bca72513efb31a41e3fd8f63f407d7ad0228c9fc5e42d7decf8f636bf92919fd904d70816530861c65a57f9d6b320c781a2cf6e0486de0dcbcd59c773c4d1cff0fbf05007aca4bbead238e80c24e652aa19b9f032fd6b6128f90000000000000000000"}, 0x75) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006001000000010"], 0x68}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(0xffffffffffffffff, 0x3b87, &(0x7f0000002300)={0x18, 0x1, 0x0, 0x0, r3, 0x100003}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$FUSE(r1, &(0x7f00000065c0)={0x2020}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x1f, 0x300) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002480), 0x8000, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x2) kernel console output (not intermixed with test programs): ace descriptor's value: 17 [ 187.397727][ T54] usb 9-1: config 250 interface 228 has no altsetting 0 [ 187.401214][ T54] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 187.404175][ T54] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 187.406722][ T54] usb 9-1: Product: syz [ 187.408442][ T54] usb 9-1: SerialNumber: syz [ 187.414342][ T54] hub 9-1:250.228: bad descriptor, ignoring hub [ 187.416323][ T54] hub 9-1:250.228: probe with driver hub failed with error -5 [ 187.535486][T13869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.541020][T13869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.618033][ T54] usblp 9-1:250.228: usblp0: USB Bidirectional printer dev 15 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 187.888235][T13877] FAULT_INJECTION: forcing a failure. [ 187.888235][T13877] name failslab, interval 1, probability 0, space 0, times 0 [ 187.898138][T13877] CPU: 1 UID: 0 PID: 13877 Comm: syz.5.2538 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 187.898167][T13877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 187.898178][T13877] Call Trace: [ 187.898185][T13877] [ 187.898192][T13877] dump_stack_lvl+0x16c/0x1f0 [ 187.898223][T13877] should_fail_ex+0x512/0x640 [ 187.898250][T13877] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 187.898277][T13877] should_failslab+0xc2/0x120 [ 187.898300][T13877] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 187.898324][T13877] ? security_context_to_sid_core+0xc1/0x860 [ 187.898363][T13877] kmemdup_nul+0x49/0xf0 [ 187.898387][T13877] security_context_to_sid_core+0xc1/0x860 [ 187.898413][T13877] ? avc_has_perm_noaudit+0x149/0x3b0 [ 187.898436][T13877] ? __pfx_security_context_to_sid_core+0x10/0x10 [ 187.898463][T13877] ? avc_has_perm+0x11a/0x1c0 [ 187.898487][T13877] ? rcu_is_watching+0x12/0xc0 [ 187.898505][T13877] ? trace_contention_end+0xdd/0x130 [ 187.898536][T13877] selinux_lsm_setattr+0x267/0x910 [ 187.898564][T13877] ? __pfx_selinux_lsm_setattr+0x10/0x10 [ 187.898587][T13877] ? find_held_lock+0x2b/0x80 [ 187.898602][T13877] ? __might_fault+0xe3/0x190 [ 187.898621][T13877] ? __might_fault+0x13b/0x190 [ 187.898645][T13877] selinux_setprocattr+0x41/0x60 [ 187.898670][T13877] security_setprocattr+0x147/0x1a0 [ 187.898696][T13877] proc_pid_attr_write+0x332/0x790 [ 187.898722][T13877] ? __pfx_proc_pid_attr_write+0x10/0x10 [ 187.898743][T13877] vfs_write+0x29d/0x1150 [ 187.898768][T13877] ? __pfx___mutex_lock+0x10/0x10 [ 187.898792][T13877] ? __pfx_vfs_write+0x10/0x10 [ 187.898819][T13877] ? __fget_files+0x20e/0x3c0 [ 187.898849][T13877] ksys_write+0x12a/0x250 [ 187.898869][T13877] ? __pfx_ksys_write+0x10/0x10 [ 187.898896][T13877] do_syscall_64+0xcd/0x4c0 [ 187.898929][T13877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.898951][T13877] RIP: 0033:0x7fc6e238e969 [ 187.898966][T13877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.898983][T13877] RSP: 002b:00007fc6e317e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 187.899001][T13877] RAX: ffffffffffffffda RBX: 00007fc6e25b5fa0 RCX: 00007fc6e238e969 [ 187.899012][T13877] RDX: 0000000000000ff1 RSI: 0000200000007c40 RDI: 0000000000000003 [ 187.899023][T13877] RBP: 00007fc6e317e090 R08: 0000000000000000 R09: 0000000000000000 [ 187.899034][T13877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.899044][T13877] R13: 0000000000000000 R14: 00007fc6e25b5fa0 R15: 00007ffc3f9f35e8 [ 187.899069][T13877] [ 187.966353][ T54] usb 9-1: USB disconnect, device number 15 [ 187.995879][T13879] tipc: Enabling of bearer rejected, failed to enable media [ 188.006083][ T54] usblp0: removed [ 188.118068][T13891] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 188.120868][T13891] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 188.196399][ T40] audit: type=1400 audit(1748784776.460:637): avc: denied { execheap } for pid=13897 comm="syz.6.2546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 188.297137][T13909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=13909 comm=syz.6.2551 [ 188.355522][T13916] netlink: 'syz.2.2554': attribute type 1 has an invalid length. [ 188.367174][T13916] 8021q: adding VLAN 0 to HW filter on device bond9 [ 188.389972][T13916] 8021q: adding VLAN 0 to HW filter on device bond9 [ 188.393019][T13916] bond9: (slave vxcan5): The slave device specified does not support setting the MAC address [ 188.399169][T13916] bond9: (slave vxcan5): Error -95 calling set_mac_address [ 188.428192][T13923] 8021q: adding VLAN 0 to HW filter on device bond9 [ 188.511379][T13934] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 188.515347][T13934] overlayfs: maximum fs stacking depth exceeded [ 188.537488][ T40] audit: type=1400 audit(1748784776.800:638): avc: denied { unmount } for pid=7707 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 188.896605][T13966] futex_wake_op: syz.2.2572 tries to shift op by -1; fix this program [ 189.516282][T14000] Failed to initialize the IGMP autojoin socket (err -2) [ 189.792052][T14039] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 189.797591][T14039] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 189.962887][ T40] audit: type=1804 audit(1748784778.220:639): pid=14059 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2604" name="file0" dev="tmpfs" ino=4653 res=1 errno=0 [ 189.971869][ T40] audit: type=1400 audit(1748784778.230:640): avc: denied { mount } for pid=14061 comm="syz.6.2606" name="/" dev="rpc_pipefs" ino=38532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 190.030315][T14068] __nla_validate_parse: 10 callbacks suppressed [ 190.030335][T14068] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2609'. [ 190.034917][T14066] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2608'. [ 190.059705][T14070] netlink: 'syz.2.2610': attribute type 3 has an invalid length. [ 190.119574][T14076] netlink: 'syz.5.2613': attribute type 1 has an invalid length. [ 190.126773][ T40] audit: type=1400 audit(1748784778.390:641): avc: denied { mount } for pid=14075 comm="syz.5.2613" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 190.143497][ T40] audit: type=1400 audit(1748784778.400:642): avc: denied { unmount } for pid=14075 comm="syz.5.2613" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 190.191668][T14086] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2617'. [ 190.194676][T14086] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2617'. [ 190.287312][T14198] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2620'. [ 190.292778][T14198] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 190.302249][T14198] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 190.305610][T14198] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 190.339719][T14203] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 190.425754][T14209] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 190.429119][T14209] overlayfs: missing 'lowerdir' [ 190.566291][T14211] veth25: entered promiscuous mode [ 190.569383][T14211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=14211 comm=syz.2.2626 [ 190.574546][T14211] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2626'. [ 190.574560][T14212] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2626'. [ 190.680534][T14220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2630'. [ 190.778708][T14230] Failed to initialize the IGMP autojoin socket (err -2) [ 190.823053][ T40] audit: type=1400 audit(1748784779.080:643): avc: denied { create } for pid=14231 comm="syz.2.2636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 190.829334][ T40] audit: type=1400 audit(1748784779.090:644): avc: denied { setopt } for pid=14231 comm="syz.2.2636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 190.857377][ T40] audit: type=1400 audit(1748784779.120:645): avc: denied { write } for pid=14235 comm="syz.2.2637" name="file0" dev="tmpfs" ino=4747 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 190.873481][ T40] audit: type=1400 audit(1748784779.120:646): avc: denied { open } for pid=14235 comm="syz.2.2637" path="/903/file0" dev="tmpfs" ino=4747 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 190.893702][ T40] audit: type=1400 audit(1748784779.120:647): avc: denied { ioctl } for pid=14235 comm="syz.2.2637" path="/903/file0" dev="tmpfs" ino=4747 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 190.910502][T14240] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 190.913673][T14240] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 191.331154][T14280] Failed to initialize the IGMP autojoin socket (err -2) [ 191.392591][T14286] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2657'. [ 191.398807][T14284] overlayfs: lower data-only dirs require metacopy support. [ 191.448639][T14291] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2660'. [ 191.451936][T14291] 1·: renamed from 70· (while UP) [ 191.464731][T14291] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 191.567231][T14300] netlink: 'syz.6.2663': attribute type 1 has an invalid length. [ 191.569878][T14300] netlink: 'syz.6.2663': attribute type 2 has an invalid length. [ 191.694321][T14318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=14318 comm=syz.6.2671 [ 191.729346][T14322] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 191.732613][T14322] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 191.789258][T14329] 9pnet_fd: p9_fd_create_unix (14329): problem connecting socket: ./file1: -111 [ 191.902332][T14346] Failed to initialize the IGMP autojoin socket (err -2) [ 191.930506][T14352] Failed to initialize the IGMP autojoin socket (err -2) [ 192.036338][T14367] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 192.038880][T14367] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 192.234768][T14493] RDS: rds_bind could not find a transport for ::ffff:172.30.0.7, load rds_tcp or rds_rdma? [ 192.326025][T14501] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 192.548020][T14688] netlink: 'syz.4.2713': attribute type 10 has an invalid length. [ 192.738461][T14715] bridge6: entered promiscuous mode [ 192.815341][T14722] 0·: renamed from hsr0 [ 192.818813][T14722] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 192.822617][T14722] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.826532][T14722] 0·: entered allmulticast mode [ 192.828145][T14722] hsr_slave_0: entered allmulticast mode [ 192.829905][T14722] hsr_slave_1: entered allmulticast mode [ 192.832391][T14722] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 192.858524][T14724] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 192.938190][T14737] batadv_slave_1: entered promiscuous mode [ 192.957149][T14736] batadv_slave_1: left promiscuous mode [ 192.966004][T14741] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 192.966036][T14741] CIFS: Unable to determine destination address [ 193.095753][T14753] 0·: renamed from hsr0 [ 193.099787][T14753] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 193.105809][T14753] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.109179][T14753] 0·: entered allmulticast mode [ 193.110805][T14753] hsr_slave_0: entered allmulticast mode [ 193.112751][T14753] hsr_slave_1: entered allmulticast mode [ 193.116950][T14753] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 193.356099][T14764] kvm: emulating exchange as write [ 193.380731][T14764] tmpfs: Invalid gid '0x00000000ffffffff' [ 193.468077][T14779] netlink: 'syz.2.2749': attribute type 1 has an invalid length. [ 193.483674][T14779] 8021q: adding VLAN 0 to HW filter on device bond10 [ 193.500244][T14779] 8021q: adding VLAN 0 to HW filter on device bond10 [ 193.503717][T14779] bond10: (slave vxcan5): The slave device specified does not support setting the MAC address [ 193.508818][T14779] bond10: (slave vxcan5): Error -95 calling set_mac_address [ 193.587678][T14855] veth31: entered promiscuous mode [ 193.591567][T14855] bond10: (slave veth31): Enslaving as an active interface with a down link [ 193.886042][T14872] RDS: rds_bind could not find a transport for ::ffff:172.30.0.7, load rds_tcp or rds_rdma? [ 193.890019][T14873] 1·: renamed from 70· (while UP) [ 193.894253][T14873] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 193.980891][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.983785][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.108887][T14997] RDS: rds_bind could not find a transport for ::ffff:172.30.0.7, load rds_tcp or rds_rdma? [ 194.314204][T15115] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 194.318035][T15115] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 194.426667][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 194.426678][ T40] audit: type=1400 audit(1748784782.690:651): avc: denied { ioctl } for pid=15124 comm="syz.2.2779" path="socket:[40578]" dev="sockfs" ino=40578 ioctlcmd=0x1501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 194.585325][T15143] netlink: 'syz.5.2784': attribute type 1 has an invalid length. [ 194.620138][T15143] 8021q: adding VLAN 0 to HW filter on device bond5 [ 194.624912][T15143] bond4: (slave bond5): making interface the new active one [ 194.628427][T15143] bond4: (slave bond5): Enslaving as an active interface with an up link [ 194.633221][T15147] Failed to initialize the IGMP autojoin socket (err -2) [ 194.670736][ T40] audit: type=1400 audit(1748784782.930:652): avc: denied { map } for pid=15149 comm="syz.5.2786" path="socket:[38818]" dev="sockfs" ino=38818 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 194.672261][T15150] 1·: renamed from 70· (while UP) [ 194.682589][T15150] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 194.722398][T15153] IPVS: Unknown mcast interface: wlan1 [ 194.787312][ T40] audit: type=1400 audit(1748784783.050:653): avc: denied { read } for pid=15257 comm="syz.2.2789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 194.859344][T15261] netlink: zone id is out of range [ 194.861436][T15261] netlink: zone id is out of range [ 194.863692][T15261] netlink: zone id is out of range [ 194.868573][ T40] audit: type=1400 audit(1748784783.130:654): avc: denied { setopt } for pid=15260 comm="syz.5.2790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 194.878016][ T40] audit: type=1400 audit(1748784783.140:655): avc: denied { bind } for pid=15260 comm="syz.5.2790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 194.886844][T15260] delete_channel: no stack [ 195.199333][ T40] audit: type=1400 audit(1748784783.460:656): avc: denied { listen } for pid=15277 comm="syz.5.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 195.208655][ T40] audit: type=1400 audit(1748784783.470:657): avc: denied { accept } for pid=15277 comm="syz.5.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 195.364397][T15287] __nla_validate_parse: 23 callbacks suppressed [ 195.364409][T15287] netlink: 14528 bytes leftover after parsing attributes in process `syz.6.2801'. [ 195.405744][T15291] Failed to initialize the IGMP autojoin socket (err -2) [ 195.470323][T15293] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2803'. [ 195.563902][T15295] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2804'. [ 195.603447][T15300] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 195.606609][T15300] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 195.703261][ T40] audit: type=1400 audit(1748784783.960:658): avc: denied { create } for pid=15307 comm="syz.4.2809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 195.709393][ T40] audit: type=1400 audit(1748784783.970:659): avc: denied { setopt } for pid=15307 comm="syz.4.2809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 195.797537][T15315] netlink: 'syz.2.2810': attribute type 1 has an invalid length. [ 195.800048][T15315] netlink: 'syz.2.2810': attribute type 2 has an invalid length. [ 195.802519][T15315] netlink: 1172 bytes leftover after parsing attributes in process `syz.2.2810'. [ 195.848924][T15319] xfrm1: entered allmulticast mode [ 195.886787][T15323] Failed to initialize the IGMP autojoin socket (err -2) [ 196.009015][T15338] netlink: 'syz.2.2822': attribute type 1 has an invalid length. [ 196.024099][T15338] 8021q: adding VLAN 0 to HW filter on device bond11 [ 196.030972][T15338] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2822'. [ 196.057166][ T40] audit: type=1400 audit(1748784784.320:660): avc: denied { getopt } for pid=15335 comm="syz.4.2821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 196.218631][T15358] netlink: 'syz.4.2829': attribute type 1 has an invalid length. [ 196.237361][T15358] bond2: entered promiscuous mode [ 196.239431][T15358] bond2: entered allmulticast mode [ 196.249760][T15358] bond2: (slave ip6gretap2): making interface the new active one [ 196.254492][T15358] ip6gretap2: entered promiscuous mode [ 196.257620][T15358] ip6gretap2: entered allmulticast mode [ 196.260873][T15358] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 196.467172][T15475] nbd: must specify an index to disconnect [ 196.490775][T15479] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2836'. [ 196.584016][T15489] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2840'. [ 196.621611][T15495] netlink: 'syz.5.2842': attribute type 1 has an invalid length. [ 196.635295][T15495] net_ratelimit: 401 callbacks suppressed [ 196.635306][T15495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.648651][T15495] 8021q: adding VLAN 0 to HW filter on device bond7 [ 196.651568][T15495] bond6: (slave bond7): making interface the new active one [ 196.654559][T15495] bond6: (slave bond7): Enslaving as an active interface with an up link [ 196.704932][T15615] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2846'. [ 196.736415][T15621] netlink: 'syz.5.2850': attribute type 1 has an invalid length. [ 196.757009][T15621] 8021q: adding VLAN 0 to HW filter on device bond8 [ 196.781674][T15621] 8021q: adding VLAN 0 to HW filter on device bond8 [ 196.785692][T15621] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 196.789665][T15621] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 196.848384][T15633] veth11: entered promiscuous mode [ 196.853463][T15633] bond8: (slave veth11): Enslaving as an active interface with a down link [ 196.857076][T15631] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2854'. [ 196.860337][T15636] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2856'. [ 196.960816][T15648] Failed to initialize the IGMP autojoin socket (err -2) [ 196.979766][T15654] netlink: 'syz.4.2864': attribute type 10 has an invalid length. [ 196.989751][T15654] netlink: 'syz.4.2864': attribute type 10 has an invalid length. [ 196.992266][T15654] team0: entered promiscuous mode [ 196.995097][T15654] team_slave_0: entered promiscuous mode [ 196.999109][T15654] team_slave_1: entered promiscuous mode [ 197.001684][T15654] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.002037][T15654] bridge0: port 3(team0) entered blocking state [ 197.002167][T15654] bridge0: port 3(team0) entered disabled state [ 197.002270][T15654] team0: entered allmulticast mode [ 197.002282][T15654] team_slave_0: entered allmulticast mode [ 197.002322][T15654] team_slave_1: entered allmulticast mode [ 197.102926][T15769] netlink: 'syz.4.2867': attribute type 1 has an invalid length. [ 197.139667][T15769] 8021q: adding VLAN 0 to HW filter on device bond3 [ 197.143045][T15768] Failed to initialize the IGMP autojoin socket (err -2) [ 197.153969][T15769] 8021q: adding VLAN 0 to HW filter on device bond3 [ 197.156275][T15769] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 197.160204][T15769] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 197.219802][T15773] veth9: entered promiscuous mode [ 197.225238][T15773] bond3: (slave veth9): Enslaving as an active interface with a down link [ 197.300063][T15783] netlink: 'syz.4.2873': attribute type 21 has an invalid length. [ 197.379723][T15797] netlink: 'syz.5.2875': attribute type 4 has an invalid length. [ 197.388380][T15796] Failed to initialize the IGMP autojoin socket (err -2) [ 197.519555][T15802] netlink: 'syz.4.2880': attribute type 1 has an invalid length. [ 197.540432][T15802] 8021q: adding VLAN 0 to HW filter on device bond4 [ 197.557069][T15802] 8021q: adding VLAN 0 to HW filter on device bond4 [ 197.559373][T15802] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 197.563270][T15802] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 197.614890][T15804] veth11: entered promiscuous mode [ 197.620188][T15804] bond4: (slave veth11): Enslaving as an active interface with a down link [ 198.041555][T15811] can: request_module (can-proto-4) failed. [ 198.185321][T15922] futex_wake_op: syz.2.2887 tries to shift op by -1; fix this program [ 198.292649][T15929] 0·: renamed from 71· (while UP) [ 198.297315][T15929] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 198.572955][T15940] qnx6: unable to set blocksize [ 198.759314][T15953] netlink: 'syz.2.2899': attribute type 1 has an invalid length. [ 198.772878][T15953] 8021q: adding VLAN 0 to HW filter on device bond12 [ 198.789037][T15953] 8021q: adding VLAN 0 to HW filter on device bond12 [ 198.791387][T15953] bond12: (slave vxcan5): The slave device specified does not support setting the MAC address [ 198.795880][T15953] bond12: (slave vxcan5): Error -95 calling set_mac_address [ 198.876244][T15955] veth35: entered promiscuous mode [ 198.893338][T15955] bond12: (slave veth35): Enslaving as an active interface with a down link [ 198.993147][T16070] overlayfs: failed to clone upperpath [ 199.153877][T16082] 0·: renamed from 71· (while UP) [ 199.157889][T16082] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 199.330157][T16096] netlink: 'syz.6.2911': attribute type 27 has an invalid length. [ 199.398776][T16096] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.418378][T16096] batman_adv: batadv0: Interface deactivated: dummy0 [ 199.487034][T16105] [U] [ 199.488184][T16105] [U] [ 199.489080][T16105] [U] [ 199.489959][T16105] [U] [ 199.491065][T16105] [U] [ 199.492020][T16105] [U] [ 199.492900][T16105] [U] [ 199.493822][T16105] [U] [ 199.495665][T16105] [U] [ 199.496613][T16105] [U] [ 199.497498][T16105] [U] [ 199.498372][T16105] [U] [ 199.499625][T16105] [U] [ 199.500540][T16105] [U] [ 199.501409][T16105] [U] [ 199.502301][T16105] [U] [ 199.507079][T16104] [U] [ 199.527721][T16096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.548995][T16096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.572278][T16096] 1·: left allmulticast mode [ 199.577514][T16096] hsr_slave_0: left allmulticast mode [ 199.578243][T16111] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 199.579367][T16096] hsr_slave_1: left allmulticast mode [ 199.663799][T16096] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.667588][T16096] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.671397][T16096] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.675714][T16096] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.710988][T16096] veth3: left promiscuous mode [ 199.736695][T16096] veth11: left promiscuous mode [ 199.744180][T16096] macsec1: left promiscuous mode [ 199.745754][T16096] macsec1: left allmulticast mode [ 199.749382][T16096] veth13: left promiscuous mode [ 199.753994][T16096] veth17: left promiscuous mode [ 199.773688][T16097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.776446][T16097] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.778940][T16097] batman_adv: batadv0: Interface activated: dummy0 [ 199.780977][T16097] batadv0: mtu less than device minimum [ 199.783333][T16097] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 199.787101][T16097] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 199.790770][T16097] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 199.794481][T16097] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 199.798192][T16097] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 199.801908][T16097] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 199.820599][ T24] syz2: Port: 1 Link DOWN [ 199.821737][T16112] Failed to initialize the IGMP autojoin socket (err -2) [ 199.965535][T16133] overlayfs: failed to clone lowerpath [ 200.108503][T16142] tc_dump_action: action bad kind [ 200.421535][T16254] __nla_validate_parse: 16 callbacks suppressed [ 200.421548][T16254] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2932'. [ 200.429828][T16254] 1·: renamed from 70· (while UP) [ 200.460223][T16258] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2934'. [ 200.463431][T16258] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2934'. [ 200.471201][T16258] gretap0: entered promiscuous mode [ 200.473324][T16258] batadv_slave_1: entered promiscuous mode [ 200.476828][T16258] hsr0: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.546866][T16264] ptrace attach of "/syz-executor exec"[16267] was attempted by "/syz-executor exec"[16264] [ 200.566195][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 200.566209][ T40] audit: type=1400 audit(1748784788.830:669): avc: denied { setopt } for pid=16268 comm="syz.2.2939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 200.578520][T16269] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2939'. [ 200.621450][T16275] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2941'. [ 200.638022][ T40] audit: type=1400 audit(1748784788.900:670): avc: denied { getopt } for pid=16268 comm="syz.2.2939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 200.744469][T16283] netlink: 14528 bytes leftover after parsing attributes in process `syz.5.2945'. [ 200.769036][T16290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=16290 comm=syz.6.2948 [ 200.824897][T16296] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2950'. [ 200.875248][T16307] 8021q: adding VLAN 0 to HW filter on device bond13 [ 200.878910][T16301] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 200.900403][T16307] 8021q: adding VLAN 0 to HW filter on device bond13 [ 200.902719][T16307] bond13: (slave vxcan1): The slave device specified does not support setting the MAC address [ 200.907028][T16307] bond13: (slave vxcan1): Error -95 calling set_mac_address [ 200.920821][T16315] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 200.925939][T16315] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 200.927468][T13365] udevd[13365]: setting mode of /dev/vcs28 to 020660 failed: Read-only file system [ 200.933749][T13365] udevd[13365]: setting owner of /dev/vcs28 to uid=0, gid=5 failed: Read-only file system [ 200.934480][T15685] udevd[15685]: setting mode of /dev/vcsu28 to 020660 failed: Read-only file system [ 200.936113][T16310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=16310 comm=syz.4.2957 [ 200.947669][T15685] udevd[15685]: setting owner of /dev/vcsu28 to uid=0, gid=5 failed: Read-only file system [ 200.948813][T13201] udevd[13201]: setting mode of /dev/vcsa28 to 020660 failed: Read-only file system [ 200.948851][T13201] udevd[13201]: setting owner of /dev/vcsa28 to uid=0, gid=5 failed: Read-only file system [ 200.965972][T16317] veth37: entered promiscuous mode [ 200.971293][T16317] bond13: (slave veth37): Enslaving as an active interface with a down link [ 201.043862][T16327] ptrace attach of "/syz-executor exec"[7707] was attempted by " [ 201.056100][T16333] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2965'. [ 201.105555][ T40] audit: type=1400 audit(1748784789.370:671): avc: denied { read } for pid=16337 comm="iou-sqp-16338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 201.151521][T16338] batadv0: entered promiscuous mode [ 201.187652][ T40] audit: type=1804 audit(1748784789.450:672): pid=16341 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2969" name="file0" dev="tmpfs" ino=5287 res=1 errno=0 [ 201.223645][T16334] kAFS: unparsable volume name [ 201.423823][T16348] 8021q: adding VLAN 0 to HW filter on device bond14 [ 201.455721][T16348] 8021q: adding VLAN 0 to HW filter on device bond14 [ 201.458214][T16348] bond14: (slave vxcan1): The slave device specified does not support setting the MAC address [ 201.464063][T16348] bond14: (slave vxcan1): Error -95 calling set_mac_address [ 201.493911][T16334] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2966'. [ 201.496745][T16334] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2966'. [ 201.526630][T16351] veth39: entered promiscuous mode [ 201.532386][T16351] bond14: (slave veth39): Enslaving as an active interface with a down link [ 201.713174][T16372] validate_nla: 2 callbacks suppressed [ 201.713191][T16372] netlink: 'syz.6.2981': attribute type 1 has an invalid length. [ 201.729038][T16372] 8021q: adding VLAN 0 to HW filter on device bond6 [ 201.746342][T16372] 8021q: adding VLAN 0 to HW filter on device bond6 [ 201.748844][T16372] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 201.752868][T16372] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 201.755250][ T40] audit: type=1400 audit(1748784790.020:673): avc: denied { connect } for pid=16376 comm="syz.2.2984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 201.801572][T16382] veth19: entered promiscuous mode [ 201.805505][T16382] bond6: (slave veth19): Enslaving as an active interface with a down link [ 201.889295][ T40] audit: type=1400 audit(1748784790.150:674): avc: denied { connect } for pid=16390 comm="syz.6.2988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 201.986232][T16406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1987 sclass=netlink_route_socket pid=16406 comm=syz.2.2995 [ 202.018094][T16408] mkiss: ax0: crc mode is auto. [ 202.025881][T16409] netlink: 'syz.2.2996': attribute type 1 has an invalid length. [ 202.047122][T16409] 8021q: adding VLAN 0 to HW filter on device bond15 [ 202.069264][T16409] 8021q: adding VLAN 0 to HW filter on device bond15 [ 202.073809][T16409] bond15: (slave vxcan1): The slave device specified does not support setting the MAC address [ 202.079606][T16409] bond15: (slave vxcan1): Error -95 calling set_mac_address [ 202.096594][T16404] Failed to initialize the IGMP autojoin socket (err -2) [ 202.132253][T16412] veth41: entered promiscuous mode [ 202.137164][T16412] bond15: (slave veth41): Enslaving as an active interface with a down link [ 202.214662][T16419] netlink: 'syz.2.2999': attribute type 3 has an invalid length. [ 202.470912][T16639] Failed to initialize the IGMP autojoin socket (err -2) [ 202.521085][T16640] new mount options do not match the existing superblock, will be ignored [ 202.599898][T16642] netlink: 'syz.2.3008': attribute type 2 has an invalid length. [ 202.603526][T16642] netlink: 'syz.2.3008': attribute type 1 has an invalid length. [ 202.651757][T16647] netlink: 'syz.5.3010': attribute type 1 has an invalid length. [ 202.709418][T16653] netlink: 'syz.2.3013': attribute type 1 has an invalid length. [ 202.726794][T16653] 8021q: adding VLAN 0 to HW filter on device bond16 [ 202.741627][T16653] 8021q: adding VLAN 0 to HW filter on device bond16 [ 202.744571][T16653] bond16: (slave vxcan1): The slave device specified does not support setting the MAC address [ 202.748600][T16653] bond16: (slave vxcan1): Error -95 calling set_mac_address [ 202.817863][T16701] veth45: entered promiscuous mode [ 202.822644][T16701] bond16: (slave veth45): Enslaving as an active interface with a down link [ 202.847197][T16705] Failed to initialize the IGMP autojoin socket (err -2) [ 202.896083][T16707] netlink: 'syz.2.3017': attribute type 1 has an invalid length. [ 202.953629][T16708] net_ratelimit: 15 callbacks suppressed [ 202.953648][T16708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.047275][ T40] audit: type=1400 audit(1748784791.310:675): avc: denied { watch_with_perm } for pid=16709 comm="syz.5.3018" path="/308/bus" dev="tmpfs" ino=1681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 203.059076][ T40] audit: type=1326 audit(1748784791.320:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16420 comm="syz.6.3000" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513398e969 code=0x7fc00000 [ 203.128026][T16717] netlink: 'syz.5.3021': attribute type 7 has an invalid length. [ 203.131499][T16717] netlink: 'syz.5.3021': attribute type 8 has an invalid length. [ 203.292474][T16747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=16747 comm=syz.6.3034 [ 203.364101][ T40] audit: type=1400 audit(1748784791.620:677): avc: denied { write } for pid=16743 comm="syz.4.3033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 204.172941][T16815] cgroup: Name too long [ 204.248432][T16823] delete_channel: no stack [ 204.250427][T16823] delete_channel: no stack [ 204.252419][T16823] delete_channel: no stack [ 204.255238][T16823] delete_channel: no stack [ 204.256761][T16823] delete_channel: no stack [ 204.258249][T16823] delete_channel: no stack [ 204.259743][T16823] delete_channel: no stack [ 204.261325][T16823] delete_channel: no stack [ 204.263478][T16823] delete_channel: no stack [ 204.265390][T16823] delete_channel: no stack [ 204.267481][T16823] delete_channel: no stack [ 204.269594][T16823] delete_channel: no stack [ 204.271533][T16823] delete_channel: no stack [ 204.273746][T16823] delete_channel: no stack [ 204.275797][T16823] delete_channel: no stack [ 204.277858][T16823] delete_channel: no stack [ 204.279883][T16823] delete_channel: no stack [ 204.281934][T16823] delete_channel: no stack [ 204.284511][T16823] delete_channel: no stack [ 204.287360][T16823] delete_channel: no stack [ 204.289483][T16823] delete_channel: no stack [ 204.291527][T16823] delete_channel: no stack [ 204.293695][T16823] delete_channel: no stack [ 204.295735][T16823] delete_channel: no stack [ 204.297728][T16823] delete_channel: no stack [ 204.299665][T16823] delete_channel: no stack [ 204.301610][T16823] delete_channel: no stack [ 204.313588][T11130] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 204.328499][T16825] delete_channel: no stack [ 204.330764][T16825] delete_channel: no stack [ 204.332828][T16825] delete_channel: no stack [ 204.336463][T16825] delete_channel: no stack [ 204.338547][T16825] delete_channel: no stack [ 204.340679][T16825] delete_channel: no stack [ 204.368416][ T40] audit: type=1400 audit(1748784792.630:678): avc: denied { bind } for pid=16833 comm="syz.5.3066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 204.474823][T11130] usb 9-1: Using ep0 maxpacket: 8 [ 204.478020][T11130] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 204.480553][T11130] usb 9-1: config 0 has no interface number 0 [ 204.482466][T11130] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 204.492571][T11130] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 204.495299][T11130] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.498847][T11130] usb 9-1: config 0 descriptor?? [ 204.504607][T11130] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 204.707933][ T5973] usb 9-1: USB disconnect, device number 16 [ 205.681253][T17037] 8021q: adding VLAN 0 to HW filter on device bond5 [ 205.698070][T17037] 8021q: adding VLAN 0 to HW filter on device bond5 [ 205.700596][T17037] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 205.705073][T17037] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 205.754835][T17039] veth13: entered promiscuous mode [ 205.760253][T17039] bond5: (slave veth13): Enslaving as an active interface with a down link [ 205.768123][T17039] __nla_validate_parse: 18 callbacks suppressed [ 205.768138][T17039] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3102'. [ 205.858026][T17046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3105'. [ 205.860880][T17046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3105'. [ 205.915033][T17088] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 205.917852][T17088] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 206.005932][T17264] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3111'. [ 206.031675][T17268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=17268 comm=syz.2.3113 [ 206.074421][T17270] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3114'. [ 206.171222][T17290] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3121'. [ 206.318564][T17402] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3124'. [ 206.355008][T17413] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 206.386582][T17419] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3130'. [ 206.389462][T17419] netlink: 264 bytes leftover after parsing attributes in process `syz.5.3130'. [ 206.392357][T17419] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3130'. [ 206.422565][T17422] 1·: left allmulticast mode [ 206.424193][T17422] hsr_slave_0: left allmulticast mode [ 206.426114][T17422] hsr_slave_1: left allmulticast mode [ 206.430547][T17422] veth3: left promiscuous mode [ 206.434647][T17422] veth7: left promiscuous mode [ 206.454050][T17422] veth11: left promiscuous mode [ 206.620751][T17439] fuse: Bad value for 'rootmode' [ 206.781922][T17444] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 206.816546][T17446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=17446 comm=syz.4.3141 [ 206.844556][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 206.844568][ T40] audit: type=1400 audit(1748784795.110:685): avc: denied { setopt } for pid=17447 comm="syz.4.3142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 206.970365][T17561] validate_nla: 5 callbacks suppressed [ 206.970376][T17561] netlink: 'syz.2.3146': attribute type 9 has an invalid length. [ 207.141871][T17567] netlink: 'syz.6.3149': attribute type 3 has an invalid length. [ 207.145380][T17567] netlink: 'syz.6.3149': attribute type 1 has an invalid length. [ 207.207340][T17581] SELinux: policydb magic number 0x16cfd4bb does not match expected magic number 0xf97cff8c [ 207.210545][T17581] SELinux: failed to load policy [ 207.287869][T17591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=17591 comm=syz.4.3157 [ 207.483157][ T40] audit: type=1400 audit(1748784795.740:686): avc: denied { watch } for pid=17604 comm="syz.6.3162" path="/531" dev="tmpfs" ino=2828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 207.491019][ T40] audit: type=1400 audit(1748784795.740:687): avc: denied { watch_sb } for pid=17604 comm="syz.6.3162" path="/531" dev="tmpfs" ino=2828 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 207.608606][T17616] netlink: 'syz.4.3166': attribute type 1 has an invalid length. [ 207.617180][T17617] uprobe: syz.2.3167:17617 failed to unregister, leaking uprobe [ 207.661803][T17629] netlink: 'syz.4.3171': attribute type 1 has an invalid length. [ 207.680011][ T40] audit: type=1400 audit(1748784795.940:688): avc: denied { mount } for pid=17632 comm="syz.2.3172" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 207.680412][T17629] 8021q: adding VLAN 0 to HW filter on device bond6 [ 207.709611][T17629] 8021q: adding VLAN 0 to HW filter on device bond6 [ 207.712098][T17629] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 207.718721][T17629] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 207.788371][T17741] veth15: entered promiscuous mode [ 207.792879][T17741] bond6: (slave veth15): Enslaving as an active interface with a down link [ 207.854624][T17761] netlink: 'syz.6.3181': attribute type 30 has an invalid length. [ 207.907226][T17767] netlink: 'syz.6.3181': attribute type 30 has an invalid length. [ 207.951089][T17769] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 208.035817][T17877] netlink: 'syz.6.3189': attribute type 1 has an invalid length. [ 208.050599][T17877] 8021q: adding VLAN 0 to HW filter on device bond7 [ 208.074970][T17877] 8021q: adding VLAN 0 to HW filter on device bond7 [ 208.077280][T17877] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 208.081627][T17877] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 208.138338][T17887] veth31: entered promiscuous mode [ 208.141635][T17887] bond7: (slave veth31): Enslaving as an active interface with a down link [ 208.251459][ T40] audit: type=1400 audit(1748784796.510:689): avc: denied { setopt } for pid=17907 comm="syz.2.3200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 208.291620][T17916] No source specified [ 208.506897][T17950] overlayfs: failed to clone upperpath [ 208.543453][ T40] audit: type=1400 audit(1748784796.800:690): avc: denied { getopt } for pid=17957 comm="syz.5.3217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 208.782789][ T40] audit: type=1400 audit(1748785053.035:691): avc: denied { audit_control } for pid=17977 comm="syz.5.3224" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 208.792306][T17978] usb usb8: usbfs: process 17978 (syz.5.3224) did not claim interface 0 before use [ 209.033348][T18004] netlink: 'syz.5.3235': attribute type 2 has an invalid length. [ 209.233265][T18019] netlink: 'syz.4.3240': attribute type 1 has an invalid length. [ 209.246936][T18019] 8021q: adding VLAN 0 to HW filter on device bond7 [ 209.268091][T18019] 8021q: adding VLAN 0 to HW filter on device bond7 [ 209.271334][T18019] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 209.277289][T18019] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 209.309570][T18015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.328992][T18026] veth17: entered promiscuous mode [ 209.338619][T18026] bond7: (slave veth17): Enslaving as an active interface with a down link [ 209.341544][T18032] block nbd5: not configured, cannot reconfigure [ 209.347403][T18032] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 209.386434][T18038] openvswitch: netlink: IPv4 tunnel dst address is zero [ 209.450867][T18048] vivid-000: ================= START STATUS ================= [ 209.453925][T18048] vivid-000: Test Pattern: 75% Colorbar [ 209.455876][T18048] vivid-000: Fill Percentage of Frame: 100 [ 209.457747][T18048] vivid-000: Horizontal Movement: No Movement [ 209.459746][T18048] vivid-000: Vertical Movement: No Movement [ 209.462814][T18048] vivid-000: OSD Text Mode: All [ 209.464671][T18048] vivid-000: Show Border: false [ 209.466254][T18048] vivid-000: Show Square: false [ 209.467806][T18048] vivid-000: Sensor Flipped Horizontally: false [ 209.469886][T18048] vivid-000: Sensor Flipped Vertically: false [ 209.472287][T18048] vivid-000: Insert SAV Code in Image: false [ 209.474325][T18048] vivid-000: Insert EAV Code in Image: false [ 209.476206][T18048] vivid-000: Insert Video Guard Band: false [ 209.478082][T18048] vivid-000: Reduced Framerate: false [ 209.480043][T18048] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 209.482935][T18048] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 209.485558][T18048] vivid-000: Enable Capture Cropping: true [ 209.487388][T18048] vivid-000: Enable Capture Composing: true [ 209.489927][T18048] vivid-000: Enable Capture Scaler: true [ 209.492523][T18048] vivid-000: Timestamp Source: End of Frame [ 209.493088][ T40] audit: type=1400 audit(1748785053.745:692): avc: denied { create } for pid=18035 comm="syz.6.3246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 209.494705][T18048] vivid-000: Colorspace: sRGB [ 209.505057][T18048] vivid-000: Transfer Function: Default [ 209.506852][T18048] vivid-000: Y'CbCr Encoding: Default [ 209.508526][T18048] vivid-000: HSV Encoding: Hue 0-179 [ 209.510183][T18048] vivid-000: Quantization: Default [ 209.511814][T18048] vivid-000: Apply Alpha To Red Only: false [ 209.513778][T18048] vivid-000: Standard Aspect Ratio: 4x3 [ 209.515526][T18048] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 209.519256][T18048] vivid-000: DV Timings: 640x480p59 inactive [ 209.521522][T18048] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 209.524536][T18048] vivid-000: Maximum EDID Blocks: 2 [ 209.526484][T18048] vivid-000: Limited RGB Range (16-235): false [ 209.528749][T18048] vivid-000: Rx RGB Quantization Range: Automatic [ 209.531402][T18048] vivid-000: Power Present: 0x00000001 [ 209.533676][T18048] tpg source WxH: 640x480 (Luma) [ 209.535498][T18048] tpg field: 1 [ 209.536736][T18048] tpg crop: (0,0)/640x480 [ 209.538174][T18048] tpg compose: (0,0)/640x480 [ 209.539885][T18048] tpg colorspace: 8 [ 209.541304][T18048] tpg transfer function: 0/0 [ 209.543146][T18048] tpg quantization: 0/0 [ 209.545681][T18048] tpg RGB range: 0/2 [ 209.547162][T18048] vivid-000: ================== END STATUS ================== [ 209.558522][T18080] 8021q: adding VLAN 0 to HW filter on device bond9 [ 209.577740][T18080] 8021q: adding VLAN 0 to HW filter on device bond9 [ 209.580476][T18080] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 209.584931][T18080] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 209.630746][T18085] veth15: entered promiscuous mode [ 209.634702][T18085] bond9: (slave veth15): Enslaving as an active interface with a down link [ 209.728548][ T40] audit: type=1400 audit(1748785053.985:693): avc: denied { mounton } for pid=18095 comm="syz.5.3260" path="/365/file0/bus" dev="afs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 209.728839][T18096] overlay: filesystem on ./file0 not supported [ 209.759745][ T40] audit: type=1400 audit(1748785054.015:694): avc: denied { unmount } for pid=9420 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 209.893008][T18105] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 209.899760][T18105] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 209.977568][T18109] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 209.980347][T18109] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 209.983653][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 210.378933][T18229] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 210.782094][T18251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=18251 comm=syz.4.3281 [ 210.811769][T18253] __nla_validate_parse: 16 callbacks suppressed [ 210.811780][T18253] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3282'. [ 210.856277][T18259] binder_alloc: 18256: binder_alloc_buf, no vma [ 210.880046][T18262] Failed to initialize the IGMP autojoin socket (err -2) [ 210.894925][T18264] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3287'. [ 211.012890][T18279] overlayfs: failed to clone lowerpath [ 211.031262][T18281] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 211.034984][T18281] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 211.131725][T18387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=163 sclass=netlink_route_socket pid=18387 comm=syz.2.3295 [ 211.305117][T18502] netlink: 8680 bytes leftover after parsing attributes in process `syz.2.3299'. [ 211.308951][T18502] IPv6: NLM_F_CREATE should be specified when creating new route [ 211.311461][T18502] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.313797][T18502] IPv6: NLM_F_CREATE should be set when creating new route [ 211.316057][T18502] IPv6: NLM_F_CREATE should be set when creating new route [ 211.347008][T18506] bond8: entered promiscuous mode [ 211.348656][T18506] bond8: entered allmulticast mode [ 211.350498][T18506] 8021q: adding VLAN 0 to HW filter on device bond8 [ 211.412309][T18516] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3305'. [ 211.647817][T18643] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3316'. [ 211.886626][T18763] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3326'. [ 211.893767][ T5946] Bluetooth: hci0: command tx timeout [ 211.945606][T18772] Failed to initialize the IGMP autojoin socket (err -2) [ 212.087914][T18881] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3334'. [ 212.092296][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 212.092305][ T40] audit: type=1326 audit(1748785056.345:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18883 comm="syz.6.3336" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f513398e969 code=0x0 [ 212.137799][T18889] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3338'. [ 212.143543][ T5834] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 212.240443][T18904] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 212.243336][T18904] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 212.295197][ T5834] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.298779][ T5834] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.302142][ T5834] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 212.308396][ T5834] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 212.311550][ T5834] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.316551][ T5834] usb 10-1: config 0 descriptor?? [ 212.400246][T18913] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3349'. [ 212.472783][ T40] audit: type=1400 audit(1748785056.725:705): avc: denied { setopt } for pid=18916 comm="syz.4.3351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 212.725712][ T5834] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 212.729190][ T5834] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 212.736768][ T5834] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 212.925182][T18765] tmpfs: Bad value for 'mpol' [ 212.928549][ T5834] usb 10-1: USB disconnect, device number 5 [ 212.939802][T18936] gretap0: entered promiscuous mode [ 212.943309][T18936] macsec1: entered promiscuous mode [ 212.945361][T18936] macsec1: entered allmulticast mode [ 212.947161][T18936] gretap0: entered allmulticast mode [ 212.952073][T18936] gretap0: left allmulticast mode [ 212.954624][T18936] gretap0: left promiscuous mode [ 212.970571][T18937] gretap0: entered promiscuous mode [ 212.972333][T18937] macsec1: entered promiscuous mode [ 212.974314][T18937] macsec1: entered allmulticast mode [ 212.976018][T18937] gretap0: entered allmulticast mode [ 212.980343][T18937] gretap0: left allmulticast mode [ 212.982087][T18937] gretap0: left promiscuous mode [ 213.100815][T18953] validate_nla: 2 callbacks suppressed [ 213.100831][T18953] netlink: 'syz.2.3362': attribute type 4 has an invalid length. [ 213.306626][T19087] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 213.309340][T19087] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 213.325825][T19089] netlink: 'syz.6.3376': attribute type 8 has an invalid length. [ 213.402117][T19196] overlayfs: failed to clone upperpath [ 213.416724][ T40] audit: type=1400 audit(1748785057.675:706): avc: denied { listen } for pid=19197 comm="syz.2.3380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 213.424165][ T40] audit: type=1400 audit(1748785057.685:707): avc: denied { read } for pid=19197 comm="syz.2.3380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 213.441108][T19205] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3382'. [ 213.441801][T19204] netlink: 'syz.4.3381': attribute type 27 has an invalid length. [ 213.476368][T19209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=19209 comm=syz.6.3384 [ 213.503191][T19212] autofs: Unknown parameter '®s¸i¼“ñà_]5àÃêøÉI­‘‰Œ®Eú5âC’ íO` S«0†Ç¸Ù3Þ‘¯MXt´BsHux:ô.Èœe [ 213.503191][T19212] ¯š®O'ŠsÁm-ƒØ2èaØÛuÀAJR߬ ˆ’ [ 216.994675][T20302] dump_stack_lvl+0x16c/0x1f0 [ 216.994710][T20302] should_fail_ex+0x512/0x640 [ 216.994744][T20302] _copy_from_user+0x2e/0xd0 [ 216.994769][T20302] kstrtouint_from_user+0xd6/0x1d0 [ 216.994787][T20302] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 216.994800][T20302] ? __lock_acquire+0xb8a/0x1c90 [ 216.994822][T20302] proc_fail_nth_write+0x83/0x250 [ 216.994836][T20302] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 216.994852][T20302] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 216.994864][T20302] vfs_write+0x29d/0x1150 [ 216.994878][T20302] ? __pfx___mutex_lock+0x10/0x10 [ 216.994893][T20302] ? __pfx_vfs_write+0x10/0x10 [ 216.994908][T20302] ? __fget_files+0x20e/0x3c0 [ 216.994926][T20302] ksys_write+0x12a/0x250 [ 216.994938][T20302] ? __pfx_ksys_write+0x10/0x10 [ 216.994955][T20302] do_syscall_64+0xcd/0x4c0 [ 216.994972][T20302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.994984][T20302] RIP: 0033:0x7fc6e238d41f [ 216.994994][T20302] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 216.995005][T20302] RSP: 002b:00007fc6e317e030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 216.995016][T20302] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc6e238d41f [ 216.995023][T20302] RDX: 0000000000000001 RSI: 00007fc6e317e0a0 RDI: 0000000000000003 [ 216.995030][T20302] RBP: 00007fc6e317e090 R08: 0000000000000000 R09: 000000000000001c [ 216.995036][T20302] R10: 0000000000000800 R11: 0000000000000293 R12: 0000000000000001 [ 216.995043][T20302] R13: 0000000000000000 R14: 00007fc6e25b5fa0 R15: 00007ffc3f9f35e8 [ 216.995058][T20302] [ 217.250386][T20637] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3515'. [ 217.309628][T20653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=20653 comm=syz.4.3521 [ 217.350759][T20664] futex_wake_op: syz.6.3527 tries to shift op by -1; fix this program [ 217.352901][T20663] openvswitch: netlink: Missing key (keys=40, expected=80) [ 217.448114][T20785] netlink: 'syz.5.3528': attribute type 29 has an invalid length. [ 217.451306][T20785] netlink: 'syz.5.3528': attribute type 4 has an invalid length. [ 217.458212][T20792] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3534'. [ 217.477922][T20795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3535'. [ 217.587208][T20795] team_slave_0 (unregistering): left promiscuous mode [ 217.589514][T20795] team_slave_0 (unregistering): left allmulticast mode [ 217.595464][T20795] team0: Port device team_slave_0 removed [ 217.606129][T20816] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3543'. [ 217.608873][T20816] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3543'. [ 217.798420][T21041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7960 sclass=netlink_route_socket pid=21041 comm=syz.6.3554 [ 217.807187][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 217.807201][ T40] audit: type=1400 audit(1748785062.065:717): avc: denied { ioctl } for pid=20932 comm="syz.5.3550" path="socket:[46698]" dev="sockfs" ino=46698 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 217.820674][ T40] audit: type=1400 audit(1748785062.065:718): avc: denied { read append } for pid=20932 comm="syz.5.3550" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 217.828553][ T40] audit: type=1400 audit(1748785062.065:719): avc: denied { open } for pid=20932 comm="syz.5.3550" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 217.836222][T21047] netlink: 'syz.6.3556': attribute type 1 has an invalid length. [ 217.850764][T21047] 8021q: adding VLAN 0 to HW filter on device bond9 [ 217.871213][T21047] veth35: entered promiscuous mode [ 217.876457][T21047] bond9: (slave veth35): Enslaving as an active interface with a down link [ 217.883883][T21047] overlayfs: failed to clone upperpath [ 217.989438][ T40] audit: type=1400 audit(1748785062.245:720): avc: denied { getopt } for pid=21058 comm="syz.6.3560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 218.034653][T21078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8216 sclass=netlink_route_socket pid=21078 comm=syz.4.3565 [ 218.275399][T21215] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 218.278204][T21215] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 218.546063][T21346] syz.4.3593(21346): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 218.659615][T21368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61464 sclass=netlink_route_socket pid=21368 comm=syz.5.3601 [ 218.699555][T21447] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 218.720787][T21474] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 218.723869][T21474] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 218.798756][T21481] netlink: 'syz.4.3607': attribute type 4 has an invalid length. [ 218.858412][T21495] netlink: 'syz.2.3611': attribute type 1 has an invalid length. [ 218.869860][T21495] 8021q: adding VLAN 0 to HW filter on device bond18 [ 219.050212][T21622] netlink: 'syz.2.3620': attribute type 4 has an invalid length. [ 219.263796][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 219.267942][T21723] random: crng reseeded on system resumption [ 219.279334][T21723] futex_wake_op: syz.4.3632 tries to shift op by -1; fix this program [ 219.500871][T21876] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 219.539960][T21887] tmpfs: User quota block hardlimit too large. [ 220.071239][T22072] random: crng reseeded on system resumption [ 220.079160][T22067] futex_wake_op: syz.4.3674 tries to shift op by -1; fix this program [ 220.280019][T22190] @: renamed from vlan0 (while UP) [ 220.419427][T22309] netlink: 'syz.6.3693': attribute type 4 has an invalid length. [ 220.579598][T22337] netlink: 'syz.6.3705': attribute type 4 has an invalid length. [ 220.644284][ T40] audit: type=1400 audit(1748785064.895:721): avc: denied { bind } for pid=22341 comm="syz.4.3707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 220.651283][ T40] audit: type=1400 audit(1748785064.905:722): avc: denied { map } for pid=22341 comm="syz.4.3707" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 220.660693][ T40] audit: type=1400 audit(1748785064.905:723): avc: denied { write } for pid=22341 comm="syz.4.3707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 220.720214][T22344] loop6: detected capacity change from 0 to 7 [ 220.725514][T13365] Dev loop6: unable to read RDB block 7 [ 220.727310][T13365] loop6: AHDI p3 p4 [ 220.728573][T13365] loop6: partition table partially beyond EOD, truncated [ 220.731328][T13365] loop6: p3 start 1886353253 is beyond EOD, truncated [ 220.740196][T22344] Dev loop6: unable to read RDB block 7 [ 220.742585][T22344] loop6: AHDI p3 p4 [ 220.744278][T22344] loop6: partition table partially beyond EOD, truncated [ 220.747082][T22344] loop6: p3 start 1886353253 is beyond EOD, truncated [ 220.754652][T13365] udevd[13365]: symlink '../../loop6' '/dev/disk/by-diskseq/87.tmp-b7:6' failed: Read-only file system [ 220.765692][T13365] udevd[13365]: symlink '../../loop6' '/dev/disk/by-diskseq/87.tmp-b7:6' failed: Read-only file system [ 220.778668][T13365] udevd[13365]: symlink '../../loop6' '/dev/disk/by-diskseq/87.tmp-b7:6' failed: Read-only file system [ 220.788668][T13365] udevd[13365]: symlink '../../loop6' '/dev/disk/by-diskseq/87.tmp-b7:6' failed: Read-only file system [ 220.799667][T13365] udevd[13365]: symlink '../../loop6' '/dev/disk/by-diskseq/87.tmp-b7:6' failed: Read-only file system [ 220.825463][T22456] xfrm1: entered allmulticast mode [ 220.995320][T22469] netlink: 'syz.4.3716': attribute type 4 has an invalid length. [ 221.098843][T22478] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 221.146845][T22478] __nla_validate_parse: 18 callbacks suppressed [ 221.146863][T22478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3720'. [ 221.160194][T22478] lo speed is unknown, defaulting to 1000 [ 221.165990][T22478] lo speed is unknown, defaulting to 1000 [ 221.169245][T22478] lo speed is unknown, defaulting to 1000 [ 221.280946][T22478] infiniband syz0: set active [ 221.282701][ T838] lo speed is unknown, defaulting to 1000 [ 221.284858][T22478] infiniband syz0: added lo [ 221.287603][T22478] syz0: rxe_create_cq: returned err = -12 [ 221.289860][T22478] infiniband syz0: Couldn't create ib_mad CQ [ 221.292046][T22478] infiniband syz0: Couldn't open port 1 [ 221.296757][T22593] syz.6.3724 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 221.306230][T22478] RDS/IB: syz0: added [ 221.307536][T22478] smc: adding ib device syz0 with port count 1 [ 221.309980][T22478] smc: ib device syz0 port 1 has pnetid [ 221.311826][ T838] lo speed is unknown, defaulting to 1000 [ 221.316116][T22478] lo speed is unknown, defaulting to 1000 [ 221.436117][T22478] lo speed is unknown, defaulting to 1000 [ 221.523690][T22478] lo speed is unknown, defaulting to 1000 [ 221.605154][T22478] lo speed is unknown, defaulting to 1000 [ 221.685056][T22478] lo speed is unknown, defaulting to 1000 [ 221.696875][T10049] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 221.704467][T22624] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3736'. [ 221.713187][T22625] random: crng reseeded on system resumption [ 221.714812][ T40] audit: type=1326 audit(1748785065.975:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22622 comm="syz.6.3736" exe="/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f513398e969 code=0x0 [ 221.733247][T22625] futex_wake_op: syz.5.3735 tries to shift op by -1; fix this program [ 221.826571][T22638] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3741'. [ 221.863496][T10049] usb 9-1: Using ep0 maxpacket: 8 [ 221.867569][T10049] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 221.869920][T10049] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 221.873342][T10049] usb 9-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 221.878098][T10049] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 221.880441][T10049] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 221.886348][T10049] usb 9-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 221.891398][T10049] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 221.893991][T10049] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 221.897469][T10049] usb 9-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 221.903657][T10049] usb 9-1: string descriptor 0 read error: -22 [ 221.905850][T10049] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 221.909105][T10049] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.915312][T10049] adutux 9-1:168.0: interrupt endpoints not found [ 222.117402][T11128] usb 9-1: USB disconnect, device number 17 [ 222.135446][T22765] fuse: Bad value for 'fd' [ 222.147266][T22767] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3751'. [ 222.321636][T22786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3757'. [ 222.352472][T22790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22790 comm=syz.4.3759 [ 222.362217][T22793] netlink: 'syz.5.3760': attribute type 1 has an invalid length. [ 222.365413][T22793] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3760'. [ 222.382812][T22797] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3761'. [ 222.668997][T22829] overlayfs: failed to clone upperpath [ 222.713861][T11128] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 222.740643][T22837] netlink: 'syz.4.3777': attribute type 7 has an invalid length. [ 222.747444][T22837] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3777'. [ 222.809065][T22843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3780'. [ 222.885467][T11128] usb 10-1: Using ep0 maxpacket: 16 [ 222.898142][T11128] usb 10-1: descriptor type invalid, skip [ 222.902039][T11128] usb 10-1: config 70 has an invalid interface number: 3 but max is 2 [ 222.904678][T11128] usb 10-1: config 70 has an invalid interface number: 44 but max is 2 [ 222.907218][T11128] usb 10-1: config 70 contains an unexpected descriptor of type 0x1, skipping [ 222.909966][T11128] usb 10-1: config 70 has an invalid interface number: 177 but max is 2 [ 222.912538][T11128] usb 10-1: config 70 has no interface number 0 [ 222.915738][T11128] usb 10-1: config 70 has no interface number 1 [ 222.917733][T11128] usb 10-1: config 70 has no interface number 2 [ 222.920076][T11128] usb 10-1: config 70 interface 3 altsetting 7 bulk endpoint 0xE has invalid maxpacket 8 [ 222.923412][T11128] usb 10-1: config 70 interface 3 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 222.926713][T11128] usb 10-1: config 70 interface 3 altsetting 7 endpoint 0x1 has an invalid bInterval 79, changing to 7 [ 222.930117][T11128] usb 10-1: config 70 interface 3 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 222.934664][T11128] usb 10-1: config 70 interface 3 altsetting 7 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 222.938279][T11128] usb 10-1: config 70 interface 3 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 222.941472][T11128] usb 10-1: config 70 interface 3 altsetting 7 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 222.951995][T11128] usb 10-1: config 70 interface 3 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 222.955470][T11128] usb 10-1: config 70 interface 3 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 222.960176][T11128] usb 10-1: config 70 interface 44 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 222.963675][T11128] usb 10-1: config 70 interface 44 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 222.967005][T11128] usb 10-1: config 70 interface 44 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 222.970338][T11128] usb 10-1: config 70 interface 44 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 222.973989][T11128] usb 10-1: config 70 interface 44 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 222.980155][T11128] usb 10-1: config 70 interface 44 altsetting 9 has an endpoint descriptor with address 0x32, changing to 0x2 [ 222.983937][T11128] usb 10-1: config 70 interface 44 altsetting 9 endpoint 0x2 has an invalid bInterval 195, changing to 7 [ 222.987368][T11128] usb 10-1: config 70 interface 44 altsetting 9 endpoint 0x2 has invalid maxpacket 33039, setting to 1024 [ 222.990864][T11128] usb 10-1: config 70 interface 44 altsetting 9 endpoint 0x3 has invalid maxpacket 1248, setting to 64 [ 222.994818][T11128] usb 10-1: config 70 interface 44 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 222.998149][T11128] usb 10-1: config 70 interface 44 altsetting 9 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 223.002269][T11128] usb 10-1: config 70 interface 177 altsetting 239 has a duplicate endpoint with address 0xB, skipping [ 223.005960][T11128] usb 10-1: config 70 interface 177 altsetting 239 has a duplicate endpoint with address 0x7, skipping [ 223.009401][T11128] usb 10-1: config 70 interface 177 altsetting 239 has a duplicate endpoint with address 0xC, skipping [ 223.012821][T11128] usb 10-1: config 70 interface 177 altsetting 239 has a duplicate endpoint with address 0x8, skipping [ 223.016531][T11128] usb 10-1: config 70 interface 3 has no altsetting 0 [ 223.018674][T11128] usb 10-1: config 70 interface 44 has no altsetting 0 [ 223.020736][T11128] usb 10-1: config 70 interface 177 has no altsetting 0 [ 223.024989][T11128] usb 10-1: New USB device found, idVendor=22de, idProduct=9061, bcdDevice=8f.59 [ 223.027966][T22858] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3784'. [ 223.030880][T11128] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.033533][T11128] usb 10-1: Product: К [ 223.034857][T11128] usb 10-1: Manufacturer: äµè‰ í‚™ä‡”è­ã¤©ï€‘눹ꅩ樋괆㋨⺙åŠâ²§Ù¨àª´â£ˆá¥»ìˆ…놸ï‰å³¡ã­¼î³»Ùµê£Ží‹‚㦀⨡ᮔ嵻຾劷剢댓塗饷Յá¼ï®•â‰‡ê–ŽçŠ»å‹©å‡¡á± [ 223.039931][T11128] usb 10-1: SerialNumber: 䪚䟙는鰷 [ 223.051039][T22810] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 223.076636][T22861] netlink: 'syz.4.3785': attribute type 4 has an invalid length. [ 223.277179][T22985] netlink: 'syz.2.3794': attribute type 2 has an invalid length. [ 223.281176][T11128] usb 10-1: USB disconnect, device number 6 [ 223.427112][T23004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23004 comm=syz.2.3802 [ 223.486825][T23011] vlan0: entered promiscuous mode [ 223.488701][T23011] vlan0: entered allmulticast mode [ 223.544498][T23017] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 223.547342][T23017] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 224.040449][ T102] smc: removing ib device syz2 [ 224.117554][T23055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=23055 comm=syz.4.3822 [ 224.169408][ T40] audit: type=1326 audit(1748785068.425:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23060 comm="syz.4.3825" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa37078e969 code=0x0 [ 224.301684][T23070] ptrace attach of "/syz-executor exec"[23071] was attempted by "/syz-executor exec"[23070] [ 224.537865][T23094] validate_nla: 2 callbacks suppressed [ 224.537881][T23094] netlink: 'syz.2.3834': attribute type 4 has an invalid length. [ 224.690073][T23208] 0·: renamed from 71· [ 224.692975][T23208] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 224.696536][T23208] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.699689][T23208] 0·: entered allmulticast mode [ 224.701248][T23208] hsr_slave_0: entered allmulticast mode [ 224.703046][T23208] hsr_slave_1: entered allmulticast mode [ 224.707178][ T40] audit: type=1326 audit(1748785068.965:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23209 comm="syz.2.3840" exe="/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f68db185927 code=0x0 [ 224.714827][T23208] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 224.735120][ T40] audit: type=1326 audit(1748785068.995:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23213 comm="syz.6.3843" exe="/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f5133985927 code=0x0 [ 224.758653][ T40] audit: type=1400 audit(1748785069.015:728): avc: denied { checkpoint_restore } for pid=23209 comm="syz.2.3840" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 224.767526][T23217] overlayfs: failed to resolve './file0': -2 [ 224.769478][ T40] audit: type=1400 audit(1748785069.035:729): avc: denied { mounton } for pid=23209 comm="syz.2.3840" path="/bus" dev="ramfs" ino=51403 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 225.027832][T23223] netlink: 'syz.4.3845': attribute type 4 has an invalid length. [ 225.109022][T23227] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 225.111896][ T102] Bluetooth: hci4: Frame reassembly failed (-84) [ 225.616955][ T40] audit: type=1400 audit(1748785069.875:730): avc: denied { getopt } for pid=23338 comm="syz.5.3852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 225.629666][ T40] audit: type=1400 audit(1748785069.885:731): avc: denied { read write } for pid=9420 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 225.644567][ T40] audit: type=1400 audit(1748785069.895:732): avc: denied { open } for pid=9420 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 225.652093][ T40] audit: type=1400 audit(1748785069.895:733): avc: denied { ioctl } for pid=9420 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 225.712694][ T40] audit: type=1400 audit(1748785069.965:734): avc: denied { watch watch_reads } for pid=23355 comm="syz.6.3860" path="pipe:[52513]" dev="pipefs" ino=52513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 225.830970][T23469] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 225.834158][T23469] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 225.842170][T23471] overlayfs: failed to resolve './file0': -2 [ 225.879563][T23473] futex_wake_op: syz.6.3866 tries to shift op by -1; fix this program [ 226.412555][T23475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=23475 comm=syz.6.3867 [ 226.469679][T23479] No source specified [ 226.584635][T23493] random: crng reseeded on system resumption [ 226.597319][T23493] futex_wake_op: syz.5.3875 tries to shift op by -1; fix this program [ 226.632151][T23496] netlink: 'syz.6.3876': attribute type 4 has an invalid length. [ 226.661730][T23498] overlayfs: failed to clone upperpath [ 226.780933][T23516] netlink: 'syz.6.3885': attribute type 4 has an invalid length. [ 226.822555][T23522] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.827346][ T5973] lo speed is unknown, defaulting to 1000 [ 226.833146][T23522] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 226.836893][T23522] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 227.183562][ T5937] Bluetooth: hci4: command 0x1003 tx timeout [ 227.183581][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 227.253586][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 227.467561][T23542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=23542 comm=syz.4.3894 [ 227.492684][T23544] netlink: 'syz.4.3895': attribute type 4 has an invalid length. [ 227.691665][T23598] futex_wake_op: syz.6.3900 tries to shift op by -1; fix this program [ 227.697182][T23598] __nla_validate_parse: 11 callbacks suppressed [ 227.697191][T23598] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3900'. [ 227.869556][T23769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=23769 comm=syz.2.3906 [ 227.895546][T23771] netlink: 'syz.2.3907': attribute type 4 has an invalid length. [ 228.245769][T23906] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3922'. [ 228.248643][T23906] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3922'. [ 228.282536][T23906] IPVS: persistence engine module ip_vs_pe_s not found [ 228.414402][T24025] random: crng reseeded on system resumption [ 228.435866][T24025] futex_wake_op: syz.4.3930 tries to shift op by -1; fix this program [ 228.439141][T24025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3930'. [ 228.839002][T24057] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 229.044793][ T150] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 229.075927][T24183] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 229.134745][T24196] futex_wake_op: syz.6.3956 tries to shift op by -1; fix this program [ 229.138066][T24196] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3956'. [ 229.156565][T24199] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3957'. [ 229.159256][T24199] netlink: 264 bytes leftover after parsing attributes in process `syz.5.3957'. [ 229.161960][T24199] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3957'. [ 229.198374][T24204] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 229.203894][T24205] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3959'. [ 229.211464][T24205] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3959'. [ 229.214356][T24205] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 229.216654][T24205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.234142][ T54] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 229.300610][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 229.300621][ T40] audit: type=1400 audit(1748785073.555:738): avc: denied { accept } for pid=24208 comm="syz.4.3962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 229.351260][ T40] audit: type=1400 audit(1748785073.605:739): avc: denied { bind } for pid=24210 comm="syz.4.3963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 229.398366][ T40] audit: type=1400 audit(1748785073.655:740): avc: denied { read } for pid=24212 comm="syz.4.3964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 229.433459][ T40] audit: type=1400 audit(1748785073.685:741): avc: denied { connect } for pid=24216 comm="syz.2.3966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 229.440446][ T40] audit: type=1400 audit(1748785073.695:742): avc: denied { create } for pid=24216 comm="syz.2.3966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 229.447686][T24219] program syz.5.3967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.487027][ T40] audit: type=1107 audit(1748785073.745:743): pid=24327 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 229.494762][ T40] audit: type=1400 audit(1748785073.745:744): avc: denied { setcheckreqprot } for pid=24326 comm="syz.5.3970" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 229.497281][T24328] SELinux: syz.5.3970 (24328) set checkreqprot to 1. This is no longer supported. [ 229.601347][ T40] audit: type=1400 audit(1748785073.855:745): avc: denied { map } for pid=24333 comm="syz.4.3972" path="/proc/1579/smaps_rollup" dev="proc" ino=50835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 229.632280][ T40] audit: type=1400 audit(1748785073.885:746): avc: denied { create } for pid=24347 comm="syz.4.3976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 229.638042][T24350] netlink: 'syz.2.3977': attribute type 4 has an invalid length. [ 229.640268][ T40] audit: type=1400 audit(1748785073.885:747): avc: denied { write } for pid=24347 comm="syz.4.3976" path="socket:[50855]" dev="sockfs" ino=50855 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 229.676246][T24352] binder: 24351:24352 unknown command 0 [ 229.678107][T24352] binder: 24351:24352 ioctl c0306201 200000000540 returned -22 [ 229.680911][T24352] netlink: 'syz.4.3979': attribute type 6 has an invalid length. [ 229.725702][T24361] netlink: 'syz.6.3982': attribute type 1 has an invalid length. [ 229.777985][T24374] team0: left allmulticast mode [ 229.779791][T24374] team_slave_1: left allmulticast mode [ 229.781528][T24374] team0: left promiscuous mode [ 229.782999][T24374] team_slave_1: left promiscuous mode [ 229.785372][T24374] bridge0: port 3(team0) entered disabled state [ 229.791043][T24374] bridge_slave_0: left allmulticast mode [ 229.792895][T24374] bridge_slave_0: left promiscuous mode [ 229.796937][T24374] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.801102][T24374] bridge_slave_1: left allmulticast mode [ 229.802896][T24374] bridge_slave_1: left promiscuous mode [ 229.807131][T24374] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.826323][T24374] bond0: (slave bond_slave_0): Releasing backup interface [ 229.830223][T24374] bond0: (slave bond_slave_1): Releasing backup interface [ 229.840352][T24374] team0: Port device team_slave_1 removed [ 229.845359][T24374] bond1: (slave veth5): Releasing active interface [ 229.849292][T24374] bond2: (slave ip6gretap2): Releasing active interface [ 229.853198][T24374] bond3: (slave veth9): Releasing active interface [ 229.863761][T24374] bond4: (slave veth11): Releasing active interface [ 229.869712][T24374] bond5: (slave veth13): Releasing active interface [ 229.876708][T24374] bond6: (slave veth15): Releasing active interface [ 229.880715][T24374] bond7: (slave veth17): Releasing active interface [ 229.924843][T24482] netlink: 'syz.4.3991': attribute type 4 has an invalid length. [ 230.134433][T24616] netlink: 'syz.2.4003': attribute type 4 has an invalid length. [ 230.309298][T24642] netlink: 'syz.6.4014': attribute type 4 has an invalid length. [ 230.382835][T24663] netfs: Couldn't get user pages (rc=-14) [ 230.506151][T24675] netlink: 'syz.2.4026': attribute type 4 has an invalid length. [ 230.609491][T24693] Failed to initialize the IGMP autojoin socket (err -2) [ 230.658909][T24701] vivid-000: ================= START STATUS ================= [ 230.661312][T24701] vivid-000: Radio HW Seek Mode: Bounded [ 230.663277][T24701] vivid-000: Radio Programmable HW Seek: false [ 230.666360][T24701] vivid-000: RDS Rx I/O Mode: Block I/O [ 230.668160][T24701] vivid-000: Generate RBDS Instead of RDS: false [ 230.670248][T24701] vivid-000: RDS Reception: true [ 230.671760][T24701] vivid-000: RDS Program Type: 0 inactive [ 230.675073][T24701] vivid-000: RDS PS Name: inactive [ 230.676698][T24701] vivid-000: RDS Radio Text: inactive [ 230.678977][T24701] vivid-000: RDS Traffic Announcement: false inactive [ 230.681851][T24701] vivid-000: RDS Traffic Program: false inactive [ 230.685271][T24701] vivid-000: RDS Music: false inactive [ 230.687586][T24701] vivid-000: ================== END STATUS ================== [ 230.692458][T24693] openvswitch: netlink: Missing key (keys=40, expected=80) [ 230.745340][T24709] netlink: 'syz.5.4039': attribute type 4 has an invalid length. [ 230.749081][T24709] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 230.887780][T24825] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 231.277362][T24851] sp0: Synchronizing with TNC [ 231.321273][T24861] tmpfs: Invalid gid '0x00000000ffffffff' [ 231.960429][ T5997] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 231.969805][T25017] netlink: 'syz.4.4082': attribute type 30 has an invalid length. [ 232.281338][T25027] tmpfs: Unknown parameter 'mphÑ' [ 232.570769][T25042] netlink: 'syz.2.4090': attribute type 4 has an invalid length. [ 232.603770][T11128] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 232.806423][T25153] __nla_validate_parse: 16 callbacks suppressed [ 232.806435][T25153] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4099'. [ 232.896788][T25172] futex_wake_op: syz.2.4103 tries to shift op by -1; fix this program [ 232.902374][T25172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4103'. [ 233.403744][T25197] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4115'. [ 233.423704][T11128] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 233.601811][T25313] overlayfs: failed to clone upperpath [ 233.752138][T25343] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4133'. [ 233.844278][T25358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4139'. [ 233.948210][T25367] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4143'. [ 233.950748][T25367] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4143'. [ 233.970842][T25470] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4144'. [ 233.988284][T25473] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4145'. [ 234.054495][T25476] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4147'. [ 234.309127][T25733] bridge0: entered promiscuous mode [ 234.311075][T25733] macvlan0: entered promiscuous mode [ 234.312171][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 234.312181][ T40] audit: type=1400 audit(1748785078.565:771): avc: denied { create } for pid=25736 comm="syz.4.4168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 234.320651][ T40] audit: type=1400 audit(1748785078.565:772): avc: denied { connect } for pid=25736 comm="syz.4.4168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 234.327699][ T40] audit: type=1400 audit(1748785078.565:773): avc: denied { create } for pid=25736 comm="syz.4.4168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 234.341344][ T40] audit: type=1400 audit(1748785078.565:774): avc: denied { read } for pid=25736 comm="syz.4.4168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 234.348387][ T40] audit: type=1400 audit(1748785078.565:775): avc: denied { create } for pid=25736 comm="syz.4.4168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 234.355408][ T40] audit: type=1400 audit(1748785078.565:776): avc: denied { read } for pid=25736 comm="syz.4.4168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 234.361799][ T40] audit: type=1400 audit(1748785078.575:777): avc: denied { relabelfrom } for pid=25737 comm="syz.5.4171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 234.377521][ T40] audit: type=1400 audit(1748785078.575:778): avc: denied { relabelto } for pid=25737 comm="syz.5.4171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 234.385268][ T40] audit: type=1400 audit(1748785078.645:779): avc: denied { execmem } for pid=25796 comm="syz.5.4176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 234.385806][T25817] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 234.393619][T25817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.418786][ T40] audit: type=1400 audit(1748785078.675:780): avc: denied { read } for pid=25852 comm="syz.4.4177" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 234.508194][T25808] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2834047395 (22672379160 ns) > initial count (8751802360 ns). Using initial count to start timer. [ 234.966769][T26027] syz.4.4208: attempt to access beyond end of device [ 234.966769][T26027] sr0: rw=0, sector=8, nr_sectors = 8 limit=0 [ 234.970694][T26027] qnx4: unable to read the superblock [ 235.077798][T26114] validate_nla: 3 callbacks suppressed [ 235.077810][T26114] netlink: 'syz.6.4216': attribute type 2 has an invalid length. [ 235.083253][T26114] unsupported nlmsg_type 40 [ 235.087365][T26150] netlink: 'syz.6.4216': attribute type 2 has an invalid length. [ 235.178043][T26162] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 235.594389][T26423] XFS (nullb0): Invalid superblock magic number [ 236.094745][T26799] netlink: 'syz.5.4277': attribute type 4 has an invalid length. [ 236.097998][T26801] wireguard: wg1: Could not create IPv4 socket [ 236.100256][T26801] wg1: entered promiscuous mode [ 236.101795][T26801] wg1: entered allmulticast mode [ 236.221702][T26829] netlink: 'syz.6.4291': attribute type 4 has an invalid length. [ 236.385309][T26954] netlink: 'syz.5.4300': attribute type 5 has an invalid length. [ 236.395707][T26954] netlink: 'syz.5.4300': attribute type 21 has an invalid length. [ 236.401967][T26954] binder: 26953:26954 unknown command 512 [ 236.404729][T26954] binder: 26953:26954 ioctl c0306201 200000000540 returned -22 [ 236.434576][T26960] XFS (nbd5): no-recovery mounts must be read-only. [ 236.734407][T27121] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 236.833212][T27121] /dev/sr0: Can't open blockdev [ 236.844047][T27121] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 237.276491][T27362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.279357][T27362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.308499][T10049] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 237.355750][T27651] overlayfs: failed to resolve './file1': -2 [ 237.481450][T27709] futex_wake_op: syz.2.4352 tries to shift op by -1; fix this program [ 237.741982][T27909] overlayfs: failed to clone upperpath [ 237.855340][T27944] __nla_validate_parse: 35 callbacks suppressed [ 237.855357][T27944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4370'. [ 237.978811][T27987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24592 sclass=netlink_route_socket pid=27987 comm=syz.6.4375 [ 237.987149][T28001] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4376'. [ 237.993614][T28004] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4376'. [ 238.089153][T28069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=28069 comm=syz.4.4381 [ 238.143259][T28086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4386'. [ 238.150643][T28089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38160 sclass=netlink_route_socket pid=28089 comm=syz.6.4387 [ 238.159554][T28087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4388'. [ 238.225587][T28100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65040 sclass=netlink_route_socket pid=28100 comm=syz.6.4392 [ 238.286599][T28112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4397'. [ 238.317819][T28114] netlink: 'syz.4.4398': attribute type 10 has an invalid length. [ 238.323063][T28114] hsr_slave_0: left promiscuous mode [ 238.327802][T28114] hsr_slave_1: left promiscuous mode [ 238.564877][T28350] binder: 28348:28350 unknown command 0 [ 238.566940][T28350] binder: 28348:28350 ioctl c0306201 200000000540 returned -22 [ 238.579733][T28351] af_packet: tpacket_rcv: packet too big, clamped from 104 to 4294967272. macoff=96 [ 238.583335][T28351] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4416'. [ 238.626290][T28361] netlink: 'syz.6.4420': attribute type 4 has an invalid length. [ 238.660291][T28367] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=28367 comm=syz.6.4423 [ 238.665331][T28370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4424'. [ 238.678786][T28370] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 238.684414][T28372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4424'. [ 238.729133][T28382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49936 sclass=netlink_route_socket pid=28382 comm=syz.4.4428 [ 238.758772][T28386] overlayfs: failed to clone upperpath [ 238.770110][T28418] netlink: 'syz.6.4433': attribute type 4 has an invalid length. [ 238.795657][T28474] option changes via remount are deprecated (pid=28464 comm=syz.5.4434) [ 238.912632][T28513] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4443'. [ 239.147658][T28643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=28643 comm=syz.4.4453 [ 239.495666][T28786] tipc: Enabled bearer , priority 0 [ 239.499808][T28785] tipc: Resetting bearer [ 239.654482][ T40] kauditd_printk_skb: 156 callbacks suppressed [ 239.654493][ T40] audit: type=1400 audit(1748785083.905:937): avc: denied { write } for pid=28907 comm="syz.6.4481" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 239.666263][T28910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=28910 comm=syz.2.4482 [ 239.841419][T28922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61456 sclass=netlink_route_socket pid=28922 comm=syz.6.4487 [ 240.493491][T10049] tipc: Node number set to 3302873797 [ 241.011932][T28785] tipc: Disabling bearer [ 241.186125][T28957] mmap: syz.6.4498 (28957): VmData 37466112 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 241.306075][T29072] 1·: renamed from 70· (while UP) [ 241.309685][T29072] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 241.319069][T29074] kAFS: unable to lookup cell '/,c¾ûL' [ 241.328557][T29073] delete_channel: no stack [ 241.597316][T29198] 0·: renamed from 71· [ 241.600311][T29198] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 241.603675][T29198] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.606867][T29198] 0·: entered allmulticast mode [ 241.608411][T29198] hsr_slave_0: entered allmulticast mode [ 241.610263][T29198] hsr_slave_1: entered allmulticast mode [ 241.612685][T29198] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 241.883891][T29327] 1·: renamed from 70· (while UP) [ 241.888418][T29327] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 242.314404][T29585] futex_wake_op: syz.2.4549 tries to shift op by -1; fix this program [ 242.413232][T29599] ata3.00: invalid multi_count 1 ignored [ 242.623571][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 242.713499][ T40] audit: type=1400 audit(1748785086.965:938): avc: denied { map } for pid=29624 comm="syz.5.4567" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 242.721952][ T40] audit: type=1400 audit(1748785086.965:939): avc: denied { execute } for pid=29624 comm="syz.5.4567" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 242.732337][ T40] audit: type=1400 audit(1748785086.985:940): avc: denied { bind } for pid=29626 comm="syz.4.4568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 242.738758][ T40] audit: type=1400 audit(1748785086.995:941): avc: denied { write } for pid=29626 comm="syz.4.4568" path="socket:[57880]" dev="sockfs" ino=57880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 242.746263][ T40] audit: type=1400 audit(1748785086.995:942): avc: denied { mount } for pid=29626 comm="syz.4.4568" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 242.752903][ T40] audit: type=1800 audit(1748785086.995:943): pid=29627 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.4568" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 242.759772][ T40] audit: type=1400 audit(1748785087.005:944): avc: denied { unmount } for pid=7707 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 242.868028][ T40] audit: type=1400 audit(1748785087.125:945): avc: denied { setopt } for pid=29634 comm="syz.2.4572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 242.890645][T29640] __nla_validate_parse: 19 callbacks suppressed [ 242.890657][T29640] netlink: 9 bytes leftover after parsing attributes in process `syz.5.4574'. [ 242.896117][T29640] 1·: renamed from 70· (while UP) [ 242.899068][T29640] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 242.970788][T29651] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4576'. [ 243.049558][T29714] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.074799][T29714] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 243.079392][ T40] audit: type=1400 audit(1748785087.335:946): avc: denied { firmware_load } for pid=29700 comm="syz.6.4581" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 243.086277][T29714] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 243.095961][T29773] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4586'. [ 243.109043][T29773] 0·: renamed from 71· (while UP) [ 243.112010][T29773] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 243.829752][T29911] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4599'. [ 243.833864][T29911] 1·: renamed from 70· (while UP) [ 243.838574][T29911] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 244.000968][T29921] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4603'. [ 244.154583][T29943] random: crng reseeded on system resumption [ 244.203297][T29943] futex_wake_op: syz.4.4611 tries to shift op by -1; fix this program [ 244.210555][T29943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4611'. [ 244.584289][T29956] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4614'. [ 244.614999][T29960] netlink: 'syz.5.4616': attribute type 11 has an invalid length. [ 244.618968][T29960] netlink: 'syz.5.4616': attribute type 4 has an invalid length. [ 244.681740][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 244.681751][ T40] audit: type=1400 audit(1748785088.935:958): avc: denied { ioctl } for pid=29967 comm="syz.5.4620" path="pid:[4026532875]" dev="nsfs" ino=4026532875 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 244.729051][ T40] audit: type=1400 audit(1748785088.985:959): avc: denied { ioctl } for pid=29967 comm="syz.5.4620" path="socket:[60676]" dev="sockfs" ino=60676 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 245.125902][T30088] netlink: 'syz.6.4628': attribute type 4 has an invalid length. [ 245.191311][T30098] futex_wake_op: syz.2.4631 tries to shift op by -1; fix this program [ 245.201969][T30098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4631'. [ 245.207598][ T40] audit: type=1400 audit(1748785089.465:960): avc: denied { read } for pid=30099 comm="syz.4.4632" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 245.207989][T30100] deleting an unspecified loop device is not supported. [ 245.215669][ T40] audit: type=1400 audit(1748785089.465:961): avc: denied { open } for pid=30099 comm="syz.4.4632" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 245.227762][ T40] audit: type=1400 audit(1748785089.465:962): avc: denied { ioctl } for pid=30099 comm="syz.4.4632" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 245.745975][T30114] netlink: 9 bytes leftover after parsing attributes in process `syz.5.4638'. [ 245.748864][T30114] 0·: renamed from 71· (while UP) [ 245.751756][T30114] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 245.761250][T30116] netlink: 'syz.2.4639': attribute type 21 has an invalid length. [ 245.763898][T30116] netlink: 'syz.2.4639': attribute type 4 has an invalid length. [ 245.823172][T30120] random: crng reseeded on system resumption [ 245.830889][T30120] futex_wake_op: syz.5.4641 tries to shift op by -1; fix this program [ 245.836870][T30120] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4641'. [ 245.839947][ T40] audit: type=1400 audit(1748785090.095:963): avc: denied { setopt } for pid=30121 comm="syz.2.4648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 246.093284][T30231] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.210307][ T40] audit: type=1400 audit(1748785090.465:964): avc: denied { module_load } for pid=30239 comm="syz.2.4650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 246.268986][ T40] audit: type=1400 audit(1748785090.525:965): avc: denied { mount } for pid=30250 comm="syz.6.4654" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 246.275388][ T40] audit: type=1400 audit(1748785090.525:966): avc: denied { remount } for pid=30250 comm="syz.6.4654" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 246.287285][T30243] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30243 comm=syz.2.4652 [ 246.297805][T30243] netlink: 'syz.2.4652': attribute type 11 has an invalid length. [ 246.311999][T30243] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=30243 comm=syz.2.4652 [ 246.523437][T11130] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 246.600790][T30387] futex_wake_op: syz.6.4668 tries to shift op by -1; fix this program [ 246.674279][T11130] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 246.678500][T11130] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.682072][T11130] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.686651][T11130] usb 9-1: config 0 interface 0 has no altsetting 0 [ 246.690366][T11130] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.695369][T11130] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.699730][T11130] usb 9-1: config 0 interface 0 has no altsetting 0 [ 246.704692][T11130] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.708400][T11130] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.712804][T11130] usb 9-1: config 0 interface 0 has no altsetting 0 [ 246.716840][T11130] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.720560][T11130] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.725346][T11130] usb 9-1: config 0 interface 0 has no altsetting 0 [ 246.729155][T11130] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.732827][T11130] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.733044][T30400] random: crng reseeded on system resumption [ 246.737632][T11130] usb 9-1: config 0 interface 0 has no altsetting 0 [ 246.738743][T11130] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.747310][T11130] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.751591][T11130] usb 9-1: config 0 interface 0 has no altsetting 0 [ 246.754613][T30400] futex_wake_op: syz.5.4674 tries to shift op by -1; fix this program [ 246.755461][T11130] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.760615][T11130] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.765152][T11130] usb 9-1: config 0 interface 0 has no altsetting 0 [ 246.767298][T30404] 0·: renamed from 71· (while UP) [ 246.768878][T11130] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.773173][T11130] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.774824][T30404] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 246.777845][T11130] usb 9-1: config 0 interface 0 has no altsetting 0 [ 246.787006][T11130] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 246.790567][T11130] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 246.794009][T11130] usb 9-1: Product: syz [ 246.795313][T11130] usb 9-1: Manufacturer: syz [ 246.796768][T11130] usb 9-1: SerialNumber: syz [ 246.800250][T11130] usb 9-1: config 0 descriptor?? [ 246.805891][T11130] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 246.951211][T30414] IPVS: Unknown mcast interface: nicvf0 [ 246.983501][T30416] netlink: 'syz.2.4682': attribute type 4 has an invalid length. [ 247.004817][T11130] usb 9-1: USB disconnect, device number 18 [ 247.012259][T11130] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 247.039667][ T40] audit: type=1400 audit(1748785091.295:967): avc: denied { write } for pid=30419 comm="syz.2.4684" path="socket:[59015]" dev="sockfs" ino=59015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 247.532474][T30528] netlink: 'syz.6.4700': attribute type 4 has an invalid length. [ 247.605581][T30575] futex_wake_op: syz.4.4704 tries to shift op by -1; fix this program [ 248.247744][T30789] netlink: 'syz.5.4710': attribute type 30 has an invalid length. [ 248.410895][T30904] __nla_validate_parse: 5 callbacks suppressed [ 248.410910][T30904] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4716'. [ 248.443007][T30909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15891 sclass=netlink_route_socket pid=30909 comm=syz.2.4718 [ 248.445002][T30911] netlink: 'syz.5.4719': attribute type 4 has an invalid length. [ 248.710744][T31028] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.4726'. [ 249.077539][T31051] FAULT_INJECTION: forcing a failure. [ 249.077539][T31051] name failslab, interval 1, probability 0, space 0, times 0 [ 249.082140][T31051] CPU: 1 UID: 0 PID: 31051 Comm: syz.5.4735 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 249.082156][T31051] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 249.082163][T31051] Call Trace: [ 249.082167][T31051] [ 249.082172][T31051] dump_stack_lvl+0x16c/0x1f0 [ 249.082206][T31051] should_fail_ex+0x512/0x640 [ 249.082226][T31051] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 249.082242][T31051] should_failslab+0xc2/0x120 [ 249.082256][T31051] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 249.082269][T31051] ? __alloc_skb+0x2b2/0x380 [ 249.082285][T31051] __alloc_skb+0x2b2/0x380 [ 249.082298][T31051] ? __pfx___alloc_skb+0x10/0x10 [ 249.082313][T31051] ? if_nlmsg_size+0x475/0xaf0 [ 249.082330][T31051] rtmsg_ifinfo_build_skb+0x81/0x280 [ 249.082349][T31051] rtmsg_ifinfo+0x9f/0x1a0 [ 249.082368][T31051] netif_state_change+0x17f/0x3b0 [ 249.082386][T31051] ? __pfx_netif_state_change+0x10/0x10 [ 249.082406][T31051] ? dev_change_xdp_fd+0x1c7/0x330 [ 249.082422][T31051] do_setlink.constprop.0+0x387d/0x4380 [ 249.082443][T31051] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 249.082459][T31051] ? stack_trace_save+0x8e/0xc0 [ 249.082471][T31051] ? __pfx_stack_trace_save+0x10/0x10 [ 249.082484][T31051] ? __lock_acquire+0xb8a/0x1c90 [ 249.082500][T31051] ? find_held_lock+0x2b/0x80 [ 249.082517][T31051] ? __pfx___might_resched+0x10/0x10 [ 249.082529][T31051] ? rcu_is_watching+0x12/0xc0 [ 249.082539][T31051] ? trace_contention_end+0xdd/0x130 [ 249.082555][T31051] ? __mutex_lock+0x1ca/0xb90 [ 249.082570][T31051] ? rtnl_newlink+0x600/0x2000 [ 249.082586][T31051] ? __pfx___mutex_lock+0x10/0x10 [ 249.082599][T31051] ? cap_capable+0xb3/0x250 [ 249.082619][T31051] ? netlink_ns_capable+0xfa/0x130 [ 249.082637][T31051] rtnl_newlink+0x18e0/0x2000 [ 249.082656][T31051] ? __pfx_rtnl_newlink+0x10/0x10 [ 249.082670][T31051] ? find_held_lock+0x2b/0x80 [ 249.082680][T31051] ? avc_has_perm_noaudit+0x117/0x3b0 [ 249.082694][T31051] ? avc_has_perm_noaudit+0x149/0x3b0 [ 249.082707][T31051] ? cred_has_capability.isra.0+0x193/0x2f0 [ 249.082725][T31051] ? __lock_acquire+0x622/0x1c90 [ 249.082747][T31051] ? find_held_lock+0x2b/0x80 [ 249.082756][T31051] ? __pfx_rtnl_newlink+0x10/0x10 [ 249.082770][T31051] ? __pfx_rtnl_newlink+0x10/0x10 [ 249.082783][T31051] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 249.082798][T31051] ? __pfx_rtnl_newlink+0x10/0x10 [ 249.082818][T31051] rtnetlink_rcv_msg+0x95e/0xe90 [ 249.082834][T31051] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 249.082852][T31051] ? __lock_acquire+0x622/0x1c90 [ 249.082869][T31051] netlink_rcv_skb+0x155/0x420 [ 249.082886][T31051] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 249.082902][T31051] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 249.082924][T31051] ? netlink_deliver_tap+0x1ae/0xd30 [ 249.082940][T31051] ? is_vmalloc_addr+0x86/0xa0 [ 249.082954][T31051] netlink_unicast+0x53a/0x7f0 [ 249.082973][T31051] ? __pfx_netlink_unicast+0x10/0x10 [ 249.082994][T31051] netlink_sendmsg+0x8d1/0xdd0 [ 249.083014][T31051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.083037][T31051] ____sys_sendmsg+0xa98/0xc70 [ 249.083055][T31051] ? copy_msghdr_from_user+0x10a/0x160 [ 249.083069][T31051] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.083093][T31051] ___sys_sendmsg+0x134/0x1d0 [ 249.083108][T31051] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.083120][T31051] ? __lock_acquire+0x622/0x1c90 [ 249.083152][T31051] __sys_sendmsg+0x16d/0x220 [ 249.083166][T31051] ? __pfx___sys_sendmsg+0x10/0x10 [ 249.083189][T31051] do_syscall_64+0xcd/0x4c0 [ 249.083205][T31051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.083217][T31051] RIP: 0033:0x7fc6e238e969 [ 249.083227][T31051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.083238][T31051] RSP: 002b:00007fc6e317e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.083248][T31051] RAX: ffffffffffffffda RBX: 00007fc6e25b5fa0 RCX: 00007fc6e238e969 [ 249.083255][T31051] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 249.083261][T31051] RBP: 00007fc6e317e090 R08: 0000000000000000 R09: 0000000000000000 [ 249.083268][T31051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.083274][T31051] R13: 0000000000000000 R14: 00007fc6e25b5fa0 R15: 00007ffc3f9f35e8 [ 249.083287][T31051] [ 249.223546][ C1] vkms_vblank_simulate: vblank timer overrun [ 249.271366][T31058] netlink: 'syz.5.4738': attribute type 10 has an invalid length. [ 249.324054][T31065] loop6: detected capacity change from 0 to 524287999 [ 249.326117][T31066] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 249.331142][T31066] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 249.455735][T13365] udevd[13365]: symlink '../../loop6' '/dev/disk/by-diskseq/89.tmp-b7:6' failed: Read-only file system [ 249.796186][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 249.796197][ T40] audit: type=1400 audit(1748785094.055:975): avc: denied { mounton } for pid=31297 comm="syz.5.4754" path="/647/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 249.817086][T31299] ------------[ cut here ]------------ [ 249.818828][T31299] WARNING: CPU: 1 PID: 31299 at fs/overlayfs/xattrs.c:136 ovl_listxattr+0x371/0x4b0 [ 249.821746][T31299] Modules linked in: [ 249.823341][T31299] CPU: 1 UID: 0 PID: 31299 Comm: syz.5.4754 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 249.826833][T31303] validate_nla: 1 callbacks suppressed [ 249.826844][T31303] netlink: 'syz.2.4757': attribute type 4 has an invalid length. [ 249.828401][T31299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 249.828411][T31299] RIP: 0010:ovl_listxattr+0x371/0x4b0 [ 249.828428][T31299] Code: ff ff ff 49 83 ec 08 48 01 c5 48 29 c2 48 01 d3 48 8d 75 08 48 89 ef 4c 01 f2 48 01 dd e8 c7 b7 e7 fe eb 43 e8 50 ca 80 fe 90 <0f> 0b 90 49 c7 c4 fb ff ff ff e8 40 ca 80 fe 4c 89 e0 48 83 c4 20 [ 249.828440][T31299] RSP: 0018:ffffc90007e5fdd0 EFLAGS: 00010287 [ 249.848936][T31299] RAX: 000000000000025c RBX: 0000000000000012 RCX: ffffc90026be1000 [ 249.851336][T31299] RDX: 0000000000080000 RSI: ffffffff833b36f0 RDI: 0000000000000006 [ 249.854156][T31299] RBP: ffff8880333c7800 R08: 0000000000000006 R09: 0000000000000012 [ 249.856644][T31299] R10: 0000000000000011 R11: 0000000000000001 R12: 0000000000000011 [ 249.859129][T31299] R13: ffff8880570062f0 R14: 0000000000000011 R15: ffff888103303900 [ 249.861585][T31299] FS: 00007fc6e317e6c0(0000) GS:ffff8880d6865000(0000) knlGS:0000000000000000 [ 249.864410][T31299] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.866987][T31299] CR2: 000000110c3db2bb CR3: 0000000040aea000 CR4: 0000000000352ef0 [ 249.869391][T31299] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 249.871837][T31299] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 249.874320][T31299] Call Trace: [ 249.875380][T31299] [ 249.876284][T31299] ? __pfx_ovl_listxattr+0x10/0x10 [ 249.877877][T31299] vfs_listxattr+0xb7/0x140 [ 249.879348][T31299] listxattr+0x69/0x1a0 [ 249.880662][T31299] path_listxattrat+0x151/0x370 [ 249.882193][T31299] ? __pfx_path_listxattrat+0x10/0x10 [ 249.882644][T31305] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.4756'. [ 249.883868][T31299] do_syscall_64+0xcd/0x4c0 [ 249.883889][T31299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.883902][T31299] RIP: 0033:0x7fc6e238e969 [ 249.883913][T31299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.883925][T31299] RSP: 002b:00007fc6e317e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 249.883938][T31299] RAX: ffffffffffffffda RBX: 00007fc6e25b5fa0 RCX: 00007fc6e238e969 [ 249.883945][T31299] RDX: 0000000000000075 RSI: 0000200000000200 RDI: 00002000000000c0 [ 249.883952][T31299] RBP: 00007fc6e2410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 249.883959][T31299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.913761][T31299] R13: 0000000000000000 R14: 00007fc6e25b5fa0 R15: 00007ffc3f9f35e8 [ 249.916460][T31299] [ 249.917453][T31299] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 249.919703][T31299] CPU: 1 UID: 0 PID: 31299 Comm: syz.5.4754 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 249.923258][T31299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 249.927251][T31299] Call Trace: [ 249.928654][T31299] [ 249.929901][T31299] dump_stack_lvl+0x3d/0x1f0 [ 249.931879][T31299] panic+0x71c/0x800 [ 249.933516][T31299] ? __pfx_panic+0x10/0x10 [ 249.935356][T31299] ? show_trace_log_lvl+0x29b/0x3e0 [ 249.937556][T31299] ? ovl_listxattr+0x371/0x4b0 [ 249.939542][T31299] check_panic_on_warn+0xab/0xb0 [ 249.941652][T31299] __warn+0xf6/0x3c0 [ 249.943288][T31299] ? ovl_listxattr+0x371/0x4b0 [ 249.945309][T31299] report_bug+0x3c3/0x580 [ 249.947108][T31299] ? ovl_listxattr+0x371/0x4b0 [ 249.949111][T31299] handle_bug+0x184/0x210 [ 249.950922][T31299] exc_invalid_op+0x17/0x50 [ 249.952878][T31299] asm_exc_invalid_op+0x1a/0x20 [ 249.954896][T31299] RIP: 0010:ovl_listxattr+0x371/0x4b0 [ 249.957145][T31299] Code: ff ff ff 49 83 ec 08 48 01 c5 48 29 c2 48 01 d3 48 8d 75 08 48 89 ef 4c 01 f2 48 01 dd e8 c7 b7 e7 fe eb 43 e8 50 ca 80 fe 90 <0f> 0b 90 49 c7 c4 fb ff ff ff e8 40 ca 80 fe 4c 89 e0 48 83 c4 20 [ 249.964840][T31299] RSP: 0018:ffffc90007e5fdd0 EFLAGS: 00010287 [ 249.966930][T31299] RAX: 000000000000025c RBX: 0000000000000012 RCX: ffffc90026be1000 [ 249.970202][T31299] RDX: 0000000000080000 RSI: ffffffff833b36f0 RDI: 0000000000000006 [ 249.973482][T31299] RBP: ffff8880333c7800 R08: 0000000000000006 R09: 0000000000000012 [ 249.976299][T31299] R10: 0000000000000011 R11: 0000000000000001 R12: 0000000000000011 [ 249.978824][T31299] R13: ffff8880570062f0 R14: 0000000000000011 R15: ffff888103303900 [ 249.982123][T31299] ? ovl_listxattr+0x370/0x4b0 [ 249.984139][T31299] ? __pfx_ovl_listxattr+0x10/0x10 [ 249.986272][T31299] vfs_listxattr+0xb7/0x140 [ 249.988124][T31299] listxattr+0x69/0x1a0 [ 249.989605][T31299] path_listxattrat+0x151/0x370 [ 249.991113][T31299] ? __pfx_path_listxattrat+0x10/0x10 [ 249.992783][T31299] do_syscall_64+0xcd/0x4c0 [ 249.994210][T31299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.996486][T31299] RIP: 0033:0x7fc6e238e969 [ 249.998338][T31299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.006161][T31299] RSP: 002b:00007fc6e317e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 250.008935][T31299] RAX: ffffffffffffffda RBX: 00007fc6e25b5fa0 RCX: 00007fc6e238e969 [ 250.011343][T31299] RDX: 0000000000000075 RSI: 0000200000000200 RDI: 00002000000000c0 [ 250.013649][T31299] RBP: 00007fc6e2410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 250.016533][T31299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.019776][T31299] R13: 0000000000000000 R14: 00007fc6e25b5fa0 R15: 00007ffc3f9f35e8 [ 250.023078][T31299] [ 250.025158][T31299] Kernel Offset: disabled [ 250.026971][T31299] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:33:58 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffff888028831380 RCX=ffffffff84b98fb5 RDX=1ffff110050ef492 RSI=ffffffff84ba9c01 RDI=ffff88802877a490 RBP=ffff88802877a400 RSP=ffffc9000c4a7018 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000032 R11=0000000000000001 R12=ffff888028831390 R13=ffff888028831398 R14=ffff888028831489 R15=ffff888028831490 RIP=ffffffff84ba9c9d RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6765000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c384e85 CR3=000000004fa9a000 CR4=00352ef0 DR0=0000000000000007 DR1=000000000000000b DR2=0000000000000002 DR3=0000000000000009 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000c0000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc3f9f3970 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc6e2411a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc6e2411a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc6e2411a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc6e2411aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc6e2411b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc6e2411c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8559a465 RDI=ffffffff9b0772e0 RBP=ffffffff9b0772a0 RSP=ffffc90007e5f740 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b0772a0 R15=ffffffff8559a400 RIP=ffffffff8559a48f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fc6e317e6c0 ffffffff 00c00000 GS =0000 ffff8880d6865000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3db2bb CR3=0000000040aea000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=00000000c0000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc6e2411a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc6e2411a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc6e2411a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc6e2411aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc6e2411b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc6e2411c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc6e2583488 00007fc6e2583480 00007fc6e2583478 00007fc6e2583450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc6e30ed100 00007fc6e2583440 00007fc6e2583458 00007fc6e25834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc6e2583498 00007fc6e2583490 00007fc6e2583488 00007fc6e2583480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000002fc69d RBX=0000000000000002 RCX=ffffffff8b7d6ca9 RDX=0000000000000000 RSI=ffffffff8de092c5 RDI=ffffffff8c1544a0 RBP=ffffed1003c53910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c663d R10=ffff88806a6331eb R11=0000000000000001 R12=0000000000000002 R13=ffff88801e29c880 R14=ffffffff90a7b350 R15=0000000000000000 RIP=ffffffff8b7d580f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6965000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f68dc061f98 CR3=000000004bb6a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000306d726678 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa370811a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa370811a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa370811a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa370811aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa370811b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa370811c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa370983488 00007fa370983480 00007fa370983478 00007fa370983450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa3714ed100 00007fa370983440 00007fa370983458 0004000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa370983498 00007fa370983490 00007fa370983488 00007fa370983480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffc90003cc7be0 RCX=0000000000000001 RDX=0000000000000000 RSI=00000000ffffffff RDI=ffffffff8e5c4d80 RBP=ffffffff8e5c4d80 RSP=ffffc90003cc7920 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff88804c8f2440 R13=00000000ffffffff R14=00000000ffffffff R15=0000000000000080 RIP=ffffffff8b7d60d7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055557e3d9500 ffffffff 00c00000 GS =0000 ffff8880d6a65000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2b018d CR3=00000000327b5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=00000000c0000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68db211a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68db211a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68db211a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68db211aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68db211b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68db211c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68db383488 00007f68db383480 00007f68db383478 00007f68db383450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68dbeed100 00007f68db383440 00007f68db383458 00007f68db3834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68db383498 00007f68db383490 00007f68db383488 00007f68db383480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000