last executing test programs: 3m5.769536477s ago: executing program 0 (id=272): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xd, 0x3, 0x3800, 0x3f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket(0x400000000010, 0x3, 0x0) r2 = dup(r0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xcff5, 0x8001, 0xffffffffffffffff, 0x5, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x40, 0x20, 0x5, 0xcb3, {{0x1f, 0x4, 0x3, 0x6, 0x7c, 0x67, 0x0, 0x7, 0x2f, 0x0, @multicast1, @loopback, {[@timestamp_addr={0x44, 0x3c, 0x8b, 0x1, 0x8, [{@loopback, 0x8}, {@broadcast, 0x3}, {@multicast1}, {@loopback, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@empty, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @rr={0x7, 0x7, 0xb0, [@private=0xa010100]}, @timestamp={0x44, 0x24, 0xa, 0x0, 0x4, [0x9, 0x8c, 0x8b, 0x1, 0x8, 0x7, 0x9, 0x7]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6tnl0\x00', r5, 0x29, 0x2, 0x8, 0xfffffff1, 0x1a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x40, 0x20, 0x2c3, 0x7}}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000080)="2846324c80e9f1443eb2", &(0x7f00000000c0)=""/67, 0x4}, 0x20) ioctl$KVM_CAP_X86_GUEST_MODE(r2, 0x4068aea3, &(0x7f0000000340)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xd, 0x3, 0x3800, 0x3f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) socket(0x400000000010, 0x3, 0x0) (async) dup(r0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xcff5, 0x8001, 0xffffffffffffffff, 0x5, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x40, 0x20, 0x5, 0xcb3, {{0x1f, 0x4, 0x3, 0x6, 0x7c, 0x67, 0x0, 0x7, 0x2f, 0x0, @multicast1, @loopback, {[@timestamp_addr={0x44, 0x3c, 0x8b, 0x1, 0x8, [{@loopback, 0x8}, {@broadcast, 0x3}, {@multicast1}, {@loopback, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@empty, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @rr={0x7, 0x7, 0xb0, [@private=0xa010100]}, @timestamp={0x44, 0x24, 0xa, 0x0, 0x4, [0x9, 0x8c, 0x8b, 0x1, 0x8, 0x7, 0x9, 0x7]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6tnl0\x00', r5, 0x29, 0x2, 0x8, 0xfffffff1, 0x1a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x40, 0x20, 0x2c3, 0x7}}) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000080)="2846324c80e9f1443eb2", &(0x7f00000000c0)=""/67, 0x4}, 0x20) (async) ioctl$KVM_CAP_X86_GUEST_MODE(r2, 0x4068aea3, &(0x7f0000000340)) (async) 3m5.530845403s ago: executing program 0 (id=281): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000001c0)={r3, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000080)={r3, 0x0, 0x100}, 0x8) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0xc) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_require}]}) r5 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) chdir(&(0x7f0000000140)='./bus\x00') write$binfmt_script(r5, &(0x7f0000000040), 0x4) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x18}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_emit_ethernet(0x3e, &(0x7f0000001200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500003000000020fc0290780000001ce00003000306907800da000945f4fff600650005010400030a010102ac1414aaef75d1b77bcd085c"], 0x0) 3m5.382002629s ago: executing program 0 (id=285): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e", 0xf3}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e", 0xe8}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4", 0x3c}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c", 0xbb}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a854e542aacc3201fff776fe1c000000000000000000000000000000002da46e", 0xde}], 0x2}}], 0x2, 0xc0) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3m5.310994066s ago: executing program 0 (id=287): r0 = syz_socket_connect_nvme_tcp() ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x7fff, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmsg$kcm(r3, &(0x7f0000001880)={0x0, 0xf5, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921bc111a262f295a8eb540", 0x7fffeffd}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='./file0\x00') 3m5.154295712s ago: executing program 0 (id=290): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x8, 0x6, 0x600, 0x0, 0x0, 0xf8, 0x228, 0x228, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@common=@hl={{0x28}, {0x1, 0x80}}]}, @HL={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @loopback, [], [], 'vxcan1\x00', 'veth1_macvtap\x00'}, 0x0, 0xf8, 0x130, 0x0, {0x5002}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@hl={{0x28}, {0x3, 0x7}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0xffff}, {0xfffd}}}}, {{@ipv6={@mcast2, @mcast1, [0xffffff00, 0xffffffff, 0x0, 0x2000000], [0x0, 0xffffff00, 0x0, 0xffffffff], 'caif0\x00', 'pim6reg0\x00', {}, {}, 0x73, 0x5, 0x3, 0x28}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x10, 0x0, 0xffff, 0x1, 0x0, "4d7993aa315f2d7890b15e25816c1e96ac3fe30705df4f3a3680275eb403e852f9370ad571de244c09c6781e850eddfd21494f66766629bb476302673c1a3f62"}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'ipvlan0\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}, @common=@hl={{0x28}, {0x1, 0x3}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) 3m4.701703247s ago: executing program 0 (id=295): syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e0109220c"], 0x7) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x4000881}, 0x4001841) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x80) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f00000002c0), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) getsockopt(r6, 0x1, 0x4, 0x0, &(0x7f00000000c0)) sendmmsg$inet6(r2, &(0x7f0000000640)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @mcast1, 0x7f}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000007c0)="db5f237aed203691ece155376b003edf4b4503232c979651b9390ec5f12c676d81f67f480f7ebc7ea14ae67e30c995a4d943bc14a78308d9e0efa5d98dd9a8030660b233ee5aebc260594b266f621f3f282f217547036c3ba4c8b509e003532d8798f7b8fd41392c6467a4c08ef3d5c7c2078b96a80410d4afd29285c4d86906eb6f838282090cd7032ab7ea56af304fbf7d707e05b110d3e4f3402da4ecbfed2256d028c72a032e30bb13acf4b6525843b58623417b3403760e12893ad744eb785d0ce45f126ea8fab0ad4b752ee946497f31e0de7bae1de6b13d4ef06947d30dcf46c1fa7aeba404a85e8264", 0xed}, {&(0x7f0000000540)="e457a986a1d7dcac644357f330a8811e21ed851a17fe84705a81f2040882150d4c07767e9b278ccaa35db6685a3757f950ffae1f8e198fd001969a2502a8b26ceee808348ccad50086eeaaecd6433214f41fcb4c05dae660926e99508baa55d5", 0x60}, {&(0x7f00000008c0)="e61702871e44e1a3b83482eb54e71d31a12973e664fe123ca806ef077f9033a1189227e0e81c54eda6806afd3226a41fe0c7eac6689c9182547ec899449e35cba9d1eb74d530005133f7845157bd6387d37738d94af1138faf76c4314ef441dbe4a22e9a2f2da35d6933c6276fe1370d8e9e360641a35d3bfb877414a72645f0868f821a76c3393c846cf186e899f19c5a899a87b3de12b18d2fac5e9ee16b18a4af60fabb1a3055454dea623e9b28f1", 0xb0}], 0x3, &(0x7f00000006c0)=[@rthdr={{0x38, 0x29, 0x39, {0x89, 0x4, 0x0, 0xb7, 0x0, [@mcast2, @private1]}}}, @tclass={{0x14, 0x29, 0x43, 0x7fff}}], 0x50}}], 0x1, 0x4000880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = shmget(0x1, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(r7, 0x3, &(0x7f00000000c0)) unshare(0x8040080) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3m4.604342868s ago: executing program 32 (id=295): syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e0109220c"], 0x7) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x4000881}, 0x4001841) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x80) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f00000002c0), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) getsockopt(r6, 0x1, 0x4, 0x0, &(0x7f00000000c0)) sendmmsg$inet6(r2, &(0x7f0000000640)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @mcast1, 0x7f}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000007c0)="db5f237aed203691ece155376b003edf4b4503232c979651b9390ec5f12c676d81f67f480f7ebc7ea14ae67e30c995a4d943bc14a78308d9e0efa5d98dd9a8030660b233ee5aebc260594b266f621f3f282f217547036c3ba4c8b509e003532d8798f7b8fd41392c6467a4c08ef3d5c7c2078b96a80410d4afd29285c4d86906eb6f838282090cd7032ab7ea56af304fbf7d707e05b110d3e4f3402da4ecbfed2256d028c72a032e30bb13acf4b6525843b58623417b3403760e12893ad744eb785d0ce45f126ea8fab0ad4b752ee946497f31e0de7bae1de6b13d4ef06947d30dcf46c1fa7aeba404a85e8264", 0xed}, {&(0x7f0000000540)="e457a986a1d7dcac644357f330a8811e21ed851a17fe84705a81f2040882150d4c07767e9b278ccaa35db6685a3757f950ffae1f8e198fd001969a2502a8b26ceee808348ccad50086eeaaecd6433214f41fcb4c05dae660926e99508baa55d5", 0x60}, {&(0x7f00000008c0)="e61702871e44e1a3b83482eb54e71d31a12973e664fe123ca806ef077f9033a1189227e0e81c54eda6806afd3226a41fe0c7eac6689c9182547ec899449e35cba9d1eb74d530005133f7845157bd6387d37738d94af1138faf76c4314ef441dbe4a22e9a2f2da35d6933c6276fe1370d8e9e360641a35d3bfb877414a72645f0868f821a76c3393c846cf186e899f19c5a899a87b3de12b18d2fac5e9ee16b18a4af60fabb1a3055454dea623e9b28f1", 0xb0}], 0x3, &(0x7f00000006c0)=[@rthdr={{0x38, 0x29, 0x39, {0x89, 0x4, 0x0, 0xb7, 0x0, [@mcast2, @private1]}}}, @tclass={{0x14, 0x29, 0x43, 0x7fff}}], 0x50}}], 0x1, 0x4000880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = shmget(0x1, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(r7, 0x3, &(0x7f00000000c0)) unshare(0x8040080) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.357318378s ago: executing program 3 (id=4537): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x4}, 0x0, [0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x3fffffffffffffff, 0x0, 0x7, 0xa3, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0xc874, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7fffffffffffffff, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2]}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x60) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x101, 0x2}}, './control\x00'}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x3c, &(0x7f00000001c0)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x4000881}, 0x4001841) mknod(&(0x7f0000000240)='./file3\x00', 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 5.352866201s ago: executing program 3 (id=4539): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x800}, 0x8) 5.289875119s ago: executing program 3 (id=4541): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000c0ffffff00000000b7080000000000007b8af8ff00000000a7080000000000007b8a20ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b6000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 5.289742619s ago: executing program 3 (id=4542): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) bind$can_j1939(r2, &(0x7f0000000180)={0x1d, r3, 0x2, {0x1, 0x0, 0x1}, 0xfe}, 0x18) (async, rerun: 64) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) (rerun: 64) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x2, {0x0, 0xf0, 0x1}, 0xff}, 0x18) (async) prctl$PR_SET_THP_DISABLE(0x42, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x2a, 0x11, 0x10, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xd, 0x10}, {0x1, 0x1}, {0xfff1, 0x7ffa}}, [@TCA_CHAIN={0x0, 0xb, 0x36}]}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) 4.235398555s ago: executing program 1 (id=4564): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) r1 = socket(0x25, 0x80004, 0xd) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) read(r0, &(0x7f0000000080)=""/15, 0xf) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x890}, 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000001200)={r1, r1, 0x0, 0x1000, &(0x7f0000000200)="1bad89dcbe8160856c6fde22b73e318a7a5af1819cb7f0c1cca5e7968d4340aaa4a87cc4f10a5706bc26c0c596c89704083a6fa9e150bd8a61ac663eb40d4179ae3a00a411378f48615aa274ca5c6581eb2a84a25ec738f529e494d7c6a8b16380486404d106323b6d47821fd241b123f768ba7c75bf4cf9e13dfcce125735ddd8aa4f7fe06d5ea300f2bc70d0f65e794623b0959110ba1e8afbbbd8f47af3462bf573bc34a65e897c898fa70d2c71cde6ec483707765c06a44f59594c7ecab509ce23135621148cca442b0265bd5e43bea7bf5e41121070efb995eebd06300e5d3939092863863650762376633cfcfdd0ba6d48bff6c4ad378b05a656a95086bc3730b28767cd47a4dc5d804da7cd68a0bbe5a768316bf1f55b3bf49ee74f678650b1939bd1877fef87d26acbb5d52932d8aaa5da0d87f6fdb2d992fe48fc1058bf7a0b4f2dc1ba44b7b2129d996ecf277cf31ca66680dc7800c80630dec47ef4b57c37a807d2a8adb81bd7682475c8ebe1854f7783a92445da698c3053c71954d0ad6838f220ad6c14b6443c6e37bd9b685f2c73c6bb33c6b98b6221173d365ca39806438f65c01e2446b13cec05926da1c94a744530a95f5d7a30f6d457e4d55b61929d6739e7e9c32e55cbd4ffe6402f853754fe49557fa90a0738e86910d640bbbcffed951f5a4a6084623a27f62e2618a262258ad14af94a3da21159174214073a4bea80d00135a4804956768231f54849899b7235be1b64515d16628e1a1496d33eabd5ea22fa46afcc36de4b499cd5f217d0e0473ebdc4bb81edb502440445538c6521f15e097f8e03b4587bf235c8e09c05cf7735330a69eec3fa897cb059b19e07ecec4c5722804562693ed8e53619ef98c89e4d944ea91ba8cf197068a57659cf8a664b06a00054c857cf54c4798eb9f67d8259d3536b517ee7e6f89c0d7064030e1c8e682d56bf86992860e046f6ce7c848ea4b3fc0d59ed4f86dbd1a59a51a7819ef0e17c4c71a7f74e4d8fd7d751ea611b25e59140ac01b2d79190ae66a5b3a149483c1adbfe9661b03386d64dcdb90b201a162354fe568153eba1e24d48c1ae065ad9a0576913de40038b4c0eb0a7f1241f5a8ef1fe130c7f5054099f6a9e273c7ae91dc90ebb5a2135d972d7e54e1cc5a4b8e904b5fd443c8582a6fe559d0731be623328f77eea86bdb24d044a5113587d64afd638543b14b322e74f486a4d745393b35810bb2b9b456257c1e309f8e248874cc16794caef8f8979d2ea7617b82520ff1a5ef0d102f21a0e7f84e1c5881825999e4851d9b08ecfcfc9bb7ab0c2390be6f005bf4d0f62ebb8b3d7e5df871c576f5e3483058ddedc17eefda0243246c08a6531ceb53b6760211d1efbcbc679596dada039c14c1ffaf810c97297ce2fdc29ceaee4bf4d40f0bd222d60e76702d39f3cf23bcdbe54cb8c19dc32792a4561c7604104e9eff4b4ec5692796a0e63d50a972bc0f8b39b651ee976ea8edae84daf5ac5fdfa4caed68c5e9db3f3a7e684f155b178cb3061f19672c47b6d7610053d4c3fddf373639d250924e06f512a089fd63950952d9bc4ec98eecb21148e22e4f92caed66c0afc6b71ebbaa00b8fb7e4116f734a46afdb36966db8f41bdc8e3718f846e0138b657b90a3cabe5675eadb810714f31606376e9be5a5d2249198b49c53a1cccbe557b06ccf8bf1e6f54475d4b4ff49cac0bb9c57bbc3d12cdf3fd7b5c09ec2dd7215f60786c63e71c6956aa60d01e826a30dd77beda86117cd1959c276f80816119989b10746f4f1a182477b4d96cab7e94d6122253b7d76d030295ec28c642d9e9ac25a9660c01edd426e214d908bc4c19a4f3dfd14185befe0227b3e230f4543733c6fd4d805b4bf7a8e5c5b78d58bdd5c3c31113ffd3be4015fefec1329ffb7383e632cd09b888d345a3ba2c031df1545eb6dcad3e6ca2bcb5f08e9179099b9e7d29d40dfef416e1d13e30c382d27c1139bd60f13f61af5ac81f3cdc9947f2022b21ce4897d98d3c692ed163d8365963264d12eaafb7cb8a812d2fff29ab0c9533bb9ecf8fe4f89406eecf18eb57feecda7f8d61cff4579a99d8690e09a8e2d187c8060b3a619b32b013f4a8b8d5267ebe8e07e9e7e6392c6afc896df03da40b28d5b5cb230793c66b7a2134fa897e5e063452bb8092efc88734c3a9ba62da2a201380705c39acd408e5ee2c81a420ab688bffaba9207de68a7a0ef03ccf325e2b86d39c9db91b45d8dc3b4006f2f403b8306e26ba63590e9483c401bc5157c9b7f6992f9a7000f833d522bb9d17dca43521b95a6fae0ea54949b408baf2694019c7de735e14aa035628bc9e2cb2cfed7d14888cfbad88f1e77d9e00785dcfd4d71388a03badd9ee601336c99faf671b694779751008e9d1012d2ca0ab0e603bb3b88b29efc2684587e4b2295203575b5ec2a840e0c8d726e399b9bc7fabf7b593f92b376288efd5eba0df9da26496963aeea3855ce82a8ea44f9852b9e19b7e37c8bab3cf4f34d6d47b7dd89f60a11af4d73012fd7c112f0030b43df1b8eef964c33d01d9ffe73725c274c846666e83ff9bcfcd831a2d9a5f54ffda4a58c5700bd0f85392c599c480eb5a1d82a7000fc5da5159ae0a8aa0e1f04bbbd1681c8c9ed8b4dd65c48b7d76495d30bd2af62ddbda4a50f6f773039e200de8fe770178c9ee87b55c4d8225975e22ccb5070c1e43f9a92ff91d12bc3b1a1aed8270f9f3b47a5208d837a521d7ad351b59263393a7f8377873f9fdefed6ed469598b12eaf19c04832da8dc2f74cb492fceac52cee29065b996828f1e4616863b32ed91c47532c0a744f7aaa855146d4c8eebcd2172f4ea5aa901d3b7e5187d68e59476b1c809273b6eda2493bd85a360890354b1bb5ab36a6b8ad9c603f47a9773abf5d4c69396bff7f610280dcf499f85f095c978f2350cf6219a710f8ec07e612937e65bf5a6fa2f2e4cddbe440da8af60d783fe13bad049dbe204c11a594a5b26a228e58b95845141c0e62b032546455fc612c0f1843560559d02a249f30793875526316c5a969a93cb8bf98c4c8f8d2f127a04c99a20e5da340c9f965e5f8be7553795178646d91452eb98666a11e07684a23412911c7c213639b5abbef17cb0ffeb8a3117c1f884f221b5101a7181262f580caae674313c4e256928c3f42237fc7c86c103c3ce4085d536f2a4b2fdf2db0ee90dbfbc44cdf98225f324d59a5eb0a444fba5260872f043db2bd20d184cafe009417e373448bb25b0da265e7ee94f087a3674932cd3d061bab62ddc9acaf754977ed47788df1cf3b1c77bb94b8db639b294299785e5f77621df1c62e307cf72c4ff8af3d259acf11d4696b79a4aef1f5cb8c78a2f7eb2b6803ee2f8bafc41a6f0159e82f07260d126df4126ff24592ae5fdf36e25478cb2c52702397df21b44c1f139eda0b83e2ae0e95696e852af2e5b0d2d3cf68faec4f7e9b3e1069bf72b01e671344153b544ebd4224b79fd03237ae8f006d0f7aebc8312dc6c1c72decbc5d4920ec96b988051c30918e892aef946946042b1b351d5838be5790b3e4630763fe10cd0d0fcb0ff41e02723e7f69f894b1697e3e9ffc13f6b0e8e0bdde2689c8c74291ff662eda2bf953b982b37a17c1dc4abe010683ff0fa09f50ac1b83198dfe00b15abe2167840f160ba3c9f7c875816197f337762182f040aa508bf293e9cfec2a9699dec9e9f47f20759b9977bec3af9de06ed5a76c0b72fcaef0caa6a001333150944b6bb0ad66694a0d1183a96d59679109a7e90607ed72794edc21d1afaf98fcfc88c3185a57362a5e8774a78fb690bfd95ec6eee920607bfe6ad4215dd6708d8946fef41341f17b8b4dca6976ac2761249e058111a679b401fc4150f2e506c7e0a5106862a7ff361a91038106b2ca284f7821c9e4296380b0ca3c2d0c5562cf5cff17bd1eb71605065db480c76ba1133cc85275963d0adb88a2ab21a5782b92a23a56cee5c8b3efbb96c99a44e6cae022827fdcd211651b773445c6281f5d82e35d168b4fe2c2cf74e4f02ac93be4bab8129191cf3ef53954b787a37146ae768c5ad553d04ae5965acf424d3b30735a9bd791870ac504eb749c2d8fa237f42992c9e24ad2f261919f776d0ee934006e56aff6ce8d761219c0568871f1e5e6586145c361c19ba54eddea06646b280ef8735ea6b5df8887b2228ad76d57cddb2b8feb33305a62c50e6cf335609900ce5bb9f149ed239ef0b595fb4f2352a6b44d6f360cf9948199bf46af5c2186d53a7e930df8818bf98721eb66b1161fe1be4e0bfd86b73352ae8e72957b0e00dbbe5cbcab7db2fc2e20d577b67b1b930c81dc678a8694994edcda0dc0513a221288a67e6a6b8495a78fe1dc78f413bb307d8369279eaf6d609a900b0c9e8ccb543b939f3b96d5e3df96a7327b47ee3a9749f486c807b094427c74a24c4b390df0844d739f51863cb007c3bce3970a8fcd2fd98875028adac347b8658b5d0ada6039fbad92d983ea229f7c14b9046c0f9b8fbf90bd3305e4991adc1088cc09d389d81ecf82c7b3a26ceb304170d3d65095bfa8d73c489a35fffe234b9a499a1cf5ad4a0037583ea25611b5d813943794ca5062a625a2f6538de9fec619a4bc7dba37bdf5593c13e606fbe89b68810cd01fd13607562552d9c224e5a8600e40ccb0a198add1ec6fd893ceadf846b6d8e5716948a3baa091f4eda9ac234120f2c8bb6ea57b6c0c983b1302ded74f11432028da694c8fd2ce2b95dea973dffafac58659ccfb8af182d9d1e04b5b4739aae22d239792b6f9b48cf9e49c04e7fc0f5adbaa85bdd83d9ded9e1d05174e6ef0b238822788c96e364eefa0c35a867edcf15aad515b0852d49c40dfbfedab52862a37e31c58c31e2865adf1136005e3cea8f45647d2224e0344d9d26e94982c3e4f81ff6479a5d697fe8802450083be0f06c3f05a7f68c4525f3aea72c07929ecd2101e4014e3822a3003e8b02c46227e6b9538a6119df32f6d66a6aa554f8a96a263139902b8bafeae8c55d8d2a1ccec34de184594ad0c05db617446707fcd650da8db3183e00246d29da13ba12ea750d9b3cc233aeda8c330e4a23fa7726573997c09dddc8865a01ad5d2488d337097195aa76d7644105ec7b2b6ca1024f619dc84d465ca824224d5886053e1d6563a85a18ae0431069f5e3adcf5c538003901bdcb81110436dd7ebca792bc5688890033adf0191f44d03deded17c3b4e993a0d6edd1779fab8bf3537d0ebcb8b371eda65ca8258ee980108fb54248fa7f41d65f1e8dc0fd9d2e345c04e75badfd2392ed4cf7204ca2c1248054bbe29988e4ddd359d79d081f29e16a7f250fe1d84044c0b0bcbd2ed666d4dcf7ffd6931b33119fa55c96445a3d7c88842b73321595d1f7b82e31bca6c5d6a9abd9649a6781c82f386ef81dc474104d984c0e0b91ae95abaf2dc68db1ea59de3527a4f35653c1a29157248dce4fb501ae369584c2fe22dd13afe36199b4ca715be6eb10f3f40b7eb90aec49c96e921eb975e2a1e64c2c97e1c8137b6f21ab7a335589a97af3bacefe92d9ae3a15de28d59f29d7473cc4b8a82337d1cdba9ebeda8507ad6aca8b9dea42b9064c27998bc88445b35495fc1673bd9a26a7c919116822c3305351a4bfefd5d3952a325fbed98590b8bb64ef81076a5b54d77bf8163c565c429d08472b1fb583c72017b02e8c9a644a8747fa78a87f98122558fdff666e0fb51a3ae3b2f28648ff016cc1a3fe2e0024d005b256f4227ebb248e7b19bf6d650", 0x9b, 0x9, 0xf, 0x4, 0x0, 0x2, 0x3, 'syz1\x00'}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000001300), r1) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x30, r3, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @private1}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001700)={0xffffffffffffffff, 0xe0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000001440)=[0x0], &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xed, &(0x7f00000014c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000001540), &(0x7f0000001580), 0x8, 0x79, 0x8, 0x8, &(0x7f00000015c0)}}, 0x10) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000001740)={0x1, 0x4, 0x73, 0x7, @vifc_lcl_ifindex=r4, @rand_addr=0x64010101}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)=@delqdisc={0x60, 0x25, 0x28, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x6, 0x1}, {0x0, 0xfff1}, {0xf, 0xfff6}}, [@TCA_RATE={0x6, 0x5, {0xd9, 0x8}}, @qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xba5b}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x60}, 0x1, 0x0, 0x0, 0xc040}, 0x4004) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001940)={'ip6_vti0\x00', &(0x7f00000018c0)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x1, 0x3, 0x18, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, 0x1, 0xf790, 0x1, 0x9}}) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000001980)=0x7fffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000019c0), 0x18602, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000001a00)={'veth0_virt_wifi\x00', 0x800}) sendto$packet(r1, &(0x7f0000001a40)="27fc1e3b786d40dcd9c33cb64f3a9c066c4a22206ad4be0bf372920009844bb0cec83e0e4e08e7b59ac670d07bff57babb1f222cc4ad78688e33efc553ac3fed067af0b5ab16f8324b8e949714901d67e6db582865410382ce88203d8a939fc1be5055822afb970b50a0efb15ea70830652c5747bf09908fa20860facd3b6541384af4e1b86be05778d57ba8cb8ca83b3f7fbe54a07a3dba13b8a0d526d246e33ab365bcc81ebbcce143afe12d21ea485924bcc50ca18360bb4ace8769cff3d041f8d4fe7deee4b69a30", 0xca, 0x8000, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001ec0)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001e80)={&(0x7f0000001b80)={0x2d0, 0x12, 0x1, 0x70bd25, 0x25dfdbfc, {0x1f, 0x7, 0x4, 0x80, {0x4e20, 0x4e23, [0xffffffff, 0x8, 0x2, 0x2], [0xffffffff, 0x3, 0x4, 0x9], 0x0, [0x6, 0xb]}, 0x0, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x65, 0x1, "dc789afdd3e3774e2c59dee19ef65a685cd6ecb1a33b3b07428f8a7772b697aeace02a459ea8b8b94832b1f57bcdc62dde12889ef23204c4ffbfa0f1b393bb0ef2fdc3a5d1ba8d868a1a6cdd3f6c1cfa1c55bbc3730333bfc4e5ecb75017c81dfa"}, @INET_DIAG_REQ_BYTECODE={0x7e, 0x1, "b5d15e37a70f6384f9b2c3c787f96fae941ff6f28ce30e34f46e9b10f40cd2314d26a40a2152b9ed092842b933b00fa890626506ad94d378df9045924d753eadef5a816e1ef937ee62efd52b3a5d885bb018070fc9dd35f9635ddb416bf3b87a0c8c3a363ee104a9dc729608e85033205cbcc60093b3c075b34a"}, @INET_DIAG_REQ_BYTECODE={0x75, 0x1, "cfc01a8cdf8b8b01c7449434b02c565bb9c8fe88b3d48367519285a6383c8b82737b919ef6714a140f3ba0b5504c0e7f7dbb767bff4b73b4655bcf68edba2887ebd60bcd99c57a9d4c497250fbc09d0073746755deba29462ebb12014df29e71f1ca7ab0569cc98bed5a80915bb962d8f4"}, @INET_DIAG_REQ_BYTECODE={0x85, 0x1, "709fc9a476f84e07a3f47e143b6ee24cafd36d9ab480c8450eab1bfdb67e6619f4149cbb24c15435d4efcc6aebd3454eee8b6d4416b8bf997b6c8da6625ec2cdf6a71de0e38e5982558bcb16cac375b38f44c1d4f5747a9728f6497e3e332b9aba4e1d3aa3b3a32d7c2cf110dc0d47cc19b0fd8d3963e573ca0571ad75ec6e9c2c"}, @INET_DIAG_REQ_BYTECODE={0x99, 0x1, "2fd199b9c4585be6845090316b568d694ce58be0302f242a28afc6a24ca7b4a86179ef152e5e7aba27dc33f71c609e780ada18c091135f33ddf13777db14d439077c8b023cc750a10970659017b15f604aa33e02f1e257fa15411b908c38d17cf2bff1bbad3409ef458bc442ba771c1d9bf3057284738d2acf2a6865f57d653e31b1054e4b48118b9de9cc75b6551a34890ee58409"}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x8000}, 0x50) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001f00)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r6, &(0x7f0000001f40)=@abs, &(0x7f0000001fc0)=0x6e) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002040), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000002340)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002300)={&(0x7f0000002080)={0x244, r7, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x61}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9a}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffff49}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x74da}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5, @private1, 0xd}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0x114, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffe6e3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x436}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x700}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8be5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x25d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff26}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa959}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x4}, 0xe867a7b01faecf57) socket$packet(0x11, 0x2, 0x300) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002380), 0x311000, 0x0) sendmsg$GTP_CMD_GETPDP(r8, &(0x7f0000002480)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x24, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}}, 0x8001) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r8, 0xc0045516, &(0x7f00000024c0)=0x4) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000002500), &(0x7f0000002540)=0x8) 4.178180891s ago: executing program 1 (id=4566): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x8000, @mcast2, 0xffff}}, 0x0, 0x0, 0x3f8, 0x0, 0x50, 0x0, 0x2}, 0x9c) syz_emit_vhci(0x0, 0x7) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 4.119844256s ago: executing program 1 (id=4567): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x8, 0x6, 0x600, 0x0, 0x0, 0xf8, 0x228, 0x228, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@common=@hl={{0x28}, {0x1, 0x80}}]}, @HL={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @loopback, [], [], 'vxcan1\x00', 'veth1_macvtap\x00'}, 0x0, 0xf8, 0x130, 0x0, {0x5002}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@hl={{0x28}, {0x3, 0x7}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0xffff}, {0xfffd}}}}, {{@ipv6={@mcast2, @mcast1, [0xffffff00, 0xffffffff], [0x0, 0xffffff00, 0x0, 0xffffffff], 'caif0\x00', 'pim6reg0\x00', {}, {}, 0x73, 0x5, 0x3, 0x28}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x10, 0x0, 0xffff, 0x1, 0xcc, "4d7993aa315f2d7890b15e25816c1e96ac3fe30705df4f3a3680275eb403e852f9370ad571de244c09c6781e850eddfd21494f66766629bb476302673c1a3f62"}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'ipvlan0\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}, @common=@hl={{0x28}, {0x1, 0x3}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) 4.119443785s ago: executing program 1 (id=4568): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x4}, 0x0, [0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x3fffffffffffffff, 0x0, 0x7, 0xa3, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0xc874, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7fffffffffffffff, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2]}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x60) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x101, 0x2}}, './control\x00'}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x3c, &(0x7f00000001c0)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x4000881}, 0x4001841) mknod(&(0x7f0000000240)='./file3\x00', 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.020248621s ago: executing program 1 (id=4569): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000020000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) 4.019887316s ago: executing program 1 (id=4570): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x8, 0x7, 0x9, 0x7, {{0x20, 0x4, 0x0, 0x3e, 0x80, 0x68, 0x0, 0x6, 0x2f, 0x0, @local, @loopback, {[@rr={0x7, 0x23, 0x15, [@empty, @loopback, @local, @loopback, @loopback, @rand_addr=0x64010101, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x3c, 0xdf, 0x1, 0x7, [{@multicast2, 0xd}, {@rand_addr=0x64010101, 0x66b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x1ff}, {@rand_addr=0x64010100, 0x4}, {@private=0xa010101, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @noop, @timestamp_addr={0x44, 0xc, 0xcc, 0x1, 0x4, [{@multicast2, 0x5}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x40, 0x0, 0xfff, 0x3, {{0x1c, 0x4, 0x2, 0x9, 0x70, 0x66, 0x0, 0x6b, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xb, 0x84, [@private=0xa010100, @multicast1]}, @ssrr={0x89, 0x23, 0x92, [@empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x15}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @rand_addr=0x64010100]}, @timestamp={0x44, 0x18, 0x4d, 0x0, 0x1, [0x1000, 0x6, 0xb, 0x5, 0xba]}, @noop, @timestamp={0x44, 0x10, 0xdb, 0x0, 0xc, [0x9, 0x8, 0x6]}, @generic={0x8f, 0x4, '*J'}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg1\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000004c0)={@loopback, 0x0}, &(0x7f0000000500)=0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000e40)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="7097c059fdcd5c310cdead599611dcc66c1fd6cf62ec0ddb0861fe825ab26b609dc3ac2415172cc022da3b50427bfc352e1147615dfbd90d43ef6e8d12f70a6166684dab20607dd8239c2f8b0128f3f00e85081ce9e02b997eb0ecf7477fe2e0ee06b95a1f5ea0209c5ee65fc743e83505280752115fba6b60510293a71dee4fa140a887996166588e781faf35334664cfc6818323483da582a4d07b391d94ed30a8e4846c895d030e18c4615a9ae199fed1575942d6c3374e55a99ceba261dfe743ebdd6c35a56acaaf1accf39b4383c4c2d414e8d284d497d5389efab5ce3d88b393", 0xe3}, {&(0x7f0000000ac0)="703e7bff44ae1add446b7c3720aaccb4eebf42853f8c0f777be541c6c70f2248ae4469aaf2c9b98a1ae99355916688e767381702e6329f0ffa03b641002d9c31327617ca9a4c846bf0445ed09857f36280013b3b22efa86d544b767b7f0c82c762d6da6dbb286004070544e61ebea65bd0eb6fc16ee30074a371391a8ce4d047cdecdf718853767dd2366aff9ec4ff237a57544e43270e7cdb4e963fd1dc541983738cfd80e068989c4e36dcdbb90906f8eef0b5db71212e635a62b9c6df03ab27dc9c8ec3caea926b2dde6c86b65fd913018dfb6cea9cf7fa74cd43a44754c186e2b9ce07120a06377571f44c2cc72ff489c48d66c434f8", 0xf8}, {&(0x7f0000000bc0)="e3e9d7a7fc7001a512d250d23b6fb9a00f23d84fb94fe1023fed907c15bf3d27ab5941b42031f1a914f6492ff4b30dbbda2420fac5c58ee6d9f9a442f7b9f75c60ac9e8331e3e7ca696cb0eec850fe9acf176fde586507c69831c2f73d504b54d9933f75cc9e5baea69b7d20408dd09e40ecf73987374516aebe782731e7789c043f1c8c028cddc91d1b05f5dc3b109110e9eed0de23d64ddef3e205e2dd70f91724b4dc2be49c328f9f86a20bb1095fdea12fd82d27c663fb8a93d873f903b68388fb1986df1c8b2040dc9a141e72df6a", 0xd1}, {&(0x7f0000000cc0)="2f44a58d88850b49cd72593397c7a514fffaaf5f735a342d842dff9dd595b6a70e2de733bc61ae30f955d9b61a7be68d2e888301e43d9cf77b5cedd152670d1fe4a1f2a6768e0c6d66289f6284938f62adbd5ef9c6a0472a5eafbd0e7e059b187857804653b0e2eb91d39b51a7b89156a0308f3d00a6ec40867a7eba3175947107067bbc02076665bc06d8b12ddff5684e97e1070a464ba03ca9cd8274835ff4648be0e1ed32aaf49b26cf9665500e40e7cca0f009787803411b7bcd2d6ac703", 0xc0}, {&(0x7f0000000d80)="dfb050ba14f0e0f251913e862003553ba0e72a784ef6263c40926e17175c2c20d7547f47f3f7562784deeb23f63a0402341e23eb98df783ee9d5422e56ea724eddfa0341513e86588c6c4ea6f78d1c241715dbfb881c03dd59d25cc6c98f574efea39b69b008d2c33e6eb2e9cf2a82b9e4b49dca47cc478bb591d385ed861d7838dd565fca5bd5bea798316ab946c03e806a41789fd994060be83bf36975ae4a5a66b0", 0xa3}], 0x5, 0x0, 0x0, 0x40000}], 0x1, 0x800) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'ip6gre0\x00', 0x0, 0x4, 0xdb, 0x4, 0x10, 0x24, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x40, 0x40, 0x5, 0x2}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB="e8010000", @ANYRES16=r0, @ANYBLOB="00042bbd7000fbdbdf2506000000300001800800030002000000140002006e657464657673696d3000000000000008000100", @ANYRES32=r1, @ANYBLOB="08000300020000002000018008000100", @ANYRES32=r2, @ANYBLOB="140002006970766c616e3100000000000000000014000180080003000300000008000300020000007800018008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e300000000000000000140002006272696467655f736c6176655f30000008000300010000000800030001000000140002006d6163766c616e310000000000000000080003000300000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4c000180140002006272696467655f736c6176655f30000008000300040000000800030001000000080003000300000014000200766972745f7769666930000000000000080003000700000014000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="5000018008000100", @ANYRES32=r5, @ANYBLOB="0800030001000000140002006d61637674617030000000000000000014000200726f736530000000000000000000000014000200776c616e30000000000000000000000020000180140002006970365f76746930000000000000000008000100", @ANYRES32=r6, @ANYBLOB="2800018008000100", @ANYRES32=r7, @ANYBLOB="08000300010400001400f4ff75657468315f766972745f7769666900"], 0x1e8}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) r10 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x27, &(0x7f0000000200)={@multicast1, @local}, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r11 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r11, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local, r9}, 0xc) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000bdb000/0x3000)=nil, 0x3000, &(0x7f0000000040)='&\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.199274721s ago: executing program 3 (id=4610): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x4}, 0x0, [0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x3fffffffffffffff, 0x0, 0x7, 0xa3, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0xc874, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7fffffffffffffff, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2]}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x60) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x101, 0x2}}, './control\x00'}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x3c, &(0x7f00000001c0)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x4000881}, 0x4001841) mknod(&(0x7f0000000240)='./file3\x00', 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.149325075s ago: executing program 3 (id=4614): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="500100001a00010000000000020000000200001f0000c808ffffffea080006000700000008000400", @ANYRES32=0x0, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}}, 0x0) r2 = syz_usb_connect(0x3, 0x36, 0x0, 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f00000000c0)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000280)={0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) syz_usb_disconnect(r2) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1) 1.574159275s ago: executing program 2 (id=4621): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x800}, 0x8) (fail_nth: 2) 1.50944954s ago: executing program 4 (id=4622): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000002000", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1.509124083s ago: executing program 2 (id=4623): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xc002) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000000)=0x6e) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x8, 0x7, 0x9, 0x7, {{0x20, 0x4, 0x0, 0x3e, 0x80, 0x68, 0x0, 0x6, 0x2f, 0x0, @local, @loopback, {[@rr={0x7, 0x23, 0x15, [@empty, @loopback, @local, @loopback, @loopback, @rand_addr=0x64010101, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x3c, 0xdf, 0x1, 0x7, [{@multicast2, 0xd}, {@rand_addr=0x64010101, 0x66b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x1ff}, {@rand_addr=0x64010100, 0x4}, {@private=0xa010101, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @noop, @timestamp_addr={0x44, 0xc, 0xcc, 0x1, 0x4, [{@multicast2, 0x5}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x40, 0x0, 0xfff, 0x3, {{0x1c, 0x4, 0x2, 0x9, 0x70, 0x66, 0x0, 0x6b, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xb, 0x84, [@private=0xa010100, @multicast1]}, @ssrr={0x89, 0x23, 0x92, [@empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x15}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @rand_addr=0x64010100]}, @timestamp={0x44, 0x18, 0x4d, 0x0, 0x1, [0x1000, 0x6, 0xb, 0x5, 0xba]}, @noop, @timestamp={0x44, 0x10, 0xdb, 0x0, 0xc, [0x9, 0x8, 0x6]}, @generic={0x8f, 0x4, '*J'}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg1\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000004c0)={@loopback, 0x0}, &(0x7f0000000500)=0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000e40)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="7097c059fdcd5c310cdead599611dcc66c1fd6cf62ec0ddb0861fe825ab26b609dc3ac2415172cc022da3b50427bfc352e1147615dfbd90d43ef6e8d12f70a6166684dab20607dd8239c2f8b0128f3f00e85081ce9e02b997eb0ecf7477fe2e0ee06b95a1f5ea0209c5ee65fc743e83505280752115fba6b60510293a71dee4fa140a887996166588e781faf35334664cfc6818323483da582a4d07b391d94ed30a8e4846c895d030e18c4615a9ae199fed1575942d6c3374e55a99ceba261dfe743ebdd6c35a56acaaf1accf39b4383c4c2d414e8d284d497d5389efab5ce3d88b393", 0xe3}, {&(0x7f0000000ac0)="703e7bff44ae1add446b7c3720aaccb4eebf42853f8c0f777be541c6c70f2248ae4469aaf2c9b98a1ae99355916688e767381702e6329f0ffa03b641002d9c31327617ca9a4c846bf0445ed09857f36280013b3b22efa86d544b767b7f0c82c762d6da6dbb286004070544e61ebea65bd0eb6fc16ee30074a371391a8ce4d047cdecdf718853767dd2366aff9ec4ff237a57544e43270e7cdb4e963fd1dc541983738cfd80e068989c4e36dcdbb90906f8eef0b5db71212e635a62b9c6df03ab27dc9c8ec3caea926b2dde6c86b65fd913018dfb6cea9cf7fa74cd43a44754c186e2b9ce07120a06377571f44c2cc72ff489c48d66c434f8", 0xf8}, {&(0x7f0000000bc0)="e3e9d7a7fc7001a512d250d23b6fb9a00f23d84fb94fe1023fed907c15bf3d27ab5941b42031f1a914f6492ff4b30dbbda2420fac5c58ee6d9f9a442f7b9f75c60ac9e8331e3e7ca696cb0eec850fe9acf176fde586507c69831c2f73d504b54d9933f75cc9e5baea69b7d20408dd09e40ecf73987374516aebe782731e7789c043f1c8c028cddc91d1b05f5dc3b109110e9eed0de23d64ddef3e205e2dd70f91724b4dc2be49c328f9f86a20bb1095fdea12fd82d27c663fb8a93d873f903b68388fb1986df1c8b2040dc9a141e72df6a", 0xd1}, {&(0x7f0000000cc0)="2f44a58d88850b49cd72593397c7a514fffaaf5f735a342d842dff9dd595b6a70e2de733bc61ae30f955d9b61a7be68d2e888301e43d9cf77b5cedd152670d1fe4a1f2a6768e0c6d66289f6284938f62adbd5ef9c6a0472a5eafbd0e7e059b187857804653b0e2eb91d39b51a7b89156a0308f3d00a6ec40867a7eba3175947107067bbc02076665bc06d8b12ddff5684e97e1070a464ba03ca9cd8274835ff4648be0e1ed32aaf49b26cf9665500e40e7cca0f009787803411b7bcd2d6ac703", 0xc0}, {&(0x7f0000000d80)="dfb050ba14f0e0f251913e862003553ba0e72a784ef6263c40926e17175c2c20d7547f47f3f7562784deeb23f63a0402341e23eb98df783ee9d5422e56ea724eddfa0341513e86588c6c4ea6f78d1c241715dbfb881c03dd59d25cc6c98f574efea39b69b008d2c33e6eb2e9cf2a82b9e4b49dca47cc478bb591d385ed861d7838dd565fca5bd5bea798316ab946c03e806a41789fd994060be83bf36975ae4a5a66b0", 0xa3}], 0x5, 0x0, 0x0, 0x40000}], 0x1, 0x800) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'ip6gre0\x00', 0x0, 0x4, 0xdb, 0x4, 0x10, 0x24, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x40, 0x40, 0x5, 0x2}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB="e8010000", @ANYRES16=r0, @ANYBLOB="00042bbd7000fbdbdf2506000000300001800800030002000000140002006e657464657673696d3000000000000008000100", @ANYRES32=r1, @ANYBLOB="08000300020000002000018008000100", @ANYRES32=r2, @ANYBLOB="140002006970766c616e3100000000000000000014000180080003000300000008000300020000007800018008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e300000000000000000140002006272696467655f736c6176655f30000008000300010000000800030001000000140002006d6163766c616e310000000000000000080003000300000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4c000180140002006272696467655f736c6176655f30000008000300040000000800030001000000080003000300000014000200766972745f7769666930000000000000080003000700000014000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="5000018008000100", @ANYRES32=r5, @ANYBLOB="0800030001000000140002006d61637674617030000000000000000014000200726f736530000000000000000000000014000200776c616e30000000000000000000000020000180140002006970365f76746930000000000000000008000100", @ANYRES32=r6, @ANYBLOB="2800018008000100", @ANYRES32=r7, @ANYBLOB="08000300010400001400f4ff75657468315f766972745f7769666900"], 0x1e8}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) r10 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x27, &(0x7f0000000200)={@multicast1, @local}, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r11 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r11, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local, r9}, 0xc) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.440208115s ago: executing program 2 (id=4625): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x14dc02, 0x0) r1 = dup(r0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000240)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x1, 0x0) ioctl$TCXONC(r4, 0x540a, 0x2) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r5 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) open_by_handle_at(r5, 0x0, 0x250000) recvmmsg(r3, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x8102}, {{0x0, 0x0, 0x0}, 0x1000a}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/180, 0xb4}, {&(0x7f0000000680)=""/232, 0xe8}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f0000000380)=""/238, 0xee}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/134, 0x86}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000000600)=""/91, 0x5b}], 0x5}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x20, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x800}, 0x8) 205.522755ms ago: executing program 2 (id=4626): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000011000000000000b7080000000000007b8af8ff00000000a7080000000000007b8a20ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b6000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 123.114994ms ago: executing program 2 (id=4627): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x800}, 0x8) 122.792252ms ago: executing program 4 (id=4628): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0x4000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 122.384885ms ago: executing program 2 (id=4629): mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080), 0x4) socket$nl_crypto(0x10, 0x3, 0x15) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x18000, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000680), 0x1050c0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x1000}}, 0x0, 0x801, 0x0, 0x0, 0x89, 0x0, 0xfb}, 0x9c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_io_uring_setup(0x495, &(0x7f00000000c0)={0x0, 0x1f0d, 0x2, 0x4, 0x161}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0xf, &(0x7f0000000200), 0xfffffffffffffec9) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r4, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}}) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1e0000f8ff00090458ffff00004000000000010100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000050000000a00"/28], 0x48) r9 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r9, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x4e22, @local}, 0x10, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x2044}, 0x240440f4) sendmsg$inet(r9, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x0, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f00000003c0)='\f', 0x1}], 0x1}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002400)=ANY=[@ANYBLOB="400000003c0007010000000000400000017c00000400fc800c00018006000600800a00000800028004002f801400070000000000000000020000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x3938700}}, 0x0) io_uring_enter(r5, 0x3517, 0x173d, 0x42, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) syz_usb_control_io(r2, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) syz_usb_control_io(r2, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) 122.093708ms ago: executing program 4 (id=4630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400060000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) 113.738359ms ago: executing program 4 (id=4631): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x800}, 0x8) (fail_nth: 3) 0s ago: executing program 4 (id=4632): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x1a0, 0xd0, 0x3d0, 0xd0, 0x300, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3d0}}, {{@ipv6={@private0, @remote, [], [0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x2, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0={0xfc, 0x0, '\x00', 0xfc}, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) kernel console output (not intermixed with test programs): uppressed [ 184.939101][ T40] audit: type=1400 audit(1748547461.997:16634): avc: denied { create } for pid=14433 comm="syz.4.3221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 184.941344][ T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 184.945624][ T40] audit: type=1400 audit(1748547461.997:16635): avc: denied { ioctl } for pid=14433 comm="syz.4.3221" path="socket:[59485]" dev="sockfs" ino=59485 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 184.955913][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.965681][T14395] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 184.976811][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 184.978777][ T40] audit: type=1400 audit(1748547462.037:16636): avc: denied { connect } for pid=14433 comm="syz.4.3221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 185.029608][ T5934] Bluetooth: hci1: Malformed Event: 0x2f [ 185.045550][T14449] Cannot find map_set index 65533 as target [ 185.073312][T14453] netlink: 'syz.3.3229': attribute type 9 has an invalid length. [ 185.174516][ T29] usb 7-1: USB disconnect, device number 17 [ 185.191641][T14465] Context (ID=0x10) not attached to queue pair (handle=0x0:0x96a) [ 185.251035][T14470] tmpfs: Bad value for 'mpol' [ 185.259635][T14474] Cannot find map_set index 65533 as target [ 185.268609][T14475] vlan2: entered allmulticast mode [ 185.270938][T14475] vlan1: entered allmulticast mode [ 185.273067][T14475] veth0_vlan: entered allmulticast mode [ 185.297480][T14477] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3241'. [ 185.361870][T14483] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14483 comm=syz.1.3243 [ 185.400283][T14486] syz.4.3244: attempt to access beyond end of device [ 185.400283][T14486] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 185.405795][T14486] vxfs: unable to read disk superblock at 1 [ 185.409307][T14486] syz.4.3244: attempt to access beyond end of device [ 185.409307][T14486] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 185.413380][T14486] vxfs: unable to read disk superblock at 8 [ 185.415480][T14486] vxfs: can't find superblock. [ 185.517047][T14508] Cannot find map_set index 65533 as target [ 185.521993][ T40] audit: type=1400 audit(1748547462.577:16637): avc: denied { bind } for pid=14495 comm="syz.1.3248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 185.610435][T14518] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3248'. [ 185.913871][T14531] netlink: 'syz.2.3259': attribute type 2 has an invalid length. [ 186.078215][T14535] ucma_write: process 190 (syz.2.3261) changed security contexts after opening file descriptor, this is not allowed. [ 186.105375][ T29] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 186.265540][ T29] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 186.269072][ T29] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 186.272447][ T29] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.280332][ T29] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 186.283773][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.286728][ T29] usb 9-1: Product: syz [ 186.288549][ T29] usb 9-1: Manufacturer: syz [ 186.290493][ T29] usb 9-1: SerialNumber: syz [ 186.360492][T14544] overlay: ./file0 is not a directory [ 186.361971][T14546] Cannot find map_set index 65533 as target [ 186.404347][T10147] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 186.436414][T14553] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 186.469813][T14555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3269'. [ 186.473151][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3269'. [ 186.475851][T14555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3269'. [ 186.478336][T14555] netlink: 'syz.1.3269': attribute type 11 has an invalid length. [ 186.511526][ T29] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 186.511694][T14541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.518635][T14541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.636288][T14565] : entered promiscuous mode [ 186.654397][ T59] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 186.756240][ T40] audit: type=1400 audit(1748547463.817:16638): avc: denied { append } for pid=14568 comm="syz.1.3275" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 186.774427][T12622] usb 9-1: USB disconnect, device number 11 [ 186.778901][T12622] usblp0: removed [ 186.816282][ T59] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 186.821507][ T59] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 186.827096][ T59] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 186.830773][ T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.837054][T14551] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 186.844365][ T59] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 186.906363][T14569] could not allocate digest TFM handle cryptd(blake2b-160) [ 186.989829][T14580] Cannot find map_set index 65533 as target [ 187.023406][T14582] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3278'. [ 187.031569][T14582] fuse: Bad value for 'fd' [ 187.043056][ T5962] usb 8-1: USB disconnect, device number 21 [ 187.196540][ T40] audit: type=1400 audit(1748547464.257:16639): avc: denied { read } for pid=14597 comm="syz.1.3284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 187.328405][T14610] Cannot find map_set index 65533 as target [ 187.335084][ T40] audit: type=1400 audit(1748547464.397:16640): avc: denied { map } for pid=14611 comm="syz.4.3290" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 187.342775][ T40] audit: type=1400 audit(1748547464.397:16641): avc: denied { execute } for pid=14611 comm="syz.4.3290" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 187.421830][T14623] Bluetooth: (null): Invalid header checksum [ 187.432941][T14626] tmpfs: Bad value for 'mpol' [ 187.515172][T14632] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 187.517803][T14632] IPv6: NLM_F_CREATE should be set when creating new route [ 187.520896][T14632] lo: entered allmulticast mode [ 187.526357][T14632] tunl0: entered allmulticast mode [ 187.532715][T14632] gre0: entered allmulticast mode [ 187.544105][T14632] gretap0: entered allmulticast mode [ 187.552731][T14632] erspan0: entered allmulticast mode [ 187.556757][T14632] ip_vti0: entered allmulticast mode [ 187.561233][T14632] ip6_vti0: entered allmulticast mode [ 187.573214][T14632] sit0: entered allmulticast mode [ 187.577734][T14632] ip6tnl0: entered allmulticast mode [ 187.581260][T14632] ip6gre0: entered allmulticast mode [ 187.581701][T14636] Cannot find map_set index 65533 as target [ 187.588292][ T40] audit: type=1400 audit(1748547464.647:16642): avc: denied { setopt } for pid=14637 comm="syz.4.3301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 187.588800][T14638] Bluetooth: MGMT ver 1.23 [ 187.600856][T14632] syz_tun: entered allmulticast mode [ 187.608526][T14632] ip6gretap0: entered allmulticast mode [ 187.612317][T14632] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.614981][T14632] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.618327][T14632] bridge0: entered allmulticast mode [ 187.622078][T14632] vcan0: entered allmulticast mode [ 187.630349][T14632] bond0: entered allmulticast mode [ 187.632191][T14632] bond_slave_0: entered allmulticast mode [ 187.634223][T14632] bond_slave_1: entered allmulticast mode [ 187.640752][T14632] team0: entered allmulticast mode [ 187.642570][T14632] team_slave_0: entered allmulticast mode [ 187.649198][T14632] team_slave_1: entered allmulticast mode [ 187.653195][T14632] dummy0: entered allmulticast mode [ 187.660163][T14632] nlmon0: entered allmulticast mode [ 187.663008][T14632] caif0: entered allmulticast mode [ 187.666002][T14632] batadv0: entered allmulticast mode [ 187.670339][T14632] vxcan0: entered allmulticast mode [ 187.672820][T14632] vxcan1: entered allmulticast mode [ 187.676500][T14632] veth0: entered allmulticast mode [ 187.680776][T14632] veth1: entered allmulticast mode [ 187.685524][T14632] wg0: entered allmulticast mode [ 187.688835][T14632] wg1: entered allmulticast mode [ 187.693392][T14632] wg2: entered allmulticast mode [ 187.697570][T14632] veth0_to_bridge: entered allmulticast mode [ 187.705312][T14632] veth1_to_bridge: entered allmulticast mode [ 187.710893][T14632] veth0_to_bond: entered allmulticast mode [ 187.717201][T14632] veth1_to_bond: entered allmulticast mode [ 187.721962][T14632] veth0_to_team: entered allmulticast mode [ 187.729375][T14632] veth1_to_team: entered allmulticast mode [ 187.736184][T14632] veth0_to_batadv: entered allmulticast mode [ 187.739542][T14632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.743455][T14632] batadv_slave_0: entered allmulticast mode [ 187.748542][T14632] veth1_to_batadv: entered allmulticast mode [ 187.751873][T14632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.755371][T14632] batadv_slave_1: entered allmulticast mode [ 187.759159][T14632] xfrm0: entered allmulticast mode [ 187.762973][T14632] veth0_to_hsr: entered allmulticast mode [ 187.767373][T14632] hsr_slave_0: entered allmulticast mode [ 187.771510][T14632] veth1_to_hsr: entered allmulticast mode [ 187.774817][T14632] hsr_slave_1: entered allmulticast mode [ 187.778168][T14632] hsr0: entered allmulticast mode [ 187.785500][T14632] veth1_virt_wifi: entered allmulticast mode [ 187.790024][T14632] veth0_virt_wifi: entered allmulticast mode [ 187.793390][T14632] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 187.797408][T14632] veth1_vlan: entered allmulticast mode [ 187.801521][T14632] veth0_vlan: entered allmulticast mode [ 187.809467][T14632] vlan0: entered allmulticast mode [ 187.811663][T14632] vlan1: entered allmulticast mode [ 187.817854][T14632] macvlan0: entered allmulticast mode [ 187.823833][T14632] macvlan1: entered allmulticast mode [ 187.827358][T14632] ipvlan0: entered allmulticast mode [ 187.829118][T14632] ipvlan1: entered allmulticast mode [ 187.832405][T14632] veth1_macvtap: entered allmulticast mode [ 187.837381][T14632] veth0_macvtap: entered allmulticast mode [ 187.842714][T14632] macvtap0: entered allmulticast mode [ 187.848087][T14632] macsec0: entered allmulticast mode [ 187.851756][T14632] geneve0: entered allmulticast mode [ 187.856009][T14632] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.859195][T14632] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.861972][T14632] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.865667][T14632] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.870007][T14632] geneve1: entered allmulticast mode [ 187.875033][T14632] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 187.881826][T14632] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 187.887608][T14632] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 187.901983][T14632] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 187.912190][T14632] mac80211_hwsim hwsim21 wlan0: entered allmulticast mode [ 187.923447][T14632] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 187.928203][T14632] vxlan0: entered allmulticast mode [ 187.930077][T14632] vti60: entered allmulticast mode [ 188.323661][T13582] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 188.508094][T13582] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 188.512734][T13582] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 188.517010][T13582] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 188.520733][T13582] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.527467][T14668] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 188.527518][T14677] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3317'. [ 188.533048][T13582] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 188.577503][T14679] syz_tun: entered allmulticast mode [ 188.581805][T14678] syz_tun: left allmulticast mode [ 188.675748][T14683] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3320'. [ 188.734706][T13582] usb 7-1: USB disconnect, device number 19 [ 188.776959][T14689] syz_tun: entered allmulticast mode [ 188.780826][T14688] syz_tun: left allmulticast mode [ 189.038220][T14713] syz_tun: entered allmulticast mode [ 189.041964][T14712] syz_tun: left allmulticast mode [ 189.276020][T14733] syz_tun: entered allmulticast mode [ 189.280021][T14732] syz_tun: left allmulticast mode [ 189.321278][T14737] syz_tun: entered allmulticast mode [ 189.327343][T14736] syz_tun: left allmulticast mode [ 189.327505][T14739] fuse: Unknown parameter '000000000000000000000000x0000000000000004' [ 189.363110][T14742] set_target_v3_checkentry: 1 callbacks suppressed [ 189.363122][T14742] Cannot find map_set index 65533 as target [ 189.409004][T14745] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3347'. [ 189.467734][ T40] audit: type=1400 audit(1748547466.527:16643): avc: denied { mounton } for pid=14749 comm="syz.3.3349" path="/215/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 189.584073][T14761] syz_tun: entered allmulticast mode [ 189.586331][T14760] syz_tun: left allmulticast mode [ 189.782818][T13580] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 189.895525][T14781] syz_tun: entered allmulticast mode [ 189.898119][T14780] syz_tun: left allmulticast mode [ 189.935880][T13580] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 189.939489][T13580] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 189.942554][T13580] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 189.946895][T13580] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.951145][T14757] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 189.956347][T13580] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 190.118474][T14792] Cannot find map_set index 65533 as target [ 190.150095][T14794] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3369'. [ 190.164493][ T24] usb 8-1: USB disconnect, device number 22 [ 190.728362][T14832] __nla_validate_parse: 23 callbacks suppressed [ 190.728373][T14832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3384'. [ 190.772347][T14837] tmpfs: Group quota block hardlimit too large. [ 190.798434][T14842] syz_tun: entered allmulticast mode [ 190.801363][T14840] syz_tun: left allmulticast mode [ 190.831296][T14847] Cannot find map_set index 65533 as target [ 190.994138][T11760] dummy0: left promiscuous mode [ 191.033700][T13580] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 191.055124][T13582] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 191.197340][T14873] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3401'. [ 191.201513][T14873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3401'. [ 191.210164][T14873] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3401'. [ 191.213019][T14873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3401'. [ 191.215446][T13580] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 191.220365][T13580] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 191.225503][T13580] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 191.229257][T13580] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.233315][T13582] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 191.243835][T13582] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 191.247650][T13582] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 191.251743][T13582] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.255346][T14843] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 191.259963][T13580] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 191.268733][ T40] audit: type=1400 audit(1748547468.327:16644): avc: denied { append } for pid=14879 comm="syz.1.3403" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 191.273812][T14845] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 191.279895][T13582] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 191.327131][T14884] syzkaller0: entered promiscuous mode [ 191.329325][T14884] syzkaller0: entered allmulticast mode [ 191.337135][ T40] audit: type=1400 audit(1748547468.397:16645): avc: denied { relabelfrom } for pid=14883 comm="syz.4.3405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 191.343670][ T40] audit: type=1400 audit(1748547468.397:16646): avc: denied { relabelto } for pid=14883 comm="syz.4.3405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 191.424400][T14888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3407'. [ 191.464832][T13582] usb 8-1: USB disconnect, device number 23 [ 191.485194][T13580] usb 7-1: USB disconnect, device number 20 [ 192.198909][T14900] Cannot find map_set index 65533 as target [ 192.803693][ T59] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 192.843617][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 192.850997][T14933] syz_tun: entered allmulticast mode [ 192.885181][T14935] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3425'. [ 192.885903][T14936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3425'. [ 192.969024][ T59] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 192.973047][ T59] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 192.976502][ T59] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 192.979282][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.983708][T14917] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 192.987584][ T59] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 192.995292][ T24] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 192.998936][ T24] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 193.002649][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 193.006341][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.011443][T14941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3427'. [ 193.011776][T14924] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 193.015461][T14941] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3427'. [ 193.020900][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 193.193808][ T59] usb 7-1: USB disconnect, device number 21 [ 193.226082][ T29] usb 6-1: USB disconnect, device number 10 [ 193.300424][T14953] syz_tun: entered allmulticast mode [ 193.471989][T14959] Cannot find map_set index 65533 as target [ 193.835816][ T40] audit: type=1400 audit(1748547470.897:16647): avc: denied { write } for pid=14983 comm="syz.4.3448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 193.961799][T15001] Cannot find map_set index 65533 as target [ 193.977225][ T40] audit: type=1400 audit(1748547471.037:16648): avc: denied { override_creds } for pid=15002 comm="syz.1.3457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 194.029550][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.135315][ T59] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 194.285417][ T59] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 194.290197][ T59] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 194.294676][ T59] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 194.298819][ T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.304175][T14994] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 194.308974][ T59] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 194.354736][T15030] kvm: kvm [15029]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 194.373633][T12622] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 194.512508][ T5973] usb 8-1: USB disconnect, device number 24 [ 194.544883][T12622] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 194.548440][T12622] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 194.551540][T12622] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 194.554733][T12622] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.560638][T15022] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 194.564595][T12622] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 194.768218][ T29] usb 7-1: USB disconnect, device number 22 [ 195.005343][T15043] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15043 comm=syz.1.3474 [ 195.047249][ T40] audit: type=1400 audit(1748547472.107:16649): avc: denied { setopt } for pid=15044 comm="syz.3.3475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 195.175055][T15056] Cannot find map_set index 65533 as target [ 195.405393][ T40] audit: type=1326 audit(1748547472.467:16650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15081 comm="syz.1.3492" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786278e969 code=0x7ffc0000 [ 195.412485][ T40] audit: type=1326 audit(1748547472.467:16651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15081 comm="syz.1.3492" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786278e969 code=0x7ffc0000 [ 195.419639][ T40] audit: type=1326 audit(1748547472.467:16652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15081 comm="syz.1.3492" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f786278e969 code=0x7ffc0000 [ 195.427204][ T40] audit: type=1326 audit(1748547472.467:16653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15081 comm="syz.1.3492" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786278e969 code=0x7ffc0000 [ 195.443899][T10147] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 195.595077][T10147] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 195.598522][T10147] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 195.601784][T10147] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 195.605054][T10147] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.609656][T15062] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 195.613510][T10147] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 195.785132][T15100] kAFS: unparsable volume name [ 195.820911][ T5973] usb 9-1: USB disconnect, device number 12 [ 195.934653][T15115] Cannot find map_set index 65533 as target [ 196.019920][T15121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=15121 comm=syz.3.3508 [ 196.063664][ T24] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 196.147049][T15131] Invalid ELF header magic: != ELF [ 196.235352][ T24] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 196.239278][ T24] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 196.242507][ T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 196.246117][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.255810][T15103] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 196.259738][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 196.265500][T15141] __nla_validate_parse: 8 callbacks suppressed [ 196.265511][T15141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3516'. [ 196.461416][T13582] usb 7-1: USB disconnect, device number 23 [ 196.475532][T15166] Cannot find map_set index 65533 as target [ 196.745957][T15174] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3530'. [ 196.833807][T13580] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 196.986162][T13580] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 196.987875][T15195] netlink: 'syz.3.3539': attribute type 4 has an invalid length. [ 196.990623][T13580] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 196.998489][T13580] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 197.002204][T13580] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.008809][T15172] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 197.017296][T13580] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 197.046327][T15197] netlink: 'syz.3.3540': attribute type 1 has an invalid length. [ 197.049345][T15197] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3540'. [ 197.220903][T13580] usb 6-1: USB disconnect, device number 11 [ 197.270679][T15205] Cannot find map_set index 65533 as target [ 197.653626][ T59] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 197.741497][T15248] Cannot find map_set index 65533 as target [ 197.809052][ T59] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 197.815147][ T59] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 197.819559][ T59] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 197.829346][ T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.833724][T15217] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 197.845496][ T59] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 197.862228][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 197.862239][ T40] audit: type=1400 audit(1748547474.917:16673): avc: denied { ioctl } for pid=15260 comm="syz.4.3569" path="socket:[62097]" dev="sockfs" ino=62097 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 197.972110][T15257] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3564'. [ 198.033282][T15280] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.3577'. [ 198.046511][ T59] usb 8-1: USB disconnect, device number 25 [ 198.066471][T15284] binder: binder_mmap: 15282 200000ffd000-200001000000 bad vm_flags failed -1 [ 198.126573][T15290] Cannot find map_set index 65533 as target [ 198.135848][T15294] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3584'. [ 198.170487][T15298] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.3586'. [ 198.413759][T12622] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 198.438341][T15326] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.3599'. [ 198.464818][T15328] Cannot find map_set index 65533 as target [ 198.527590][T15332] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3602'. [ 198.533904][T15332] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 198.536733][T15332] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 198.539440][T15332] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 198.542188][T15332] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 198.545175][T15332] geneve2: entered promiscuous mode [ 198.546883][T15332] geneve2: entered allmulticast mode [ 198.583646][T12622] usb 9-1: Using ep0 maxpacket: 32 [ 198.587271][T12622] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.591375][T12622] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.598792][T12622] usb 9-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 198.601712][T12622] usb 9-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 198.605029][T12622] usb 9-1: Product: syz [ 198.606832][T12622] usb 9-1: Manufacturer: syz [ 198.608379][T12622] usb 9-1: SerialNumber: syz [ 198.612397][T12622] appletouch 9-1:1.0: Could not find int-in endpoint [ 198.615104][T12622] appletouch 9-1:1.0: probe with driver appletouch failed with error -5 [ 198.618128][T12622] usbhid 9-1:1.0: couldn't find an input interrupt endpoint [ 198.819991][ T24] usb 9-1: USB disconnect, device number 13 [ 198.893596][T13580] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 198.940544][T15345] netlink: 'syz.3.3608': attribute type 72 has an invalid length. [ 199.065019][T13580] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 199.068452][T13580] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 199.071449][T13580] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 199.074383][T13580] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.078633][T15338] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 199.083418][T13580] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 199.283352][ T24] usb 6-1: USB disconnect, device number 12 [ 199.387329][T15372] netlink: 'syz.4.3618': attribute type 72 has an invalid length. [ 199.433831][T10147] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 199.444109][T15376] Cannot find map_set index 65533 as target [ 199.477398][T15382] netlink: 'syz.2.3622': attribute type 1 has an invalid length. [ 199.480111][T15382] netlink: 780 bytes leftover after parsing attributes in process `syz.2.3622'. [ 199.558394][T15392] netlink: 'syz.2.3627': attribute type 72 has an invalid length. [ 199.585147][T10147] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 199.590044][T10147] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 199.593631][T10147] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 199.596481][T10147] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.600714][T15360] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 199.604971][T10147] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 199.655844][T15404] Cannot find map_set index 65533 as target [ 199.726771][ T40] audit: type=1400 audit(1748547476.787:16674): avc: denied { write } for pid=15407 comm="syz.2.3635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 199.811700][T12622] usb 8-1: USB disconnect, device number 26 [ 199.934123][T10147] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 199.956802][T15439] Cannot find map_set index 65533 as target [ 199.964867][T15437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.973287][T15437] bond0: (slave rose0): Enslaving as an active interface with an up link [ 210.501048][T15510] __nla_validate_parse: 2 callbacks suppressed [ 210.501060][T15510] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3658'. [ 210.520446][T15512] afs: Unknown parameter 'dynvM†€' [ 210.643611][ T24] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 210.815578][T12622] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 210.816164][ T24] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 210.824048][ T24] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 210.828220][ T24] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 210.832027][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.837951][T15498] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 210.843729][ T24] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 210.975895][T12622] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 210.979397][T12622] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 210.982502][T12622] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 210.985749][T12622] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.990963][T15517] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 211.004535][T12622] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 211.048153][ T24] usb 9-1: USB disconnect, device number 14 [ 211.202525][ T5962] usb 6-1: USB disconnect, device number 13 [ 211.793107][T15524] Cannot find map_set index 65533 as target [ 211.884387][T15541] FAULT_INJECTION: forcing a failure. [ 211.884387][T15541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.889170][T15541] CPU: 3 UID: 0 PID: 15541 Comm: syz.4.3667 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 211.889186][T15541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 211.889194][T15541] Call Trace: [ 211.889198][T15541] [ 211.889203][T15541] dump_stack_lvl+0x16c/0x1f0 [ 211.889241][T15541] should_fail_ex+0x512/0x640 [ 211.889263][T15541] _copy_from_user+0x2e/0xd0 [ 211.889280][T15541] copy_from_sockptr_offset.constprop.0+0x136/0x170 [ 211.889296][T15541] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 211.889312][T15541] ? bpf_lsm_capable+0x9/0x10 [ 211.889328][T15541] ? security_capable+0x7e/0x260 [ 211.889342][T15541] ip_mroute_setsockopt+0x74d/0x1040 [ 211.889361][T15541] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 211.889387][T15541] do_ip_setsockopt+0x2ae/0x3240 [ 211.889400][T15541] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 211.889414][T15541] ? sock_has_perm+0x259/0x2f0 [ 211.889426][T15541] ? __pfx_sock_has_perm+0x10/0x10 [ 211.889437][T15541] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 211.889454][T15541] ip_setsockopt+0x59/0xf0 [ 211.889466][T15541] raw_setsockopt+0xb7/0x2a0 [ 211.889478][T15541] ? __pfx_raw_setsockopt+0x10/0x10 [ 211.889490][T15541] ? selinux_socket_setsockopt+0x6a/0x80 [ 211.889502][T15541] ? sock_common_setsockopt+0x2e/0xf0 [ 211.889517][T15541] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 211.889532][T15541] do_sock_setsockopt+0x224/0x470 [ 211.889547][T15541] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 211.889570][T15541] __sys_setsockopt+0x1a0/0x230 [ 211.889584][T15541] __x64_sys_setsockopt+0xbd/0x160 [ 211.889594][T15541] ? do_syscall_64+0x91/0x4c0 [ 211.889607][T15541] ? lockdep_hardirqs_on+0x7c/0x110 [ 211.889619][T15541] do_syscall_64+0xcd/0x4c0 [ 211.889632][T15541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.889643][T15541] RIP: 0033:0x7f972d18e969 [ 211.889652][T15541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.889668][T15541] RSP: 002b:00007f972dfe5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 211.889683][T15541] RAX: ffffffffffffffda RBX: 00007f972d3b5fa0 RCX: 00007f972d18e969 [ 211.889695][T15541] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 211.889704][T15541] RBP: 00007f972dfe5090 R08: 000000000000003c R09: 0000000000000000 [ 211.889713][T15541] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 211.889724][T15541] R13: 0000000000000000 R14: 00007f972d3b5fa0 R15: 00007ffee44fca08 [ 211.889747][T15541] [ 211.944601][T15546] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 212.088091][T15567] Cannot find map_set index 65533 as target [ 212.124375][ T5962] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 212.151906][T15573] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 212.156673][T15573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3683'. [ 212.202152][T15576] FAULT_INJECTION: forcing a failure. [ 212.202152][T15576] name failslab, interval 1, probability 0, space 0, times 0 [ 212.207387][T15576] CPU: 2 UID: 0 PID: 15576 Comm: syz.3.3685 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 212.207404][T15576] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 212.207411][T15576] Call Trace: [ 212.207415][T15576] [ 212.207419][T15576] dump_stack_lvl+0x16c/0x1f0 [ 212.207436][T15576] should_fail_ex+0x512/0x640 [ 212.207454][T15576] should_failslab+0xc2/0x120 [ 212.207466][T15576] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 212.207485][T15576] ? __alloc_skb+0x2b2/0x380 [ 212.207500][T15576] __alloc_skb+0x2b2/0x380 [ 212.207511][T15576] ? __pfx___alloc_skb+0x10/0x10 [ 212.207521][T15576] ? __print_lock_name+0x90/0xe0 [ 212.207540][T15576] ? atomic_notifier_call_chain+0x9e/0x1c0 [ 212.207557][T15576] mroute_netlink_event+0xde/0x190 [ 212.207574][T15576] ipmr_mfc_add+0x10bc/0x2e40 [ 212.207589][T15576] ? find_held_lock+0x2b/0x80 [ 212.207605][T15576] ? __might_fault+0xe3/0x190 [ 212.207615][T15576] ? __might_fault+0xe3/0x190 [ 212.207623][T15576] ? __might_fault+0x13b/0x190 [ 212.207636][T15576] ? __pfx_ipmr_mfc_add+0x10/0x10 [ 212.207653][T15576] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 212.207673][T15576] ? ip_mroute_setsockopt+0x82e/0x1040 [ 212.207688][T15576] ip_mroute_setsockopt+0x82e/0x1040 [ 212.207706][T15576] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 212.207732][T15576] do_ip_setsockopt+0x2ae/0x3240 [ 212.207746][T15576] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 212.207759][T15576] ? sock_has_perm+0x259/0x2f0 [ 212.207771][T15576] ? __pfx_sock_has_perm+0x10/0x10 [ 212.207783][T15576] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 212.207799][T15576] ip_setsockopt+0x59/0xf0 [ 212.207811][T15576] raw_setsockopt+0xb7/0x2a0 [ 212.207824][T15576] ? __pfx_raw_setsockopt+0x10/0x10 [ 212.207836][T15576] ? selinux_socket_setsockopt+0x6a/0x80 [ 212.207847][T15576] ? sock_common_setsockopt+0x2e/0xf0 [ 212.207862][T15576] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 212.207877][T15576] do_sock_setsockopt+0x224/0x470 [ 212.207892][T15576] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 212.207915][T15576] __sys_setsockopt+0x1a0/0x230 [ 212.207928][T15576] __x64_sys_setsockopt+0xbd/0x160 [ 212.207939][T15576] ? do_syscall_64+0x91/0x4c0 [ 212.207951][T15576] ? lockdep_hardirqs_on+0x7c/0x110 [ 212.207963][T15576] do_syscall_64+0xcd/0x4c0 [ 212.207981][T15576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.207992][T15576] RIP: 0033:0x7f7ab4f8e969 [ 212.208003][T15576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.208014][T15576] RSP: 002b:00007f7ab2df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 212.208025][T15576] RAX: ffffffffffffffda RBX: 00007f7ab51b5fa0 RCX: 00007f7ab4f8e969 [ 212.208031][T15576] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 212.208038][T15576] RBP: 00007f7ab2df6090 R08: 000000000000003c R09: 0000000000000000 [ 212.208044][T15576] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 212.208051][T15576] R13: 0000000000000000 R14: 00007f7ab51b5fa0 R15: 00007ffc0eef1758 [ 212.208065][T15576] [ 212.331391][T13580] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 212.346012][ T5962] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 212.350294][ T5962] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 212.354664][ T5962] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 212.358175][ T5962] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.363014][T15542] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 212.367722][ T5962] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 212.415416][ T40] audit: type=1400 audit(1748547489.478:16675): avc: denied { bind } for pid=15590 comm="syz.3.3691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 212.422938][T15591] pim6reg: entered allmulticast mode [ 212.428192][T15591] pim6reg: left allmulticast mode [ 212.506754][T13580] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 212.511364][T13580] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 212.515667][T13580] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 212.518264][T15597] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3694'. [ 212.519393][T13580] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.530099][T15569] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 212.530121][ T40] audit: type=1400 audit(1748547489.588:16676): avc: denied { mounton } for pid=15596 comm="syz.1.3694" path="/396/file0" dev="hugetlbfs" ino=63042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 212.530417][T15597] overlayfs: maximum fs stacking depth exceeded [ 212.536751][T13580] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 212.582517][T10147] usb 7-1: USB disconnect, device number 24 [ 212.590947][T15601] Cannot find map_set index 65533 as target [ 212.676651][T15607] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3699'. [ 212.737676][ T29] usb 9-1: USB disconnect, device number 15 [ 212.863714][T12622] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 212.908966][T15619] tmpfs: Unknown parameter 'ô˜ÒX»'„’' [ 213.030753][T12622] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 213.033668][T12622] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.036454][T12622] usb 8-1: Product: syz [ 213.037790][T12622] usb 8-1: Manufacturer: syz [ 213.039287][T12622] usb 8-1: SerialNumber: syz [ 213.045519][T12622] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 213.060547][T12622] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 213.070719][T15628] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3708'. [ 213.268280][T15642] futex_wake_op: syz.1.3709 tries to shift op by -1; fix this program [ 213.274476][ T59] usb 8-1: USB disconnect, device number 27 [ 213.291251][T15632] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3709'. [ 213.304910][ T40] audit: type=1400 audit(1748547490.368:16677): avc: denied { ioctl } for pid=15640 comm="syz.2.3713" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 213.371042][T15647] Cannot find map_set index 65533 as target [ 213.426073][T15655] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3717'. [ 213.527194][T15667] FAULT_INJECTION: forcing a failure. [ 213.527194][T15667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.533666][T15667] CPU: 2 UID: 0 PID: 15667 Comm: syz.2.3723 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 213.533683][T15667] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 213.533691][T15667] Call Trace: [ 213.533695][T15667] [ 213.533699][T15667] dump_stack_lvl+0x16c/0x1f0 [ 213.533716][T15667] should_fail_ex+0x512/0x640 [ 213.533733][T15667] _copy_to_user+0x32/0xd0 [ 213.533750][T15667] simple_read_from_buffer+0xcb/0x170 [ 213.533769][T15667] proc_fail_nth_read+0x197/0x270 [ 213.533788][T15667] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.533806][T15667] ? rw_verify_area+0xcf/0x680 [ 213.533820][T15667] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.533837][T15667] vfs_read+0x1e4/0xc60 [ 213.533855][T15667] ? __pfx___mutex_lock+0x10/0x10 [ 213.533868][T15667] ? __pfx_vfs_read+0x10/0x10 [ 213.533888][T15667] ? __fget_files+0x20e/0x3c0 [ 213.533903][T15667] ksys_read+0x12a/0x250 [ 213.533919][T15667] ? __pfx_ksys_read+0x10/0x10 [ 213.533939][T15667] do_syscall_64+0xcd/0x4c0 [ 213.533953][T15667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.533966][T15667] RIP: 0033:0x7fbce178d37c [ 213.533975][T15667] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 213.533986][T15667] RSP: 002b:00007fbce25cb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 213.533997][T15667] RAX: ffffffffffffffda RBX: 00007fbce19b5fa0 RCX: 00007fbce178d37c [ 213.534004][T15667] RDX: 000000000000000f RSI: 00007fbce25cb0a0 RDI: 0000000000000006 [ 213.534011][T15667] RBP: 00007fbce25cb090 R08: 0000000000000000 R09: 0000000000000000 [ 213.534017][T15667] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 213.534024][T15667] R13: 0000000000000000 R14: 00007fbce19b5fa0 R15: 00007ffd5e608d98 [ 213.534037][T15667] [ 213.630201][ T40] audit: type=1400 audit(1748547490.688:16678): avc: denied { name_bind } for pid=15671 comm="syz.2.3725" src=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 213.636162][T15672] vlan3: entered allmulticast mode [ 213.723753][ T29] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 213.813828][T15677] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3727'. [ 213.843766][T10147] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 213.860960][ T40] audit: type=1400 audit(1748547490.918:16679): avc: denied { setopt } for pid=15680 comm="syz.2.3729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 213.869953][ T40] audit: type=1400 audit(1748547490.928:16680): avc: denied { write } for pid=15680 comm="syz.2.3729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 213.875483][ T29] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 213.882664][ T29] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 213.887123][ T29] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 213.891402][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.898271][T15661] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 213.904860][ T29] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 213.969904][T15686] Cannot find map_set index 65533 as target [ 213.973736][T10147] usb 9-1: device descriptor read/64, error -71 [ 214.096904][T15692] sch_fq: defrate 0 ignored. [ 214.104881][T13580] usb 6-1: USB disconnect, device number 14 [ 214.105464][T12622] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 214.110006][T12622] ath9k_htc: Failed to initialize the device [ 214.114972][ T59] usb 8-1: ath9k_htc: USB layer deinitialized [ 214.217000][T15698] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3737'. [ 214.223733][T10147] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 214.363710][T10147] usb 9-1: device descriptor read/64, error -71 [ 214.403665][ T59] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 214.473873][T10147] usb usb9-port1: attempt power cycle [ 214.534762][T15713] Cannot find map_set index 65533 as target [ 214.555920][ T59] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 214.559603][ T59] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 214.563404][ T59] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 214.567187][ T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.572236][T15683] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 214.576426][ T59] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 214.607905][T15717] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3745'. [ 214.777518][ T59] usb 8-1: USB disconnect, device number 28 [ 214.828674][T15739] Cannot find map_set index 65533 as target [ 214.843759][T10147] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 214.874447][T10147] usb 9-1: device descriptor read/8, error -71 [ 214.909134][ T40] audit: type=1400 audit(1748547491.968:16681): avc: denied { create } for pid=15743 comm="syz.1.3757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 215.073799][ T24] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 215.113719][T10147] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 215.134411][T10147] usb 9-1: device descriptor read/8, error -71 [ 215.146071][T12622] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 215.236195][ T24] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 215.239955][ T24] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 215.244457][ T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 215.248283][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.255369][T15740] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 215.256382][T10147] usb usb9-port1: unable to enumerate USB device [ 215.260942][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 215.303748][T12622] usb 6-1: Using ep0 maxpacket: 16 [ 215.308075][T12622] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.311750][T12622] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.315000][T12622] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 215.319048][T12622] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 215.321852][T12622] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.325690][T12622] usb 6-1: config 0 descriptor?? [ 215.465164][ T6099] usb 7-1: USB disconnect, device number 25 [ 215.586602][T15750] netlink: 'syz.1.3757': attribute type 7 has an invalid length. [ 215.678729][T15744] random: crng reseeded on system resumption [ 215.854243][ T40] audit: type=1400 audit(1748547492.918:16682): avc: denied { setopt } for pid=15761 comm="syz.3.3765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 215.925994][T12622] usbhid 6-1:0.0: can't add hid device: -71 [ 215.927982][T12622] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 215.931402][T12622] usb 6-1: USB disconnect, device number 15 [ 216.066054][T15773] Cannot find map_set index 65533 as target [ 216.163693][ T24] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 216.216931][ T40] audit: type=1326 audit(1748547493.278:16683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15783 comm="syz.1.3774" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f786278e969 code=0x0 [ 216.325515][ T24] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 216.330398][ T24] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 216.334980][ T24] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 216.338940][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.346040][T15765] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 216.351802][ T24] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 216.423921][T12622] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 216.555678][T13580] usb 8-1: USB disconnect, device number 29 [ 216.576309][T12622] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 216.580920][T12622] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 216.585373][T12622] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 216.589136][T12622] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.595448][T15786] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 216.600963][T12622] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 216.714407][T15798] mkiss: ax0: crc mode is auto. [ 216.720042][T15798] hugetlbfs: Bad value 'e' for mount option 'size' [ 216.720042][T15798] [ 216.804443][ T24] usb 7-1: USB disconnect, device number 26 [ 216.841539][T15802] Cannot find map_set index 65533 as target [ 216.875133][ T40] audit: type=1400 audit(1748547493.938:16684): avc: denied { execute } for pid=15803 comm="syz.4.3783" dev="hugetlbfs" ino=63173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 217.001508][T15813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15813 comm=syz.4.3787 [ 217.119039][T15824] __nla_validate_parse: 1 callbacks suppressed [ 217.119055][T15824] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3791'. [ 217.126315][T15824] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3791'. [ 217.224813][T15836] Cannot find map_set index 65533 as target [ 217.282598][T15832] kvm: MONITOR instruction emulated as NOP! [ 217.454670][T15863] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3807'. [ 217.464946][ T1122] sr 2:0:0:0: [sr0] tag#10 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 217.469539][ T1122] sr 2:0:0:0: [sr0] tag#10 Sense Key : Illegal Request [current] [ 217.472942][ T1122] sr 2:0:0:0: [sr0] tag#10 Add. Sense: Invalid command operation code [ 217.477486][ T1122] sr 2:0:0:0: [sr0] tag#10 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 217.481347][ T1122] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 217.486380][ T1122] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 217.531588][T15874] Cannot find map_set index 65533 as target [ 217.664005][T15882] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3815'. [ 217.754649][ T6099] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 217.813677][ T24] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 217.904921][ T6099] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 217.908419][ T6099] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 217.912184][ T6099] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 217.916201][ T6099] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.922374][T15872] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 217.927105][ T6099] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 217.973800][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 217.977953][ T24] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 217.982110][ T24] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 959 [ 217.989026][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 217.992774][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.996541][ T24] usb 7-1: Manufacturer: ⣫ì§èš°â—†é«»ä§â¢•à­žé‘¢ï¼ æº¢èŠ®æ•€ãŽžá˜±Ù®â…äšî‚ã³æ©‚ã¶â¤†Þ¹íˆƒæ¦­æ±—곖篈镣ì˜é¸ê„œé™°í”Ø­é©«î譿ퟥ㗹鹄ᵖ [ 218.003086][ T24] usb 7-1: SerialNumber: 㢶爡镚ゾêšì°¡å¯·ë˜Žà«€ì¸à¬›åš¼6쌴ꆷꎸ钓蚔ᘌ➎ [ 218.042232][T15894] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3821'. [ 218.127299][ T6099] usb 6-1: USB disconnect, device number 16 [ 218.187987][T15899] Cannot find map_set index 65533 as target [ 218.238651][T15904] program syz.3.3826 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.273791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 218.506811][T15917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.662943][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 218.662954][ T40] audit: type=1400 audit(1748547495.718:16686): avc: denied { execute } for pid=15919 comm="syz.1.3832" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=66918 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 219.085482][T15934] Cannot find map_set index 65533 as target [ 219.343957][ T5962] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 219.468287][T15961] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3851'. [ 219.498833][ T5962] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 219.504216][ T5962] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 219.509387][ T5962] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 219.510300][T15965] Cannot find map_set index 65533 as target [ 219.512432][ T5962] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.519891][T15936] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 219.527743][ T5962] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 219.727002][ T5962] usb 9-1: USB disconnect, device number 20 [ 219.744687][T15979] /dev/nullb0: Can't open blockdev [ 219.836006][T15986] netlink: 'syz.3.3862': attribute type 3 has an invalid length. [ 219.838717][T15985] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3862'. [ 219.948087][T15991] syz.3.3863 (15991): drop_caches: 2 [ 219.980925][T15991] syz.3.3863 (15991): drop_caches: 2 [ 220.024555][T15994] overlayfs: missing 'lowerdir' [ 220.113906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #308!!! [ 220.210398][T16004] Cannot find map_set index 65533 as target [ 220.283918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 220.452582][T16023] Sensor A: ================= START STATUS ================= [ 220.456272][T16023] Sensor A: Test Pattern: 75% Colorbar [ 220.459162][T16023] Sensor A: Show Information: All [ 220.461455][T16023] Sensor A: Vertical Flip: false [ 220.464999][T16023] Sensor A: Horizontal Flip: true [ 220.467860][T16023] Sensor A: Brightness: 128 [ 220.469840][T16023] Sensor A: Contrast: 128 [ 220.471794][T16023] Sensor A: Hue: 0 [ 220.473481][T16023] Sensor A: Saturation: 128 [ 220.475547][T16023] Sensor A: ================== END STATUS ================== [ 220.532843][T16025] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.3877'. [ 220.591959][ T24] cdc_ncm 7-1:1.0: bind() failure [ 220.597336][ T24] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 220.599478][ T24] cdc_ncm 7-1:1.1: bind() failure [ 220.603031][ T24] usb 7-1: USB disconnect, device number 27 [ 220.610082][T16036] Cannot find map_set index 65533 as target [ 220.632454][T16038] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3883'. [ 220.637366][T16038] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3883'. [ 220.813647][ T6099] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 220.987332][ T6099] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 220.991752][ T6099] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 220.995120][ T6099] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 220.998009][ T6099] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.002500][T16029] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 221.006478][ T6099] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 221.034765][T16063] Cannot find map_set index 65533 as target [ 221.215013][ T24] usb 8-1: USB disconnect, device number 30 [ 221.492596][T16091] Cannot find map_set index 65533 as target [ 221.534773][ T5934] Bluetooth: hci4: Malformed LE Event: 0x1b [ 221.534948][ T5962] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 221.630005][T16094] vxcan0: tx address claim with dlc 0 [ 221.686958][ T5962] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.690702][ T5962] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.693864][ T5962] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 221.696664][ T5962] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.700700][ T5962] usb 7-1: config 0 descriptor?? [ 222.111863][ T5962] usbhid 7-1:0.0: can't add hid device: -71 [ 222.114294][ T5962] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 222.120008][ T5962] usb 7-1: USB disconnect, device number 28 [ 222.257383][T16125] Cannot find map_set index 65533 as target [ 222.314943][T16129] netlink: 'syz.4.3923': attribute type 4 has an invalid length. [ 222.316281][T16130] netlink: 'syz.4.3923': attribute type 4 has an invalid length. [ 222.431718][T16138] __nla_validate_parse: 2 callbacks suppressed [ 222.431734][T16138] netlink: 8680 bytes leftover after parsing attributes in process `syz.4.3927'. [ 222.438925][T16138] IPv6: NLM_F_CREATE should be specified when creating new route [ 222.442263][T16138] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.445329][T16138] IPv6: NLM_F_CREATE should be set when creating new route [ 222.448449][T16138] IPv6: NLM_F_CREATE should be set when creating new route [ 222.494165][T16140] overlayfs: missing 'lowerdir' [ 222.654875][T16153] dlm: non-version read from control device 0 [ 222.671252][T16157] Cannot find map_set index 65533 as target [ 222.725887][ T40] audit: type=1400 audit(1748547499.788:16687): avc: denied { map } for pid=16162 comm="syz.3.3937" path="pipe:[66248]" dev="pipefs" ino=66248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 222.727076][T16163] Bluetooth: MGMT ver 1.23 [ 222.837945][T16179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3944'. [ 223.314190][T16199] Cannot find map_set index 65533 as target [ 223.373499][ T40] audit: type=1400 audit(1748547500.428:16688): avc: denied { ioctl } for pid=16202 comm="syz.2.3952" path="socket:[68875]" dev="sockfs" ino=68875 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 223.501310][T16224] sp0: Synchronizing with TNC [ 223.548470][T16228] Cannot find map_set index 65533 as target [ 223.686368][T16236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3966'. [ 223.809101][T16259] Cannot find map_set index 65533 as target [ 223.871268][T16265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3978'. [ 223.908210][ T5934] Bluetooth: hci1: unexpected cc 0x204e length: 3 > 1 [ 223.915002][T16271] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 223.917512][T16271] team0: Device ipvlan2 is already an upper device of the team interface [ 224.002293][ T40] audit: type=1400 audit(1748547501.058:16689): avc: denied { ioctl } for pid=16274 comm="syz.3.3983" path="/dev/input/mouse0" dev="devtmpfs" ino=946 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 224.037423][T16284] net_ratelimit: 11 callbacks suppressed [ 224.037434][T16284] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 224.071661][T16289] Cannot find map_set index 65533 as target [ 224.314541][ T40] audit: type=1400 audit(1748547501.378:16690): avc: denied { setopt } for pid=16307 comm="syz.3.3998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 224.373662][T10147] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 224.513758][T10147] usb 7-1: device descriptor read/64, error -71 [ 224.525198][T16321] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.4002'. [ 224.555098][T16323] Cannot find map_set index 65533 as target [ 224.677622][T16328] mac80211_hwsim hwsim20 syzkaller0: entered promiscuous mode [ 224.680872][T16328] mac80211_hwsim hwsim20 syzkaller0: entered allmulticast mode [ 224.773618][T10147] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 224.904056][T10147] usb 7-1: device descriptor read/64, error -71 [ 225.013925][T10147] usb usb7-port1: attempt power cycle [ 225.258685][T16340] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.4011'. [ 225.353624][T10147] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 225.375589][T10147] usb 7-1: device descriptor read/8, error -71 [ 225.479781][T16354] Cannot find map_set index 65533 as target [ 225.547829][T16360] block nbd4: NBD_DISCONNECT [ 225.594054][T16359] block nbd4: Disconnected due to user request. [ 225.596839][T16359] block nbd4: shutting down sockets [ 225.613647][T10147] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 225.635565][T10147] usb 7-1: device descriptor read/8, error -71 [ 225.667869][T16369] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.4021'. [ 225.743881][T10147] usb usb7-port1: unable to enumerate USB device [ 225.905744][ T40] audit: type=1326 audit(1748547502.968:16691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16378 comm="syz.3.4026" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7ab4f8e969 code=0x0 [ 225.963180][T16380] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 225.967111][T16380] team0: Device ipvlan2 is already an upper device of the team interface [ 226.087088][T16389] netlink: 'syz.4.4030': attribute type 72 has an invalid length. [ 226.115586][T16391] Cannot find map_set index 65533 as target [ 226.355646][T16397] netlink: 'syz.1.4034': attribute type 1 has an invalid length. [ 226.378205][T16397] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4034'. [ 226.417182][T16400] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4035'. [ 226.493591][T16404] pvfs2: Unknown parameter 'exthdr' [ 226.525137][T16406] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4038'. [ 226.599390][T16410] netlink: 'syz.1.4040': attribute type 72 has an invalid length. [ 226.627135][T16412] macsec0: entered promiscuous mode [ 226.629468][T16412] macsec0: entered allmulticast mode [ 226.631255][T16412] veth1_macvtap: entered allmulticast mode [ 226.714335][T16418] xfrm1: entered allmulticast mode [ 226.745494][T16420] Cannot find map_set index 65533 as target [ 226.836876][T16429] netlink: 'syz.3.4049': attribute type 72 has an invalid length. [ 226.905113][T16443] program syz.3.4054 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.920418][T16437] hub 9-0:1.0: USB hub found [ 226.922540][T16437] hub 9-0:1.0: 1 port detected [ 226.951319][T16448] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 226.967785][T16450] sctp: [Deprecated]: syz.3.4057 (pid 16450) Use of int in maxseg socket option. [ 226.967785][T16450] Use struct sctp_assoc_value instead [ 227.027192][ T6099] Process accounting resumed [ 227.039864][T16461] Process accounting resumed [ 227.067169][T16469] netlink: 'syz.4.4065': attribute type 4 has an invalid length. [ 227.435978][T16518] __nla_validate_parse: 4 callbacks suppressed [ 227.435996][T16518] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.4084'. [ 227.500711][T16525] set_target_v3_checkentry: 2 callbacks suppressed [ 227.500723][T16525] Cannot find map_set index 65533 as target [ 227.529079][T16529] Cannot find add_set index 3 as target [ 227.534294][T10147] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 227.663743][T10147] usb 7-1: device descriptor read/64, error -71 [ 227.767223][ T40] audit: type=1400 audit(1748547504.828:16692): avc: denied { read } for pid=16545 comm="syz.1.4095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 227.773399][ T40] audit: type=1400 audit(1748547504.828:16693): avc: denied { write } for pid=16545 comm="syz.1.4095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 227.780478][ T40] audit: type=1400 audit(1748547504.828:16694): avc: denied { setopt } for pid=16545 comm="syz.1.4095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 227.913703][T10147] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 228.053620][ T6099] usb 8-1: new full-speed USB device number 31 using dummy_hcd [ 228.053927][T10147] usb 7-1: device descriptor read/64, error -71 [ 228.164342][T10147] usb usb7-port1: attempt power cycle [ 228.214955][ T6099] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 228.218492][ T6099] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.221495][ T6099] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 228.224536][ T6099] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.228254][ T6099] usb 8-1: config 0 descriptor?? [ 228.513717][T10147] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 228.544855][T10147] usb 7-1: device descriptor read/8, error -71 [ 228.656491][ T6099] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 228.783662][T10147] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 228.804061][T10147] usb 7-1: device descriptor read/8, error -71 [ 228.917431][T10147] usb usb7-port1: unable to enumerate USB device [ 229.585014][T16567] Cannot find map_set index 65533 as target [ 229.702758][ T40] audit: type=1400 audit(1748547506.758:16695): avc: denied { remount } for pid=16575 comm="syz.3.4109" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 229.702807][T16576] binder: Binderfs stats mode cannot be changed during a remount [ 229.703664][ T24] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 229.854947][ T24] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 229.859455][ T24] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 229.862506][ T24] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 229.865804][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.870232][T16564] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 229.875621][ T24] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 229.918856][ T6099] usb 8-1: USB disconnect, device number 31 [ 230.080439][ T24] usb 9-1: USB disconnect, device number 21 [ 230.473337][T16599] ubi: mtd0 is already attached to ubi31 [ 230.498743][T16603] Cannot find map_set index 65533 as target [ 230.531495][T16606] XFS (nullb0): Invalid superblock magic number [ 230.765562][T10147] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 230.779821][T16621] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 230.787645][T16621] syz.3.4128: attempt to access beyond end of device [ 230.787645][T16621] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 230.791594][T16621] XFS (nbd3): SB validate failed with error -5. [ 230.858778][T16632] ubi: mtd0 is already attached to ubi31 [ 230.893951][T10147] usb 7-1: device descriptor read/64, error -71 [ 230.947088][T16649] Cannot find map_set index 65533 as target [ 231.090226][T16666] netlink: 'syz.1.4146': attribute type 1 has an invalid length. [ 231.093462][T16666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4146'. [ 231.143922][T10147] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 231.283749][T10147] usb 7-1: device descriptor read/64, error -71 [ 231.391072][T16692] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 231.393367][T16692] IPv6: NLM_F_CREATE should be set when creating new route [ 231.396935][T10147] usb usb7-port1: attempt power cycle [ 231.401544][T16692] lo: entered allmulticast mode [ 231.407523][T16692] tunl0: entered allmulticast mode [ 231.410683][T16692] gre0: entered allmulticast mode [ 231.416216][T16692] gretap0: entered allmulticast mode [ 231.419953][T16692] erspan0: entered allmulticast mode [ 231.425129][T16692] ip_vti0: entered allmulticast mode [ 231.428112][T16692] ip6_vti0: entered allmulticast mode [ 231.431703][T16692] sit0: entered allmulticast mode [ 231.437816][T16692] ip6tnl0: entered allmulticast mode [ 231.441548][T16692] ip6gre0: entered allmulticast mode [ 231.446236][T16692] ip6gretap0: entered allmulticast mode [ 231.449118][T16692] bridge0: entered allmulticast mode [ 231.451319][T16692] bond0: entered allmulticast mode [ 231.452955][T16692] bond_slave_0: entered allmulticast mode [ 231.453323][T16693] netlink: 'syz.1.4157': attribute type 1 has an invalid length. [ 231.454961][T16692] bond_slave_1: entered allmulticast mode [ 231.460098][T16692] team0: entered allmulticast mode [ 231.461747][T16692] team_slave_0: entered allmulticast mode [ 231.464636][T16692] team_slave_1: entered allmulticast mode [ 231.468512][T16692] batman_adv: batadv0: Interface deactivated: dummy0 [ 231.470667][T16692] dummy0: entered allmulticast mode [ 231.472911][T16692] nlmon0: entered allmulticast mode [ 231.476289][T16692] caif0: entered allmulticast mode [ 231.478554][T16692] batadv0: entered allmulticast mode [ 231.480931][T16692] vxcan0: entered allmulticast mode [ 231.483196][T16692] vxcan1: entered allmulticast mode [ 231.485860][T16692] veth0: entered allmulticast mode [ 231.488121][T16692] veth1: entered allmulticast mode [ 231.490364][T16692] wg0: entered allmulticast mode [ 231.492628][T16692] wg1: entered allmulticast mode [ 231.495162][T16692] wg2: entered allmulticast mode [ 231.497394][T16692] veth0_to_bridge: entered allmulticast mode [ 231.500135][T16692] veth1_to_bridge: entered allmulticast mode [ 231.502814][T16692] veth0_to_bond: entered allmulticast mode [ 231.505760][T16692] veth1_to_bond: entered allmulticast mode [ 231.507560][T16695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4157'. [ 231.507771][T16692] veth0_to_team: entered allmulticast mode [ 231.512430][T16692] veth1_to_team: entered allmulticast mode [ 231.514825][T16692] veth0_to_batadv: entered allmulticast mode [ 231.516791][T16692] batadv_slave_0: entered allmulticast mode [ 231.518649][T16692] veth1_to_batadv: entered allmulticast mode [ 231.520512][T16692] batadv_slave_1: entered allmulticast mode [ 231.522464][T16692] xfrm0: entered allmulticast mode [ 231.524299][T16692] veth0_to_hsr: entered allmulticast mode [ 231.526168][T16692] hsr_slave_0: entered allmulticast mode [ 231.527970][T16692] veth1_to_hsr: entered allmulticast mode [ 231.529839][T16692] hsr_slave_1: entered allmulticast mode [ 231.531629][T16692] hsr0: entered allmulticast mode [ 231.533267][T16692] veth1_virt_wifi: entered allmulticast mode [ 231.535336][T16692] veth0_virt_wifi: entered allmulticast mode [ 231.537279][T16692] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 231.541148][T16692] veth1_vlan: entered allmulticast mode [ 231.543170][T16692] veth0_vlan: entered allmulticast mode [ 231.545755][T16692] vlan0: entered allmulticast mode [ 231.547589][T16692] vlan1: entered allmulticast mode [ 231.549349][T16692] macvlan0: entered allmulticast mode [ 231.551213][T16692] macvlan1: entered allmulticast mode [ 231.553030][T16692] ipvlan0: entered allmulticast mode [ 231.557355][T16692] ipvlan1: entered allmulticast mode [ 231.560387][T16692] veth0_macvtap: entered allmulticast mode [ 231.562832][T16692] macvtap0: entered allmulticast mode [ 231.569287][T16692] geneve0: entered allmulticast mode [ 231.572414][T16692] geneve1: entered allmulticast mode [ 231.575081][T16692] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 231.578030][T16692] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 231.580476][T16692] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 231.583014][T16692] mac80211_hwsim hwsim15 wlan0: entered allmulticast mode [ 231.585385][T16692] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 231.587678][T16692] veth2: entered allmulticast mode [ 231.589405][T16692] veth3: entered allmulticast mode [ 231.592023][T16692] ipip0: entered allmulticast mode [ 231.594698][T16692] sit1: entered allmulticast mode [ 231.600278][T16692] ip6tnl1: entered allmulticast mode [ 231.602885][T16692] bridge1: entered allmulticast mode [ 231.604835][T16692] vxlan0: entered allmulticast mode [ 231.606960][T16692] : entered allmulticast mode [ 231.608537][T16692] bond1: entered allmulticast mode [ 231.610205][T16692] veth4: entered allmulticast mode [ 231.611922][T16692] veth5: entered allmulticast mode [ 231.614110][T16692] gtp0: entered allmulticast mode [ 231.616650][T16692] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 231.619446][T16692] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 231.622676][T16692] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 231.625706][T16692] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 231.628703][T16692] geneve2: left promiscuous mode [ 231.631612][T16692] macsec1: entered allmulticast mode [ 231.634061][T16692] bond2: entered allmulticast mode [ 231.635842][T16692] veth6: entered allmulticast mode [ 231.637520][T16692] veth7: entered allmulticast mode [ 231.639786][T16692] veth8: entered allmulticast mode [ 231.641511][T16692] veth9: entered allmulticast mode [ 231.647409][T16698] dummy0: entered promiscuous mode [ 231.649690][T16698] batman_adv: batadv0: Removing interface: dummy0 [ 231.709048][T16705] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1012 sclass=netlink_route_socket pid=16705 comm=syz.1.4159 [ 231.743758][T10147] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 231.764130][T10147] usb 7-1: device descriptor read/8, error -71 [ 231.802655][T16712] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4162'. [ 231.917737][T16716] netlink: 'syz.1.4164': attribute type 29 has an invalid length. [ 231.959189][T16730] Cannot find map_set index 65533 as target [ 232.013781][T10147] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 232.047150][T10147] usb 7-1: device descriptor read/8, error -71 [ 232.154408][T10147] usb usb7-port1: unable to enumerate USB device [ 232.205261][T16752] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4179'. [ 232.243627][T16755] netlink: 'syz.4.4180': attribute type 1 has an invalid length. [ 232.246706][T16755] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4180'. [ 232.350443][T16767] Cannot find map_set index 65533 as target [ 232.465628][ T40] audit: type=1400 audit(1748547509.528:16696): avc: denied { map } for pid=16779 comm="syz.3.4190" path="socket:[71800]" dev="sockfs" ino=71800 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 232.477234][ T40] audit: type=1400 audit(1748547509.528:16697): avc: denied { accept } for pid=16779 comm="syz.3.4190" path="socket:[71800]" dev="sockfs" ino=71800 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 232.583836][T16786] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4193'. [ 232.629745][T16795] netlink: 'syz.3.4196': attribute type 1 has an invalid length. [ 232.632510][T16795] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4196'. [ 232.644857][T16797] Cannot find map_set index 65533 as target [ 232.757453][T16815] overlayfs: conflicting options: nfs_export=on,index=off [ 232.792354][ T40] audit: type=1400 audit(1748547509.848:16698): avc: denied { accept } for pid=16812 comm="syz.3.4203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 232.833989][T16823] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 232.836529][T16823] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 232.839395][T16823] vhci_hcd vhci_hcd.0: Device attached [ 232.842034][T16824] vhci_hcd: cannot find the pending unlink 1023 [ 232.849727][T16830] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4208'. [ 232.877216][T16833] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4210'. [ 232.918561][T16824] vhci_hcd: connection closed [ 232.920864][T11752] vhci_hcd: stop threads [ 232.924672][T11752] vhci_hcd: release socket [ 232.926926][T11752] vhci_hcd: disconnect device [ 232.936268][T16848] Cannot find map_set index 65533 as target [ 232.969828][T16852] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4216'. [ 233.057191][ T40] audit: type=1400 audit(1748547510.118:16699): avc: denied { mount } for pid=16864 comm="syz.1.4221" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 233.115863][T16870] Cannot find map_set index 65533 as target [ 233.143018][T16873] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4225'. [ 233.189595][T16878] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4228'. [ 233.311578][T16899] Cannot find map_set index 65533 as target [ 233.564881][T16913] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4240'. [ 233.582615][ T5934] Bluetooth: hci3: Malformed Event: 0x2f [ 233.671091][T16922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4246'. [ 233.710902][T16929] Cannot find map_set index 65533 as target [ 233.732605][T16933] xt_hashlimit: size too large, truncated to 1048576 [ 233.789358][T16940] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4254'. [ 233.809298][T10147] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 233.893582][ T5934] Bluetooth: hci4: Malformed Event: 0x2f [ 233.963670][T10147] usb 6-1: device descriptor read/64, error -71 [ 234.203671][T10147] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 234.258250][T16958] FAULT_INJECTION: forcing a failure. [ 234.258250][T16958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.262314][T16958] CPU: 3 UID: 0 PID: 16958 Comm: syz.4.4263 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 234.262330][T16958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 234.262337][T16958] Call Trace: [ 234.262341][T16958] [ 234.262346][T16958] dump_stack_lvl+0x16c/0x1f0 [ 234.262378][T16958] should_fail_ex+0x512/0x640 [ 234.262400][T16958] _copy_to_user+0x32/0xd0 [ 234.262417][T16958] simple_read_from_buffer+0xcb/0x170 [ 234.262437][T16958] proc_fail_nth_read+0x197/0x270 [ 234.262455][T16958] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 234.262474][T16958] ? rw_verify_area+0xcf/0x680 [ 234.262490][T16958] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 234.262506][T16958] vfs_readv+0x5c1/0x8b0 [ 234.262525][T16958] ? __pfx_vfs_readv+0x10/0x10 [ 234.262540][T16958] ? __mutex_lock+0x1ca/0xb90 [ 234.262556][T16958] ? __pfx___mutex_lock+0x10/0x10 [ 234.262574][T16958] ? __fget_files+0x20e/0x3c0 [ 234.262583][T16958] ? __fget_files+0x1a0/0x3c0 [ 234.262597][T16958] ? do_readv+0x132/0x340 [ 234.262610][T16958] do_readv+0x132/0x340 [ 234.262625][T16958] ? __pfx_do_readv+0x10/0x10 [ 234.262645][T16958] do_syscall_64+0xcd/0x4c0 [ 234.262659][T16958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.262672][T16958] RIP: 0033:0x7f972d18e969 [ 234.262681][T16958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.262693][T16958] RSP: 002b:00007f972dfe5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 234.262703][T16958] RAX: ffffffffffffffda RBX: 00007f972d3b5fa0 RCX: 00007f972d18e969 [ 234.262711][T16958] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 234.262718][T16958] RBP: 00007f972dfe5090 R08: 0000000000000000 R09: 0000000000000000 [ 234.262724][T16958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.262731][T16958] R13: 0000000000000000 R14: 00007f972d3b5fa0 R15: 00007ffee44fca08 [ 234.262745][T16958] [ 234.331763][ C3] vkms_vblank_simulate: vblank timer overrun [ 234.334477][T10147] usb 6-1: device descriptor read/64, error -71 [ 234.353660][ T29] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 234.444023][T10147] usb usb6-port1: attempt power cycle [ 234.503745][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 234.507248][ T29] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 234.510413][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 234.515102][ T29] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 234.519372][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 234.523365][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 234.529911][ T29] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 234.532439][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 234.536676][ T29] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 234.540950][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 234.545460][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 234.550258][ T29] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 234.552926][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 234.557055][ T29] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 234.561871][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 234.565932][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 234.572489][ T29] usb 8-1: string descriptor 0 read error: -22 [ 234.574910][ T29] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 234.578630][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.587925][ T29] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 234.786077][T16962] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 234.790198][ T5962] usb 8-1: USB disconnect, device number 32 [ 234.803612][T10147] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 234.824609][T10147] usb 6-1: device descriptor read/8, error -71 [ 234.871921][T16969] Cannot find map_set index 65533 as target [ 234.933311][ T5934] Bluetooth: hci3: Malformed Event: 0x2f [ 235.073640][T10147] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 235.104427][T10147] usb 6-1: device descriptor read/8, error -71 [ 235.214011][T10147] usb usb6-port1: unable to enumerate USB device [ 235.315892][T16992] FAULT_INJECTION: forcing a failure. [ 235.315892][T16992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.321763][T16992] CPU: 0 UID: 0 PID: 16992 Comm: syz.3.4279 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 235.321786][T16992] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 235.321798][T16992] Call Trace: [ 235.321805][T16992] [ 235.321812][T16992] dump_stack_lvl+0x16c/0x1f0 [ 235.321837][T16992] should_fail_ex+0x512/0x640 [ 235.321864][T16992] _copy_from_iter+0x29f/0x16f0 [ 235.321893][T16992] ? anon_pipe_write+0x15d/0x1a70 [ 235.321913][T16992] ? __pfx__copy_from_iter+0x10/0x10 [ 235.321936][T16992] ? __pfx___mutex_lock+0x10/0x10 [ 235.321968][T16992] copy_page_from_iter+0xde/0x180 [ 235.321995][T16992] anon_pipe_write+0xbe7/0x1a70 [ 235.322030][T16992] ? __pfx_anon_pipe_write+0x10/0x10 [ 235.322047][T16992] ? selinux_file_permission+0x126/0x660 [ 235.322073][T16992] ? bpf_lsm_file_permission+0x9/0x10 [ 235.322095][T16992] ? security_file_permission+0x71/0x210 [ 235.322120][T16992] ? rw_verify_area+0xcf/0x680 [ 235.322146][T16992] vfs_write+0x6c7/0x1150 [ 235.322173][T16992] ? __pfx_anon_pipe_write+0x10/0x10 [ 235.322194][T16992] ? __pfx_vfs_write+0x10/0x10 [ 235.322218][T16992] ? find_held_lock+0x2b/0x80 [ 235.322263][T16992] ksys_write+0x1f8/0x250 [ 235.322288][T16992] ? __pfx_ksys_write+0x10/0x10 [ 235.322322][T16992] do_syscall_64+0xcd/0x4c0 [ 235.322345][T16992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.322363][T16992] RIP: 0033:0x7f7ab4f8d41f [ 235.322379][T16992] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 235.322397][T16992] RSP: 002b:00007f7ab2df3d30 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 235.322414][T16992] RAX: ffffffffffffffda RBX: 0000000000000029 RCX: 00007f7ab4f8d41f [ 235.322426][T16992] RDX: 0000000000000029 RSI: 00007f7ab2df3f30 RDI: 0000000000000002 [ 235.322437][T16992] RBP: 00007f7ab2df3f30 R08: 0000000000000000 R09: 0000000000000000 [ 235.322449][T16992] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000029 [ 235.322460][T16992] R13: 00007f7ab5183620 R14: 0000000000000029 R15: 00007f7ab5184c80 [ 235.322486][T16992] [ 235.432413][ T5934] Bluetooth: hci3: Malformed Event: 0x2f [ 235.558689][T17011] Cannot find map_set index 65533 as target [ 235.650054][ T5934] Bluetooth: hci3: Malformed Event: 0x2f [ 235.814243][T17045] Cannot find map_set index 65533 as target [ 235.885010][ T5934] Bluetooth: hci3: Malformed Event: 0x2f [ 236.183040][T17066] binder: 17061:17066 ioctl c0306201 200000001200 returned -22 [ 236.465296][T17077] netlink: 'syz.2.4315': attribute type 5 has an invalid length. [ 236.491882][T17079] Cannot find map_set index 65533 as target [ 236.726259][T17112] Cannot find map_set index 65533 as target [ 236.793109][T17119] FAULT_INJECTION: forcing a failure. [ 236.793109][T17119] name failslab, interval 1, probability 0, space 0, times 0 [ 236.799398][T17119] CPU: 2 UID: 0 PID: 17119 Comm: syz.3.4333 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 236.799426][T17119] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 236.799438][T17119] Call Trace: [ 236.799444][T17119] [ 236.799451][T17119] dump_stack_lvl+0x16c/0x1f0 [ 236.799477][T17119] should_fail_ex+0x512/0x640 [ 236.799501][T17119] ? fs_reclaim_acquire+0xae/0x150 [ 236.799526][T17119] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 236.799552][T17119] should_failslab+0xc2/0x120 [ 236.799573][T17119] __kmalloc_noprof+0xd2/0x510 [ 236.799595][T17119] tomoyo_realpath_from_path+0xc2/0x6e0 [ 236.799623][T17119] ? tomoyo_profile+0x47/0x60 [ 236.799651][T17119] tomoyo_path_number_perm+0x245/0x580 [ 236.799670][T17119] ? tomoyo_path_number_perm+0x237/0x580 [ 236.799690][T17119] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 236.799712][T17119] ? find_held_lock+0x2b/0x80 [ 236.799759][T17119] ? find_held_lock+0x2b/0x80 [ 236.799784][T17119] ? hook_file_ioctl_common+0x145/0x410 [ 236.799815][T17119] ? __fget_files+0x20e/0x3c0 [ 236.799838][T17119] security_file_ioctl+0x9b/0x240 [ 236.799860][T17119] __x64_sys_ioctl+0xb7/0x210 [ 236.799887][T17119] do_syscall_64+0xcd/0x4c0 [ 236.799910][T17119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.799928][T17119] RIP: 0033:0x7f7ab4f8e969 [ 236.799945][T17119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.799961][T17119] RSP: 002b:00007f7ab2df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.799980][T17119] RAX: ffffffffffffffda RBX: 00007f7ab51b5fa0 RCX: 00007f7ab4f8e969 [ 236.799993][T17119] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 236.800005][T17119] RBP: 00007f7ab2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 236.800018][T17119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.800030][T17119] R13: 0000000000000000 R14: 00007f7ab51b5fa0 R15: 00007ffc0eef1758 [ 236.800061][T17119] [ 236.800069][T17119] ERROR: Out of memory at tomoyo_realpath_from_path. [ 236.917846][ T5934] Bluetooth: hci3: Malformed Event: 0x2f [ 237.024635][ T24] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 237.032016][ T40] audit: type=1400 audit(1748547514.088:16700): avc: denied { mounton } for pid=17129 comm="syz.1.4339" path="/553/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 237.155027][ T24] usb 7-1: device descriptor read/64, error -71 [ 237.403735][ T24] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 237.434812][ T5934] Bluetooth: hci4: Malformed Event: 0x2f [ 237.466725][T17154] tmpfs: Bad value for 'mpol' [ 237.473695][T13580] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 237.553889][ T24] usb 7-1: device descriptor read/64, error -71 [ 237.592048][T17164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=17164 comm=syz.4.4351 [ 237.644520][T13580] usb 8-1: Using ep0 maxpacket: 32 [ 237.651565][T13580] usb 8-1: config 1 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 56, changing to 9 [ 237.655181][T13580] usb 8-1: config 1 interface 0 altsetting 10 endpoint 0x2 has an invalid bInterval 239, changing to 11 [ 237.658668][T13580] usb 8-1: config 1 interface 0 has no altsetting 0 [ 237.660677][T17168] FAULT_INJECTION: forcing a failure. [ 237.660677][T17168] name failslab, interval 1, probability 0, space 0, times 0 [ 237.662331][T13580] usb 8-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.40 [ 237.665604][T17168] CPU: 3 UID: 0 PID: 17168 Comm: syz.4.4353 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 237.665621][T17168] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 237.665628][T17168] Call Trace: [ 237.665632][T17168] [ 237.665637][T17168] dump_stack_lvl+0x16c/0x1f0 [ 237.665654][T17168] should_fail_ex+0x512/0x640 [ 237.665669][T17168] ? fs_reclaim_acquire+0xae/0x150 [ 237.665685][T17168] ? tomoyo_encode2+0x100/0x3e0 [ 237.665698][T17168] should_failslab+0xc2/0x120 [ 237.665711][T17168] __kmalloc_noprof+0xd2/0x510 [ 237.665721][T17168] ? d_absolute_path+0x136/0x1a0 [ 237.665743][T17168] tomoyo_encode2+0x100/0x3e0 [ 237.665759][T17168] tomoyo_encode+0x29/0x50 [ 237.665772][T17168] tomoyo_realpath_from_path+0x18f/0x6e0 [ 237.665792][T17168] tomoyo_path_number_perm+0x245/0x580 [ 237.665803][T17168] ? tomoyo_path_number_perm+0x237/0x580 [ 237.665817][T17168] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 237.665830][T17168] ? find_held_lock+0x2b/0x80 [ 237.665860][T17168] ? find_held_lock+0x2b/0x80 [ 237.665876][T17168] ? hook_file_ioctl_common+0x145/0x410 [ 237.665896][T17168] ? __fget_files+0x20e/0x3c0 [ 237.665909][T17168] security_file_ioctl+0x9b/0x240 [ 237.665925][T17168] __x64_sys_ioctl+0xb7/0x210 [ 237.665941][T17168] do_syscall_64+0xcd/0x4c0 [ 237.665955][T17168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.665967][T17168] RIP: 0033:0x7f972d18e969 [ 237.665980][T17168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.665991][T17168] RSP: 002b:00007f972dfe5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 237.666002][T17168] RAX: ffffffffffffffda RBX: 00007f972d3b5fa0 RCX: 00007f972d18e969 [ 237.666010][T17168] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 237.666016][T17168] RBP: 00007f972dfe5090 R08: 0000000000000000 R09: 0000000000000000 [ 237.666023][T17168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.666030][T17168] R13: 0000000000000000 R14: 00007f972d3b5fa0 R15: 00007ffee44fca08 [ 237.666044][T17168] [ 237.666054][T17168] ERROR: Out of memory at tomoyo_realpath_from_path. [ 237.669121][T13580] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.674681][ T24] usb usb7-port1: attempt power cycle [ 237.676040][T13580] usb 8-1: Product: syz [ 237.751643][ T5934] Bluetooth: hci4: Malformed Event: 0x2f [ 237.751905][T13580] usb 8-1: Manufacturer: syz [ 237.756801][T13580] usb 8-1: SerialNumber: syz [ 237.961168][T17192] set_target_v3_checkentry: 1 callbacks suppressed [ 237.961181][T17192] Cannot find map_set index 65533 as target [ 237.970931][T13580] usbhid 8-1:1.0: can't add hid device: -71 [ 237.972860][T13580] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 237.976779][T13580] usb 8-1: USB disconnect, device number 33 [ 237.984848][T17194] __nla_validate_parse: 2 callbacks suppressed [ 237.984862][T17194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4365'. [ 237.990920][T17194] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4365'. [ 238.013886][ T24] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 238.034585][ T24] usb 7-1: device descriptor read/8, error -71 [ 238.046101][T17204] FAULT_INJECTION: forcing a failure. [ 238.046101][T17204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.050235][T17204] CPU: 3 UID: 0 PID: 17204 Comm: syz.4.4369 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 238.050251][T17204] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 238.050259][T17204] Call Trace: [ 238.050263][T17204] [ 238.050268][T17204] dump_stack_lvl+0x16c/0x1f0 [ 238.050285][T17204] should_fail_ex+0x512/0x640 [ 238.050301][T17204] _copy_to_user+0x32/0xd0 [ 238.050318][T17204] simple_read_from_buffer+0xcb/0x170 [ 238.050338][T17204] proc_fail_nth_read+0x197/0x270 [ 238.050359][T17204] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 238.050378][T17204] ? rw_verify_area+0xcf/0x680 [ 238.050393][T17204] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 238.050410][T17204] vfs_read+0x1e4/0xc60 [ 238.050428][T17204] ? __pfx___mutex_lock+0x10/0x10 [ 238.050442][T17204] ? __pfx_vfs_read+0x10/0x10 [ 238.050462][T17204] ? __fget_files+0x20e/0x3c0 [ 238.050476][T17204] ksys_read+0x12a/0x250 [ 238.050492][T17204] ? __pfx_ksys_read+0x10/0x10 [ 238.050509][T17204] ? fput+0x70/0xf0 [ 238.050523][T17204] do_syscall_64+0xcd/0x4c0 [ 238.050537][T17204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.050550][T17204] RIP: 0033:0x7f972d18d37c [ 238.050559][T17204] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 238.050570][T17204] RSP: 002b:00007f972dfe5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 238.050580][T17204] RAX: ffffffffffffffda RBX: 00007f972d3b5fa0 RCX: 00007f972d18d37c [ 238.050588][T17204] RDX: 000000000000000f RSI: 00007f972dfe50a0 RDI: 0000000000000005 [ 238.050594][T17204] RBP: 00007f972dfe5090 R08: 0000000000000000 R09: 0000000000000000 [ 238.050600][T17204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.050607][T17204] R13: 0000000000000000 R14: 00007f972d3b5fa0 R15: 00007ffee44fca08 [ 238.050621][T17204] [ 238.114639][ C3] vkms_vblank_simulate: vblank timer overrun [ 238.189705][T11752] Bluetooth: hci2: Frame reassembly failed (-84) [ 238.274051][ T24] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 238.294066][ T24] usb 7-1: device descriptor read/8, error -71 [ 238.403759][ T24] usb usb7-port1: unable to enumerate USB device [ 238.418639][T17226] mac80211_hwsim hwsim20 syzkaller0: left promiscuous mode [ 238.608922][T17240] Cannot find map_set index 65533 as target [ 238.778290][T17253] macvlan2: entered promiscuous mode [ 238.780335][T17253] macvlan2: entered allmulticast mode [ 238.782213][T17253] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 238.789398][T17253] batadv0: entered promiscuous mode [ 238.791309][T17253] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 238.793689][T13580] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 238.794913][T17253] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 238.916761][T17260] netlink: 'syz.3.4391': attribute type 5 has an invalid length. [ 238.919244][T17260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4391'. [ 238.957923][T13580] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 238.960812][T13580] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.963255][T13580] usb 9-1: Product: syz [ 238.964794][T13580] usb 9-1: Manufacturer: syz [ 238.966329][T13580] usb 9-1: SerialNumber: syz [ 238.969030][T13580] usb 9-1: config 0 descriptor?? [ 238.990283][ T40] audit: type=1400 audit(1748547516.048:16701): avc: denied { map } for pid=17254 comm="syz.1.4388" path="socket:[71651]" dev="sockfs" ino=71651 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 239.011385][ T5939] Bluetooth: hci3: Malformed Event: 0x2f [ 239.048595][T17270] Cannot find map_set index 65533 as target [ 239.182262][T17278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.187559][T17278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.256399][T13580] usb 9-1: USB disconnect, device number 22 [ 239.282279][T17284] bond1: (slave dummy0): Releasing active interface [ 239.298497][T17284] macvlan2: entered promiscuous mode [ 239.300837][T17284] macvlan2: entered allmulticast mode [ 239.304299][T17284] batadv0: entered promiscuous mode [ 239.307166][T17284] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 239.312282][T17284] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 239.492726][ T5939] Bluetooth: hci4: Malformed Event: 0x2f [ 239.549777][T17297] netlink: 'syz.4.4406': attribute type 5 has an invalid length. [ 239.552223][T17297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4406'. [ 239.606274][ T40] audit: type=1400 audit(1748547516.668:16702): avc: denied { write } for pid=17301 comm="syz.4.4408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 239.612928][ T40] audit: type=1400 audit(1748547516.668:16703): avc: denied { setattr } for pid=17301 comm="syz.4.4408" name="MCTP" dev="sockfs" ino=70479 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 239.707683][T17307] Cannot find map_set index 65533 as target [ 239.760154][T17315] batman_adv: batadv0: Adding interface: dummy0 [ 239.762496][T17315] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.770126][T17315] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 239.788716][T17309] syzkaller0: entered promiscuous mode [ 239.790483][T17309] syzkaller0: entered allmulticast mode [ 239.800031][T17315] macvlan2: entered promiscuous mode [ 239.801754][T17315] macvlan2: entered allmulticast mode [ 239.804067][T17315] batadv0: entered promiscuous mode [ 239.806304][T17315] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 239.809821][T17315] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 240.065899][T17328] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4419'. [ 240.196689][ T5934] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 240.253961][T17341] Cannot find map_set index 65533 as target [ 240.283451][ T5934] Bluetooth: hci4: Malformed Event: 0x2f [ 240.333657][ T6099] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 240.483732][ T6099] usb 8-1: device descriptor read/64, error -71 [ 240.753716][ T6099] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 240.886391][ T6099] usb 8-1: device descriptor read/64, error -71 [ 241.004626][ T6099] usb usb8-port1: attempt power cycle [ 241.254205][T17351] macvlan2: entered promiscuous mode [ 241.256348][T17351] macvlan2: entered allmulticast mode [ 241.260188][T17351] batadv0: entered promiscuous mode [ 241.265125][T17351] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 241.268752][T17351] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 241.353683][ T6099] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 241.374046][ T6099] usb 8-1: device descriptor read/8, error -71 [ 241.396258][T17357] ubi: mtd0 is already attached to ubi31 [ 241.445702][ T40] audit: type=1400 audit(1748547518.508:16704): avc: denied { getopt } for pid=17350 comm="syz.4.4434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 241.450756][ T5934] Bluetooth: hci1: Malformed Event: 0x2f [ 241.517688][T17377] Cannot find map_set index 65533 as target [ 241.581207][ T40] audit: type=1400 audit(1748547518.638:16705): avc: denied { getopt } for pid=17382 comm="syz.2.4442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 241.635516][ T6099] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 241.664018][ T6099] usb 8-1: device descriptor read/8, error -71 [ 241.712178][T17391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17391 comm=syz.2.4446 [ 241.774340][ T6099] usb usb8-port1: unable to enumerate USB device [ 241.829161][T17400] Cannot find map_set index 65533 as target [ 241.859182][ T40] audit: type=1400 audit(1748547518.918:16706): avc: denied { accept } for pid=17401 comm="syz.2.4451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 241.923700][ T29] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 241.985220][ T1112] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 241.987261][ T1112] ata1: failed to read log page 10h (errno=-5) [ 241.989167][ T1112] ata1.00: exception Emask 0x1 SAct 0x80000000 SErr 0x0 action 0x0 [ 241.991525][ T1112] ata1.00: irq_stat 0x40000000 [ 241.993069][ T1112] ata1.00: failed command: WRITE FPDMA QUEUED [ 241.996572][ T1112] ata1.00: cmd 61/18:f8:c6:0c:10/00:00:00:00:00/40 tag 31 ncq dma 12288 out [ 241.996572][ T1112] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 242.001793][ T1112] ata1.00: status: { DRDY } [ 242.003499][ T1112] ata1.00: error: { ABRT } [ 242.009208][ T1112] ata1.00: configured for UDMA/100 [ 242.011630][ T1112] ata1: EH complete [ 242.074780][ T29] usb 8-1: device descriptor read/64, error -71 [ 242.141252][T17425] Cannot find map_set index 65533 as target [ 242.180169][T17429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4463'. [ 242.184490][T17429] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4463'. [ 242.234732][T17437] xt_l2tp: invalid flags combination: c [ 242.316028][ T29] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 242.453663][ T29] usb 8-1: device descriptor read/64, error -71 [ 242.573700][ T29] usb usb8-port1: attempt power cycle [ 242.613639][T13581] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 242.765766][T13581] usb 9-1: config 0 has no interfaces? [ 242.768711][T13581] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 242.771546][T13581] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 242.773993][T13581] usb 9-1: Product: syz [ 242.775234][T13581] usb 9-1: Manufacturer: syz [ 242.777935][T13581] usb 9-1: config 0 descriptor?? [ 242.913680][ T29] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 242.937460][ T29] usb 8-1: device descriptor read/8, error -71 [ 243.022712][ T6099] usb 9-1: USB disconnect, device number 23 [ 243.114742][T17458] Cannot find map_set index 65533 as target [ 243.575795][ T40] audit: type=1400 audit(1748547520.638:16707): avc: denied { accept } for pid=17479 comm="syz.4.4479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 244.086680][T17387] IPv6: NLM_F_CREATE should be specified when creating new route [ 244.097295][ T40] audit: type=1400 audit(1748547521.158:16708): avc: denied { write } for pid=17487 comm="syz.2.4481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 244.098190][T17488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4481'. [ 244.151304][T17491] Cannot find map_set index 65533 as target [ 244.343750][ T6099] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 244.432733][T17519] Cannot find map_set index 65533 as target [ 244.525339][ T6099] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 244.528641][ T6099] usb 8-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 244.531380][ T6099] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 244.535888][ T6099] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.634305][T17534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4498'. [ 244.741742][ T6099] usb 8-1: USB disconnect, device number 42 [ 244.878732][T17542] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 244.910573][T17545] netlink: 'syz.4.4503': attribute type 4 has an invalid length. [ 244.941645][T17546] 9pnet: Could not find request transport: unixontrolC# [ 245.329083][T17556] Cannot find map_set index 65533 as target [ 245.388539][T17561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4509'. [ 245.391389][T17561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4509'. [ 245.394804][T17561] netlink: 'syz.3.4509': attribute type 1 has an invalid length. [ 245.433594][ T40] audit: type=1800 audit(1748547522.488:16709): pid=17561 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.4509" name="/" dev="9p" ino=2 res=0 errno=0 [ 245.499503][T17567] ubi: mtd0 is already attached to ubi31 [ 245.535950][ T5934] Bluetooth: hci3: Malformed Event: 0x2f [ 245.569717][T17574] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 245.622232][T17578] x_tables: duplicate underflow at hook 1 [ 245.777931][ T5934] Bluetooth: hci3: Malformed Event: 0x2f [ 245.824969][T17600] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 246.002176][T17613] "syz.3.4532" (17613) uses obsolete ecb(arc4) skcipher [ 246.046968][ T40] audit: type=1400 audit(1748547523.108:16710): avc: denied { setattr } for pid=17603 comm="syz.1.4528" name="/" dev="configfs" ino=3171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 246.252684][ T5934] Bluetooth: hci3: Malformed Event: 0x2f [ 246.346982][T17637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4540'. [ 246.349778][T17637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4540'. [ 246.352432][T17637] netlink: 'syz.4.4540': attribute type 20 has an invalid length. [ 246.502429][ T5934] Bluetooth: hci4: Malformed Event: 0x2f [ 246.640701][ C1] vcan0: j1939_tp_rxtimer: 0xffff888039daec00: rx timeout, send abort [ 246.799928][T17669] netlink: 'syz.4.4553': attribute type 30 has an invalid length. [ 246.802616][T17669] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 246.806002][T17669] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 247.140810][ C1] vcan0: j1939_tp_rxtimer: 0xffff888039dac800: rx timeout, send abort [ 247.144146][ C1] vcan0: j1939_tp_rxtimer: 0xffff888039daec00: abort rx timeout. Force session deactivation [ 247.170013][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888039dac800: connection exists (fe ff). last cmd: 20 [ 247.253183][T17681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4558'. [ 247.272512][ T40] audit: type=1400 audit(1748547524.328:16711): avc: denied { unmount } for pid=11847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 247.419691][ C1] vcan0: j1939_tp_rxtimer: 0xffff888039dac000: rx timeout, send abort [ 247.517731][T17702] Cannot find map_set index 65533 as target [ 247.598817][T17707] netlink: 'syz.1.4569': attribute type 4 has an invalid length. [ 247.606221][T17698] IPv6: NLM_F_CREATE should be specified when creating new route [ 247.923195][ C1] vcan0: j1939_tp_rxtimer: 0xffff888039dac000: abort rx timeout. Force session deactivation [ 247.939680][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888039dac800: connection exists (fe ff). last cmd: 20 [ 247.990245][T17733] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4579'. [ 248.069695][ T5939] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 248.079151][ T5939] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 248.084550][ T5939] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 248.088360][ T5939] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 248.093017][ T5939] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 248.108057][T17745] 9pnet_virtio: no channels available for device syz [ 248.189678][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031173000: rx timeout, send abort [ 248.349034][T17738] IPv6: NLM_F_CREATE should be specified when creating new route [ 248.380310][T17739] chnl_net:caif_netlink_parms(): no params data found [ 248.493109][T17739] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.496334][T17739] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.499186][T17739] bridge_slave_0: entered allmulticast mode [ 248.502035][T17739] bridge_slave_0: entered promiscuous mode [ 248.507452][T17739] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.510019][T17739] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.512759][T17739] bridge_slave_1: entered allmulticast mode [ 248.515780][T17739] bridge_slave_1: entered promiscuous mode [ 248.587756][T17739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.598649][T17739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.635792][T17777] tmpfs: Bad value for 'mpol' [ 248.671617][T17739] team0: Port device team_slave_0 added [ 248.678219][T17739] team0: Port device team_slave_1 added [ 248.693348][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031173000: abort rx timeout. Force session deactivation [ 248.714342][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888039dac800: connection exists (fe ff). last cmd: 20 [ 248.728718][T17739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.731454][T17739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.743752][T17739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.749826][T17739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.752836][T17739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.763979][T17739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.772568][T17788] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4598'. [ 248.855965][T17739] hsr_slave_0: entered promiscuous mode [ 248.859126][T17739] hsr_slave_1: entered promiscuous mode [ 248.862023][T17739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.865795][T17739] Cannot create hsr debugfs directory [ 248.871099][T17797] smc: net device bond0 erased user defined pnetid SYZ2 [ 248.946864][ T1142] bridge_slave_1: left promiscuous mode [ 248.948749][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.952221][ T1142] bridge_slave_0: left promiscuous mode [ 248.954275][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.964318][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e741c00: rx timeout, send abort [ 249.294693][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.298318][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.301952][ T1142] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 249.306337][ T1142] batadv0: left promiscuous mode [ 249.309430][ T1142] bond0 (unregistering): Released all slaves [ 249.315953][ T1142] bond1 (unregistering): Released all slaves [ 249.322829][ T1142] bond2 (unregistering): Released all slaves [ 249.455707][T17812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4607'. [ 249.469310][ T1142] : left promiscuous mode [ 249.538217][T17829] netlink: 276 bytes leftover after parsing attributes in process `syz.3.4614'. [ 249.564089][ T40] audit: type=1400 audit(1748547526.628:16712): avc: denied { listen } for pid=17824 comm="syz.2.4612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 249.786560][T17839] kvm: pic: level sensitive irq not supported [ 249.786818][T17839] kvm: pic: non byte read [ 249.818357][ T1142] hsr_slave_0: left promiscuous mode [ 249.823710][ T1142] hsr_slave_1: left promiscuous mode [ 249.826780][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.830783][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.992999][T17853] FAULT_INJECTION: forcing a failure. [ 249.992999][T17853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.001212][T17853] CPU: 2 UID: 0 PID: 17853 Comm: syz.2.4621 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 250.001240][T17853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 250.001252][T17853] Call Trace: [ 250.001258][T17853] [ 250.001265][T17853] dump_stack_lvl+0x16c/0x1f0 [ 250.001289][T17853] should_fail_ex+0x512/0x640 [ 250.001315][T17853] _copy_from_user+0x2e/0xd0 [ 250.001338][T17853] sctp_setsockopt+0x2045/0xb870 [ 250.001366][T17853] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 250.001388][T17853] ? proc_fail_nth_write+0x9f/0x250 [ 250.001418][T17853] ? __pfx_sctp_setsockopt+0x10/0x10 [ 250.001442][T17853] ? __lock_acquire+0x622/0x1c90 [ 250.001469][T17853] ? selinux_socket_setsockopt+0x6a/0x80 [ 250.001487][T17853] ? sock_common_setsockopt+0x2e/0xf0 [ 250.001511][T17853] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 250.001535][T17853] do_sock_setsockopt+0x224/0x470 [ 250.001558][T17853] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 250.001594][T17853] __sys_setsockopt+0x1a0/0x230 [ 250.001616][T17853] __x64_sys_setsockopt+0xbd/0x160 [ 250.001632][T17853] ? do_syscall_64+0x91/0x4c0 [ 250.001653][T17853] ? lockdep_hardirqs_on+0x7c/0x110 [ 250.001672][T17853] do_syscall_64+0xcd/0x4c0 [ 250.001694][T17853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.001712][T17853] RIP: 0033:0x7fbce178e969 [ 250.001727][T17853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.001744][T17853] RSP: 002b:00007fbce25cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 250.001762][T17853] RAX: ffffffffffffffda RBX: 00007fbce19b5fa0 RCX: 00007fbce178e969 [ 250.001774][T17853] RDX: 000000000000000d RSI: 0000000000000084 RDI: 0000000000000003 [ 250.001785][T17853] RBP: 00007fbce25cb090 R08: 0000000000000008 R09: 0000000000000000 [ 250.001795][T17853] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 250.001806][T17853] R13: 0000000000000000 R14: 00007fbce19b5fa0 R15: 00007ffd5e608d98 [ 250.001829][T17853] [ 250.196929][ T5934] Bluetooth: hci2: command tx timeout [ 250.732602][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 250.813317][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 251.447696][T17739] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 251.455555][T17739] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 251.463225][T17739] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 251.478883][T17739] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 251.543900][T17739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.555039][T17739] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.561460][T11760] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.563810][T11760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.571482][T11740] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.573860][T11740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.591402][T17880] FAULT_INJECTION: forcing a failure. [ 251.591402][T17880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.597533][T17880] CPU: 3 UID: 0 PID: 17880 Comm: syz.4.4631 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 251.597550][T17880] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 251.597558][T17880] Call Trace: [ 251.597562][T17880] [ 251.597567][T17880] dump_stack_lvl+0x16c/0x1f0 [ 251.597585][T17880] should_fail_ex+0x512/0x640 [ 251.597602][T17880] _copy_to_user+0x32/0xd0 [ 251.597618][T17880] simple_read_from_buffer+0xcb/0x170 [ 251.597637][T17880] proc_fail_nth_read+0x197/0x270 [ 251.597656][T17880] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 251.597687][T17880] ? rw_verify_area+0xcf/0x680 [ 251.597704][T17880] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 251.597721][T17880] vfs_read+0x1e4/0xc60 [ 251.597739][T17880] ? __pfx___mutex_lock+0x10/0x10 [ 251.597751][T17880] ? __pfx_vfs_read+0x10/0x10 [ 251.597771][T17880] ? __fget_files+0x20e/0x3c0 [ 251.597786][T17880] ksys_read+0x12a/0x250 [ 251.597801][T17880] ? __pfx_ksys_read+0x10/0x10 [ 251.597822][T17880] do_syscall_64+0xcd/0x4c0 [ 251.597835][T17880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.597848][T17880] RIP: 0033:0x7f972d18d37c [ 251.597863][T17880] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 251.597873][T17880] RSP: 002b:00007f972dfe5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 251.597884][T17880] RAX: ffffffffffffffda RBX: 00007f972d3b5fa0 RCX: 00007f972d18d37c [ 251.597891][T17880] RDX: 000000000000000f RSI: 00007f972dfe50a0 RDI: 0000000000000004 [ 251.597898][T17880] RBP: 00007f972dfe5090 R08: 0000000000000000 R09: 0000000000000000 [ 251.597904][T17880] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 251.597911][T17880] R13: 0000000000000000 R14: 00007f972d3b5fa0 R15: 00007ffee44fca08 [ 251.597925][T17880] [ 251.633444][T17882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.663929][T17882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.666517][T17882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.671638][T17882] ================================================================== [ 251.674229][T17882] BUG: KASAN: global-out-of-bounds in fib6_clean_node+0x51c/0x5b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 251.676626][T17882] Read of size 8 at addr ffffffff9b00c7c8 by task syz.4.4632/17882 [ 251.680647][T17882] [ 251.681814][T17882] CPU: 2 UID: 0 PID: 17882 Comm: syz.4.4632 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 251.681829][T17882] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 251.681836][T17882] Call Trace: [ 251.681841][T17882] [ 251.681846][T17882] dump_stack_lvl+0x116/0x1f0 [ 251.681861][T17882] print_report+0xcd/0x680 [ 251.681874][T17882] ? __virt_addr_valid+0x81/0x610 [ 251.681891][T17882] ? __phys_addr+0xe8/0x180 [ 251.681912][T17882] ? fib6_clean_node+0x51c/0x5b0 [ 251.681927][T17882] kasan_report+0xe0/0x110 [ 251.681937][T17882] ? fib6_clean_node+0x51c/0x5b0 [ 251.681953][T17882] fib6_clean_node+0x51c/0x5b0 [ 251.681967][T17882] ? __pfx_fib6_clean_node+0x10/0x10 [ 251.681981][T17882] ? __lock_acquire+0xb8a/0x1c90 [ 251.681996][T17882] fib6_walk_continue+0x44f/0x8d0 [ 251.682010][T17882] fib6_walk+0x182/0x370 [ 251.682022][T17882] ? __pfx_fib6_ifdown+0x10/0x10 [ 251.682036][T17882] fib6_clean_tree+0xd4/0x110 [ 251.682047][T17882] ? __pfx_fib6_clean_tree+0x10/0x10 [ 251.682061][T17882] ? __pfx_fib6_clean_node+0x10/0x10 [ 251.682075][T17882] ? __pfx_fib6_ifdown+0x10/0x10 [ 251.682090][T17882] ? __pfx_fib6_ifdown+0x10/0x10 [ 251.682103][T17882] __fib6_clean_all+0x107/0x2d0 [ 251.682117][T17882] rt6_disable_ip+0x2ec/0x990 [ 251.682127][T17882] ? __mutex_trylock_common+0xe9/0x250 [ 251.682141][T17882] ? __pfx___mutex_trylock_common+0x10/0x10 [ 251.682155][T17882] ? __pfx_rt6_disable_ip+0x10/0x10 [ 251.682170][T17882] ? rcu_is_watching+0x12/0xc0 [ 251.682185][T17882] addrconf_ifdown.isra.0+0x11d/0x1a90 [ 251.682206][T17882] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 251.682226][T17882] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 251.682245][T17882] addrconf_notify+0x220/0x19e0 [ 251.682262][T17882] ? ip6mr_device_event+0x1bc/0x230 [ 251.682280][T17882] notifier_call_chain+0xb9/0x410 [ 251.682292][T17882] ? __pfx_addrconf_notify+0x10/0x10 [ 251.682309][T17882] call_netdevice_notifiers_info+0xbe/0x140 [ 251.682326][T17882] dev_close_many+0x319/0x630 [ 251.682342][T17882] ? __pfx_dev_close_many+0x10/0x10 [ 251.682359][T17882] unregister_netdevice_many_notify+0x578/0x26f0 [ 251.682374][T17882] ? lockdep_hardirqs_on+0x7c/0x110 [ 251.682386][T17882] ? batadv_tt_local_event+0x455/0x7f0 [ 251.682403][T17882] ? __local_bh_enable_ip+0xa4/0x120 [ 251.682414][T17882] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 251.682430][T17882] ? unregister_netdevice_queue+0x22e/0x3f0 [ 251.682444][T17882] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 251.682458][T17882] ? batadv_meshif_destroy_vlan+0xdf/0x160 [ 251.682474][T17882] rtnl_dellink+0x3cb/0xa80 [ 251.682485][T17882] ? __pfx_batadv_meshif_destroy_netlink+0x10/0x10 [ 251.682500][T17882] ? dev_hard_start_xmit+0x97/0x740 [ 251.682516][T17882] ? __dev_queue_xmit+0x7eb/0x43e0 [ 251.682532][T17882] ? netlink_deliver_tap+0xa87/0xd30 [ 251.682545][T17882] ? netlink_unicast+0x5df/0x7f0 [ 251.682559][T17882] ? __pfx_rtnl_dellink+0x10/0x10 [ 251.682571][T17882] ? __sys_sendmsg+0x16d/0x220 [ 251.682593][T17882] ? __lock_acquire+0x622/0x1c90 [ 251.682608][T17882] ? find_held_lock+0x2b/0x80 [ 251.682624][T17882] ? __pfx_rtnl_dellink+0x10/0x10 [ 251.682635][T17882] ? __pfx_rtnl_dellink+0x10/0x10 [ 251.682646][T17882] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 251.682659][T17882] ? __pfx_rtnl_dellink+0x10/0x10 [ 251.682672][T17882] rtnetlink_rcv_msg+0x95b/0xe90 [ 251.682689][T17882] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 251.682710][T17882] ? ref_tracker_free+0x37c/0x830 [ 251.682728][T17882] netlink_rcv_skb+0x155/0x420 [ 251.682743][T17882] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 251.682756][T17882] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 251.682772][T17882] ? netlink_deliver_tap+0x1ae/0xd30 [ 251.682787][T17882] netlink_unicast+0x53d/0x7f0 [ 251.682802][T17882] ? __pfx_netlink_unicast+0x10/0x10 [ 251.682818][T17882] netlink_sendmsg+0x8d1/0xdd0 [ 251.682833][T17882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.682850][T17882] ____sys_sendmsg+0xa98/0xc70 [ 251.682865][T17882] ? copy_msghdr_from_user+0x10a/0x160 [ 251.682877][T17882] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.682893][T17882] ? __pfx_futex_wake_mark+0x10/0x10 [ 251.682913][T17882] ___sys_sendmsg+0x134/0x1d0 [ 251.682925][T17882] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.682936][T17882] ? __lock_acquire+0x622/0x1c90 [ 251.682955][T17882] __sys_sendmsg+0x16d/0x220 [ 251.682966][T17882] ? __pfx___sys_sendmsg+0x10/0x10 [ 251.682978][T17882] ? __x64_sys_futex+0x1e0/0x4c0 [ 251.682994][T17882] do_syscall_64+0xcd/0x4c0 [ 251.683007][T17882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.683019][T17882] RIP: 0033:0x7f972d18e969 [ 251.683028][T17882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.683040][T17882] RSP: 002b:00007f972dfe5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.683050][T17882] RAX: ffffffffffffffda RBX: 00007f972d3b5fa0 RCX: 00007f972d18e969 [ 251.683057][T17882] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000003 [ 251.683064][T17882] RBP: 00007f972d210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 251.683071][T17882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.683078][T17882] R13: 0000000000000000 R14: 00007f972d3b5fa0 R15: 00007ffee44fca08 [ 251.683087][T17882] [ 251.683091][T17882] [ 251.871908][T17882] The buggy address belongs to the variable: [ 251.873925][T17882] binder_devices+0x8/0x40 [ 251.875391][T17882] [ 251.876275][T17882] The buggy address belongs to the physical page: [ 251.878358][T17882] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1b00c [ 251.881149][T17882] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 251.883657][T17882] raw: 00fff00000002000 ffffea00006c0308 ffffea00006c0308 0000000000000000 [ 251.886447][T17882] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 251.889172][T17882] page dumped because: kasan: bad access detected [ 251.891317][T17882] page_owner info is not present (never set?) [ 251.893364][T17882] [ 251.894190][T17882] Memory state around the buggy address: [ 251.895968][T17882] ffffffff9b00c680: 04 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 251.898795][T17882] ffffffff9b00c700: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 251.901471][T17882] >ffffffff9b00c780: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 251.904057][T17882] ^ [ 251.906201][T17882] ffffffff9b00c800: 00 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 [ 251.908802][T17882] ffffffff9b00c880: 00 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 00 00 00 00 [ 251.911476][T17882] ================================================================== [ 251.914925][T17882] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 251.917874][T17882] CPU: 2 UID: 0 PID: 17882 Comm: syz.4.4632 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 251.922742][T17882] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 251.927207][T17882] Call Trace: [ 251.928640][T17882] [ 251.929901][T17882] dump_stack_lvl+0x3d/0x1f0 [ 251.931860][T17882] panic+0x71c/0x800 [ 251.933541][T17882] ? __pfx_panic+0x10/0x10 [ 251.935462][T17882] ? mark_held_locks+0x49/0x80 [ 251.937499][T17882] ? fib6_clean_node+0x51c/0x5b0 [ 251.939589][T17882] ? check_panic_on_warn+0x1f/0xb0 [ 251.941775][T17882] ? fib6_clean_node+0x51c/0x5b0 [ 251.944041][T17882] check_panic_on_warn+0xab/0xb0 [ 251.946147][T17882] end_report+0x107/0x170 [ 251.947973][T17882] kasan_report+0xee/0x110 [ 251.949869][T17882] ? fib6_clean_node+0x51c/0x5b0 [ 251.951987][T17882] fib6_clean_node+0x51c/0x5b0 [ 251.954050][T17882] ? __pfx_fib6_clean_node+0x10/0x10 [ 251.956284][T17882] ? __lock_acquire+0xb8a/0x1c90 [ 251.958391][T17882] fib6_walk_continue+0x44f/0x8d0 [ 251.960544][T17882] fib6_walk+0x182/0x370 [ 251.962366][T17882] ? __pfx_fib6_ifdown+0x10/0x10 [ 251.964461][T17882] fib6_clean_tree+0xd4/0x110 [ 251.966542][T17882] ? __pfx_fib6_clean_tree+0x10/0x10 [ 251.968791][T17882] ? __pfx_fib6_clean_node+0x10/0x10 [ 251.971022][T17882] ? __pfx_fib6_ifdown+0x10/0x10 [ 251.973129][T17882] ? __pfx_fib6_ifdown+0x10/0x10 [ 251.975218][T17882] __fib6_clean_all+0x107/0x2d0 [ 251.977288][T17882] rt6_disable_ip+0x2ec/0x990 [ 251.979278][T17882] ? __mutex_trylock_common+0xe9/0x250 [ 251.981599][T17882] ? __pfx___mutex_trylock_common+0x10/0x10 [ 251.984082][T17882] ? __pfx_rt6_disable_ip+0x10/0x10 [ 251.986291][T17882] ? rcu_is_watching+0x12/0xc0 [ 251.988311][T17882] addrconf_ifdown.isra.0+0x11d/0x1a90 [ 251.990614][T17882] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 251.992990][T17882] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 251.995476][T17882] addrconf_notify+0x220/0x19e0 [ 251.997608][T17882] ? ip6mr_device_event+0x1bc/0x230 [ 251.999807][T17882] notifier_call_chain+0xb9/0x410 [ 252.001949][T17882] ? __pfx_addrconf_notify+0x10/0x10 [ 252.004174][T17882] call_netdevice_notifiers_info+0xbe/0x140 [ 252.006685][T17882] dev_close_many+0x319/0x630 [ 252.008701][T17882] ? __pfx_dev_close_many+0x10/0x10 [ 252.010851][T17882] unregister_netdevice_many_notify+0x578/0x26f0 [ 252.013532][T17882] ? lockdep_hardirqs_on+0x7c/0x110 [ 252.015721][T17882] ? batadv_tt_local_event+0x455/0x7f0 [ 252.018025][T17882] ? __local_bh_enable_ip+0xa4/0x120 [ 252.020234][T17882] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 252.023052][T17882] ? unregister_netdevice_queue+0x22e/0x3f0 [ 252.025541][T17882] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 252.028141][T17882] ? batadv_meshif_destroy_vlan+0xdf/0x160 [ 252.030681][T17882] rtnl_dellink+0x3cb/0xa80 [ 252.032623][T17882] ? __pfx_batadv_meshif_destroy_netlink+0x10/0x10 [ 252.035310][T17882] ? dev_hard_start_xmit+0x97/0x740 [ 252.037504][T17882] ? __dev_queue_xmit+0x7eb/0x43e0 [ 252.039666][T17882] ? netlink_deliver_tap+0xa87/0xd30 [ 252.041892][T17882] ? netlink_unicast+0x5df/0x7f0 [ 252.043984][T17882] ? __pfx_rtnl_dellink+0x10/0x10 [ 252.046118][T17882] ? __sys_sendmsg+0x16d/0x220 [ 252.048151][T17882] ? __lock_acquire+0x622/0x1c90 [ 252.050253][T17882] ? find_held_lock+0x2b/0x80 [ 252.052111][T17882] ? __pfx_rtnl_dellink+0x10/0x10 [ 252.053748][T17882] ? __pfx_rtnl_dellink+0x10/0x10 [ 252.055340][T17882] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 252.056947][T17882] ? __pfx_rtnl_dellink+0x10/0x10 [ 252.058506][T17882] rtnetlink_rcv_msg+0x95b/0xe90 [ 252.060086][T17882] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 252.061795][T17882] ? ref_tracker_free+0x37c/0x830 [ 252.063358][T17882] netlink_rcv_skb+0x155/0x420 [ 252.064860][T17882] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 252.066558][T17882] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 252.068189][T17882] ? netlink_deliver_tap+0x1ae/0xd30 [ 252.069832][T17882] netlink_unicast+0x53d/0x7f0 [ 252.071321][T17882] ? __pfx_netlink_unicast+0x10/0x10 [ 252.072975][T17882] netlink_sendmsg+0x8d1/0xdd0 [ 252.074471][T17882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.076147][T17882] ____sys_sendmsg+0xa98/0xc70 [ 252.077657][T17882] ? copy_msghdr_from_user+0x10a/0x160 [ 252.079339][T17882] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.081071][T17882] ? __pfx_futex_wake_mark+0x10/0x10 [ 252.082710][T17882] ___sys_sendmsg+0x134/0x1d0 [ 252.084178][T17882] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.085823][T17882] ? __lock_acquire+0x622/0x1c90 [ 252.087355][T17882] __sys_sendmsg+0x16d/0x220 [ 252.088772][T17882] ? __pfx___sys_sendmsg+0x10/0x10 [ 252.090391][T17882] ? __x64_sys_futex+0x1e0/0x4c0 [ 252.091971][T17882] do_syscall_64+0xcd/0x4c0 [ 252.093410][T17882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.095251][T17882] RIP: 0033:0x7f972d18e969 [ 252.096664][T17882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.102630][T17882] RSP: 002b:00007f972dfe5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.105204][T17882] RAX: ffffffffffffffda RBX: 00007f972d3b5fa0 RCX: 00007f972d18e969 [ 252.107691][T17882] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000003 [ 252.110112][T17882] RBP: 00007f972d210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 252.112677][T17882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.115938][T17882] R13: 0000000000000000 R14: 00007f972d3b5fa0 R15: 00007ffee44fca08 [ 252.119241][T17882] [ 252.121325][T17882] Kernel Offset: disabled [ 252.123186][T17882] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:38:48 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffffffff8e3c47c0 RCX=0000000095faef70 RDX=0000000000000000 RSI=ffffffff8dbe03a0 RDI=ffffffff8bf52e80 RBP=0000000000000002 RSP=ffffc9000400f000 R8 =ab00ce17f7cecb7f R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81983796 RFL=00000057 [---ZAPC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6970000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbe6b0e7d60 CR3=0000000029092000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbe6a5836a3 00007fbe6a5836a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd6eaf78b0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555bb26255 000055555bb26160 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555bb1e2a4 000055555bb1e2a0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555bb1a263 000055555bb1a1b0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100001800401 0000000806060159 fa00080001e00300 100001d003001000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01c00302100001b0 0301a01000029390 0370693a68736168 0003000c00000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 317a797300020009 0000000600040005 0000000200050005 0000000600010005 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000100040060008 8007000c00000000 0000000000000000 0005060200000050 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0404a8030fffffff ffffff0404980317 062006080a80030a 8004048803580800 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff88802d452440 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8dbe03a0 RDI=ffff88802d4524a8 RBP=ffff88806a53bd00 RSP=ffffc90003edf550 R8 =0000000000000031 R9 =0000000000200b20 R10=1ffff11005299927 R11=0000000000000000 R12=ffff8880294cc900 R13=ffff8880512eec00 R14=dffffc0000000000 R15=ffff88806a53bdc0 RIP=ffffffff818fc980 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb32ad71300 ffffffff 00c00000 GS =0000 ffff8880d6a70000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055556b165808 CR3=000000002b318000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=aee18f56edcbd1a3 47fcb6d9bfcc6e82 aee18f56edcbd1a3 47fcb6d9bfcc6e82 aee18f56edcbd1a3 47fcb6d9bfcc6e82 aee18f56edcbd1a3 47fcb6d9bfcc6e82 ZMM18=da5b66bf720ac903 ad98ba54b88e0a70 da5b66bf720ac903 ad98ba54b88e0a70 da5b66bf720ac903 ad98ba54b88e0a70 da5b66bf720ac903 ad98ba54b88e0a70 ZMM19=6415000000000000 0000000000000004 6415000000000000 0000000000000003 6415000000000000 0000000000000002 6415000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00317a7973000200 090000001f000400 0500000002000500 0500000006000100 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0500001000400600 088007000c000000 0000000000000000 0000050602000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50019e0813800313 8004029380030293 800401a003000800 0190030fffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0500001000400600 088007000c000000 0000000000000000 0000050602000000 ZMM25=52d2a80152d2a801 52d2a80152d2a801 52d2a80152d2a801 52d2a80152d2a801 52d2a80152d2a801 52d2a80152d2a801 52d2a80152d2a801 52d2a80152d2a801 ZMM26=142c6709142c6709 142c6709142c6709 142c6709142c6709 142c6709142c6709 142c6709142c6709 142c6709142c6709 142c6709142c6709 142c6709142c6709 ZMM27=9db7f8389db7f838 9db7f8389db7f838 9db7f8389db7f838 9db7f8389db7f838 9db7f8389db7f838 9db7f8389db7f838 9db7f8389db7f838 9db7f8389db7f838 ZMM28=000000500000004f 0000004e0000004d 0000004c0000004b 0000004a00000049 0000004800000047 0000004600000045 0000004400000043 0000004200000041 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=5f1400005f140000 5f1400005f140000 5f1400005f140000 5f1400005f140000 5f1400005f140000 5f1400005f140000 5f1400005f140000 5f1400005f140000 info registers vcpu 2 CPU#2 RAX=0000000000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff85582e05 RDI=ffffffff9ae6b6a0 RBP=ffffffff9ae6b660 RSP=ffffc90006516510 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3966666666666666 R12=0000000000000000 R13=0000000000000005 R14=ffffffff9ae6b660 R15=ffffffff85582da0 RIP=ffffffff85582e2f RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f972dfe56c0 ffffffff 00c00000 GS =0000 ffff8880d6b70000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000700 CR3=0000000039d2e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f972d211a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f972d211a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f972d211a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f972d211aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f972d211b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f972d211c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f972d383488 00007f972d383480 00007f972d383478 00007f972d383450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f972deed100 00007f972d383440 00007f972d383458 00007f972d3834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f972d383498 00007f972d383490 00007f972d383488 00007f972d383480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000199ec9 RBX=0000000000000003 RCX=ffffffff8b7bb449 RDX=0000000000000000 RSI=ffffffff8dc0590b RDI=ffffffff8bf52e80 RBP=ffffed1003bdb000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e663d R10=ffff88806a7331eb R11=0000000000000001 R12=0000000000000003 R13=ffff88801ded8000 R14=ffffffff90878750 R15=0000000000000000 RIP=ffffffff8b7b9faf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c70000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f972d1edbf8 CR3=0000000030221000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000041 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec65b1ebb 00007ffec65b1ebb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec65b23c0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec65b23c0 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5d3038383731545b 5d3430393739352e 31353220205b3e34 3c00303030303000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5730323237315451 5734303337333524 3135322020513434 3600303030303000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265746e49203a30 766461746162203a 7664615f6e616d74 6162205d32383837 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3834203030203230 2033392066652038 6520383020343220 3434203938203834 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2037632039382034 3420343320373720 6666206666203066 203030206433203e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38343c2035302066 3020306320313320 3830203432206337 2062382030632039 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3820313420303120 3432203437206238 2038342038312034 3220343520623820 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e656d676172 66206562206c6c69 7720656361667265 746e692073696874 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000