last executing test programs: 12.899709488s ago: executing program 2 (id=2468): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x19, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) close(0x3) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000000180)={@local, @empty, @local}, 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000019180)={&(0x7f0000019080)=""/227, 0x221000, 0x800, 0x80000000}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000019380)={@cgroup, 0xffffffffffffffff, 0x21, 0x10}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4c, 0x1, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0xfffffffc, 0x2}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000019200)='net/netstat\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) syz_open_procfs(r2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r6, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f00000001c0)={0x0, 'vlan1\x00', {0x1}, 0x7f}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f00000191c0)=""/9, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 12.340324339s ago: executing program 4 (id=2471): r0 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req={0x3, 0x10004, 0x800, 0x7}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000810001000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b74000c00e63b9ba2ea4f115a67245b00000000000000000000000000584cbf2649a50f2dbc0000a8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d9cfd56d3c86e55010000000000000000000000004137dfff2f8f00009a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x10080) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="89000000000100000000008221009e815930404fe3e2353c3ebf00"], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000000014000500ff02000000000000000000000000000114000400fe8000"/207, @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r8, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0xfffffffd}) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) 11.032019306s ago: executing program 2 (id=2475): mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) ftruncate(r2, 0xffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0xc0384707, &(0x7f0000000040)={0x1, 0x2, 0x4, 0x800000, 0x4, "3eccd8f9d20000000000001000000200000500"}) close_range(r1, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vim2m(0x0, 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x54280) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500003000000000000190780a010102587114aa040290780100000045100000585a36f404110000e0000002ac141415"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x50, 0x1}}) r5 = socket(0x18, 0x3, 0x0) connect$unix(r5, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r5, &(0x7f0000000080), &(0x7f00000001c0)=0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket(0x26, 0x1, 0x0) connect$unix(r6, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 10.334685025s ago: executing program 2 (id=2477): openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000005e43bb387ffa6532000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000080000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='xen_mmu_alloc_ptpage\x00', r4}, 0x18) io_setup(0x23, &(0x7f0000000280)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x437, 0x1, 0x25dfdbf4, {0x0, 0x0, 0x0, r6, 0x40c89}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44801}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x4040880) socket$nl_route(0x10, 0x3, 0x0) 9.277525426s ago: executing program 4 (id=2482): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x590, 0x4) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000180)={0x4, 0x92, 0x7f}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x140000, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000300000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) 8.23219339s ago: executing program 4 (id=2483): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') fchdir(r0) creat(&(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1ab) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) times(0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x48000009, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000200)) 7.160267853s ago: executing program 2 (id=2487): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getgroups(0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000440)=@pppol2tp, 0x80, &(0x7f00000001c0), 0x0, &(0x7f00000005c0)=""/136, 0x88}, 0x6}, {{&(0x7f0000000680)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000700)=""/144, 0x90}, {&(0x7f0000000e80)=""/231, 0xe7}, {&(0x7f0000000e40)=""/18, 0x12}, {&(0x7f00000008c0)=""/221, 0xdd}, {&(0x7f00000003c0)=""/60, 0x3c}, {&(0x7f00000009c0)=""/59, 0x3b}, {&(0x7f0000000a00)=""/44, 0x2c}], 0x7, &(0x7f0000000ac0)=""/74, 0x4a}, 0x80010000}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000b40)=""/96, 0x60}, {&(0x7f0000000bc0)=""/125, 0x7d}], 0x2, &(0x7f0000000c80)=""/4, 0xfffffffffffffe15}, 0x9}], 0x3, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_tables_matches\x00') r6 = memfd_create(&(0x7f00000002c0)='D\xa3\xd5Wj\x00\x00\x8b\x14\xc2\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x81.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00'/244, 0x0) write(r6, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x80010, r6, 0xcb83d000) r7 = dup3(r5, r6, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='timerslack_ns\x00') writev(r8, &(0x7f0000000240)=[{&(0x7f0000000140)="fe", 0x1}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000040), &(0x7f00000000c0)=r8}, 0x1c) r9 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x6, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0x2, 0x2, 0x8, 0x2, 0x4, '\x00', 0x3, 0x3fb}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x4000000000400004) syz_usb_connect(0x4, 0x80b, &(0x7f0000000f40)=ANY=[], &(0x7f0000000e00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x251, 0x0, 0x15, 0x66, 0x40, 0x8b}, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x27, 0x0}, {0x78, &(0x7f0000000d80)=ANY=[@ANYBLOB="78039811916e11b45c33212fbd5e5df6395154736cb0a1dd20331bf488eec9cdbbb55ffd429bd18a295b26cfcfa1293f806071e4374d032c4ff2ed22d8f19e670574eb03006e390dd57c654bbf57fd2b040caddfe0cc4e02461bd44b72fb0ddf48d83daa2299ecfe21af62ffe1f500"/120]}]}) 6.961957378s ago: executing program 0 (id=2490): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000000)={0x5e}, 0x8) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000240)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) fcntl$setlease(r3, 0x400, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet6(0x10, 0x80000, 0x3) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x22, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000280)={0x0, 'ipvlan0\x00', {0x4}, 0x4d22}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000007453a921a98a62a98a5a1489354033b4f6ecbc57832013f01ad8bcb3e655d325029500b111f6b00f6d3ec164927c975f2a4e8364cbea5f1f580c5347709c7474fd9e66fff39f91e8059c13901560128de236aa292d737cb03bb540ae42e29e673a729239bc1466b1fc", @ANYRES16=r8, @ANYBLOB="040027bd7000ffdbdf2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f00000002c0)={0x48}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000100)=0x1) 6.870109217s ago: executing program 1 (id=2491): mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = socket(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000a80)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)=[@assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x48, 0x20000881}, 0x8080) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004340)=""/102376, 0x18fe8) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [{0xb6c, 0x0, 0x8000000000000000}, {0x217, 0x0, 0x8000}]}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) r5 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x2) preadv(r5, &(0x7f0000000740)=[{&(0x7f0000000340)=""/162, 0xca80}], 0x1, 0x80000001, 0x3f7a) timer_delete(r4) 5.903422973s ago: executing program 4 (id=2492): r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x41, 0x26}, 0x18) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x1c, 0x18, {0xfffffff9, @bearer=@l2={'eth', 0x3a, 'veth0_to_batadv\x00'}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) (async) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, r2, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x4, 0x7f, 0x0, 0x36f, 0x4, @loopback, @private1, 0x8, 0x1, 0x8, 0xe}}) bind$xdp(r0, &(0x7f0000000480)={0x2c, 0x0, r3, 0x10}, 0x10) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='-(\x00', &(0x7f0000000500)='ip6gre0\x00', 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x7c, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x4}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) (async) sendmmsg$inet6(r0, &(0x7f0000003580)=[{{&(0x7f00000006c0)={0xa, 0x4e21, 0x7, @private2, 0x6b7e}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000700)="114ab2444920300257f8b1327d17129ca5376884de00d576a49e04f0953be065d1d9766fccc26ca7b26849f18bf2d74fd815062a25d74f91002d008f541dc4357f4ecd73d30ddcb6ff752e85cca0b14ce8c7f20d8ee8fb51c378ad2956e10e5342025e9b8f89be450c8f9cbbf57b870a90a481dd431b01bb9a3efe87ef81cf645c89cd8d6d7e6892b5a46cfeb2338b4a0c5d7f8f480ca9158da16a5e", 0x9c}], 0x1, &(0x7f0000000800)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r3}}}, @rthdr={{0x48, 0x29, 0x39, {0x73, 0x6, 0x1, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x10}, @local, @ipv4={'\x00', '\xff\xff', @local}]}}}, @rthdrdstopts={{0x80, 0x29, 0x37, {0x33, 0xc, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x4}, @jumbo={0xc2, 0x4, 0x8}, @calipso={0x7, 0x50, {0x0, 0x12, 0x4, 0xb, [0x3, 0xa, 0x1, 0x4, 0x7, 0x753, 0xffc0000000000, 0xfffffffffffffff7, 0x3ff]}}, @pad1]}}}, @dstopts_2292={{0x130, 0x29, 0x4, {0x2, 0x22, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic={0x10, 0xe1, "a2c3a3f30d66ce5e35ad47f0f3c4594470ac3ee8f5fbf19715437ceecc902fa4e0f5a58f9871662245f5d1832c772cb456c3df5a3f7e1a3f59b2f0415ad1f175666d1e8b71731f10065bbac43254832ec53511024d446144a746dbd3e542e0e600cb5a1c809ec486888500e024f5705507ee37d50c5cbf40b408fc05d69bc8bda9c559fd4bfbb60f2b9f0fe274fa0d142c3fe7c7387f0c09d1a39d0b25184b240f6689df941c5743612ac0bd31d4cf2ef26e620ebc58821767baa5ed109af4a96101139591855b6ae48596c55472d94fc07bd458d684adb7b754f66d433aef041f"}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x2d, 0x12, 0x0, 0x6, 0x0, [@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', @empty, @local, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x310}}, {{&(0x7f0000000b40)={0xa, 0x4e23, 0x80, @remote, 0x4}, 0x1c, &(0x7f0000001ec0)=[{&(0x7f0000000b80)="c5f86e4c8b00c73cd43cdb0891a628910b7b358630d31002f6f42fa3c5f2d1c9e2528ed2caa9f4a594dcc7023ebf84fa134dfac772c8513ac7bf98a187b4dfe3be655f97fcd2eb37de8ffb98b001678b7dbef48b3436313f951caffa8bb56058cd25f32b4af31bf8090bc0bdb2d7943a54b7133db00e14f9ec74ab611e7ac53009208598e670feca9fe2753ace28f38a5288a7a96fdc6c1d8a1f4cd49da9413e09fbed04fd05283e104306e539312df986670ab4324216802aa91fc14c198386c4f84981f0baeab950", 0xc9}, {&(0x7f0000000c80)="c7915c09f4d555c688664df8cb8ee895", 0x10}, {&(0x7f0000000cc0)="9d511d9d0c6e6b12b4714bf5bb30a577f0536de881f4b843cf08a246620aa323df34767a4423bba20db40c701c011f65998d68eb7bb25a5ffce91b2ccfccebeb993e4a642b82226b264672e3fb33f597b1be87e1274331cb399b6560f47a6b74dbbdf3a73a458d07abecb800f27379294551ddf1d00a1be2f19399532eed34302cc18ec142d0957bd98670ef943c6b9b6123284273ca0e79a47e0aece4b3232c9c288c8d1f99704fc801e97a82", 0xad}, {&(0x7f0000000d80)="6ff6621ed1949d80296aaec5e934db3d1fc9394fdf297be53ec1272b71ece8cd51a593db822154488a68d10037b909602067e875c70db45a", 0x38}, {&(0x7f0000000dc0)="97305c41c3e588d88eda064c24ce3ee6b96d82a0e11c84c92e2b4a361e054dc2fb2ccfe992cda3e7ac5587789782c260e8aaacaab66e017bfa5425d768d78f6677b72be48b33dbb78cca33f61be84f622356e9dfa0817aa6a7f1ff22d410cda8adcf08da65600b4281fe53fb2b15d82f26394ca226110858cb75b14bd3cee462105a90be5994d9323c4b6b4f9a1f5377be48766b42ee3dc02a7cd0d158b72d6fa1e5d416c53ca8f615f215e19872cdb513b5870e357db3b2fa0c1dbeb40e80450d2aa4381d40e9235300e8ebaa17879a8b0136dccaf6d455fa1aa37fd45eb8664775eb9c67badebec583165abb7a5a7022b6274d419a7699bf25753d4d5295298fb30f4d43b5d87b2626d621ad46f2e631b5aa2272cc060d71744a0417c4b0b3218796762b34a42b739d07b754a825999699d611289bc991eca95bb0b6a8c5c94522dbdaa43dd60b302c963c579380af28c3d0ae6b502b25387c851eb06cdc6872eae745e89557cf6c2f584c1aa09eb63da75cb678b77da94ff06966af9d61cdeb57dfc492797ef0d9bf2ef41bdb712bc41bfdb39d8e0b54765f070e5c4f2bc493bf68dc05d056293bddd730ce42d2593e6ed0bfaf04860c2197148108dee5b0b146aa1ebff30494d93e3ee9f84f74e03a87961813da34915d998def9697d0888dff7b5f221bd4c5250536857068f80c9435a91bc928499f009619923441eb4a055f22c2ae64c3b80c8934efe1cb5c820e43d63cea6c41669ac09625eaaf2f6d682f9ce291682f24de0512ca2e8173769d5662d395f56ef30a9c19edf515cf500b8382a362cd2fa5140dfea33a1f7ac501ff2b3cfa0c264cd23ee1f0b9926318e085059394f328b9ff3fc9aaedee5395d5f58bc8616d5f85fab765765268629ae30c91ee831c9e2affd76800e872fd49789801963294f57944ff9696ccaa41e8e2ef0089e77946971faa5623f6abb14f1a7d9f095d7f76fe1b3bffab409ceb802846493620bb47080a75924096e00e0ceafde9d130c74ccf0a8b8911b8dcb1843aca45f0aced0d70ddc8e8280fea0e8ed1036abd4e60dcfe42f6d68f3c9ed799f2694b6f57711f5e911677b10402f7feff8c6d57406116bdc52a48e8fd611169acb27bf47dd48f956683ab413d714abb6e9e0b66d966bd293f8285e629e7e7bbeb88f2c98e74b4337721f7d4675085f20732d0c33ed966efcb8a4a4bf5d0480a79104c6ff1d3874c72a85f8e37ac7995ce8aa777609a01992e4a43e06f9ea2741c6c6bb7fc0698d223026eb91e7702f933b91db98a4dae8bd35a871fa9ad3b436b5472a5d309a025a6db3bee294d5a69acb39e6bd9139e7e14a4c80790d214243a02c2889eb44ee32d7388194bdf52282785fcc2ee9e6496f974db42def8aefa63cac17c4aaeb8258f397fa4ec290875a0387ee37eb84183d0e5d645773aaea24e39df6f8ea48918db1a26a5d10ff71508c229fb73de7e41f5a6978090e9b3a945aaaa2d4b45f6f0fc0313403772424bf043ca8eceb165ec2ef47342d90dfad7bae9fe2e82ae2ce32f7507f64f21f37cf094a3bbf2d813b4ca90b32b16529b8b5129f57e2701917378ff792c175152574d4f4d37db3239220d09ce493e6719e1c46a6d39df90bfe09f40157161e2143fca7f4001ad6af9a36f3cef64ceeec80d7cb65d8087baf2c298d2fdc23f23733c4297906db2f955726387ccf5818d653aeeb147325e01cd9ebddd4fb6f6e367ea1ac6ca24f5fd3a499a93eada82ae7a3635b97480de8dc8636e6274c4b4dc4126926460f4103f28fd2526cf4c4f2e11ea65a0c1655dc44f612d2709cdf1298ac91fed433dee04a3a553dbc56741bd90205c51f949b6bbe788b788e62e609ef69da62f7bdaf59715017b8515cb1ce8f67c153633777cdb2243b5171c822ce79ccbda24a74c8e5ead6fda0604449426bbe5e63c03fb2d1236a5ca4242b82e0e519a17be8135e03ebf579dc0e7778e28bbff09c843ca0b6bc89fa5b84b0cbb88228880d0d1469f9cbafe6224273f58499dffc7bd49cf76619e71c4661057b554e1cf404d799b59eea9bd4ce31ef393882ded4d8f0681403946c81bc31504a1fa2234c59628a7cd5f9bfce901bdbe5498588456867dc72a8ed05d4c094d095284a7aef05273ffcd8d189cbdf6811e72f01fad7a040a34fdb065ced96015f999a998be9d030b9a79fc436406f62e999f054dc5cbe276e2f23de8d019dbf5114794e5b7a65913e7e81b52e0fc92cac5260f99596868abc689adbca43afb2a02f4255e97b5931ab12fbd5ff3288b5c94bddb8aea05ba9335f11876898901abd6548c3cc3a80f3777daab542c4c62c2d2a2e1b79645c2ebcc7bd62ebb5bb1011ee9d073ab42d456127c7057f79418fb2419b65fdc727ffe54f5cc80e9736a1b76614cc68e946b793ba78a166802789227aa50df32f935cca19deb6222bcc6103545e6df7a3c9ac6e2b4795b53d1ea0d546bbbdce69e32cf07388c3f3a3dfe731fa168d8230496882b3223313f9a3b6d1bf81a9224644dd3fbbabf4fb16fbbb8c042e62c61440a72bc2d5323c955a5559686fee4876fe4366a9c469a014155ac257d07ef678b96066bdf2d87826403b577c0c1ca1a711bdaf274b07fc04271577fa168352bbec85dbc05b1aae1cb0a477a30060fc33776f977767f1f8c1b31584dbd47a4aad848f8823a94bdca644f69ec93e4ac9915a259ee32c1340bb432902271987f5ec6c19ce06390d7a941707c1e07e04d89e2754bd3ee9fb40c0eb09a270cb6813a011acb8cb3a23b5aef78afaf9d1d32acca9767a64ede2fe1aa4430c035fbebf7f07a6bacdf5c42ffe3a33e9e5d00e6e8438065d14e7c19000c1cf6c8dc8d435cb670796fa4f28aa25f643ecc693e68a0e14d65fe8cd095f6a6aa922370d9ead272dde92ce9637d9c958daf4c486fd37af14b8bb2f6731b3f8c6ba9f791a832a91d988c03c937428402ff1401bed68c46ed095d30f9b08bd38cb10c08fb686fbb6de41aa87f8d4d3db6c390c96fc015b030c8fc5b6d6a7f8342e003e024c9c4adc743117373b9e325834acbf8530b0d6f8c4e2aebc02265d6a55961b080799c53f3298a410984a1319e7ff8b6310af1e7c77287268e203512a46b7371436678021dfc277b914d93dc986b45570296a087f4954fbda4292bc55c9a4f033bdae1dabc010f4152a20a7b436c17d3a1ec9231b9dc46e6830e179eb1e4c2276fd1ac28bc9a93e242a573ad180741107f3c6ab6dcb4c46e3b25dcfe0c7adb9f182fccfc0b5a890c88a339976e39d13c74500be4073e7e87174b863962a5c2f43227ea1014b72e3f2c51c7ec2a99bf15b26d8fd1dbeca0c48f09727f82761fb56a96fa90dc75358f542bf0250efacd05238d8cd30940dfd468cf3ebcf86f84d2af9c225abaa2852aae9133d52998778adf08503492feadadb90eba257a306f48004373980592ba0a1847a5c9da5bd021714b940d6ecd1cfef28945e4a3f5ff991f6736afb0242e8dd83802001cece5a3775229b07917739dfab0daaf0ef1b9029fa74179d0ed178a5262f39015c587e3e8e873f67d16f0420386aebfaed48f896b214a58f256bcaa765bb7590f2d02ca08bc5a8e9e086d8181f7b2825eb32e4dc600766bd0a8417811777fcb77bb2a79bc4bdc97947301d7ebb884e3db9ff907385f47fc5f72eb5ee35a4b69dda04320f518102e907a897cbc4652d30920629ca3f6ca4642555c44b71aabd2e4c14289f4d237dbdd4274c260e92296cfa11d3dde0e60ffb1f36cc938e56bd349a8bbcd42831613a546557b9ec9d1c040d38f083312b26dcc1e0177e5fc92bd258f312d1f8c8961a263c3b4bba31a317be763cc89e10601f288759b8c3fc6fba833bf6e5934176678ac809cf758bc44e01fcc0a6d3c00f1f38a8ae757ded55df9d9ea0d0dac17cdc8fbd8d7adb73999e97775075d843b66200758fac6a5b84c3ea68ac1945d0811ca797d4acaab6d5cc4829e453080bf788ac683fece15d34beea30a31e367886b002065e6a23d3ddc66c7bf65539e269998a3b4537af533c750f3739bf3ca9001d8a6586e6cfbf9fc4ea0c8b3f2a141ccc8245ccc2230f46ada4a31e1d80dada6fb07c397699419b74cc0615bb9c1cf4335664ffc65998191cfa1de918eeaf2673d307a8415bf1fce790c9cedf52c932bcbd48682cd65b6fb5affe84275c2e38e5a6ce39180577c153344449bc4191c66d6d7f217dfabc8292b48ec865a16b50f41d15dde6bcafbbf6a2c056f0b7c8fd208fed62f2e2b2de5dc58aaab12bd7092efa13844f51203508e6922ea5080441d608206f11e528113f4ba98e752f192a9343c064a830c895b423d3faa29ca0cb836f9065583ccab8949aa2616985a31388ffe637daea8c4e23da8a6a9d925e0585918aab74896cd52a1edaba74dc694a3af88e5b7d928b5e29be07cdebc3d2283579550cfca2454082a506ad16f4d2fdfd435a5dec3d5b3521d0997f7e24e797d4e3c7fd50ee95f907377391da6955863b6373e3ab4e97d5d30c9a816f1d6e651da298f5edf6128fc6ebd2d9106055b24a5555042c81f38c01cbd9b8b393f0926e3b6b19bac2b2961d676cd386efbf4faa84b995201014198ca4986cb94ba156603ae9b96c3d69e456726fa47f2219035185e7975f9ffec6db86b60ddbec42b3db0f1181d4088cf29dfbf964177d9e1e7802336c1943984fcfb578722c859f28432aad8928a4907318e01ac99de41308565b695fead3f108ca915b49352994c24c319e5bb5c8406bdbc27b5b355f1f2a85331ef576f822fb6c917f5082b882db5aa0782ac5c9174f38926a2103bc54fecfdd4df1a7a3781198ac8969b522fc5baa6573474f49720a1f6283b7b5f6aba7a9db42221124bc6c65832dc8dbbcc2ef0076a8ab830e8b1ce50a4649be082d7bef73398fb5ad85e779c37701f3347d1234802227273bd8a130a4e9f7499e6e6042da74e1b2fc5e2762137d186f93e3e2a61f747feec8292113aa9db14b5872253977d33b055e2a417510413ef74854d5c099fe047daaffb476da1aed5a0a15286a994829974bd9e036d245b5b5a9440b8be733b166c5d62b044e7dee1397d6934568f88435d8509725e9470b7166e1339833ce5c42ada25ece454c1c750c22b3bc6fc5ddbcd60d59427de1105349a0e522b59230eaaf195237162fe48f9be3261f2b05106b8e6edb631c9d0ccdb487e85e5042963e626c1cac4b1de2ff5836754b809d5e31cb8795d4a9cd114a040c31392486b6bb7df9e67b303d92a545070de79ed2264e1e5ca4dafcd8221d902052f5348026220afe088c80708df6c6327a659ede1e6472610a81ca24581c313643540ac7c5d058f5656ed5b55781c52a1f4619f32fbe869dfc3dae2bfccea9bd9fd7d26db12117edf13d57e961af4cfaaf2b15ae2a966126f1804092ce815a9c7363c5b2f2fc49e1e74793b5cca564f8ee80358c63c18aef52df9cbb3739c4ee46ce3f2264b1afbcb709858dc63d9a6a32b98fcb1dec41748de5845317f8c7c00db2cdf199e639d89b454be2089df16818f76611ab7482fed917bf885c7a1ec43640bca42dc4fc0177cb8de62af0d0bcde33b7b02d7a3f7b36bdf794431c841a82b6d9ec5326723763685ff50270593e8164582a0dbede696687fa90b05b281061ae5fc9a7ff656d9537451ddbee728ef020333627d9aa1c86b515ea25a0e311dcdfe8d61d57e68c806d0571da5ec7d8d01e963ce8ea9cb55ae88cae811444b42a95fec5862e499372f673f7ea04fc259d1", 0x1000}, {&(0x7f0000001dc0)="35ea6ff57b4b459ec961c6f3f2f5d4cc5566f1257a66a37dc6cefbadf5dd8b765ef4", 0x22}, {&(0x7f0000001e00)="ac4bc25608957aefe04b56b2beabc02fd7d4df68fabfa27cea16a27c2ebf131c74ac4751e92602accb78448b8ebf5eb57f071ad221de02a970af788e5b01a0f7", 0x40}, {&(0x7f0000001e40)="7b1d20cf4003b1788715abdf32795ad9be450b219af4930ea0", 0x19}, {&(0x7f0000001e80)="76102896791e2045501f213f2db2c8e398bfa14095f4f37d6e27cb7992923cb89d14960584c114e6147068914acc830a07cb7d", 0x33}], 0x9, &(0x7f0000001f80)=[@rthdr_2292={{0x98, 0x29, 0x39, {0x11, 0x10, 0x1, 0x4, 0x0, [@remote, @private1, @mcast1, @mcast1, @rand_addr=' \x01\x00', @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r3}}}, @dstopts={{0x88, 0x29, 0x37, {0x33, 0xd, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @jumbo={0xc2, 0x4, 0x1}, @jumbo, @generic={0x7, 0x25, "0a2d896c4ce0d6bb147c7699421cac2540d93230eea259e87bed4afd029b02c3dfa8aa8adb"}, @enc_lim={0x4, 0x1, 0xfd}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ra={0x5, 0x2, 0x8}]}}}, @dstopts_2292={{0x40, 0x29, 0x4, {0x32, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0xffff}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}, @jumbo={0xc2, 0x4, 0xfffff975}]}}}, @hopopts={{0x38, 0x29, 0x36, {0x84, 0x3, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x4, 0x2, [0x8, 0x80]}}, @pad1]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x89, 0x0, '\x00', [@enc_lim]}}}], 0x1e0}}, {{&(0x7f0000002180)={0xa, 0x4e20, 0x9, @mcast2, 0x699ca792}, 0x1c, &(0x7f0000002300)=[{&(0x7f00000021c0)="e59b43a35c758b20d979ba1486ff504492f10749eec20d1352137d5fc5e87f", 0x1f}, {&(0x7f0000002200)="d449e9510905393f57c74b06616157da86a2f4749c06d8a2042e4b12f3c97251cec6d6a3ea30bb6c03b0b2b2bc67a6be68cf0fb93101479020025a38daa948809257f4e07bb112e3ad36491c26ae343c4a576bda41ac397c457c6a9a3a5112be66341a5170e8924643f885cc8414082beb53eac7e8752bd854ced6da9136f08c5da4ed35c5fb1423f0891e2e39d5280214860f89d302889cc4783e063c72bd2c29def2ca7bfed3e441ba2365f68c8206449be91eee7cac3bf63bafaddd94c736afa6611b", 0xc4}], 0x2, &(0x7f0000002340)=[@flowinfo={{0x14, 0x29, 0xb, 0x8eb}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r3}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x41}, r3}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xa}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x73, 0xc, 0x0, 0x2, 0x0, [@dev={0xfe, 0x80, '\x00', 0x32}, @dev={0xfe, 0x80, '\x00', 0x21}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x11, 0x8, 0x1, 0x4, 0x0, [@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @local]}}}, @hopopts={{0x38, 0x29, 0x36, {0x0, 0x3, '\x00', [@hao={0xc9, 0x10, @empty}, @pad1, @ra={0x5, 0x2, 0x4}]}}}], 0x188}}, {{&(0x7f0000002500)={0xa, 0x4e24, 0x114, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0xf37}, 0x1c, &(0x7f00000028c0)=[{&(0x7f0000002540)="bf3bcac13be9d9457d0abd21ad08e0df1bae0c72534402b16e6166e544e87fff360694ea2c7d4cf05d17814cb3f6ec1de143562628d5352c90202bfc662d994aa9904e464ea7979bf3cf492745e2911abc98e5493f526008afd675c4783dfa8d9b066fd233283f2cc053a3df3802fc4055ea460036e67be80f3d1b70fb7d49415d31eab9ae4f1cb315182d5761fb49a37513c15e7aee18d498e872390b947cb1a960cc780e14074a1b01410b2acb5fb40666fd7802fe13ce2b9457c25f0eaeb753fd0acd7436b332d49024a75a0e98e48a62149f94825884f718", 0xda}, {&(0x7f0000002640)="b104ac379942b4db0299124db795cb4522623e608e6b13d67a4a0489262a689fdb62598b2bff66", 0x27}, {&(0x7f0000002680)="e08c63611c6e5fb3dddc1a74a56a846a6c9d72eb39d2c0eb8e1665ca332187804c09d93ba8927e65c47ba0a0cf3b3f3bb3257768f134453d2f166710da3a310021807ae814729106ed18806bdf7d3e34f540e1040e23590681a3dbc71e1e6754758ebf5f49c701d9be05da0dab45f154680bb21d1ede0ce63dfb79503c8cb8", 0x7f}, {&(0x7f0000002700)="f85c09eda7b93f7c0ddec74d7686cc5977345cee6fe4f9edb38bd89def843b43af3e04969a582062cfa4c43c51c01be85b5b07dbf0aa2fc8d02373293f047e51d1a245d5949307a3e1dee3dcfed3c6d41212f555d0badfd8fb509398a7cd62a960234aa0deb3279bbe8689aa304ef107177783fade37bde0a470848b620182e6c0655e9d", 0x84}, {&(0x7f00000027c0)="64075ba2287af3204127aa1da0d58a5008fcb9ca381a3399d4fc9563fd272f3ac969de75f2ae32436e37198668cbb0a81c9baea8c872018b3aa3e688e78920b67cbf4fd09bb1ee55c96ae601372f6bc528e341a7c95684b200fd02b2170338222fb04d1a622119c3d6f5a4a431460010c59ac43a2892e1b27f8cfed114ca29c781519f7812c1e47ce1aff5c23786f263d0ca542d6fe511799ca39e793f8089a192d2fdca2afef83412b874b7419027f427d1a2d7ed7b7d806e8b3b9409d731001a0fd05959a52713bb6c429dc31ed5f0398e9b8c33f8b2e9de01", 0xda}], 0x5}}, {{&(0x7f0000002940)={0xa, 0x4e21, 0xa, @remote, 0x7}, 0x1c, &(0x7f0000002e00)=[{&(0x7f0000002980)="9eb27a69f24923a14f5a933d23dd1c72829e302c173e82c46c4c536ed86ed4cfd8dbadc8b065ce042c39ba15b21d9b4e4d909e2bb28d65bc1401d366d40b1db9788bc07ffb03035fa9cb0a103688ae842213768ab1640c86644ae3abe27b269e381a927bb92b875560ea0c48df9c88ab2c34c32124eb36d57202914e87fae36fa2e36d229d129d3622960b7cb165690079644506", 0x94}, {&(0x7f0000002a40)="331752f93f2f912cd9aa12e365f7c9c467543d730ae33baad16ca4db515aa1b1c1d245012d7c59f01c327f7386f371013bb81b4f2dce347ce8c842e389338ca919a0f0152d796a4b5d114665ac0c18762f457c5e52fe1856e902b9c50b60125e58e3d59860e37e72f8b906ecbf15892030ca373df22c2c2d73e55ece63c4", 0x7e}, {&(0x7f0000002ac0)="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", 0xff}, {&(0x7f0000002bc0)="2b65c4ce041bee63de3dee00e35ad7c4faa36bdea0abebd99ad8ee415647772ff08d86eb4385a98096818344374bc248160c2c6bcd32e473803d632605b6232c24b1d85cef337b65306f11bb14d758d11facc8d1198ed81750ad9ccddb30f676edfcb6870df729c6f4ec3871687561e500ee32dfe8b452648a802683766335d0081167d620e861de5422df5e1542d20ce375b0c7e43044ea05a1e4b696d4b0a0e3ebf2251d9ae21d1421d857332be5a308e23876d10ea8eb127bc68632c6cb565af02cc13a1736ab6fe05c19cf38c98d35dc7a3193e709bfb11d4c94657511dd0ae727abf28d70015bba101f692eeb2941c3", 0xf2}, {&(0x7f0000002cc0)="b16aa9658c0260c05fe3da99f38423fe7c1d69382f707ac5fa7c101ff99941b6cc5dd2", 0x23}, {&(0x7f0000002d00)="9819844aecf1730db63cb2f15185a6f165709bc4d581efa5dcd4453f6f8cf693e29c1a215ba9fa8a9f638739d03396c78356d0ee611f50de06d0d59149c9f5be62baa7d1e12d2df31917ca15f59a4f66202534304a6e3eb30838dba4cc48ceaf93953d5b7a7711f1e212dfcf46ac1656fe89122b5f402e6dfc9e0bafdea6ec94675c53235af7981cbc01cb54da4750b8a760b953d5e79628107436c61ef1b784217f5e1721b84c7ca038976e7683303415ba2e6809b212569c9757eb5d87ca97f51fd20b08b54d3b8863", 0xca}], 0x6}}, {{&(0x7f0000002e80)={0xa, 0x4e24, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa}, 0x1c, &(0x7f0000002f80)=[{&(0x7f0000002ec0)="3a4ba2c184b4e95629856a4c0c77bef9763cc860b3b4c886ad48b3a824e78d08e63177513603452857fc4f0283708cf0155aa9b498e0a8cc1326d3a4039e41eaa3a35a71d03bf5207f758797", 0x4c}, {&(0x7f0000002f40)}], 0x2, &(0x7f0000002fc0)=[@dontfrag={{0x14, 0x29, 0x3e, 0xd3}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00', r3}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x0, 0x0, '\x00', [@pad1]}}}, @rthdr={{0x78, 0x29, 0x39, {0x3a, 0xc, 0x3, 0xd8, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x33}, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x17}}, @dstopts={{0x20, 0x29, 0x37, {0x2b, 0x0, '\x00', [@ra]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @hoplimit={{0x14, 0x29, 0x34, 0x400}}], 0x140}}, {{&(0x7f0000003100)={0xa, 0x4e21, 0xfffffff0, @empty, 0x7fff}, 0x1c, &(0x7f0000003500)=[{&(0x7f0000003140)="c2900545308324569c3afa8683cc0701a4f6d1fda5ba5be337b43c4b3a1b1cf5dcc53c3838f810ade837410fce98be77d5e8849e1820eff0f0286f8297aa9e68da59eaaa1b7e7d865c056ea90012faff4f14686d65649c0d4dbffed39bb67f6350218b0affda5059c272a43e25e6026228e2135f24d6af7f91268351500e26077e5d3f924f4846b5552856bfee01592c72e5107cd1fe3ccd51e831e1aeb00200b32e6c1143e0474ec785", 0xaa}, {&(0x7f0000003200)="932da30d5ea0f01f5b32c2633ad40d1a615010965270fbd881ff60cf7df4ee0443c707a09e7f85a65511ac6a4689babdbd2af25bbb2900ce3f4323d1a90f4ea73cbea34f3f9f8815878234d7db2c14cf84015b4dd6869a2115eb0c8338b852ca727ce580aa262d56a4baea748df17ea7022a1e225d434e9dde52c959bae57161f54a85ff8fd893d5cf4ffc0a7001d804ee6ac980", 0x94}, {&(0x7f00000032c0)="267b2752e92f849c3f91cd4b822d6350348ffda45e0b3107851c12e9ee144351baa0b03fced274e829c53ceaaf5d994903761618ba75276dc4d32eb50a4dc9a0670b0727d0c829c87aa80b760a01cdcb8364a3f069ed09ff8c02272cd17683516774a1963e222326012e258a98390a48e5803981c3953007537aabf0bcd342c0d2411a6b32ebf2c9afd7f3bcdb1beb7d8f9d85a3119e0684ac6ce02b287792a97c34376de7b7139ca19d16af64e260a5c0e336967455b94bab5ce8fdf360592a", 0xc0}, {&(0x7f0000003380)="f4142693d3bd0e39269e5495efd06cefceb10b1cd5e5a2c9ac27524944635e42b8a57fb71a6b3ee26e36314870b3f2694ec25164981cd9e54af61aa8c00a5ac8843c8ad729863ce04ab8fef04be0df2318ba84539660d13c90dc877394d459e599df5892b4d48d1db7e0c012e90c1683e7f30b1daf0446bb19afeb95d1421423fe50fb85f505834a049e8fece2c157fbf7503f4ac1731811e5cff4abe94a01ea00", 0xa1}, {&(0x7f0000003440)="0a118701764039e4e9b60381ee563df5bfdd809176ab23440a2236dafcf368d356ed56dcd4d2d033669682c0ac92b63c43d8d6de71191aae3bc6d653dacc675ef4850599531139f363a7b90289551898c14ca39dcaded1f3a3860732fd1b5aa04ddfd800f65c945078851708042ee933ad350e1fd0790f506e71d0cdbf4ba5f92019ada9694aa6d7f09a750bacff2e3975d895303e295f", 0x97}], 0x5}}], 0x7, 0xc040) (async) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000003740)=0x9) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r5, 0x8010aebb, &(0x7f0000003780)={0x10000, 0x4000}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f00000037c0), 0x40) sendmsg$nl_route(r6, &(0x7f00000038c0)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003880)={&(0x7f0000003840)=@bridge_getneigh={0x3c, 0x1e, 0x8, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, r3, 0x18, 0x800}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'gre0\x00'}, @IFLA_GROUP={0x8, 0x1b, 0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x81) (async) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r7, 0x4140aecd, &(0x7f0000003900)={{0x3000, 0x2000, 0x9, 0x0, 0x0, 0x1, 0xc8, 0x6, 0x20, 0x7, 0x6, 0x2}, {0xffff1000, 0xd000, 0xb, 0x20, 0x2, 0x3, 0x3, 0x6, 0x0, 0x3, 0x80, 0xf9}, {0x8080000, 0xdddd0000, 0x8, 0x5, 0x0, 0xce, 0x1, 0x1, 0x9, 0x4, 0x3, 0x9}, {0xf000, 0xeeee8000, 0x7, 0x6, 0x3, 0xf4, 0x22, 0x9, 0xdb, 0x5, 0x0, 0x5}, {0x2, 0x5000, 0xd, 0x7, 0xff, 0x6, 0xff, 0x0, 0x13, 0x81, 0x40, 0x2}, {0x2000, 0x4000, 0xc, 0x6, 0x1, 0x4, 0x5, 0x1, 0x4, 0x80, 0x9, 0x2}, {0x1, 0x5000, 0xa, 0x7, 0xaf, 0x9, 0xc, 0x6e, 0x7, 0xfd, 0x2, 0x4}, {0xdddd0000, 0x8000000, 0xb, 0x2, 0x8, 0x0, 0x5, 0x6, 0x80, 0x1, 0x6, 0x7}, {0x4, 0x4}, {0x10000, 0x8}, 0x40000, 0x0, 0x1, 0x10, 0x8, 0x1, 0xf000, 0x0, [0x2, 0xde3ab8, 0x8, 0xaa5]}) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r7, 0x8040942d, &(0x7f0000003a40)) write$binfmt_script(r6, &(0x7f0000003a80)={'#! ', './file0', [{0x20, 'TIPC\x00'}], 0xa, "7d1c9915ada63d5cdd901680963018405d6806b14997c389ade6bc0d80ee524b832275f54726c687ec267ed45a0a16e62247ded140dc259a35cfa38bd2b23296ad2c6e366d521a5b433c1db1d43a99b471258c59e3ed67b21d3ff82146966d294541fe5691197d054d46540719ff137a98f9d26bf2b4a3128f93739372cc10d2957cdac01efc5947a3ef5a908cea797bf0668fe740bd512a2037f44c0a80ee68a43818f88171b5aa14f3cf2dea349a2359b98bee6cbe46b8066f092e"}, 0xcd) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r8, &(0x7f0000003b80)="74ad62", 0x3, 0x48, 0x0, 0x0) read$FUSE(r6, &(0x7f0000003bc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) capset(&(0x7f0000005c00)={0x19980330, r9}, &(0x7f0000005c40)={0x8, 0xfffff801, 0x3ac9fc8a, 0xae19b034, 0x4, 0xe}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005c80)) (async) r10 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000005cc0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r10, 0xc1004111, &(0x7f0000005d00)={0x7, [0x100, 0x5, 0x2], [{0x9, 0x3, 0x1, 0x1, 0x1, 0x1}, {0x13d4, 0x7, 0x1, 0x0, 0x1, 0x1}, {0x9, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x1, 0x5, 0x0, 0x0, 0x0, 0x1}, {0x7fff, 0x3, 0x1}, {0x1, 0x8, 0x0, 0x1, 0x0, 0x1}, {0x3, 0x7, 0x0, 0x0, 0x1, 0x1}, {0xff, 0x2, 0x1, 0x0, 0x0, 0x1}, {0x80000000, 0x2be, 0x0, 0x0, 0x1, 0x1}, {0xfc, 0x7, 0x1, 0x0, 0x1}, {0xffffffff, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0xb6, 0x47b6, 0x0, 0x0, 0x1}], 0x4}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000005f00)={&(0x7f0000005e00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000005ec0)={&(0x7f0000005e80)={0x28, r2, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x59}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x40004) 5.729298413s ago: executing program 0 (id=2493): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2400404c}, 0x81) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x200, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044084}, 0x20000801) (async) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x200, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044084}, 0x20000801) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r5, r0, 0x1, 0x44, &(0x7f00000002c0)="f9dbf9efdc8cb3122b6f744889c2ce74dffba748850f656a84ca2a214cdb76a5b6270d2ef52044853ee139e15988a3eb81c96dac39f6fb703a19547d30c4ec7f184d30f8", 0xff, 0x3, 0xd77, 0x9, 0x4, 0x0, 0x35, 'syz1\x00'}) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r5, r0, 0x1, 0x44, &(0x7f00000002c0)="f9dbf9efdc8cb3122b6f744889c2ce74dffba748850f656a84ca2a214cdb76a5b6270d2ef52044853ee139e15988a3eb81c96dac39f6fb703a19547d30c4ec7f184d30f8", 0xff, 0x3, 0xd77, 0x9, 0x4, 0x0, 0x35, 'syz1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r2, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x10, 0x20, 0xffff, 0xfffffff8, {{0x16, 0x4, 0x0, 0x5, 0x58, 0x65, 0x0, 0x7, 0x2b, 0x0, @remote, @private=0xa010101, {[@noop, @timestamp_addr={0x44, 0x14, 0x84, 0x1, 0x8, [{@private=0xa010102, 0x8}, {@remote, 0x7}]}, @generic={0x89, 0xd, "cf6bf344fea396ee8df1c4"}, @ra={0x94, 0x4}, @noop, @ra={0x94, 0x4}, @ssrr={0x89, 0x17, 0x31, [@dev={0xac, 0x14, 0x14, 0x22}, @multicast1, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x4, 0x6, 0x5, 0x10, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x7, 0x7800, 0x694, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0x6, 0x5, 0x2f, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x40, 0x0, 0x1000}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'tunl0\x00', 0x0, 0x80, 0xff07, 0xb, 0x80, {{0x14, 0x4, 0x2, 0x16, 0x50, 0x67, 0x0, 0x0, 0x2f, 0x0, @loopback, @empty, {[@timestamp_prespec={0x44, 0xc, 0xa3, 0x3, 0x9, [{@rand_addr=0x64010101, 0x6}]}, @end, @lsrr={0x83, 0x1b, 0x15, [@multicast1, @private=0xa010102, @local, @multicast1, @loopback, @remote]}, @end, @rr={0x7, 0xf, 0xed, [@multicast2, @multicast1, @loopback]}, @noop, @noop]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'tunl0\x00', 0x0, 0x80, 0xff07, 0xb, 0x80, {{0x14, 0x4, 0x2, 0x16, 0x50, 0x67, 0x0, 0x0, 0x2f, 0x0, @loopback, @empty, {[@timestamp_prespec={0x44, 0xc, 0xa3, 0x3, 0x9, [{@rand_addr=0x64010101, 0x6}]}, @end, @lsrr={0x83, 0x1b, 0x15, [@multicast1, @private=0xa010102, @local, @multicast1, @loopback, @remote]}, @end, @rr={0x7, 0xf, 0xed, [@multicast2, @multicast1, @loopback]}, @noop, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000800)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000800)={'vcan0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0x58, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000940)={'gretap0\x00', &(0x7f0000000900)={'syztnl1\x00', 0x0, 0x7800, 0x7800, 0x7, 0xfff, {{0x6, 0x4, 0x0, 0x13, 0x18, 0x67, 0x0, 0xe, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2b}, {[@end, @noop]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000940)={'gretap0\x00', &(0x7f0000000900)={'syztnl1\x00', 0x0, 0x7800, 0x7800, 0x7, 0xfff, {{0x6, 0x4, 0x0, 0x13, 0x18, 0x67, 0x0, 0xe, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2b}, {[@end, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a40)={'syztnl1\x00', &(0x7f0000000980)={'sit0\x00', 0x0, 0x40, 0x1, 0xa68, 0x5, {{0x20, 0x4, 0x3, 0x2, 0x80, 0x64, 0x0, 0x4, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x29}, {[@generic={0x86, 0x4, "04b1"}, @timestamp_addr={0x44, 0x3c, 0xcd, 0x1, 0x7, [{@remote, 0x3}, {@rand_addr=0x64010102, 0x2}, {@rand_addr=0x64010100, 0xa}, {@loopback, 0x3}, {@rand_addr=0x64010101, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@rand_addr=0x64010102, 0x5}]}, @rr={0x7, 0x1b, 0x34, [@multicast1, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010102, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x2c}]}, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0xb, "c2a1ca91a2f46a1742"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000a80)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'ip6tnl0\x00', 0x0, 0x29, 0x15, 0x90, 0xa, 0x11, @loopback, @loopback, 0x7800, 0x90, 0x9, 0x9ede}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'ip6tnl0\x00', 0x0, 0x29, 0x15, 0x90, 0xa, 0x11, @loopback, @loopback, 0x7800, 0x90, 0x9, 0x9ede}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000000b80)={'ip6tnl0\x00', 0x0, 0x29, 0xe, 0x4, 0x3, 0xd, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x80, 0x1, 0x3, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000c40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d00)={'ip6tnl0\x00', &(0x7f0000000c80)={'ip6tnl0\x00', 0x0, 0x4, 0xff, 0x4, 0x7, 0x1, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0xf890, 0x1, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f0000000f80)={&(0x7f0000000400), 0xc, &(0x7f0000000f40)={&(0x7f0000000d80)={0x1bc, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80}, 0x840) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000fc0)='/proc/self/clear_refs\x00', 0x1, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001000)="2733cdd46d3645a30b096e3a767bfeb6740b55e44be9b27804c7dbb4febb9a8e3774d1389f3af94f1f824a411a55f782ad01dd4d6cacfbbc2ff4eb355f1af66f9dcf6c885c548e38b39f4a8700be1c3b1a6ab53e2ceacdd8d484d70cec9a4e20f561e617ad1023bc2898de146e0f9c8c22c00cf62410020ea6071bf73e61b4", 0x7f}, {&(0x7f0000001080)="6919a0e8e4e6ef528c1f228e3e372221242eae6432553b8ac9d945127cb192e432a18be9ae6699151862e00004dd1ca827aedd0331c8b7254e469298e3006ff216960c55b2baccfc606f734b7c4e1510c105eadd249d9b20d6a8e79051663ea4420f90b50c8a9851ac1f8171daf6ca3862d5f77f7084201bfe900858a5f073b539b892aecde7ef588b5451da6a5dab7423cd8071f7fb7f0fcbda18bc9b132199051a177ba1aa49ad958bb4d02cbf5ca988db00aaaadbc5b30f8386a134", 0xbd}, {&(0x7f0000001140)="84c7f3ab4c2a72d81bfafabeb4cbd9ca57118b7e393fd9f692ad0bcf1a62a0d4bc74b4598bf9859cc23b54df396cb6d464c973b010acf52196b971ddaa6a89aa6ae87d8001345811d493fa43e64126aba393b56db3a14c51343bb9666b91f90f68a1a2eff527c7a905f17f8fad239bdbe9c46eab3f4891bf8ee8313f2e36615faf3b851d236525f5ee32e08180a90a5250652396d9ed975ed55784fb7c6f9d4da3e139e201bae2834271740f0725c789e1ed169da9c84de6c1d12953e725d6df664f76e56856814bccfa269ac7a410fae99b83fbe70d4601b92eba2ad2c24b0c26549128db475fca14addf474a9f", 0xee}, {&(0x7f0000001240)="83dd5b00830bec68027c3e8be99f3d6060ebffa2ba43607893f370c21c5f4c32051d1f58751ce505062e7b3edcffa79fc447", 0x32}, {&(0x7f0000001280)="49483008280a868e6df5b8075e67d28fc16150c1f7ee6d70e0870c03046c00302e4063b10e685f576b67f7d794793d3028434733adf0b384119233ffe743a6664196d835f9", 0x45}, {&(0x7f0000001300)="fbae4e948c70c7c9ab9eb6f28cceafa28582f396d5926767e06fd4fdf7cecb50f76e56d34c872cc96c40ed2d9395901f67746cf14e077dc940237df8e5c2339e91c17b51466c383c45ac5d8783f1c09a09fa2b6dd6c50442dd6549a1d12d3103cefe8d4353a7ad1f7bd0925e920a9a36972691f6f136b6b409a6712c7a3778e8d30c111032", 0x85}, {&(0x7f00000013c0)="683673fb3e31ad88431099c239eae698d5b70bea7357355522021258e05b83c2d641f180eb996036d29904c4b3eb0748cea73957e098d8e95022741f353fcca054142349c5c41da828720fcf83ff111c3d56ec049223aeca1968630caeae48c5e43ec3e9524396d946f02eeb83e1a3af09443e41f262bc", 0x77}, {&(0x7f0000001440)="a3be7e2182805cd343e4041437415ab82302ee186a4c656eda0bd1c53a6577ea4b6647e63e5d88772845dba23855fa6256d3544dbc84db41d4e7717ad7b6ca0a08225f01a9c91a745f365e51542cadf9631e403b93ffe54a9ddc1631155c75f3be9a18150e96026c", 0x68}, {&(0x7f00000014c0)="ff6492637d3a1360770dd3156a0272e013b3a589e78bb48dca244e13defef528f6a6163676ee4bf33370a8faaaa8e80a4656751225feb060e2b2337e9689343d5b7c0c348852893d48b1050ea33b181bb23d7031bc3488c09bf84d4987d6f482b35b24f57677064711862b6b69c202910f63ec325af6ed2b83831c08a65969421d0d4d077ac94e0c51698b265cd1b759155ff52678f54c0bdb56bf940f4a6cbc313ebb34ed2deb8f9f66ccc98ddc6cee8aa3a43712c08169c0a72baeb52fd2f93f361aed84ee4fd247166d9deb2837ae3afaa4bcf239ea4c917ee4c8227582d8", 0xe0}], 0x9, &(0x7f0000001680)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0xb}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0xd}}, @timestamping={{0x14, 0x1, 0x25, 0x1ff}}, @txtime={{0x18, 0x1, 0x3d, 0xbd4e}}], 0xc0}}, {{&(0x7f0000001740)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f00000019c0)=[{&(0x7f00000017c0)="f6d9d9bc0b93647291d6e4b85b9438d7b1c834b72b6fb55458", 0x19}, {&(0x7f0000001800)="cbe0606f3d93d47564259099c8385a626e5f4b0ac2cba630eb682dd5a001ce22b6e9d496c2b325be775001f4bab3502bfb9b2e300687a9bc0d88ef62de6401333f98a7fdcb1c2fd8111c58d41390ccc077722f501ad2aaa98f143fcc17ddbc50b94b328f2a3da93712242567ce672b05951a8edea90d632a5b40bbe0ecd7a1300c33cb1746e243817bdce5829bbac1f6a80a4f8350919cfe1a0dfbab61d57b7a44144094ebddbccbf0408728076468e494b24d51ecbc8811e885c4bea3d8ad6d43403108fefe7c08f9556bad79a70ff0e52b4b842acfd17a6b", 0xd9}, {&(0x7f0000001900)="2e1c44e8810149be578da5d357111cbbe8ea0811df26fc25221838db66d5aed8d2c734350c8842313ad009704b2a5500f234475dee2756532ed8abe983fa27fde742185ac701c3c845d62b1e3ebe7e98d813e2e1d65b72bc227740f0e2c563e0f2b0dc47d211", 0x66}, {&(0x7f0000001980)="527adc2cb683990ac66f478ab5abcdfb7c7c128b449bef5d48cd283d83a7", 0x1e}], 0x4, &(0x7f0000001a00)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x10}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x48}}], 0x2, 0x4008000) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001000)="2733cdd46d3645a30b096e3a767bfeb6740b55e44be9b27804c7dbb4febb9a8e3774d1389f3af94f1f824a411a55f782ad01dd4d6cacfbbc2ff4eb355f1af66f9dcf6c885c548e38b39f4a8700be1c3b1a6ab53e2ceacdd8d484d70cec9a4e20f561e617ad1023bc2898de146e0f9c8c22c00cf62410020ea6071bf73e61b4", 0x7f}, {&(0x7f0000001080)="6919a0e8e4e6ef528c1f228e3e372221242eae6432553b8ac9d945127cb192e432a18be9ae6699151862e00004dd1ca827aedd0331c8b7254e469298e3006ff216960c55b2baccfc606f734b7c4e1510c105eadd249d9b20d6a8e79051663ea4420f90b50c8a9851ac1f8171daf6ca3862d5f77f7084201bfe900858a5f073b539b892aecde7ef588b5451da6a5dab7423cd8071f7fb7f0fcbda18bc9b132199051a177ba1aa49ad958bb4d02cbf5ca988db00aaaadbc5b30f8386a134", 0xbd}, {&(0x7f0000001140)="84c7f3ab4c2a72d81bfafabeb4cbd9ca57118b7e393fd9f692ad0bcf1a62a0d4bc74b4598bf9859cc23b54df396cb6d464c973b010acf52196b971ddaa6a89aa6ae87d8001345811d493fa43e64126aba393b56db3a14c51343bb9666b91f90f68a1a2eff527c7a905f17f8fad239bdbe9c46eab3f4891bf8ee8313f2e36615faf3b851d236525f5ee32e08180a90a5250652396d9ed975ed55784fb7c6f9d4da3e139e201bae2834271740f0725c789e1ed169da9c84de6c1d12953e725d6df664f76e56856814bccfa269ac7a410fae99b83fbe70d4601b92eba2ad2c24b0c26549128db475fca14addf474a9f", 0xee}, {&(0x7f0000001240)="83dd5b00830bec68027c3e8be99f3d6060ebffa2ba43607893f370c21c5f4c32051d1f58751ce505062e7b3edcffa79fc447", 0x32}, {&(0x7f0000001280)="49483008280a868e6df5b8075e67d28fc16150c1f7ee6d70e0870c03046c00302e4063b10e685f576b67f7d794793d3028434733adf0b384119233ffe743a6664196d835f9", 0x45}, {&(0x7f0000001300)="fbae4e948c70c7c9ab9eb6f28cceafa28582f396d5926767e06fd4fdf7cecb50f76e56d34c872cc96c40ed2d9395901f67746cf14e077dc940237df8e5c2339e91c17b51466c383c45ac5d8783f1c09a09fa2b6dd6c50442dd6549a1d12d3103cefe8d4353a7ad1f7bd0925e920a9a36972691f6f136b6b409a6712c7a3778e8d30c111032", 0x85}, {&(0x7f00000013c0)="683673fb3e31ad88431099c239eae698d5b70bea7357355522021258e05b83c2d641f180eb996036d29904c4b3eb0748cea73957e098d8e95022741f353fcca054142349c5c41da828720fcf83ff111c3d56ec049223aeca1968630caeae48c5e43ec3e9524396d946f02eeb83e1a3af09443e41f262bc", 0x77}, {&(0x7f0000001440)="a3be7e2182805cd343e4041437415ab82302ee186a4c656eda0bd1c53a6577ea4b6647e63e5d88772845dba23855fa6256d3544dbc84db41d4e7717ad7b6ca0a08225f01a9c91a745f365e51542cadf9631e403b93ffe54a9ddc1631155c75f3be9a18150e96026c", 0x68}, {&(0x7f00000014c0)="ff6492637d3a1360770dd3156a0272e013b3a589e78bb48dca244e13defef528f6a6163676ee4bf33370a8faaaa8e80a4656751225feb060e2b2337e9689343d5b7c0c348852893d48b1050ea33b181bb23d7031bc3488c09bf84d4987d6f482b35b24f57677064711862b6b69c202910f63ec325af6ed2b83831c08a65969421d0d4d077ac94e0c51698b265cd1b759155ff52678f54c0bdb56bf940f4a6cbc313ebb34ed2deb8f9f66ccc98ddc6cee8aa3a43712c08169c0a72baeb52fd2f93f361aed84ee4fd247166d9deb2837ae3afaa4bcf239ea4c917ee4c8227582d8", 0xe0}], 0x9, &(0x7f0000001680)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0xb}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0xd}}, @timestamping={{0x14, 0x1, 0x25, 0x1ff}}, @txtime={{0x18, 0x1, 0x3d, 0xbd4e}}], 0xc0}}, {{&(0x7f0000001740)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f00000019c0)=[{&(0x7f00000017c0)="f6d9d9bc0b93647291d6e4b85b9438d7b1c834b72b6fb55458", 0x19}, {&(0x7f0000001800)="cbe0606f3d93d47564259099c8385a626e5f4b0ac2cba630eb682dd5a001ce22b6e9d496c2b325be775001f4bab3502bfb9b2e300687a9bc0d88ef62de6401333f98a7fdcb1c2fd8111c58d41390ccc077722f501ad2aaa98f143fcc17ddbc50b94b328f2a3da93712242567ce672b05951a8edea90d632a5b40bbe0ecd7a1300c33cb1746e243817bdce5829bbac1f6a80a4f8350919cfe1a0dfbab61d57b7a44144094ebddbccbf0408728076468e494b24d51ecbc8811e885c4bea3d8ad6d43403108fefe7c08f9556bad79a70ff0e52b4b842acfd17a6b", 0xd9}, {&(0x7f0000001900)="2e1c44e8810149be578da5d357111cbbe8ea0811df26fc25221838db66d5aed8d2c734350c8842313ad009704b2a5500f234475dee2756532ed8abe983fa27fde742185ac701c3c845d62b1e3ebe7e98d813e2e1d65b72bc227740f0e2c563e0f2b0dc47d211", 0x66}, {&(0x7f0000001980)="527adc2cb683990ac66f478ab5abcdfb7c7c128b449bef5d48cd283d83a7", 0x1e}], 0x4, &(0x7f0000001a00)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x10}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x48}}], 0x2, 0x4008000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000001b40)={0x4, 0x6a, 0x3, 0x2, 0xffffffff, 0x80}) 5.728960096s ago: executing program 0 (id=2494): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x1}, @private1, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000080)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000c40)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @local}], 0x20) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) sync_file_range(r4, 0x2, 0xda38, 0x1) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x52b281, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x2, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000d4a1ce4e9de42536000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000fccbdf250900000005000700020000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x24084001}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x3, 0x1003, 0x448, '\x00', 0x9}, 0x1, [0x7, 0xd5, 0x2, 0xfff, 0x6, 0x4, 0x2, 0x5, 0xffffffffffffffff, 0xbc, 0x80000000, 0x102f, 0x5, 0x1, 0x83, 0x1, 0x1, 0x7, 0xda, 0x200, 0x84, 0x7, 0x7, 0x7, 0xc, 0x42, 0xff, 0x7, 0xffffffffffffffff, 0x980, 0x900000001, 0x403, 0x0, 0x800000004, 0x101, 0x3, 0xd, 0x1, 0x2000000, 0x6, 0x9, 0x1, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba5a, 0x4, 0xa, 0x88b, 0x6, 0x4000006, 0x7, 0x7fffffffffffffff, 0x2, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x8, 0x9, 0x1800000, 0x6, 0x82b, 0x8, 0x5, 0xfffffffffffffffe, 0x9, 0xfffffffffffffffa, 0x1, 0x100000000000004, 0x2, 0x2b, 0x1, 0x7, 0x300, 0x80, 0x42843379, 0x1, 0x100000007, 0x200, 0x77d, 0xb3, 0x5, 0x539, 0x623b, 0x400006, 0x0, 0x7, 0x4, 0x200, 0x6, 0x8, 0x0, 0x5, 0x96, 0x8, 0x401, 0x2, 0x0, 0x680000000000, 0x2, 0x7, 0xe88, 0x80000007, 0x0, 0xfffffffffffffffb, 0xffff, 0x9, 0x8, 0x10000001000, 0x0, 0x5, 0x1, 0xfffffffffffff000, 0x10000, 0x7ffd, 0xffffffffffffff80, 0x6, 0x46b, 0x4, 0x6, 0x6, 0x4f65, 0x1, 0x7b, 0x3]}) 5.708922698s ago: executing program 1 (id=2495): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) getpgid(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/uevent_seqnum', 0x2000, 0x1c6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="f3450fbc475aa766ba4200ed66baf80cb8398a888aef66bafc0cb0f0ee000000400f22c042a7a70f49f70f00d86536400f00d335000004000f22c066ba200066ed", 0x41}], 0x1, 0x7, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000017c0000040042800c0001800600060065580000100002800c0014800800018004", @ANYRES64], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x10) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x2, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0xb0b3, 0x2, 0xffffffff}}]}, {0x4, 0x6, "55623e51c390b8110dd13039c56e85524986195b5c1a26bc77aebffed687093b2ef69bbd2d306fd4d63bd5"}, {0xffffffffffffff96}, {0xc}}}]}]}, 0x64}}, 0x0) syz_kvm_setup_cpu$x86(r4, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', r4, 0x4000, r1}, 0x18) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x0, 0x25dfdbff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@empty, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r7, 0x0, 0x0) openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r9, 0x80045700, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.6660609s ago: executing program 3 (id=2496): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x6004}, 0x40000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x400002, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x8008) r1 = socket(0x200000000000011, 0x2, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000940)=[{{&(0x7f0000000380)=@alg, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000400)=""/75}, {&(0x7f00000007c0)=""/141}, {&(0x7f0000000880)=""/118}, {&(0x7f0000000900)=""/60, 0x3c}, {&(0x7f0000000a00)=""/207}]}, 0x3}, {{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000bc0)=""/127}, 0x5}], 0x4000081, 0x40000002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0x0, 0xee01, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) recvmmsg(r6, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000480)}, 0x17}], 0x1, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0xd, r8}, 0x14) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000140), &(0x7f00000001c0)=0x4) 4.111017111s ago: executing program 3 (id=2497): r0 = socket(0x29, 0x80000, 0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x7fff, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffff", 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) ioperm(0x0, 0x1, 0x1) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x4, @mcast1, 0xfffffffa}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000300)="85578dfbceec38d66a463a84fba1f6b04fa1dc1f4197358c22160e83fe30716cb0bd58d953e101d131a9b4ee6c667631399685bb67e843b13c16989a913594b363c0ec2c370f7cc47e25d657dc290801aa2c7c1f514856c272ef3413f663995a7450c894c5f984585b206f56b20499fb4e400047fd9527ec5432", 0x7a}, {&(0x7f0000000440)="c95910d4043fb11d7e4a0d3944464983e293a61e6e55e900f9ffd03fb8ae977c1ea373506b0304e2b08a60f45e956561a0550e3e715aa231a2f52fad4bc0ec152bc5777a9ee95ce8a9d3c84acd6c09ea5317e5bdfda4c680577bf5a1bfe11d45e68316ccea4d3a2647ce81994a688d55317acd59806da60487a374bffb35d4689dd429f7d8f234abcce17f884da608568de7917631ea94ebd0fe9b9491284166d65e86b80ac8d6e0fc630bec04bbc8032df34a36b93571a3601a9a7803f3", 0xbe}, {&(0x7f0000000500)="73c2238d40b9ecb9e550db86600c5bb6321f8ea0dcc9b24935949a3f80179624b5567789738855fdc4dcc0300fe07a4651e6a90ce7aa9a", 0x37}, {&(0x7f0000000540)="3930395117d04f8079b0094346b09c0da55e489afa7ca6aab5bfb2405093be011e205d21d15539cc9fc3b1f4befa6df63c007a8b80a893b06d05bf6300e3b75d7faaab3737224e0e59c705475776ee69f8", 0x51}, {&(0x7f00000005c0)="ed774f4e640378579c8f7500a5147b88c5f6967cf083687a77062fbf17f37d214e311d9345a9136e98e98a62141e098d0d959dd8aaccf62d0d1ba30e0722e64267d76233476c2fd43d4f165508f0c33a8cbd08b4942ed7906a1209291adce07f4df1e11819689c3632eb092ddb", 0x6d}, {&(0x7f0000000640)="3061a273f4b79fa5176dc7d804b641dd6b407160a710486ba2e958f2eb30f3a8ffcf30b7761b9baab5ea1fa0dad5c37bb88cd504f853a8b5208a8ae6f2cfb30e11ebb202a301e53a8b9c17e6faed1ea6b78d028816fe6b702c8962d9233ef9d9d08e2f096aa2ecea4fcd573d27f4783a4ada56e3f81ce3023c14bddfe6711370ee190207003599855c853b127def005e3cd01e9c4f5a0e02dd7f62439c8ecdea3747882453a4b596d5e69dae45eb5efe6a599cb4ea456d687476d76f77c68bf93ff1a56efe", 0xc5}], 0x6, &(0x7f0000000880)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x2e, 0x6, 0x2, 0x9, 0x0, [@loopback, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3d}]}}}, @dstopts={{0x18, 0x29, 0x37, {0xff}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x78, 0x29, 0x39, {0x2b, 0xc, 0x0, 0x80, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @local, @mcast1, @private2]}}}], 0xf0}}, {{&(0x7f00000007c0)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000001e00)=[{&(0x7f0000000a80)="d247de9483d9c8ea8f6bbfd0c9e9a8ba7bf281dd73b1d5686e83444ed971d203ccc6073e9cf5d5c1f01b9985dda0911182641b332f2cf6abf85d74bbb17223dd73c819dd772aa05a7f8af7627f3b462bcca88f4f8cf6365ec25b408204c56e532c4a24c1bb24d945f2218952263bc74122c49a330429211521c4c389e7e34dc304", 0x81}, {&(0x7f0000000b40)="42a4adfa226cd0e4f8d163625ef8a531146695b7c8cade1653b0469bbef95697e75de0d0f034d381d20eb047dd570aaa871d585b9e763f21c1538482624025a5daa1470d44093316e8feb929ca1d8cab18c058b1522946000207d2c1706d43fae1ce5796e15d4c44a1", 0x69}, {&(0x7f0000000bc0)="9e671941d80bd8b68327e336871ee62a5f5c39fcf26397050ef45ff787242a44ebffaa8270cddd38125f6d0a2223b1b7b5e91fd1bb45e29e7feb955caffde5ccb15a6aaa044e2dca19d902a231c59b8b37e93523e13293996e765ee15d29b65d26697348d96b8cfffdac46d8e95374d2d546e8f9b7c5907c53fadfaa644457a79c62318568a48489cb6dd50f06573ede6a74dbadc113ea4b9ed3485a00d291e57b3f67ae52fe7e2083bd120774e2c09fb13c23f5572abd4e0ff2dcb853b33491f04efc045590a44c6f23ba35744fb5bc553b573b", 0xd4}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000000800)="c084555bc3712f0432a6c377bab1f04367a4087841ffc731f919839cdcb6117e7825480c8d2468", 0x27}, {&(0x7f0000001cc0)="472a3a6024ff9b4568f6e15fea86b61e663a721a5d25684f76b62c72f91f4e6e2146cc7e30de2eaf1231f4a5bf6fe290554930c8c9881d0968418b7ba20dfe61c6073a7acff96d280dbcb43605dc2223", 0x50}, {&(0x7f0000001d40)="0eff6f8e1ce066cd98654810b496e864b727ec31de514ca6a7f67bab8515ec1fd517249c351d8665970f4bd7a43f039d7ed0e5fe64967e5cc604ca59e1d39e3622ee3a1c30b40e6f915834ca4045c71648a6b1e00899aa2cc253835600429f22866c91ee93dceba420170861fb5f1eb9b1c3d9aa4aa6db6c875c506dc8fde2abb0d7d210ea9db166beb279cb95e568cbc1d15fff", 0x94}], 0x7, &(0x7f0000001ec0)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x3b, 0x6, 0x0, 0x2, 0x0, [@mcast1, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @multicast1}}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xff4}}, @rthdrdstopts={{0x68, 0x29, 0x37, {0x33, 0x9, '\x00', [@pad1, @jumbo, @jumbo={0xc2, 0x4, 0x3}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x80}, @calipso={0x7, 0x30, {0x1, 0xa, 0x4, 0x599a, [0xa, 0x7, 0x401, 0x8, 0x400]}}]}}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x2, 0xc, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x50, {0x1, 0x12, 0x5, 0xa74, [0x8, 0x8001, 0x98fe, 0x1, 0xfffffffffffffffd, 0x202, 0x1, 0x7f, 0x2b]}}, @jumbo={0xc2, 0x4, 0x400}, @jumbo={0xc2, 0x4, 0x5}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x803}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x33, 0x4, 0x2, 0x7, 0x0, [@dev={0xfe, 0x80, '\x00', 0x40}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @hopopts_2292={{0x50, 0x29, 0x36, {0x2f, 0x6, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @pad1, @calipso={0x7, 0x10, {0x3, 0x2, 0xff, 0x0, [0xffffffffffffffff]}}, @padn]}}}], 0x210}}], 0x2, 0x811) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000001000100180001801400020073797a5f74756e"], 0x44}}, 0x0) socket$inet6(0xa, 0x800, 0x7) syz_open_dev$usbfs(0x0, 0x77, 0x101301) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000002540)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c0002800500010000000000b4256f256a225b32c4de55bf77ff5f4b4c12357d32172c67e62f41e0285ef4384f2aaf60bd774059031ea4cd57551d75f43f5bd3e6c6f1476a8125590f7053722ee3f35fcaed30ee6a9ab04e16bc1ade2d3941"], 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) 4.107441158s ago: executing program 1 (id=2498): openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000005e43bb387ffa6532000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000080000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='xen_mmu_alloc_ptpage\x00', r4}, 0x18) io_setup(0x23, &(0x7f0000000280)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x437, 0x1, 0x25dfdbf4, {0x0, 0x0, 0x0, r6, 0x40c89}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44801}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x4040880) socket$nl_route(0x10, 0x3, 0x0) 3.97107033s ago: executing program 4 (id=2499): socket$inet(0x2, 0x4000000000000001, 0x0) (async, rerun: 64) socket(0x56ef89f540979ba3, 0x4, 0xb) (rerun: 64) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async, rerun: 64) socket(0x10, 0x3, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)}], 0x1}, 0x20040040) socket$netlink(0x10, 0x3, 0x6) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0xf620) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x10b8}, 0x200008c0) (async) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, 0x0}, 0x0) (async, rerun: 32) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x8001, @local, 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x18}, 0x40008) (rerun: 32) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f000083d000/0x4000)=nil, 0x4000, 0xb, 0x10, r8, 0x93738000) (async) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x31c000}) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) 2.893359619s ago: executing program 2 (id=2500): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x18, r1, 0x325, 0xfffffffe, 0x2000, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}}, 0x80) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x40}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x10000}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x9}, {0x0, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x5, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0xc, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x6, 0xff, 0x0, 0x2, 0x2, 0x3, 0x100007, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x1, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x1ff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0xc, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x2, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xfe, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0x7, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfe, 0x6, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x3, 0x4, 0x9, 0x81, 0x7, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newlink={0x34, 0x10, 0x409, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2.893003795s ago: executing program 4 (id=2501): r0 = userfaultfd(0x801) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="110000000000000000ca0dec4b2ef7b50972425ea0", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x11) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = socket(0x40000000015, 0x805, 0x0) getsockopt(r8, 0x114, 0x5, 0x0, &(0x7f00000000c0)) sendto$packet(r5, &(0x7f00000000c0)="a6bea8a120e5f8320c30ce5086dd", 0xe, 0x48810, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @random="e6883490c5fc"}, 0x14) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000d4e000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="66baf80cb83cecb78cef66bafc0ced66ba400066b8ffff66ef0f78d164646565470fc77d9fb9240b0000b809000000ba000000000f3048b805000000000000000f23c00f21f835010004000f23f80f005300364b0fc729360fc77c8ffd0f20c035000000400f22c0", 0x68}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r11, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0xeeee8000}}, "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", "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"}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ftruncate(r4, 0x6000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x10, r4, 0x2443e000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 2.838559589s ago: executing program 3 (id=2502): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x2120}], 0x1, 0x0, 0x0, 0x0) signalfd4(r0, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800) 2.610399416s ago: executing program 1 (id=2503): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0xa0142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xfdfe, 0x7, @remote, 0x4}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) 2.431309738s ago: executing program 0 (id=2504): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f00004cb000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x4, 0x0) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/4\x00') (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040088beffffffff"}}}}}, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x2000, 0x0) 1.831757404s ago: executing program 3 (id=2505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000000)={0x0, 0x300, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) 1.700480186s ago: executing program 0 (id=2506): mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = socket(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000a80)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)=[@assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x48, 0x20000881}, 0x8080) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004340)=""/102376, 0x18fe8) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [{0xb6c, 0x0, 0x8000000000000000}, {0x217, 0x0, 0x8000}]}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) r5 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x2) preadv(r5, &(0x7f0000000740)=[{&(0x7f0000000340)=""/162, 0xca80}], 0x1, 0x80000001, 0x3f7a) timer_delete(r4) 1.659705166s ago: executing program 1 (id=2507): mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r1, 0x0, 0x8) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,\xc7', 0x0) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000300)=[{r4, 0x3328}, {r3, 0x4236}], 0x2, 0x0, 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r6, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x48810) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_delete(r8) 1.10392408s ago: executing program 2 (id=2508): mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = socket(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f00000004c0)=[@clear_death], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x138, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14c, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "52087def75c736f85cc7d27338360e8cb966058f66908611a2da3e15d87ea4bbea3d646bddcbf88d74a8f9e560e73cc92e50a1e1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe65daabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf82360c81beb73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f663500"}]}}]}, 0x138}}, 0x0) sendmsg$alg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)=[@assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x48, 0x20000881}, 0x8080) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004340)=""/102376, 0x18fe8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [{0xb24, 0x0, 0x6}, {0x217, 0x0, 0x8000}]}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) r6 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x2) preadv(r6, &(0x7f0000000740)=[{&(0x7f0000000340)=""/162, 0xca80}], 0x1, 0x80000001, 0x3f7a) timer_delete(r5) 859.415522ms ago: executing program 3 (id=2509): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) (async, rerun: 64) socket$inet(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000100)={0x25, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x7}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="3120002b80080001004e41feca112a7214e3b6e4380a295e7d511914cbf4d9b3bee5178583514a526eb2f2733ebd6c86f30d968e3bdbb072e743ff61ff90a1daed72a4a5efa8fbfa0f26c2908ed85a9b9deeb07fd647e321bb8b4bd0137863916ad51d711a7a52da65c5bad5a0e320e1cb1d82317183b290ceab69cd83dc1ff40571f78f293d9e595fe28ed787298868507e65aae1138e6584c79cd9321027aabb06247c536935f83db28347de64b764160eaefe08494c7bf4d3d063aeddf4f6f8f0cdf54c6b47ed6f8cc781eb86", @ANYRES32, @ANYBLOB="080003000200000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) (async) syz_open_procfs(0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="ac0000e0000001e000000101010064010100ffffffff"], 0x28) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) (async) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) (async) ioctl$TCFLSH(r0, 0x400455c8, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 68.898241ms ago: executing program 1 (id=2510): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404000c}, 0x40000) socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_ima(0x0, &(0x7f0000000100), &(0x7f0000000380)=@v2={0x3, 0x2, 0xfe, 0xe79f, 0x1, 'J'}, 0xa, 0x1) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='msdos\x00', 0x0, 0x0) 55.208887ms ago: executing program 0 (id=2511): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in6=@local, 0x8, 0x0, 0x0, 0x0, 0x2}, {0x9, 0x0, 0x0, 0x200, 0x9, 0x7ca, 0x10000000000000}, {0x0, 0xfffffffffffffffc, 0x0, 0x9}, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x3, 0x42, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xf0ffff}, 0x1c) 0s ago: executing program 3 (id=2512): io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) (async) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c000000000b030000000000000000000300000605000100000000000800034000000001080003400000000005000100000000000800024000"], 0x7c}}, 0x4814) (async) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c000000000b030000000000000000000300000605000100000000000800034000000001080003400000000005000100000000000800024000"], 0x7c}}, 0x4814) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000100)={0x410001, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000140)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) (async) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), &(0x7f00000006c0)=@v2={0x2000000, [{0x4e, 0x6}, {0x5, 0x2}]}, 0x14, 0x0) landlock_create_ruleset(0x0, 0x0, 0x3) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) kernel console output (not intermixed with test programs): 0 [ 759.633431][T13189] binder: 13188:13189 ioctl c0306201 200000000080 returned -14 [ 760.393026][T13195] binder: BINDER_SET_CONTEXT_MGR already set [ 760.399416][T13195] binder: 13188:13195 ioctl 4018620d 200000000040 returned -16 [ 761.545461][ T30] audit: type=1400 audit(1757282303.082:918): avc: denied { bind } for pid=13199 comm="syz.3.1740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 761.712763][ T30] audit: type=1400 audit(1757282303.122:919): avc: denied { listen } for pid=13199 comm="syz.3.1740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 761.777289][ T30] audit: type=1400 audit(1757282303.232:920): avc: denied { write } for pid=13199 comm="syz.3.1740" path="socket:[42896]" dev="sockfs" ino=42896 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 761.871581][ T30] audit: type=1400 audit(1757282303.412:921): avc: denied { read } for pid=13199 comm="syz.3.1740" dev="sockfs" ino=42893 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 761.959481][ T30] audit: type=1400 audit(1757282303.442:922): avc: denied { connect } for pid=13186 comm="syz.4.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 762.235176][T13214] overlayfs: failed to resolve './file1': -2 [ 762.657069][ T5911] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 762.664915][ T5988] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 762.817305][ T5911] usb 4-1: Using ep0 maxpacket: 8 [ 762.827591][ T5988] usb 3-1: not running at top speed; connect to a high speed hub [ 762.848237][ T5988] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 762.860140][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 762.877076][ T5911] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 762.886899][ T5988] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 762.909831][ T5988] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 762.919390][ T5988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.928260][ T5911] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 762.937626][ T5988] usb 3-1: Product: ৻붃當ꄨé—蟅䎳턄ힶ빴濵㠑ᡆȿ阀ﲂ䪭紜笢ꅊ뜻┺ᵘé±Ì貙鱙댜槎藕 [ 762.949545][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.957959][ T5911] usb 4-1: Product: syz [ 762.962141][ T5911] usb 4-1: Manufacturer: syz [ 762.966830][ T5911] usb 4-1: SerialNumber: syz [ 762.971548][ T5988] usb 3-1: Manufacturer: ë‰æ„·çˆî¨ãŽï›ç„¦ã®˜æ  Ö”äŠìœ¼á“™î‘»â²ç‰†å¼¼âº•å²½ëŽé–´ëŠŠí“…秀錰䵦熭å‰ãŠ‘翉ì©â¾€ëŸ¸AꔦઔᡬîŸÃ®è›ªé¼Ÿâ‹…ê·âƒ£ã…œëŸ¶åº‡î«´í‹ ëªµïº±ãµ‡î§ƒî†ç‰•ë‰ŒèŠƒæ›¨ï®½é‚ƒí‡­à¿žê™±ä ƒæ¯¸9虮轑ꆪ [ 762.996476][ T5911] usb 4-1: config 0 descriptor?? [ 763.017247][ T5988] usb 3-1: SerialNumber: 乌붗붜腈庻砹鎧擎ឦ既䢔ᆟä•ç²…Ϙᥚá‹ì”–犞é€è‹‚ﲟ獵⭆谢ທã¸à¦•åƒ·íŒ»ä¹¯î—’┫撟膕ꅅ๙龶勢éœå³†è‡” [ 763.551307][ T30] audit: type=1400 audit(1757282305.092:923): avc: denied { ioctl } for pid=13207 comm="syz.2.1741" path="socket:[43427]" dev="sockfs" ino=43427 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 763.887630][ T5988] cdc_ncm 3-1:1.0: bind() failure [ 763.904332][ T5988] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 763.918962][ T5988] cdc_ncm 3-1:1.1: bind() failure [ 763.940117][ T5988] usb 3-1: USB disconnect, device number 41 [ 764.011274][T13206] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1740'. [ 764.800082][T13229] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.852759][T13229] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.894891][T13229] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.089459][T13229] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.354591][ T7647] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.376335][ T7647] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.387056][ T7647] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.396047][ T7647] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.470221][T13244] binder: 13243:13244 ioctl c0306201 200000000080 returned -14 [ 767.205127][T13248] binder: BINDER_SET_CONTEXT_MGR already set [ 767.211460][T13248] binder: 13243:13248 ioctl 4018620d 200000000040 returned -16 [ 767.512493][T13250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1752'. [ 768.397737][ T30] audit: type=1400 audit(1757282309.292:924): avc: denied { read } for pid=13249 comm="syz.4.1752" laddr=::ac14:14aa lport=44135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 769.870339][ T5909] usb 4-1: USB disconnect, device number 40 [ 769.961613][T13273] netlink: 'syz.4.1758': attribute type 1 has an invalid length. [ 771.698714][T13291] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.921420][ T30] audit: type=1400 audit(1757282313.281:925): avc: denied { connect } for pid=13253 comm="syz.2.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 771.922574][T13291] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.132217][T13291] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.258764][T13291] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.370053][T13298] binder: 13297:13298 ioctl c0306201 0 returned -14 [ 772.383049][T13298] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1763'. [ 773.191438][ T49] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.418473][ T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.430462][T13309] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 773.446365][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.560835][T13309] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 773.575182][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.646293][T13309] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 773.832231][T13309] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 774.117313][ T7636] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 774.130707][ T7636] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 774.140965][ T7636] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 774.158992][ T7636] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 774.658894][T13322] overlayfs: failed to resolve './file1': -2 [ 776.674254][T13345] binder: 13343:13345 ioctl c0306201 0 returned -14 [ 776.684867][T13345] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1775'. [ 776.844643][T13348] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:21 [ 777.016828][ T55] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 777.198943][ T55] usb 4-1: Using ep0 maxpacket: 32 [ 777.267485][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.281694][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.503201][T13358] IPVS: rr: FWM 3 0x00000003 - no destination available [ 778.262533][ T55] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 778.497747][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.520162][ T55] usb 4-1: config 0 descriptor?? [ 779.287029][ T55] usbhid 4-1:0.0: can't add hid device: -71 [ 779.293161][ T55] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 779.305438][ T55] usb 4-1: USB disconnect, device number 41 [ 781.505014][T13399] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1786'. [ 781.517915][ T30] audit: type=1400 audit(1757282323.040:926): avc: denied { create } for pid=13396 comm="syz.1.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 781.655601][ T30] audit: type=1400 audit(1757282323.040:927): avc: denied { setopt } for pid=13396 comm="syz.1.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 782.167033][T13414] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:21 [ 782.212439][ T30] audit: type=1400 audit(1757282323.760:928): avc: denied { wake_alarm } for pid=13415 comm="syz.1.1790" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 782.233631][ C0] vkms_vblank_simulate: vblank timer overrun [ 782.357046][T13414] IPVS: rr: FWM 3 0x00000003 - no destination available [ 782.704992][T13425] hub 9-0:1.0: USB hub found [ 782.712066][T13425] hub 9-0:1.0: 1 port detected [ 783.295891][ T30] audit: type=1400 audit(1757282324.240:929): avc: denied { connect } for pid=13419 comm="syz.0.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 784.446398][T13441] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 785.071970][T13452] netlink: 'syz.0.1798': attribute type 3 has an invalid length. [ 785.082414][T13452] netlink: 'syz.0.1798': attribute type 1 has an invalid length. [ 785.125692][T13454] binder: 13453:13454 ioctl c0306201 200000000080 returned -14 [ 785.135616][T13452] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1798'. [ 785.169681][T13452] NCSI netlink: No device for ifindex 33022 [ 785.219846][ T980] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 785.357035][ T30] audit: type=1400 audit(1757282326.890:930): avc: denied { connect } for pid=13451 comm="syz.0.1798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 785.549616][ T980] usb 2-1: Using ep0 maxpacket: 32 [ 786.009862][ T980] usb 2-1: config 0 interface 0 has no altsetting 0 [ 786.018684][ T980] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 786.059880][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.127732][T13464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1800'. [ 786.137070][T13464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1800'. [ 786.575354][ T980] usb 2-1: Product: syz [ 786.600584][ T980] usb 2-1: Manufacturer: syz [ 786.605240][ T980] usb 2-1: SerialNumber: syz [ 786.622790][ T980] usb 2-1: config 0 descriptor?? [ 786.808167][ T30] audit: type=1400 audit(1757282328.350:931): avc: denied { setattr } for pid=13469 comm="syz.4.1802" name="vcs" dev="devtmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 787.109773][ T5909] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 787.424829][ T5909] usb 5-1: config 0 has an invalid interface number: 247 but max is 2 [ 787.442236][ T5909] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 787.454611][T13478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.471999][T11619] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 787.474650][T13478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.489915][ T5909] usb 5-1: config 0 has an invalid interface number: 95 but max is 2 [ 787.498074][ T5909] usb 5-1: config 0 has an invalid interface number: 26 but max is 2 [ 787.532822][ T980] gs_usb 2-1:0.0: Couldn't send data format (err=-71) [ 787.547300][ T980] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 787.556284][ T5909] usb 5-1: config 0 has an invalid interface number: 147 but max is 2 [ 787.604362][ T980] usb 2-1: USB disconnect, device number 32 [ 787.616669][ T5909] usb 5-1: config 0 has an invalid interface number: 131 but max is 2 [ 787.630651][ T5909] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 787.640758][ T5909] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 787.652601][ T5909] usb 5-1: config 0 has 5 interfaces, different from the descriptor's value: 3 [ 787.663090][ T5909] usb 5-1: config 0 has no interface number 0 [ 787.669282][ T5909] usb 5-1: config 0 has no interface number 1 [ 787.675602][ T5909] usb 5-1: config 0 has no interface number 2 [ 787.681812][ T5909] usb 5-1: config 0 has no interface number 3 [ 787.687895][ T5909] usb 5-1: config 0 has no interface number 4 [ 787.705389][T11619] usb 3-1: Using ep0 maxpacket: 16 [ 787.705506][ T5909] usb 5-1: config 0 interface 247 altsetting 129 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 787.721708][ T5909] usb 5-1: config 0 interface 247 altsetting 129 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 787.732092][T11619] usb 3-1: too many configurations: 130, using maximum allowed: 8 [ 787.733835][ T5909] usb 5-1: config 0 interface 247 altsetting 129 has an endpoint descriptor with address 0x5F, changing to 0xF [ 787.753516][ T5909] usb 5-1: config 0 interface 247 altsetting 129 has a duplicate endpoint with address 0xF, skipping [ 787.772781][T11619] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 787.773073][ T5909] usb 5-1: config 0 interface 247 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 787.781519][T11619] usb 3-1: can't read configurations, error -61 [ 787.814513][ T5909] usb 5-1: config 0 interface 95 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 787.827756][ T5909] usb 5-1: config 0 interface 95 altsetting 4 endpoint 0x4 has invalid wMaxPacketSize 0 [ 787.843069][ T5909] usb 5-1: config 0 interface 95 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 787.854159][ T5909] usb 5-1: config 0 interface 95 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 787.869601][ T5909] usb 5-1: config 0 interface 95 altsetting 4 endpoint 0x3 has invalid wMaxPacketSize 0 [ 787.880236][ T5909] usb 5-1: config 0 interface 95 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 787.891136][ T5909] usb 5-1: config 0 interface 95 altsetting 4 has 6 endpoint descriptors, different from the interface descriptor's value: 10 [ 787.904918][ T5909] usb 5-1: too many endpoints for config 0 interface 26 altsetting 233: 188, using maximum allowed: 30 [ 787.916444][ T5909] usb 5-1: config 0 interface 26 altsetting 233 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 787.932007][T13488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 787.945609][T13488] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1808'. [ 787.998911][T13488] syz.0.1808 (13488): drop_caches: 2 [ 788.004356][T11619] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 788.074763][ T5909] usb 5-1: config 0 interface 26 altsetting 233 has a duplicate endpoint with address 0x7, skipping [ 788.168717][ T5909] usb 5-1: config 0 interface 26 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 188 [ 788.359956][T11619] usb 3-1: Using ep0 maxpacket: 16 [ 788.402009][T11619] usb 3-1: too many configurations: 130, using maximum allowed: 8 [ 788.424397][ T5909] usb 5-1: too many endpoints for config 0 interface 147 altsetting 4: 228, using maximum allowed: 30 [ 788.436191][ T5909] usb 5-1: config 0 interface 147 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 788.447694][T11619] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 788.448064][ T5909] usb 5-1: config 0 interface 147 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 228 [ 788.471289][ T5909] usb 5-1: config 0 interface 131 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 788.502320][ T5909] usb 5-1: config 0 interface 131 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 788.613344][ T5909] usb 5-1: config 0 interface 131 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 788.624175][ T5909] usb 5-1: config 0 interface 131 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 788.634967][ T5909] usb 5-1: config 0 interface 131 altsetting 1 endpoint 0x8 has an invalid bInterval 184, changing to 11 [ 788.646354][ T5909] usb 5-1: config 0 interface 131 altsetting 1 endpoint 0x8 has invalid maxpacket 1088, setting to 1024 [ 788.657887][ T5909] usb 5-1: config 0 interface 131 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 788.672565][T11619] usb 3-1: can't read configurations, error -61 [ 788.730968][T11619] usb usb3-port1: attempt power cycle [ 789.169272][ T5909] usb 5-1: config 0 interface 131 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 789.428282][ T5909] usb 5-1: config 0 interface 131 altsetting 1 endpoint 0xE has an invalid bInterval 143, changing to 11 [ 789.459369][ T5909] usb 5-1: config 0 interface 131 altsetting 1 endpoint 0x9 has an invalid bInterval 113, changing to 10 [ 789.505364][ T5909] usb 5-1: config 0 interface 131 altsetting 1 endpoint 0x9 has invalid wMaxPacketSize 0 [ 789.794900][T13504] binder: 13502:13504 ioctl c0306201 200000000080 returned -14 [ 789.835453][ T5909] usb 5-1: config 0 interface 131 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 789.850048][T11619] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 789.974399][T11619] usb 3-1: device descriptor read/8, error -71 [ 790.627569][ T5909] usb 5-1: config 0 interface 131 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 790.640252][ T5909] usb 5-1: config 0 interface 247 has no altsetting 0 [ 790.647083][ T5909] usb 5-1: config 0 interface 95 has no altsetting 0 [ 790.654222][ T5909] usb 5-1: config 0 interface 26 has no altsetting 0 [ 790.661019][ T5909] usb 5-1: config 0 interface 147 has no altsetting 0 [ 790.668380][ T5909] usb 5-1: config 0 interface 131 has no altsetting 0 [ 790.680756][ T5909] usb 5-1: string descriptor 0 read error: -71 [ 790.687076][ T5909] usb 5-1: New USB device found, idVendor=0403, idProduct=ff1c, bcdDevice=c8.b8 [ 790.700123][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.720883][ T5909] usb 5-1: config 0 descriptor?? [ 790.726741][ T5909] usb 5-1: can't set config #0, error -71 [ 790.740464][ T5909] usb 5-1: USB disconnect, device number 45 [ 791.565427][ T30] audit: type=1400 audit(1757282333.109:932): avc: denied { watch_reads } for pid=13507 comm="syz.2.1814" path="/341" dev="tmpfs" ino=1830 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 791.597975][T13519] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1816'. [ 791.609198][ T30] audit: type=1400 audit(1757282333.149:933): avc: denied { open } for pid=13518 comm="syz.3.1816" path="/dev/ttyqb" dev="devtmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 795.094879][T13547] block nbd4: Attempted send on invalid socket [ 795.102669][T13547] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 795.113636][T13547] SQUASHFS error: Failed to read block 0x0: -5 [ 795.120204][T13547] unable to read squashfs_super_block [ 795.191640][ T55] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 795.248624][ T30] audit: type=1400 audit(1757282336.789:934): avc: denied { listen } for pid=13542 comm="syz.4.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 795.283270][ T30] audit: type=1400 audit(1757282336.789:935): avc: denied { accept } for pid=13542 comm="syz.4.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 795.400948][ T55] usb 2-1: device descriptor read/64, error -71 [ 795.640633][ T55] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 795.665709][ T30] audit: type=1400 audit(1757282337.209:936): avc: denied { accept } for pid=13542 comm="syz.4.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 795.775309][ T55] usb 2-1: device descriptor read/64, error -71 [ 795.913372][ T55] usb usb2-port1: attempt power cycle [ 796.379692][T11618] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 796.440899][ T55] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 796.463193][ T55] usb 2-1: Using ep0 maxpacket: 16 [ 796.469275][ T55] usb 2-1: too many configurations: 226, using maximum allowed: 8 [ 796.502782][ T55] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 212 [ 796.686827][ T55] usb 2-1: can't read configurations, error -22 [ 797.134107][T11618] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 797.151096][T11618] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 797.162223][T11618] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 797.274002][ T55] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 797.281846][T11618] usb 5-1: config 1 has no interface number 1 [ 797.290277][T11618] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 797.309591][T11618] usb 5-1: too many endpoints for config 1 interface 2 altsetting 116: 111, using maximum allowed: 30 [ 797.856087][ T55] usb 2-1: Using ep0 maxpacket: 16 [ 797.864301][T11618] usb 5-1: config 1 interface 2 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 797.878074][T11618] usb 5-1: config 1 interface 2 has no altsetting 1 [ 797.887913][ T55] usb 2-1: too many configurations: 226, using maximum allowed: 8 [ 797.901493][ T55] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 212 [ 797.912556][ T55] usb 2-1: can't read configurations, error -22 [ 797.919433][ T55] usb usb2-port1: unable to enumerate USB device [ 798.367506][T11618] usb 5-1: string descriptor 0 read error: -71 [ 798.387550][T11618] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 798.440694][T11618] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.480291][T11618] usb 5-1: can't set config #1, error -71 [ 798.509347][T11618] usb 5-1: USB disconnect, device number 46 [ 798.547771][T13578] binder: 13577:13578 ioctl c0306201 200000000080 returned -14 [ 798.593765][ T30] audit: type=1400 audit(1757282340.138:937): avc: denied { ioctl } for pid=13579 comm="syz.2.1832" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 798.870642][ T30] audit: type=1400 audit(1757282340.178:938): avc: denied { write } for pid=13579 comm="syz.2.1832" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 800.939068][ T30] audit: type=1400 audit(1757282342.438:939): avc: denied { read write } for pid=13597 comm="syz.3.1837" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 801.281527][ T30] audit: type=1400 audit(1757282342.438:940): avc: denied { open } for pid=13597 comm="syz.3.1837" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 801.393401][T13608] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.556497][T13608] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.596785][ T30] audit: type=1400 audit(1757282343.138:941): avc: denied { write } for pid=13614 comm="syz.4.1840" name="usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 801.620163][ C0] vkms_vblank_simulate: vblank timer overrun [ 801.820041][T13615] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 801.834424][T13608] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.897161][T13608] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.038773][ T7636] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.050714][ T7636] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.067135][ T7636] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.079224][ T7636] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.655564][T13633] ceph: No mds server is up or the cluster is laggy [ 803.685675][T13643] binder: 13641:13643 ioctl c0306201 200000000080 returned -14 [ 803.752940][T13642] sctp: [Deprecated]: syz.2.1846 (pid 13642) Use of struct sctp_assoc_value in delayed_ack socket option. [ 803.752940][T13642] Use struct sctp_sack_info instead [ 803.864450][ T30] audit: type=1400 audit(1757282345.398:942): avc: denied { append } for pid=13644 comm="syz.3.1849" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 803.887768][ C0] vkms_vblank_simulate: vblank timer overrun [ 804.651740][ T30] audit: type=1400 audit(1757282345.398:943): avc: denied { map } for pid=13644 comm="syz.3.1849" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 804.706311][ T30] audit: type=1400 audit(1757282345.398:944): avc: denied { write execute } for pid=13644 comm="syz.3.1849" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 805.723472][T13670] binder: 13669:13670 ioctl c0306201 0 returned -14 [ 805.735981][T13670] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1854'. [ 807.002141][T13681] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.056222][T13681] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.126574][T13681] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.187716][T13681] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.290880][ T7636] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.300846][ T7636] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.345130][ T7636] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.369676][ T7636] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.810889][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.817458][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.045918][ T30] audit: type=1400 audit(1757282350.587:945): avc: denied { write } for pid=13691 comm="syz.0.1858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 809.466003][T13703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13703 comm=syz.1.1861 [ 811.135175][T13724] netlink: 'syz.1.1867': attribute type 21 has an invalid length. [ 811.173059][T13727] binder: 13725:13727 ioctl c0306201 0 returned -14 [ 811.185504][T13727] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1868'. [ 811.220987][ T30] audit: type=1400 audit(1757282352.747:946): avc: denied { ioctl } for pid=13729 comm="syz.0.1869" path="socket:[45801]" dev="sockfs" ino=45801 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 812.328545][T13758] CIFS mount error: No usable UNC path provided in device string! [ 812.328545][T13758] [ 812.338678][T13758] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 812.598351][T11618] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 812.748818][ T55] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 812.803701][T11618] usb 3-1: config index 0 descriptor too short (expected 14385, got 27) [ 812.849373][T11618] usb 3-1: config 52 has too many interfaces: 52, using maximum allowed: 32 [ 812.935706][T11618] usb 3-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config [ 813.032930][ T55] usb 5-1: Using ep0 maxpacket: 32 [ 813.047421][T11618] usb 3-1: config 52 has 0 interfaces, different from the descriptor's value: 52 [ 813.113523][ T55] usb 5-1: unable to get BOS descriptor or descriptor too short [ 813.125634][T11618] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 813.149062][ T55] usb 5-1: config 244 has an invalid interface number: 68 but max is 0 [ 813.161103][T11618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.171815][ T55] usb 5-1: config 244 has no interface number 0 [ 813.181977][ T55] usb 5-1: config 244 interface 68 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 813.222367][ T55] usb 5-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 813.274091][ T55] usb 5-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 813.285549][ T55] usb 5-1: config 244 interface 68 has no altsetting 0 [ 813.390055][ T55] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f [ 813.423756][T11618] usb 3-1: string descriptor 0 read error: -71 [ 813.445762][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.495307][T11618] usb 3-1: USB disconnect, device number 46 [ 813.507751][ T55] usb 5-1: Product: syz [ 813.511973][ T55] usb 5-1: Manufacturer: syz [ 813.529224][ T55] usb 5-1: SerialNumber: syz [ 813.544603][T13758] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 817.619854][T13797] overlayfs: failed to resolve './file1': -2 [ 818.609730][ T55] comedi comedi5: Endpoint has wrong direction [ 818.616041][ T55] dt9812 5-1:244.68: driver 'dt9812' failed to auto-configure device. [ 819.210917][T13821] overlayfs: failed to resolve './file1': -2 [ 819.322656][ T5911] usb 5-1: USB disconnect, device number 47 [ 820.768554][T13829] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.819114][T13829] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.881072][T13829] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.037805][T13829] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.030265][ T969] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.080004][ T969] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.122030][ T969] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.175754][ T969] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.820973][T13857] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.894415][T13859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 822.909930][T13859] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1894'. [ 822.943698][T13859] syz.2.1894 (13859): drop_caches: 2 [ 823.037137][T13857] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.145064][T13857] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.341690][T13857] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.208204][ T49] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.218018][ T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.227035][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.236189][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.107343][T13858] tipc: Enabling of bearer rejected, already enabled [ 825.488539][T13881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13881 comm=syz.1.1897 [ 825.893902][ T5909] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 826.102351][ T5909] usb 5-1: config index 0 descriptor too short (expected 14385, got 27) [ 826.364349][ T5909] usb 5-1: config 52 has too many interfaces: 52, using maximum allowed: 32 [ 826.373069][ T5909] usb 5-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config [ 826.581698][ T5909] usb 5-1: config 52 has 0 interfaces, different from the descriptor's value: 52 [ 826.608173][ T5909] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 826.856967][ T5988] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 826.874040][T13900] netlink: 'syz.1.1902': attribute type 4 has an invalid length. [ 826.958801][ T5988] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 826.987196][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.247115][T13910] binder: 13909:13910 ioctl c0306201 200000000080 returned -14 [ 829.653891][ T5909] usb 5-1: can't set config #52, error -71 [ 829.696616][ T5909] usb 5-1: USB disconnect, device number 48 [ 830.253082][T13928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1908'. [ 830.262188][T13928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1908'. [ 830.570743][ T30] audit: type=1400 audit(1757282372.095:947): avc: denied { read } for pid=13929 comm="syz.1.1909" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 830.827193][ T30] audit: type=1400 audit(1757282372.095:948): avc: denied { open } for pid=13929 comm="syz.1.1909" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 830.854370][ T30] audit: type=1400 audit(1757282372.095:949): avc: denied { ioctl } for pid=13929 comm="syz.1.1909" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 830.890722][ T5911] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 831.054045][ T30] audit: type=1400 audit(1757282372.095:950): avc: denied { name_bind } for pid=13929 comm="syz.1.1909" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 831.129396][ T5911] usb 2-1: config 0 has no interfaces? [ 831.135838][ T5911] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 831.231156][T13940] 9pnet_fd: Insufficient options for proto=fd [ 831.631228][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.717312][ T5911] usb 2-1: config 0 descriptor?? [ 831.917690][T13947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13947 comm=syz.2.1913 [ 832.152121][T13951] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1914'. [ 832.192031][T13951] 0ªX¹¦À: renamed from caif0 [ 832.202800][T13951] 0ªX¹¦À: entered allmulticast mode [ 832.209280][T13951] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 832.236676][T13955] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 832.351853][T11619] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 832.653436][T11619] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 832.663622][T11619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.685865][T11619] usb 3-1: Product: syz [ 832.690227][T11619] usb 3-1: Manufacturer: syz [ 832.695057][T11619] usb 3-1: SerialNumber: syz [ 832.889977][T13955] bridge3: entered allmulticast mode [ 832.901237][T11619] usb 3-1: config 0 descriptor?? [ 832.913881][T11619] usb 3-1: Waiting for MOTU Microbook II to boot up... [ 832.931240][T11619] usb 3-1: failed setting the sample rate for Motu MicroBook II: -22 [ 832.950339][T11619] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 833.113699][T13959] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 833.156482][ T5911] usb 3-1: USB disconnect, device number 47 [ 833.887822][ T980] usb 2-1: USB disconnect, device number 37 [ 834.267056][ T30] audit: type=1400 audit(1757282375.795:951): avc: denied { bind } for pid=13960 comm="syz.3.1917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 834.287494][ C0] vkms_vblank_simulate: vblank timer overrun [ 834.539387][ T30] audit: type=1400 audit(1757282376.075:952): avc: denied { getopt } for pid=13985 comm="syz.2.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 835.552403][T13994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50014 sclass=netlink_route_socket pid=13994 comm=syz.0.1925 [ 835.653115][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1925'. [ 835.807282][T13999] binder: 13997:13999 ioctl c0306201 200000000080 returned -14 [ 837.923394][T14036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 838.411949][T14032] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1932'. [ 838.431533][T14032] syz.2.1932 (14032): drop_caches: 2 [ 839.881768][ T30] audit: type=1400 audit(1757282381.414:953): avc: denied { bind } for pid=14049 comm="syz.4.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 839.948348][T14051] block nbd4: Attempted send on invalid socket [ 839.963678][T14053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1937'. [ 839.994646][T14051] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 840.001871][T14053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1937'. [ 840.034413][T14051] block nbd4: Attempted send on invalid socket [ 840.065716][T14051] I/O error, dev nbd4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 840.106958][T14059] netlink: 'syz.2.1940': attribute type 5 has an invalid length. [ 840.391566][T14051] Mount JFS Failure: -5 [ 840.554168][T14050] block nbd4: Attempted send on invalid socket [ 841.099016][T14050] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 841.125711][T14050] block nbd4: Attempted send on invalid socket [ 841.847737][T14050] I/O error, dev nbd4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 841.857181][ T5911] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 842.055770][ T5911] usb 4-1: Using ep0 maxpacket: 8 [ 842.155673][ T5911] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 842.174287][T14050] Mount JFS Failure: -5 [ 842.185033][ T5911] usb 4-1: config 179 has no interface number 0 [ 842.219516][ T5911] usb 4-1: config 179 interface 65 altsetting 45 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 842.390122][T14072] netlink: 'syz.2.1944': attribute type 4 has an invalid length. [ 842.583304][ T5911] usb 4-1: config 179 interface 65 altsetting 45 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 842.647760][ T5911] usb 4-1: config 179 interface 65 altsetting 45 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 842.795695][ T5911] usb 4-1: config 179 interface 65 altsetting 45 endpoint 0x83 has invalid wMaxPacketSize 0 [ 842.806215][ T5911] usb 4-1: config 179 interface 65 altsetting 45 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 842.819853][ T5911] usb 4-1: config 179 interface 65 has no altsetting 0 [ 842.827661][ T5911] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 842.837125][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.941744][T14083] binder: 14081:14083 ioctl c0306201 0 returned -14 [ 843.543348][ T5911] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input21 [ 844.561826][ T5911] usb 4-1: USB disconnect, device number 42 [ 844.567923][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 844.678330][T14101] binder: 14100:14101 ioctl c0306201 0 returned -14 [ 844.994652][T14107] CIFS mount error: No usable UNC path provided in device string! [ 844.994652][T14107] [ 845.080013][T14107] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 845.925979][T11619] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 846.127444][T11619] usb 3-1: Using ep0 maxpacket: 32 [ 846.406846][T11619] usb 3-1: unable to get BOS descriptor or descriptor too short [ 846.752299][T11619] usb 3-1: config 244 has an invalid interface number: 68 but max is 0 [ 846.760769][T11619] usb 3-1: config 244 has no interface number 0 [ 846.774825][T11619] usb 3-1: config 244 interface 68 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 846.792726][T11619] usb 3-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 846.820025][T11619] usb 3-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 846.869084][T11619] usb 3-1: config 244 interface 68 has no altsetting 0 [ 846.883867][T11619] usb 3-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f [ 846.894991][T14124] netlink: 'syz.1.1957': attribute type 11 has an invalid length. [ 846.908485][T11619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.920018][T14124] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1957'. [ 846.930240][T11619] usb 3-1: Product: syz [ 846.934758][T11619] usb 3-1: Manufacturer: syz [ 846.941018][T11619] usb 3-1: SerialNumber: syz [ 846.963609][T14110] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 847.031246][ T30] audit: type=1400 audit(1757282388.553:954): avc: denied { getopt } for pid=14125 comm="syz.3.1958" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 847.138130][T14129] netlink: zone id is out of range [ 847.143853][T14129] netlink: zone id is out of range [ 847.149485][T14129] netlink: zone id is out of range [ 847.159435][T14129] netlink: zone id is out of range [ 847.164749][T14129] netlink: zone id is out of range [ 847.311738][T14129] netlink: zone id is out of range [ 847.317180][T14129] netlink: zone id is out of range [ 847.322555][T14129] netlink: zone id is out of range [ 847.328061][T14129] netlink: zone id is out of range [ 847.333361][T14129] netlink: zone id is out of range [ 848.313553][T14138] CIFS mount error: No usable UNC path provided in device string! [ 848.313553][T14138] [ 848.362888][T14138] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 848.539384][T14141] binder: 14140:14141 ioctl c0306201 0 returned -14 [ 848.916538][ T55] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 848.958693][T11619] comedi comedi5: Endpoint has wrong direction [ 849.019987][T11619] dt9812 3-1:244.68: driver 'dt9812' failed to auto-configure device. [ 849.076744][ T55] usb 2-1: Using ep0 maxpacket: 32 [ 849.126388][T11619] usb 3-1: USB disconnect, device number 48 [ 849.183215][ T55] usb 2-1: unable to get BOS descriptor or descriptor too short [ 849.466133][ T55] usb 2-1: config 244 has an invalid interface number: 68 but max is 0 [ 849.617952][ T55] usb 2-1: config 244 has no interface number 0 [ 849.725234][ T55] usb 2-1: config 244 interface 68 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 849.808190][ T55] usb 2-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 849.901739][ T55] usb 2-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 849.984607][ T55] usb 2-1: config 244 interface 68 has no altsetting 0 [ 850.056592][ T55] usb 2-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f [ 850.096699][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.515683][T14165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1965'. [ 850.555360][ T55] usb 2-1: Product: syz [ 850.571995][ T55] usb 2-1: Manufacturer: syz [ 850.597046][ T55] usb 2-1: SerialNumber: syz [ 852.400706][ T55] usb 2-1: can't set config #244, error -71 [ 852.451032][ T55] usb 2-1: USB disconnect, device number 38 [ 852.805908][T14197] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1972'. [ 854.036990][T11619] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 854.236944][T11619] usb 4-1: device descriptor read/64, error -71 [ 854.284588][ T30] audit: type=1400 audit(1757282395.812:955): avc: denied { bind } for pid=14199 comm="syz.4.1973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 854.567165][T11619] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 855.099321][T14202] tipc: Enabled bearer , priority 0 [ 855.111728][T14202] syzkaller0: entered promiscuous mode [ 855.118203][T14202] syzkaller0: entered allmulticast mode [ 855.227205][T11619] usb 4-1: device descriptor read/64, error -71 [ 855.313110][T14202] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 855.337326][T11619] usb usb4-port1: attempt power cycle [ 855.359431][T14202] net_ratelimit: 24 callbacks suppressed [ 855.359444][T14202] syzkaller0: mtu less than device minimum [ 855.398143][T14201] tipc: Resetting bearer [ 855.528394][T14201] tipc: Disabling bearer [ 856.376426][T14214] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 856.406657][T14213] netlink: 264 bytes leftover after parsing attributes in process `syz.3.1977'. [ 856.421066][T14214] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 856.913525][T14214] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 857.049022][T14214] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 857.223632][ T7636] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 857.237343][ T30] audit: type=1400 audit(1757282398.672:956): avc: denied { write } for pid=14220 comm="syz.2.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 857.437539][ T7636] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 857.446198][T14229] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 857.454189][ T7636] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 857.481032][ T7654] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 857.536145][T14229] trusted_key: encrypted_key: insufficient parameters specified [ 857.600347][T14237] /dev/nullb0: Can't open blockdev [ 858.375713][T14247] CIFS mount error: No usable UNC path provided in device string! [ 858.375713][T14247] [ 858.490329][T14247] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 858.727533][ T980] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 859.007527][ T980] usb 5-1: Using ep0 maxpacket: 32 [ 859.555866][ T980] usb 5-1: unable to get BOS descriptor or descriptor too short [ 859.566567][ T980] usb 5-1: config 244 has an invalid interface number: 68 but max is 0 [ 859.575961][ T980] usb 5-1: config 244 has no interface number 0 [ 859.586146][ T980] usb 5-1: config 244 interface 68 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 859.757608][ T980] usb 5-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 860.476405][ T980] usb 5-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 860.542078][ T980] usb 5-1: config 244 interface 68 has no altsetting 0 [ 861.603585][ T30] audit: type=1400 audit(1757282403.142:957): avc: denied { mount } for pid=14276 comm="syz.0.1993" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 862.068997][ T980] usb 5-1: string descriptor 0 read error: -71 [ 862.076523][ T980] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f [ 862.117771][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.198050][ T980] usb 5-1: can't set config #244, error -71 [ 862.215461][ T980] usb 5-1: USB disconnect, device number 49 [ 862.272590][T14284] binder: 14283:14284 ioctl c0306201 0 returned -14 [ 864.257951][ T30] audit: type=1800 audit(1757282404.602:958): pid=14292 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1996" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 864.673421][T11619] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 865.298416][T14307] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1999'. [ 865.371125][T11619] usb 3-1: Using ep0 maxpacket: 32 [ 865.468939][T11619] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 865.477261][T11619] usb 3-1: config 0 has no interface number 0 [ 865.529328][T11619] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 865.550823][T11619] usb 3-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 865.655089][T11619] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 865.690905][T11619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.719688][T11619] usb 3-1: Product: syz [ 865.739191][T11619] usb 3-1: Manufacturer: syz [ 865.758211][T11619] usb 3-1: SerialNumber: syz [ 865.898780][T11619] usb 3-1: config 0 descriptor?? [ 865.922029][T11619] smsc95xx v2.0.0 [ 865.928784][T11619] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 865.949957][T11619] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 866.020858][ T30] audit: type=1400 audit(1757282407.561:959): avc: denied { bind } for pid=14309 comm="syz.3.2000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 866.024422][T14313] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 866.128496][T14331] CIFS mount error: No usable UNC path provided in device string! [ 866.128496][T14331] [ 866.138746][T14331] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 866.507101][T11619] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 866.836255][T11619] usb 2-1: Using ep0 maxpacket: 32 [ 867.320436][T14346] CIFS mount error: No usable UNC path provided in device string! [ 867.320436][T14346] [ 867.330681][T14346] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 867.491941][T14344] binder: 14338:14344 ioctl c0306201 0 returned -14 [ 867.555998][T11619] usb 2-1: unable to get BOS descriptor or descriptor too short [ 867.908318][T11619] usb 2-1: config 244 has an invalid interface number: 68 but max is 0 [ 868.028630][ T43] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 868.032343][T11619] usb 2-1: config 244 has no interface number 0 [ 868.191446][T11619] usb 2-1: config 244 interface 68 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 868.237756][T11619] usb 2-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 868.285106][T11619] usb 2-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 868.318895][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 868.338120][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 868.356987][T11619] usb 2-1: config 244 interface 68 has no altsetting 0 [ 868.374803][ T43] usb 5-1: config 244 has an invalid interface number: 68 but max is 0 [ 868.384491][T11619] usb 2-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f [ 868.390575][ T43] usb 5-1: config 244 has no interface number 0 [ 868.407228][ T43] usb 5-1: config 244 interface 68 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 868.422435][ T43] usb 5-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 868.422646][T11619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.445680][ T43] usb 5-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 868.479896][ T43] usb 5-1: config 244 interface 68 has no altsetting 0 [ 868.492021][T11619] usb 2-1: Product: syz [ 868.513914][T14359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 868.533211][T14359] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2010'. [ 868.643733][T14359] syz.0.2010 (14359): drop_caches: 2 [ 868.656260][T11619] usb 2-1: Manufacturer: syz [ 868.659437][ T43] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f [ 868.670909][T11619] usb 2-1: SerialNumber: syz [ 868.674882][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.692207][ T43] usb 5-1: Product: syz [ 868.694200][T14331] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 868.696597][ T43] usb 5-1: Manufacturer: syz [ 868.736650][ T43] usb 5-1: SerialNumber: syz [ 868.752386][T14346] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 868.966157][ T980] usb 3-1: USB disconnect, device number 49 [ 869.055440][T14367] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:21 [ 869.411158][T14373] SELinux: Context /usr/sbin/cups-browsed is not valid (left unmapped). [ 869.437761][ T30] audit: type=1400 audit(1757282410.971:960): avc: denied { relabelto } for pid=14372 comm="syz.2.2014" name="pm_wakeup_irq" dev="sysfs" ino=1417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="/usr/sbin/cups-browsed" [ 869.552781][ T30] audit: type=1400 audit(1757282410.971:961): avc: denied { associate } for pid=14372 comm="syz.2.2014" name="pm_wakeup_irq" dev="sysfs" ino=1417 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 srawcon="/usr/sbin/cups-browsed" [ 869.659548][T11619] usb 2-1: can't set config #244, error -71 [ 869.748861][T11619] usb 2-1: USB disconnect, device number 39 [ 869.868843][ T55] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 870.018640][ T55] usb 3-1: Using ep0 maxpacket: 8 [ 870.035649][ T55] usb 3-1: config 162 has an invalid interface number: 197 but max is 0 [ 870.045178][ T55] usb 3-1: config 162 has no interface number 0 [ 870.058603][ T55] usb 3-1: config 162 interface 197 has no altsetting 0 [ 870.073656][ T55] usb 3-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7 [ 870.083972][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.112201][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.118642][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.304461][ T55] usb 3-1: Product: syz [ 870.309226][ T55] usb 3-1: Manufacturer: syz [ 870.313850][ T55] usb 3-1: SerialNumber: syz [ 870.338084][ T43] comedi comedi5: Endpoint has wrong direction [ 870.370463][ T43] dt9812 5-1:244.68: driver 'dt9812' failed to auto-configure device. [ 870.944650][ T43] usb 5-1: USB disconnect, device number 50 [ 870.956129][ T55] usb 3-1: USB disconnect, device number 50 [ 871.317716][ T30] audit: type=1400 audit(1757282412.801:962): avc: denied { ioctl } for pid=14383 comm="syz.0.2018" path="socket:[48030]" dev="sockfs" ino=48030 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 871.358286][ T30] audit: type=1326 audit(1757282412.891:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.1.2019" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f284f98ebe9 code=0x0 [ 872.706292][T14391] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 873.082522][T14391] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 873.129899][T14407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2025'. [ 873.305805][T14391] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 873.711349][T14391] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 873.846480][ T7634] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 873.867357][T14411] CIFS mount error: No usable UNC path provided in device string! [ 873.867357][T14411] [ 873.877643][T14411] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 873.911348][ T7634] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 873.942099][ T7634] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 873.953055][ T7634] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 874.199580][ T980] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 874.639086][ T980] usb 5-1: Using ep0 maxpacket: 32 [ 874.651233][ T980] usb 5-1: unable to get BOS descriptor or descriptor too short [ 874.662686][ T980] usb 5-1: config 244 has an invalid interface number: 68 but max is 0 [ 874.811864][ T980] usb 5-1: config 244 has no interface number 0 [ 874.925942][ T980] usb 5-1: config 244 interface 68 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 874.956794][ T980] usb 5-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 875.004942][ T980] usb 5-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 875.039351][ T980] usb 5-1: config 244 interface 68 has no altsetting 0 [ 875.052099][ T980] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f [ 875.062106][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.071479][ T980] usb 5-1: Product: syz [ 875.086060][ T980] usb 5-1: Manufacturer: syz [ 875.096219][ T980] usb 5-1: SerialNumber: syz [ 875.114215][T14411] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 877.569626][ T980] comedi comedi5: Endpoint has wrong direction [ 877.583642][ T980] dt9812 5-1:244.68: driver 'dt9812' failed to auto-configure device. [ 877.605578][ T980] usb 5-1: USB disconnect, device number 51 [ 878.398423][T14465] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14465 comm=syz.0.2040 [ 878.425078][T14467] netlink: 264 bytes leftover after parsing attributes in process `syz.3.2041'. [ 878.439611][T11618] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 878.512616][T14469] overlayfs: failed to resolve './file0': -2 [ 878.926987][ T30] audit: type=1400 audit(1757282420.450:964): avc: denied { connect } for pid=14460 comm="syz.4.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 879.069552][T11618] usb 2-1: Using ep0 maxpacket: 16 [ 879.089339][T11618] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 879.099330][T11618] usb 2-1: config 0 has no interface number 0 [ 879.113909][T11618] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 879.123191][T11618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.131363][T11618] usb 2-1: Product: syz [ 879.136376][T11618] usb 2-1: Manufacturer: syz [ 879.141076][T11618] usb 2-1: SerialNumber: syz [ 879.150300][T11618] usb 2-1: config 0 descriptor?? [ 879.165825][T11618] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 880.348070][T11618] gspca_spca1528: reg_w err -110 [ 880.479961][T11618] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 881.655273][T14499] fuse: Bad value for 'rootmode' [ 881.670448][ T30] audit: type=1400 audit(1757282423.200:965): avc: denied { mount } for pid=14491 comm="syz.4.2045" name="/" dev="autofs" ino=49528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 882.319573][T14502] uprobe: syz.3.2047:14502 failed to unregister, leaking uprobe [ 882.347724][T14502] uprobe: syz.3.2047:14502 failed to unregister, leaking uprobe [ 882.478655][T11619] usb 2-1: USB disconnect, device number 40 [ 883.029544][T14520] tmpfs: Group quota inode hardlimit too large. [ 883.131970][ T30] audit: type=1400 audit(1757282424.669:966): avc: denied { unmount } for pid=5851 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 884.506980][T14543] netlink: 'syz.1.2057': attribute type 1 has an invalid length. [ 884.515053][T14543] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2057'. [ 884.585247][ T30] audit: type=1400 audit(1757282426.119:967): avc: denied { getopt } for pid=14537 comm="syz.1.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 885.983898][T14552] netlink: 264 bytes leftover after parsing attributes in process `syz.3.2059'. [ 890.375588][T14588] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.528447][T14588] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.616252][T14588] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.068668][T14588] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.147460][ T49] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.159900][ T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.169492][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.264518][T14605] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 891.304684][T14604] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2071'. [ 891.340927][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.423087][T14604] syz.2.2071 (14604): drop_caches: 2 [ 891.728293][ T30] audit: type=1400 audit(1757282433.258:968): avc: denied { read } for pid=14610 comm="syz.4.2073" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 891.787724][T14619] binder: 14618:14619 ioctl c0306201 0 returned -14 [ 892.274130][ T30] audit: type=1400 audit(1757282433.288:969): avc: denied { open } for pid=14610 comm="syz.4.2073" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 892.303190][ T55] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 892.481168][ T55] usb 4-1: device descriptor read/64, error -71 [ 892.891150][ T55] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 893.031043][ T55] usb 4-1: device descriptor read/64, error -71 [ 893.153394][ T55] usb usb4-port1: attempt power cycle [ 893.723078][T14644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 893.751635][ T55] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 893.794198][ T55] usb 4-1: device descriptor read/8, error -71 [ 893.804187][T14644] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2080'. [ 893.892597][T14644] syz.0.2080 (14644): drop_caches: 2 [ 894.431198][ T55] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 894.454733][ T55] usb 4-1: device descriptor read/8, error -71 [ 894.561638][ T55] usb usb4-port1: unable to enumerate USB device [ 894.683097][ T30] audit: type=1326 audit(1757282436.218:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14652 comm="syz.3.2083" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07b898ebe9 code=0x0 [ 895.641495][T14668] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 896.118489][T14674] binder: 14673:14674 ioctl c0306201 0 returned -14 [ 896.578465][T14679] netlink: 264 bytes leftover after parsing attributes in process `syz.4.2089'. [ 898.407278][T14705] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:21 [ 898.414165][T11618] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 898.540126][T14707] CIFS mount error: No usable UNC path provided in device string! [ 898.540126][T14707] [ 898.550205][T14707] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 898.581580][T11618] usb 2-1: Using ep0 maxpacket: 32 [ 898.762940][T11618] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 898.774300][T11618] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 898.791737][T11618] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 898.801063][T11618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.809435][ T55] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 898.842887][T11618] usb 2-1: config 0 descriptor?? [ 898.971736][ T55] usb 5-1: Using ep0 maxpacket: 32 [ 898.983751][ T55] usb 5-1: unable to get BOS descriptor or descriptor too short [ 898.994890][ T55] usb 5-1: config 244 has an invalid interface number: 68 but max is 0 [ 899.114149][T14712] netlink: 'syz.2.2097': attribute type 5 has an invalid length. [ 899.361371][ T55] usb 5-1: config 244 has no interface number 0 [ 899.381740][ T55] usb 5-1: config 244 interface 68 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 899.400967][ T55] usb 5-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 899.441676][ T55] usb 5-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 899.521522][ T55] usb 5-1: config 244 interface 68 has no altsetting 0 [ 899.533314][ T55] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f [ 899.553450][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.563543][ T55] usb 5-1: Product: syz [ 899.567804][ T55] usb 5-1: Manufacturer: syz [ 899.572626][ T55] usb 5-1: SerialNumber: syz [ 899.830863][T14707] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 900.005436][T11618] usbhid 2-1:0.0: can't add hid device: -71 [ 900.030787][T11618] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 900.072877][T14698] tipc: Enabling of bearer rejected, already enabled [ 900.096980][T11618] usb 2-1: USB disconnect, device number 41 [ 900.510109][ T55] comedi comedi5: Endpoint has wrong direction [ 900.516447][ T55] dt9812 5-1:244.68: driver 'dt9812' failed to auto-configure device. [ 900.632368][ T55] usb 5-1: USB disconnect, device number 52 [ 900.940660][T14728] CIFS mount error: No usable UNC path provided in device string! [ 900.940660][T14728] [ 900.950839][T14728] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 901.145345][T14732] binder: 14731:14732 ioctl c0306201 0 returned -14 [ 901.899239][T14743] netlink: 264 bytes leftover after parsing attributes in process `syz.1.2104'. [ 902.402361][T14752] binder: 14749:14752 ioctl c0306201 200000000080 returned -14 [ 904.912243][T14773] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:21 [ 905.752777][T14785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2112'. [ 906.622689][ T55] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 908.202732][ T55] usb 4-1: Using ep0 maxpacket: 32 [ 908.231987][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.290586][ T30] audit: type=1400 audit(1757282449.817:971): avc: denied { create } for pid=14793 comm="syz.1.2117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 908.292566][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.425278][ T30] audit: type=1400 audit(1757282449.817:972): avc: denied { ioctl } for pid=14793 comm="syz.1.2117" path="socket:[51228]" dev="sockfs" ino=51228 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 908.442599][ T55] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 908.497087][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.519327][ T55] usb 4-1: config 0 descriptor?? [ 908.677529][ T55] usbhid 4-1:0.0: can't add hid device: -71 [ 908.686796][ T55] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 908.727531][ T55] usb 4-1: USB disconnect, device number 50 [ 909.496738][T14816] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.598339][T14816] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.647596][T14816] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.796431][T14816] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.827140][T14819] overlayfs: failed to resolve './file1': -2 [ 909.973051][T14822] CIFS mount error: No usable UNC path provided in device string! [ 909.973051][T14822] [ 909.983287][T14822] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 910.065000][ T969] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.100930][ T969] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.124136][ T969] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.132426][ T969] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.242882][ T55] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 910.399204][T14824] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:21 [ 910.422855][ T55] usb 5-1: Using ep0 maxpacket: 32 [ 910.441842][ T55] usb 5-1: unable to get BOS descriptor or descriptor too short [ 910.472152][ T55] usb 5-1: config 244 has an invalid interface number: 68 but max is 0 [ 910.482803][ T55] usb 5-1: config 244 has no interface number 0 [ 910.489354][ T55] usb 5-1: config 244 interface 68 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 910.500664][ T55] usb 5-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 910.517218][ T55] usb 5-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 910.528706][ T55] usb 5-1: config 244 interface 68 has no altsetting 0 [ 910.584860][T14828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 910.599302][T14828] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2124'. [ 910.660970][ T55] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f [ 910.672250][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.683767][ T55] usb 5-1: Product: syz [ 910.688920][ T55] usb 5-1: Manufacturer: syz [ 910.695357][ T55] usb 5-1: SerialNumber: syz [ 910.704347][T14822] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 910.861564][T14828] syz.2.2124 (14828): drop_caches: 2 [ 910.964783][T14833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14833 comm=syz.3.2126 [ 912.103268][ T55] comedi comedi5: Endpoint has wrong direction [ 912.132038][ T55] dt9812 5-1:244.68: driver 'dt9812' failed to auto-configure device. [ 912.261662][T14837] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 912.270948][T14837] FAT-fs (loop2): unable to read boot sector [ 912.343297][ T55] usb 5-1: USB disconnect, device number 53 [ 915.312717][ T980] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 915.336872][T14876] CIFS mount error: No usable UNC path provided in device string! [ 915.336872][T14876] [ 915.356872][T14876] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 915.487645][ T980] usb 2-1: unable to get BOS descriptor or descriptor too short [ 915.506126][ T980] usb 2-1: not running at top speed; connect to a high speed hub [ 915.531671][ T980] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 915.573446][ T980] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 915.603418][ T5988] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 915.613800][ T980] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 915.643696][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.666978][ T980] usb 2-1: Product: syz [ 915.671186][ T980] usb 2-1: SerialNumber: syz [ 915.706177][T14871] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 915.796072][ T5988] usb 3-1: Using ep0 maxpacket: 32 [ 915.812239][ T5988] usb 3-1: unable to get BOS descriptor or descriptor too short [ 915.835926][ T5988] usb 3-1: config 244 has an invalid interface number: 68 but max is 0 [ 915.853468][ T5988] usb 3-1: config 244 has no interface number 0 [ 915.863589][ T5988] usb 3-1: config 244 interface 68 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 915.883393][ T5988] usb 3-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 915.903503][ T5988] usb 3-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 915.923461][ T5988] usb 3-1: config 244 interface 68 has no altsetting 0 [ 915.933115][ T5988] usb 3-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f [ 915.955840][ T5988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.002587][ T5988] usb 3-1: Product: syz [ 916.015431][ T5988] usb 3-1: Manufacturer: syz [ 916.024976][ T5988] usb 3-1: SerialNumber: syz [ 916.045418][T14876] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 916.842787][T14887] overlayfs: failed to resolve './file1': -2 [ 917.220621][T14890] binder: 14889:14890 ioctl c0306201 0 returned -14 [ 917.771985][ T980] cdc_ncm 2-1:1.0: bind() failure [ 917.820677][ T980] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 917.857154][ T980] cdc_ncm 2-1:1.1: bind() failure [ 917.918107][ T980] usb 2-1: USB disconnect, device number 42 [ 917.959110][ T5988] comedi comedi5: Endpoint has wrong direction [ 917.986213][ T5988] dt9812 3-1:244.68: driver 'dt9812' failed to auto-configure device. [ 918.025467][ T5988] usb 3-1: USB disconnect, device number 51 [ 920.200318][T14928] bridge0: entered promiscuous mode [ 920.213525][T14928] macsec1: entered promiscuous mode [ 920.264301][T14930] netlink: 264 bytes leftover after parsing attributes in process `syz.4.2150'. [ 921.842024][ T30] audit: type=1400 audit(1757282463.355:973): avc: granted { setsecparam } for pid=14945 comm="syz.1.2154" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 924.451747][T14975] overlayfs: failed to resolve './file1': -2 [ 925.007381][T14980] netlink: 264 bytes leftover after parsing attributes in process `syz.0.2162'. [ 925.423449][T14984] binder: 14983:14984 ioctl c0306201 0 returned -14 [ 926.962036][T11618] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 927.374566][T11618] usb 3-1: Using ep0 maxpacket: 32 [ 927.397706][T11618] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.409590][T11618] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 927.434090][T11618] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 927.953332][T11618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.970843][T11618] usb 3-1: config 0 descriptor?? [ 928.135507][T15018] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:21 [ 929.121793][T15028] netlink: 'syz.0.2173': attribute type 10 has an invalid length. [ 929.231772][T15026] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 929.241249][T15026] FAT-fs (loop4): unable to read boot sector [ 929.276505][T11618] usbhid 3-1:0.0: can't add hid device: -71 [ 929.282499][T11618] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 929.294664][T15028] team0: entered promiscuous mode [ 929.300500][T15028] team_slave_0: entered promiscuous mode [ 929.310542][T15028] team_slave_1: entered promiscuous mode [ 929.398536][T15028] 8021q: adding VLAN 0 to HW filter on device team0 [ 929.443020][T15028] bond0: (slave team0): Enslaving as an active interface with an up link [ 929.544483][T11618] usb 3-1: USB disconnect, device number 52 [ 931.584341][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.590836][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.107462][ T30] audit: type=1400 audit(1757282474.634:974): avc: denied { ioctl } for pid=15055 comm="syz.0.2182" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 934.075546][ T30] audit: type=1400 audit(1757282475.594:975): avc: granted { setsecparam } for pid=15074 comm="syz.2.2186" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 935.755476][T11618] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 935.849530][ T30] audit: type=1400 audit(1757282477.374:976): avc: denied { connect } for pid=15061 comm="syz.1.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 936.046089][ T30] audit: type=1400 audit(1757282477.374:977): avc: denied { read } for pid=15061 comm="syz.1.2183" path="socket:[51967]" dev="sockfs" ino=51967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 936.179136][ T30] audit: type=1400 audit(1757282477.624:978): avc: denied { write } for pid=15061 comm="syz.1.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 936.375563][T11618] usb 4-1: Using ep0 maxpacket: 32 [ 936.387797][T11618] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 936.398309][T11618] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 936.418416][T11618] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 936.435288][T11618] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.467249][T11618] usb 4-1: config 0 descriptor?? [ 938.497153][ T5911] usb 4-1: USB disconnect, device number 51 [ 939.246704][T15128] macsec1: left promiscuous mode [ 940.158077][T15147] tmpfs: User quota block hardlimit too large. [ 940.668018][T15154] netlink: 'syz.2.2203': attribute type 12 has an invalid length. [ 942.518194][T15168] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 942.527653][T15168] FAT-fs (loop3): unable to read boot sector [ 943.640585][T15183] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2210'. [ 943.658635][T15186] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15186 comm=syz.2.2210 [ 944.081937][T15191] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2213'. [ 944.091029][T15191] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2213'. [ 944.099998][T15191] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2213'. [ 944.649263][T15203] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 945.116574][T11619] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 945.268411][T11619] usb 5-1: Using ep0 maxpacket: 32 [ 945.288122][T11619] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 945.310114][T11619] usb 5-1: config 0 has no interface number 0 [ 945.316259][T11619] usb 5-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 945.327566][T11619] usb 5-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 945.343801][T11619] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 945.360517][T11619] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.381050][T11619] usb 5-1: Product: syz [ 945.385241][T11619] usb 5-1: Manufacturer: syz [ 945.400174][T11619] usb 5-1: SerialNumber: syz [ 945.437753][T11619] usb 5-1: config 0 descriptor?? [ 946.002409][T11619] smsc95xx v2.0.0 [ 946.014054][T11619] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 946.024809][T11619] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 947.411307][ T30] audit: type=1400 audit(1757282488.943:979): avc: denied { read append } for pid=15231 comm="syz.0.2222" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 947.440478][ T30] audit: type=1400 audit(1757282488.943:980): avc: denied { open } for pid=15231 comm="syz.0.2222" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 949.860803][T11618] usb 5-1: USB disconnect, device number 54 [ 949.940911][ T30] audit: type=1400 audit(1757282491.462:981): avc: denied { create } for pid=15247 comm="syz.4.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 950.204774][ T30] audit: type=1400 audit(1757282491.622:982): avc: denied { write } for pid=15247 comm="syz.4.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 950.837993][T15257] FAULT_INJECTION: forcing a failure. [ 950.837993][T15257] name failslab, interval 1, probability 0, space 0, times 0 [ 950.957984][T15257] CPU: 1 UID: 0 PID: 15257 Comm: syz.0.2226 Not tainted syzkaller #0 PREEMPT(full) [ 950.958013][T15257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 950.958025][T15257] Call Trace: [ 950.958031][T15257] [ 950.958039][T15257] dump_stack_lvl+0x16c/0x1f0 [ 950.958068][T15257] should_fail_ex+0x512/0x640 [ 950.958089][T15257] ? fs_reclaim_acquire+0xae/0x150 [ 950.958117][T15257] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 950.958143][T15257] should_failslab+0xc2/0x120 [ 950.958167][T15257] __kmalloc_noprof+0xd2/0x510 [ 950.958194][T15257] tomoyo_realpath_from_path+0xc2/0x6e0 [ 950.958226][T15257] ? tomoyo_profile+0x47/0x60 [ 950.958248][T15257] tomoyo_path_number_perm+0x245/0x580 [ 950.958271][T15257] ? tomoyo_path_number_perm+0x237/0x580 [ 950.958298][T15257] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 950.958324][T15257] ? find_held_lock+0x2b/0x80 [ 950.958375][T15257] ? find_held_lock+0x2b/0x80 [ 950.958398][T15257] ? hook_file_ioctl_common+0x145/0x410 [ 950.958426][T15257] ? __fget_files+0x20e/0x3c0 [ 950.958454][T15257] security_file_ioctl+0x9b/0x240 [ 950.958484][T15257] __x64_sys_ioctl+0xb7/0x210 [ 950.958515][T15257] do_syscall_64+0xcd/0x4c0 [ 950.958539][T15257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.958559][T15257] RIP: 0033:0x7f8d3c18ebe9 [ 950.958576][T15257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 950.958594][T15257] RSP: 002b:00007f8d3a3d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 950.958614][T15257] RAX: ffffffffffffffda RBX: 00007f8d3c3c6090 RCX: 00007f8d3c18ebe9 [ 950.958627][T15257] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000004 [ 950.958640][T15257] RBP: 00007f8d3a3d5090 R08: 0000000000000000 R09: 0000000000000000 [ 950.958652][T15257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 950.958663][T15257] R13: 00007f8d3c3c6128 R14: 00007f8d3c3c6090 R15: 00007ffeb70b04b8 [ 950.958693][T15257] [ 950.958701][T15257] ERROR: Out of memory at tomoyo_realpath_from_path. [ 950.986113][ T30] audit: type=1400 audit(1757282492.512:983): avc: denied { mount } for pid=15258 comm="syz.2.2227" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 951.299185][ T30] audit: type=1400 audit(1757282492.822:984): avc: denied { unmount } for pid=5849 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 951.341086][ T30] audit: type=1400 audit(1757282492.862:985): avc: denied { read } for pid=15261 comm="syz.4.2228" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 951.371831][ T30] audit: type=1400 audit(1757282492.862:986): avc: denied { open } for pid=15261 comm="syz.4.2228" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 952.995589][T15279] netlink: 'syz.4.2233': attribute type 4 has an invalid length. [ 953.696076][T11618] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 955.077826][T11618] usb 2-1: Using ep0 maxpacket: 32 [ 955.092336][T11618] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 955.102829][T11618] usb 2-1: config 0 has no interface number 0 [ 955.109395][T11618] usb 2-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 955.135417][T11618] usb 2-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 955.188372][T11618] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 955.202617][T11618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.519006][T11618] usb 2-1: Product: syz [ 955.523213][T11618] usb 2-1: Manufacturer: syz [ 955.557613][T11618] usb 2-1: SerialNumber: syz [ 955.573214][T11618] usb 2-1: config 0 descriptor?? [ 955.599850][T11618] smsc95xx v2.0.0 [ 955.611902][T11618] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 955.657937][T11618] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 956.047635][ T5988] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 956.662808][T15323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 956.676874][T15323] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2244'. [ 956.736804][T15323] syz.4.2244 (15323): drop_caches: 2 [ 956.765354][ T5988] usb 3-1: Using ep0 maxpacket: 16 [ 956.781240][ T5988] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 956.790011][ T5988] usb 3-1: config 0 has no interface number 0 [ 956.796205][ T30] audit: type=1400 audit(1757282498.322:987): avc: granted { setsecparam } for pid=15318 comm="syz.3.2245" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 956.821449][ T5988] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 956.844132][ T5988] usb 3-1: string descriptor 0 read error: -71 [ 956.859766][ T5988] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 956.878817][ T5988] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 956.916276][ T5988] usb 3-1: config 0 descriptor?? [ 957.009100][ T5988] usb 3-1: can't set config #0, error -71 [ 957.086987][ T5988] usb 3-1: USB disconnect, device number 53 [ 957.864126][ T30] audit: type=1400 audit(1757282499.362:988): avc: denied { write } for pid=15330 comm="syz.0.2247" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 958.475917][T11618] usb 2-1: USB disconnect, device number 43 [ 958.669736][T15347] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 958.698043][T15347] SELinux: failed to load policy [ 958.848221][ T5988] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 958.908204][T11618] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 959.078276][ T5988] usb 4-1: Using ep0 maxpacket: 16 [ 959.145953][ T5988] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 959.164696][ T5988] usb 4-1: config 0 has no interface number 0 [ 959.168387][T11618] usb 2-1: Using ep0 maxpacket: 16 [ 959.181379][ T5988] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 959.183254][T11618] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 959.196744][ T5988] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 959.238109][ T5988] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 959.252279][T11618] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 959.252319][ T5988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.271631][T11618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.310206][ T5988] usb 4-1: Product: syz [ 959.315639][ T5988] usb 4-1: Manufacturer: syz [ 959.316042][T11618] usb 2-1: Product: syz [ 959.328900][T11618] usb 2-1: Manufacturer: syz [ 959.335426][T11618] usb 2-1: SerialNumber: syz [ 959.358740][ T5988] usb 4-1: SerialNumber: syz [ 959.366100][T11618] usb 2-1: config 0 descriptor?? [ 959.376642][ T5988] usb 4-1: config 0 descriptor?? [ 959.394147][T11618] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 959.414910][ T5988] cypress_m8 4-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 959.418973][T11618] usb 2-1: Detected FT232R [ 959.764653][T11618] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 959.848630][ T5988] usb 4-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB1 [ 959.877626][ T5988] usb 4-1: USB disconnect, device number 52 [ 959.984757][ T5988] nokiaca42v2 ttyUSB1: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB1 [ 959.996477][T11618] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 960.006115][ T5988] cypress_m8 4-1:0.35: device disconnected [ 960.203750][T15343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.212713][T15343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.229645][T11618] usb 2-1: USB disconnect, device number 44 [ 960.241929][T15371] binder: 15370:15371 ioctl c0306201 200000000080 returned -14 [ 960.264455][T11618] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 960.294892][T11618] ftdi_sio 2-1:0.0: device disconnected [ 961.279567][T15374] CIFS mount error: No usable UNC path provided in device string! [ 961.279567][T15374] [ 961.291845][T15378] netlink: 'syz.3.2259': attribute type 5 has an invalid length. [ 961.426113][T15382] netlink: 'syz.2.2261': attribute type 5 has an invalid length. [ 961.656135][T15374] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 961.868165][T11619] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 962.168503][T11619] usb 5-1: Using ep0 maxpacket: 32 [ 962.186692][T11619] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 962.197306][T11619] usb 5-1: config 0 has no interface number 0 [ 962.236762][T11619] usb 5-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 962.280480][T11619] usb 5-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 962.297795][T11619] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 962.308360][T11619] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.316442][T11619] usb 5-1: Product: syz [ 962.326620][T11619] usb 5-1: Manufacturer: syz [ 962.331611][T11619] usb 5-1: SerialNumber: syz [ 962.345835][T11619] usb 5-1: config 0 descriptor?? [ 962.369498][T15396] netlink: 'syz.2.2266': attribute type 10 has an invalid length. [ 962.380497][T11619] smsc95xx v2.0.0 [ 962.384170][T11619] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 962.532202][T11619] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 963.782444][T15396] team0: entered promiscuous mode [ 963.805050][T15396] team_slave_0: entered promiscuous mode [ 963.858689][T15396] team_slave_1: entered promiscuous mode [ 963.882290][T15407] IPVS: rr: FWM 3 0x00000003 - no destination available [ 963.908425][T15396] batman_adv: batadv0: Removing interface: team0 [ 965.166466][T15417] binder: 15414:15417 ioctl c0306201 200000000080 returned -14 [ 965.390555][T15396] tipc: Resetting bearer [ 965.408061][T15396] 8021q: adding VLAN 0 to HW filter on device team0 [ 965.446398][T15396] bond0: (slave team0): Enslaving as an active interface with an up link [ 965.470690][ T30] audit: type=1400 audit(1757282506.911:989): avc: granted { setsecparam } for pid=15419 comm="syz.1.2271" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 965.896292][T15428] team0: left promiscuous mode [ 965.901342][T15428] team_slave_0: left promiscuous mode [ 965.908613][T15428] team_slave_1: left promiscuous mode [ 966.325979][T11619] usb 5-1: USB disconnect, device number 55 [ 969.030173][T15461] gretap1: entered promiscuous mode [ 969.844442][ T30] audit: type=1400 audit(1757282511.370:990): avc: denied { getopt } for pid=15462 comm="syz.0.2281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 970.415050][T15480] binder: 15479:15480 ioctl c0306201 200000000080 returned -14 [ 970.773148][T15485] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2287'. [ 971.624400][T15494] FAULT_INJECTION: forcing a failure. [ 971.624400][T15494] name failslab, interval 1, probability 0, space 0, times 0 [ 971.782011][T15494] CPU: 0 UID: 0 PID: 15494 Comm: syz.0.2290 Not tainted syzkaller #0 PREEMPT(full) [ 971.782041][T15494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 971.782053][T15494] Call Trace: [ 971.782060][T15494] [ 971.782068][T15494] dump_stack_lvl+0x16c/0x1f0 [ 971.782098][T15494] should_fail_ex+0x512/0x640 [ 971.782124][T15494] should_failslab+0xc2/0x120 [ 971.782149][T15494] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 971.782171][T15494] ? dst_alloc+0x99/0x1a0 [ 971.782196][T15494] dst_alloc+0x99/0x1a0 [ 971.782217][T15494] rt_dst_alloc+0x35/0x3a0 [ 971.782245][T15494] ip_route_output_key_hash_rcu+0x87a/0x28e0 [ 971.782285][T15494] ip_route_output_key_hash+0x137/0x2e0 [ 971.782320][T15494] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 971.782350][T15494] ? __pfx___schedule+0x10/0x10 [ 971.782384][T15494] tcp_v4_connect+0x81c/0x1bb0 [ 971.782423][T15494] ? __pfx_tcp_v4_connect+0x10/0x10 [ 971.782452][T15494] ? __inet_stream_connect+0xba/0xf60 [ 971.782479][T15494] ? __inet_stream_connect+0xc9/0xf60 [ 971.782511][T15494] __inet_stream_connect+0x914/0xf60 [ 971.782546][T15494] ? __pfx___inet_stream_connect+0x10/0x10 [ 971.782575][T15494] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 971.782605][T15494] ? __local_bh_enable_ip+0xa4/0x120 [ 971.782634][T15494] inet_stream_connect+0x57/0xa0 [ 971.782664][T15494] kernel_connect+0x104/0x180 [ 971.782689][T15494] ? __pfx_kernel_connect+0x10/0x10 [ 971.782729][T15494] ? __local_bh_enable_ip+0xa4/0x120 [ 971.782757][T15494] smc_connect+0x4c7/0x760 [ 971.782790][T15494] ? __pfx_smc_connect+0x10/0x10 [ 971.782817][T15494] __sys_connect_file+0x141/0x1a0 [ 971.782849][T15494] __sys_connect+0x13b/0x160 [ 971.782878][T15494] ? __pfx___sys_connect+0x10/0x10 [ 971.782919][T15494] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 971.782956][T15494] __x64_sys_connect+0x72/0xb0 [ 971.782982][T15494] ? lockdep_hardirqs_on+0x7c/0x110 [ 971.783004][T15494] do_syscall_64+0xcd/0x4c0 [ 971.783029][T15494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.783049][T15494] RIP: 0033:0x7f8d3c18ebe9 [ 971.783067][T15494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 971.783086][T15494] RSP: 002b:00007f8d3a3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 971.783106][T15494] RAX: ffffffffffffffda RBX: 00007f8d3c3c5fa0 RCX: 00007f8d3c18ebe9 [ 971.783122][T15494] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 971.783134][T15494] RBP: 00007f8d3a3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 971.783146][T15494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 971.783158][T15494] R13: 00007f8d3c3c6038 R14: 00007f8d3c3c5fa0 R15: 00007ffeb70b04b8 [ 971.783189][T15494] [ 972.418511][T15505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15505 comm=syz.1.2295 [ 975.815323][T15537] netlink: 264 bytes leftover after parsing attributes in process `syz.4.2302'. [ 976.720304][T15550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15550 comm=syz.3.2306 [ 978.255436][T15569] overlayfs: failed to resolve './file1': -2 [ 978.312431][T15571] SELinux: Context system_u:object_r:systemd_passwd_var_run_t:s0 is not valid (left unmapped). [ 978.333570][ T30] audit: type=1400 audit(1757282519.859:991): avc: denied { relabelto } for pid=15570 comm="syz.3.2312" name="469" dev="tmpfs" ino=2479 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 978.341563][T15571] netlink: 5872 bytes leftover after parsing attributes in process `syz.3.2312'. [ 978.416002][ T30] audit: type=1400 audit(1757282519.859:992): avc: denied { associate } for pid=15570 comm="syz.3.2312" name="469" dev="tmpfs" ino=2479 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 978.455990][T15576] /dev/nullb0: Can't open blockdev [ 978.647840][ T30] audit: type=1400 audit(1757282519.979:993): avc: denied { remove_name } for pid=5846 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 978.676382][ T30] audit: type=1400 audit(1757282519.999:994): avc: denied { rmdir } for pid=5846 comm="syz-executor" name="469" dev="tmpfs" ino=2479 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 979.420913][T15592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 979.475486][T15594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 979.498434][T15594] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2317'. [ 979.583763][T15594] syz.0.2317 (15594): drop_caches: 2 [ 979.720565][T15592] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2316'. [ 979.734994][T15592] syz.4.2316 (15592): drop_caches: 2 [ 980.371608][ T30] audit: type=1400 audit(1757282521.889:995): avc: denied { ioctl } for pid=15600 comm="syz.2.2319" path="socket:[53826]" dev="sockfs" ino=53826 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 980.710451][T15603] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 980.760880][ T30] audit: type=1400 audit(1757282522.249:996): avc: denied { relabelto } for pid=15600 comm="syz.2.2319" name="442" dev="tmpfs" ino=2356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 981.369443][ T30] audit: type=1400 audit(1757282522.249:997): avc: denied { associate } for pid=15600 comm="syz.2.2319" name="442" dev="tmpfs" ino=2356 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 981.928383][ T30] audit: type=1400 audit(1757282522.749:998): avc: denied { remove_name } for pid=5849 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 981.960428][ T30] audit: type=1400 audit(1757282522.749:999): avc: denied { rmdir } for pid=5849 comm="syz-executor" name="442" dev="tmpfs" ino=2356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 982.726095][T15614] netlink: 'syz.2.2322': attribute type 10 has an invalid length. [ 982.734795][T15614] tipc: Resetting bearer [ 983.761329][T15614] team0: left promiscuous mode [ 983.766202][T15614] team_slave_0: left promiscuous mode [ 983.771786][T15614] team_slave_1: left promiscuous mode [ 984.523501][ T30] audit: type=1400 audit(1757282525.969:1000): avc: denied { append } for pid=15621 comm="syz.1.2324" name="video1" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 984.624863][T15636] FAULT_INJECTION: forcing a failure. [ 984.624863][T15636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 984.774703][T15636] CPU: 1 UID: 0 PID: 15636 Comm: syz.4.2325 Not tainted syzkaller #0 PREEMPT(full) [ 984.774730][T15636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 984.774741][T15636] Call Trace: [ 984.774747][T15636] [ 984.774754][T15636] dump_stack_lvl+0x16c/0x1f0 [ 984.774779][T15636] should_fail_ex+0x512/0x640 [ 984.774805][T15636] _copy_from_user+0x2e/0xd0 [ 984.774830][T15636] __x64_sys_sendfile64+0x120/0x220 [ 984.774852][T15636] ? ksys_write+0x1ac/0x250 [ 984.774870][T15636] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 984.774901][T15636] do_syscall_64+0xcd/0x4c0 [ 984.774924][T15636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.774944][T15636] RIP: 0033:0x7fab1858ebe9 [ 984.774960][T15636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 984.774979][T15636] RSP: 002b:00007fab167ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 984.774999][T15636] RAX: ffffffffffffffda RBX: 00007fab187c6180 RCX: 00007fab1858ebe9 [ 984.775011][T15636] RDX: 0000200000002080 RSI: ffffffffffffffff RDI: 0000000000000005 [ 984.775024][T15636] RBP: 00007fab167ac090 R08: 0000000000000000 R09: 0000000000000000 [ 984.775036][T15636] R10: 000000000000021c R11: 0000000000000246 R12: 0000000000000001 [ 984.775047][T15636] R13: 00007fab187c6218 R14: 00007fab187c6180 R15: 00007ffdb3976cc8 [ 984.775072][T15636] [ 988.241489][T15635] syz.2.2326 (15635): drop_caches: 1 [ 989.256534][T15685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15685 comm=syz.4.2339 [ 992.792147][T15721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15721 comm=syz.1.2352 [ 993.046611][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.053188][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.494098][T15739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 993.505489][T15739] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2353'. [ 993.529735][T15739] syz.4.2353 (15739): drop_caches: 2 [ 993.630005][T15741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 993.650228][T15741] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2354'. [ 993.846696][T15741] syz.3.2354 (15741): drop_caches: 2 [ 997.376337][T11618] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 998.070615][T11618] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 998.107472][T11618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.135440][T11618] usb 2-1: Product: syz [ 998.140052][T11618] usb 2-1: Manufacturer: syz [ 998.151881][T11618] usb 2-1: SerialNumber: syz [ 998.251910][T15792] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 998.333628][T15799] FAULT_INJECTION: forcing a failure. [ 998.333628][T15799] name failslab, interval 1, probability 0, space 0, times 0 [ 998.353752][T15799] CPU: 0 UID: 0 PID: 15799 Comm: syz.2.2370 Not tainted syzkaller #0 PREEMPT(full) [ 998.353784][T15799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 998.353795][T15799] Call Trace: [ 998.353803][T15799] [ 998.353812][T15799] dump_stack_lvl+0x16c/0x1f0 [ 998.353837][T15799] should_fail_ex+0x512/0x640 [ 998.353857][T15799] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 998.353878][T15799] should_failslab+0xc2/0x120 [ 998.353899][T15799] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 998.353919][T15799] ? __alloc_skb+0x2b2/0x380 [ 998.353943][T15799] __alloc_skb+0x2b2/0x380 [ 998.353961][T15799] ? __pfx___alloc_skb+0x10/0x10 [ 998.353980][T15799] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 998.354006][T15799] netlink_alloc_large_skb+0x69/0x130 [ 998.354038][T15799] netlink_sendmsg+0x6a1/0xdd0 [ 998.354061][T15799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 998.354095][T15799] ____sys_sendmsg+0xa98/0xc70 [ 998.354120][T15799] ? copy_msghdr_from_user+0x10a/0x160 [ 998.354140][T15799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 998.354177][T15799] ___sys_sendmsg+0x134/0x1d0 [ 998.354201][T15799] ? __pfx____sys_sendmsg+0x10/0x10 [ 998.354251][T15799] __sys_sendmsg+0x16d/0x220 [ 998.354272][T15799] ? __pfx___sys_sendmsg+0x10/0x10 [ 998.354309][T15799] do_syscall_64+0xcd/0x4c0 [ 998.354333][T15799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.354354][T15799] RIP: 0033:0x7f780c98ebe9 [ 998.354372][T15799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 998.354391][T15799] RSP: 002b:00007f780d74e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 998.354410][T15799] RAX: ffffffffffffffda RBX: 00007f780cbc5fa0 RCX: 00007f780c98ebe9 [ 998.354424][T15799] RDX: 0000000020000880 RSI: 0000200000000140 RDI: 0000000000000003 [ 998.354436][T15799] RBP: 00007f780d74e090 R08: 0000000000000000 R09: 0000000000000000 [ 998.354448][T15799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 998.354460][T15799] R13: 00007f780cbc6038 R14: 00007f780cbc5fa0 R15: 00007ffec882bef8 [ 998.354489][T15799] [ 999.397582][T15807] syzkaller0: entered promiscuous mode [ 999.405443][T15807] syzkaller0: entered allmulticast mode [ 1000.952424][T11605] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1001.118556][T11605] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1001.131670][T11605] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 1001.145764][T11605] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1001.167798][T11605] usb 3-1: string descriptor 0 read error: -22 [ 1001.174488][T11605] usb 3-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 1001.188200][T11605] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.201433][T11605] usb 3-1: config 0 descriptor?? [ 1001.231734][T11605] em28xx 3-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 1001.248157][T11605] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1001.505822][T11605] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1001.512881][T11605] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1001.520537][T11605] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1001.528078][T11605] em28xx 3-1:0.0: No AC97 audio processor [ 1001.541745][T11605] usb 3-1: USB disconnect, device number 54 [ 1001.549721][T11605] em28xx 3-1:0.0: Disconnecting em28xx [ 1001.584707][T11605] em28xx 3-1:0.0: Freeing device [ 1003.821235][T11618] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO [ 1003.837697][T11618] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1003.947771][T11618] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1003.981301][T11618] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1004.005468][T11618] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1004.134967][T11618] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1004.188355][T11618] usb 2-1: USB disconnect, device number 45 [ 1005.690750][T15856] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2385'. [ 1007.758021][T15882] netlink: 'syz.1.2391': attribute type 2 has an invalid length. [ 1007.766230][T15882] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2391'. [ 1007.925538][T15886] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1007.934308][T15886] team0: Port device batadv1 added [ 1008.141773][T15889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2394'. [ 1009.115034][T15894] netlink: 264 bytes leftover after parsing attributes in process `syz.3.2395'. [ 1009.573483][ T30] audit: type=1400 audit(1757282551.086:1001): avc: denied { map } for pid=15895 comm="syz.0.2396" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1009.653173][T15904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2397'. [ 1010.846325][T15918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2403'. [ 1010.970598][T15921] siw: device registration error -23 [ 1011.318924][ T30] audit: type=1326 audit(1757282552.836:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15923 comm="syz.2.2399" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f780c98ebe9 code=0x0 [ 1014.037611][T15915] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1014.072653][T15956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2407'. [ 1014.225457][T15915] FAT-fs (loop3): unable to read boot sector [ 1015.467955][ T30] audit: type=1400 audit(1757282556.956:1003): avc: denied { read } for pid=15969 comm="syz.0.2412" path="socket:[56635]" dev="sockfs" ino=56635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1015.491720][ C1] vkms_vblank_simulate: vblank timer overrun [ 1015.665368][T15969] mmap: syz.0.2412 (15969): VmData 37728256 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 1018.514215][T16014] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2422'. [ 1019.507540][T11619] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1019.698271][T11619] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1019.722280][T11619] usb 3-1: config 0 has an invalid interface number: 24 but max is 0 [ 1019.735654][T11619] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1019.747326][T11619] usb 3-1: config 0 has no interface number 0 [ 1019.814167][T11605] usb 2-1: new low-speed USB device number 46 using dummy_hcd [ 1019.885577][T11619] usb 3-1: config 0 has an invalid interface number: 24 but max is 0 [ 1019.893953][T11619] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1019.914168][T11619] usb 3-1: config 0 has no interface number 0 [ 1020.417798][T11619] usb 3-1: config 0 has an invalid interface number: 24 but max is 0 [ 1020.428019][T11619] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1020.436982][T11619] usb 3-1: config 0 has no interface number 0 [ 1020.445590][T11619] usb 3-1: New USB device found, idVendor=0421, idProduct=00b0, bcdDevice=6d.ac [ 1020.455328][T11619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.463608][T11619] usb 3-1: Product: syz [ 1020.468444][T11619] usb 3-1: Manufacturer: syz [ 1020.473102][T11619] usb 3-1: SerialNumber: syz [ 1020.477871][T11605] usb 2-1: device descriptor read/64, error -71 [ 1020.502223][T11619] usb 3-1: config 0 descriptor?? [ 1021.573380][T11605] usb 2-1: new low-speed USB device number 47 using dummy_hcd [ 1021.586504][ T30] audit: type=1400 audit(1757282562.585:1004): avc: denied { accept } for pid=16020 comm="syz.2.2425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1021.714354][T11605] usb 2-1: device descriptor read/64, error -71 [ 1021.763800][T16041] binder: 16040:16041 unknown command 0 [ 1021.769542][T16041] binder: 16040:16041 ioctl c0306201 200000000080 returned -22 [ 1021.779865][T16041] binder: BINDER_SET_CONTEXT_MGR already set [ 1021.785962][T16041] binder: 16040:16041 ioctl 4018620d 200000000040 returned -16 [ 1022.498721][T11605] usb usb2-port1: attempt power cycle [ 1022.656495][T11619] rndis_host 3-1:0.24: skipping garbage [ 1022.683680][T11619] rndis_host 3-1:0.24: More than one union descriptor, skipping ... [ 1022.737614][T11619] usb 3-1: bad CDC descriptors [ 1022.758388][T11619] cdc_acm 3-1:0.24: skipping garbage [ 1022.790287][T11619] cdc_acm 3-1:0.24: More than one union descriptor, skipping ... [ 1022.889429][T11619] usb 3-1: USB disconnect, device number 55 [ 1023.053904][ T5845] Bluetooth: hci1: unexpected event for opcode 0x0c22 [ 1023.404480][T11619] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1023.661607][T11619] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1023.700946][T11619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1023.817176][T11619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1023.873244][T11619] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1023.914929][T11619] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1023.930179][T11619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.940991][T11619] usb 3-1: config 0 descriptor?? [ 1024.585441][T11619] plantronics 0003:047F:FFFF.0012: ignoring exceeding usage max [ 1024.691213][T16058] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2433'. [ 1024.845653][T11619] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1024.900160][T11619] usb 3-1: USB disconnect, device number 56 [ 1025.648004][T16084] fido_id[16084]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1026.970624][T16108] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2445'. [ 1027.557055][T16112] netlink: 'syz.3.2446': attribute type 5 has an invalid length. [ 1028.561128][ T30] audit: type=1400 audit(1757282570.054:1005): avc: denied { create } for pid=16118 comm="syz.1.2450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1028.817802][T16126] genirq: Flags mismatch irq 5. 00200000 (pcl816) vs. 00200000 (at-a2150c) [ 1030.091191][ T30] audit: type=1400 audit(1757282571.604:1006): avc: denied { read } for pid=16134 comm="syz.2.2453" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1030.113936][T16147] sd 0:0:1:0: PR command failed: 1026 [ 1030.119378][T16147] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1030.126285][T16147] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1030.265470][ T30] audit: type=1400 audit(1757282571.604:1007): avc: denied { open } for pid=16134 comm="syz.2.2453" path="/468/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1030.377589][ T30] audit: type=1400 audit(1757282571.624:1008): avc: denied { ioctl } for pid=16134 comm="syz.2.2453" path="/468/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70cd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1030.535735][ T30] audit: type=1400 audit(1757282572.054:1009): avc: denied { read } for pid=16154 comm="syz.3.2456" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1030.558953][ C0] vkms_vblank_simulate: vblank timer overrun [ 1030.673328][ T30] audit: type=1400 audit(1757282572.054:1010): avc: denied { open } for pid=16154 comm="syz.3.2456" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1030.768874][ T30] audit: type=1400 audit(1757282572.124:1011): avc: denied { ioctl } for pid=16154 comm="syz.3.2456" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1030.793991][ C0] vkms_vblank_simulate: vblank timer overrun [ 1031.199005][T16159] SELinux: Context Ü is not valid (left unmapped). [ 1032.174557][ T30] audit: type=1400 audit(1757282573.684:1012): avc: denied { write } for pid=16179 comm="syz.4.2464" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1032.308502][T16182] CIFS mount error: No usable UNC path provided in device string! [ 1032.308502][T16182] [ 1032.318690][T16182] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1032.705686][T11619] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1032.875729][T11619] usb 2-1: Using ep0 maxpacket: 32 [ 1032.883049][T11619] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1032.913831][T11619] usb 2-1: config 244 has an invalid interface number: 68 but max is 0 [ 1032.932719][ T30] audit: type=1400 audit(1757282574.434:1013): avc: denied { unmount } for pid=5851 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1032.955797][T11619] usb 2-1: config 244 has no interface number 0 [ 1032.962860][T11619] usb 2-1: config 244 interface 68 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 1032.985727][T11619] usb 2-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1032.997197][T11619] usb 2-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 1033.022741][T11619] usb 2-1: config 244 interface 68 has no altsetting 0 [ 1033.086532][T11619] usb 2-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f [ 1033.132202][T11619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.190383][T11619] usb 2-1: Product: syz [ 1033.219571][T11619] usb 2-1: Manufacturer: syz [ 1033.247411][T11619] usb 2-1: SerialNumber: syz [ 1033.371387][T16182] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1035.238993][T11619] comedi comedi5: Endpoint has wrong direction [ 1035.255810][T11619] dt9812 2-1:244.68: driver 'dt9812' failed to auto-configure device. [ 1035.344411][T16213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1035.360409][T16213] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2471'. [ 1035.447851][T16213] syz.4.2471 (16213): drop_caches: 2 [ 1035.570454][T11619] usb 2-1: USB disconnect, device number 49 [ 1035.976009][T16222] netlink: 264 bytes leftover after parsing attributes in process `syz.3.2473'. [ 1037.026718][ T30] audit: type=1400 audit(1757282578.263:1014): avc: denied { watch } for pid=16223 comm="syz.1.2476" path="/476/bus" dev="tmpfs" ino=2559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1037.121706][T16235] binder: 16234:16235 ioctl c0306201 2000000002c0 returned -14 [ 1037.146161][ T30] audit: type=1400 audit(1757282578.273:1015): avc: denied { watch_sb watch_reads } for pid=16223 comm="syz.1.2476" path="/476/bus" dev="tmpfs" ino=2559 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1037.551584][T16243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2479'. [ 1038.542920][T16257] loop6: detected capacity change from 0 to 2560 [ 1038.549853][T16257] Buffer I/O error on dev loop6, logical block 0, async page read [ 1038.557786][T16257] Buffer I/O error on dev loop6, logical block 0, async page read [ 1038.565665][T16257] Buffer I/O error on dev loop6, logical block 0, async page read [ 1038.573598][T16257] Buffer I/O error on dev loop6, logical block 0, async page read [ 1038.581532][T16257] Buffer I/O error on dev loop6, logical block 0, async page read [ 1038.589496][T16257] Buffer I/O error on dev loop6, logical block 0, async page read [ 1038.597432][T16257] Buffer I/O error on dev loop6, logical block 0, async page read [ 1038.605323][T16257] Buffer I/O error on dev loop6, logical block 0, async page read [ 1038.613405][T16257] ldm_validate_partition_table(): Disk read failed. [ 1038.620099][T16257] Buffer I/O error on dev loop6, logical block 0, async page read [ 1038.628046][T16257] Buffer I/O error on dev loop6, logical block 0, async page read [ 1038.636111][T16257] Dev loop6: unable to read RDB block 0 [ 1038.641937][T16257] loop6: unable to read partition table [ 1038.647761][T16257] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1038.891101][ T30] audit: type=1400 audit(1757282580.393:1016): avc: denied { associate } for pid=16260 comm="syz.4.2483" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1038.997865][T16255] binder_alloc: 16244: binder_alloc_buf, no vma [ 1039.512731][T16269] ALSA: mixer_oss: invalid OSS volume 'u' [ 1039.647359][ T30] audit: type=1326 audit(1757282581.153:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16244 comm="syz.3.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b898ebe9 code=0x7fc00000 [ 1039.765882][ T30] audit: type=1326 audit(1757282581.193:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16244 comm="syz.3.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f07b898ebe9 code=0x7fc00000 [ 1039.805561][T16272] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1039.866278][ T30] audit: type=1326 audit(1757282581.193:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16244 comm="syz.3.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b898ebe9 code=0x7fc00000 [ 1039.902135][ T30] audit: type=1326 audit(1757282581.193:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16244 comm="syz.3.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b898ebe9 code=0x7fc00000 [ 1040.027999][T16262] sch_fq: defrate 0 ignored. [ 1040.085552][T16279] binder: 16278:16279 ioctl c0306201 200000000080 returned -14 [ 1040.372619][T16287] binder: 16286:16287 ioctl c0306201 0 returned -14 [ 1040.850312][T16284] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1041.946176][ T30] audit: type=1400 audit(1757282583.443:1021): avc: denied { bind } for pid=16306 comm="syz.3.2496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1044.285760][ T30] audit: type=1400 audit(1757282585.793:1022): avc: denied { getopt } for pid=16333 comm="syz.4.2501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1046.018851][ T30] audit: type=1400 audit(1757282587.473:1023): avc: granted { setsecparam } for pid=16355 comm="syz.1.2507" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1046.042319][T16357] binder: 16354:16357 ioctl c0306201 0 returned -14 [ 1046.580516][T16365] netlink: 264 bytes leftover after parsing attributes in process `syz.2.2508'. [ 1047.067667][ T30] audit: type=1400 audit(1757282588.582:1024): avc: denied { setopt } for pid=16373 comm="syz.0.2511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1047.068430][T16376] ================================================================== [ 1047.095988][T16376] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x7401/0x84c0 [ 1047.103900][T16376] Read of size 1 at addr ffff888057df4bb0 by task syz.0.2511/16376 [ 1047.111798][T16376] [ 1047.114127][T16376] CPU: 1 UID: 0 PID: 16376 Comm: syz.0.2511 Not tainted syzkaller #0 PREEMPT(full) [ 1047.114156][T16376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1047.114170][T16376] Call Trace: [ 1047.114179][T16376] [ 1047.114189][T16376] dump_stack_lvl+0x116/0x1f0 [ 1047.114220][T16376] print_report+0xcd/0x630 [ 1047.114245][T16376] ? __virt_addr_valid+0x81/0x610 [ 1047.114273][T16376] ? __phys_addr+0xe8/0x180 [ 1047.114302][T16376] ? xfrm_state_find+0x7401/0x84c0 [ 1047.114325][T16376] kasan_report+0xe0/0x110 [ 1047.114350][T16376] ? xfrm_state_find+0x7401/0x84c0 [ 1047.114378][T16376] xfrm_state_find+0x7401/0x84c0 [ 1047.114410][T16376] ? __pfx_xfrm_state_find+0x10/0x10 [ 1047.114439][T16376] ? mark_held_locks+0x49/0x80 [ 1047.114471][T16376] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1047.114494][T16376] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1047.114517][T16376] ? stack_depot_save_flags+0x3de/0x9c0 [ 1047.114545][T16376] xfrm_resolve_and_create_bundle+0x4cd/0x3740 [ 1047.114585][T16376] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 1047.114630][T16376] ? find_held_lock+0x2b/0x80 [ 1047.114662][T16376] ? xfrm_expand_policies.constprop.0+0x252/0x6a0 [ 1047.114693][T16376] xfrm_lookup_with_ifid+0x2a0/0x1e40 [ 1047.114721][T16376] ? find_held_lock+0x2b/0x80 [ 1047.114748][T16376] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 1047.114777][T16376] ? ip_route_output_key_hash+0x16b/0x2e0 [ 1047.114812][T16376] ? ip_route_output_key_hash+0x16b/0x2e0 [ 1047.114848][T16376] xfrm_lookup_route+0x3b/0x200 [ 1047.114876][T16376] ip_route_output_flow+0x11e/0x150 [ 1047.114909][T16376] __ip4_datagram_connect+0x8bf/0x14c0 [ 1047.114945][T16376] __ip6_datagram_connect+0xcf0/0x1480 [ 1047.114975][T16376] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 1047.115004][T16376] ? ip6_datagram_connect_v6_only+0x73/0xa0 [ 1047.115028][T16376] ip6_datagram_connect_v6_only+0x73/0xa0 [ 1047.115054][T16376] inet_dgram_connect+0x143/0x200 [ 1047.115084][T16376] ? __pfx_inet_dgram_connect+0x10/0x10 [ 1047.115111][T16376] __sys_connect_file+0x141/0x1a0 [ 1047.115146][T16376] __sys_connect+0x13b/0x160 [ 1047.115177][T16376] ? __pfx___sys_connect+0x10/0x10 [ 1047.115213][T16376] ? xfd_validate_state+0x61/0x180 [ 1047.115245][T16376] ? __sys_setsockopt+0x1c0/0x230 [ 1047.115270][T16376] __x64_sys_connect+0x72/0xb0 [ 1047.115300][T16376] ? lockdep_hardirqs_on+0x7c/0x110 [ 1047.115323][T16376] do_syscall_64+0xcd/0x4c0 [ 1047.115350][T16376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.115372][T16376] RIP: 0033:0x7f8d3c18ebe9 [ 1047.115391][T16376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1047.115412][T16376] RSP: 002b:00007f8d3a3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1047.115433][T16376] RAX: ffffffffffffffda RBX: 00007f8d3c3c5fa0 RCX: 00007f8d3c18ebe9 [ 1047.115448][T16376] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000004 [ 1047.115462][T16376] RBP: 00007f8d3c211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1047.115476][T16376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1047.115489][T16376] R13: 00007f8d3c3c6038 R14: 00007f8d3c3c5fa0 R15: 00007ffeb70b04b8 [ 1047.115512][T16376] [ 1047.115520][T16376] [ 1047.427966][T16376] Allocated by task 10477: [ 1047.432360][T16376] kasan_save_stack+0x33/0x60 [ 1047.437029][T16376] kasan_save_track+0x14/0x30 [ 1047.441691][T16376] __kasan_slab_alloc+0x89/0x90 [ 1047.446533][T16376] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1047.451976][T16376] xfrm_state_alloc+0x23/0x5c0 [ 1047.456730][T16376] xfrm_add_acquire+0x116/0xbe0 [ 1047.461565][T16376] xfrm_user_rcv_msg+0x58b/0xc00 [ 1047.466501][T16376] netlink_rcv_skb+0x155/0x420 [ 1047.471256][T16376] xfrm_netlink_rcv+0x71/0x90 [ 1047.475924][T16376] netlink_unicast+0x5aa/0x870 [ 1047.480672][T16376] netlink_sendmsg+0x8d1/0xdd0 [ 1047.485423][T16376] ____sys_sendmsg+0xa98/0xc70 [ 1047.490194][T16376] ___sys_sendmsg+0x134/0x1d0 [ 1047.494855][T16376] __sys_sendmsg+0x16d/0x220 [ 1047.499427][T16376] do_syscall_64+0xcd/0x4c0 [ 1047.503936][T16376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.509814][T16376] [ 1047.512116][T16376] Freed by task 10477: [ 1047.516160][T16376] kasan_save_stack+0x33/0x60 [ 1047.520819][T16376] kasan_save_track+0x14/0x30 [ 1047.525480][T16376] kasan_save_free_info+0x3b/0x60 [ 1047.530497][T16376] __kasan_slab_free+0x60/0x70 [ 1047.535247][T16376] kmem_cache_free+0x2d1/0x4d0 [ 1047.539994][T16376] xfrm_add_acquire+0x8f4/0xbe0 [ 1047.544828][T16376] xfrm_user_rcv_msg+0x58b/0xc00 [ 1047.549748][T16376] netlink_rcv_skb+0x155/0x420 [ 1047.554502][T16376] xfrm_netlink_rcv+0x71/0x90 [ 1047.559176][T16376] netlink_unicast+0x5aa/0x870 [ 1047.563924][T16376] netlink_sendmsg+0x8d1/0xdd0 [ 1047.568674][T16376] ____sys_sendmsg+0xa98/0xc70 [ 1047.573428][T16376] ___sys_sendmsg+0x134/0x1d0 [ 1047.578092][T16376] __sys_sendmsg+0x16d/0x220 [ 1047.582666][T16376] do_syscall_64+0xcd/0x4c0 [ 1047.587156][T16376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.593030][T16376] [ 1047.595332][T16376] The buggy address belongs to the object at ffff888057df4880 [ 1047.595332][T16376] which belongs to the cache xfrm_state of size 928 [ 1047.609277][T16376] The buggy address is located 816 bytes inside of [ 1047.609277][T16376] freed 928-byte region [ffff888057df4880, ffff888057df4c20) [ 1047.623054][T16376] [ 1047.625360][T16376] The buggy address belongs to the physical page: [ 1047.631761][T16376] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888057df5980 pfn:0x57df4 [ 1047.641802][T16376] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1047.650280][T16376] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1047.657813][T16376] page_type: f5(slab) [ 1047.661784][T16376] raw: 00fff00000000040 ffff888144a9db40 dead000000000122 0000000000000000 [ 1047.670347][T16376] raw: ffff888057df5980 00000000800f0007 00000000f5000000 0000000000000000 [ 1047.678912][T16376] head: 00fff00000000040 ffff888144a9db40 dead000000000122 0000000000000000 [ 1047.687563][T16376] head: ffff888057df5980 00000000800f0007 00000000f5000000 0000000000000000 [ 1047.696216][T16376] head: 00fff00000000002 ffffea00015f7d01 00000000ffffffff 00000000ffffffff [ 1047.704870][T16376] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 1047.713517][T16376] page dumped because: kasan: bad access detected [ 1047.719919][T16376] page_owner tracks the page as allocated [ 1047.725624][T16376] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7567, tgid 7565 (syz.4.388), ts 238119122707, free_ts 226887154445 [ 1047.744816][T16376] post_alloc_hook+0x1c0/0x230 [ 1047.749577][T16376] get_page_from_freelist+0x132b/0x38e0 [ 1047.755104][T16376] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1047.760978][T16376] alloc_pages_mpol+0x1fb/0x550 [ 1047.765822][T16376] new_slab+0x247/0x330 [ 1047.769968][T16376] ___slab_alloc+0xcf2/0x1740 [ 1047.774635][T16376] __slab_alloc.constprop.0+0x56/0xb0 [ 1047.779996][T16376] kmem_cache_alloc_noprof+0xef/0x3b0 [ 1047.785350][T16376] xfrm_state_alloc+0x23/0x5c0 [ 1047.790100][T16376] xfrm_state_find+0x31e6/0x84c0 [ 1047.795020][T16376] xfrm_resolve_and_create_bundle+0x4cd/0x3740 [ 1047.801160][T16376] xfrm_lookup_with_ifid+0x2a0/0x1e40 [ 1047.806517][T16376] xfrm_lookup_route+0x3b/0x200 [ 1047.811354][T16376] ip_route_output_flow+0x11e/0x150 [ 1047.816545][T16376] udp_sendmsg+0x1af9/0x2870 [ 1047.821119][T16376] inet_sendmsg+0x105/0x140 [ 1047.825615][T16376] page last free pid 5843 tgid 5843 stack trace: [ 1047.831920][T16376] __free_frozen_pages+0x7d5/0x10f0 [ 1047.837109][T16376] qlist_free_all+0x4d/0x120 [ 1047.841680][T16376] kasan_quarantine_reduce+0x195/0x1e0 [ 1047.847133][T16376] __kasan_slab_alloc+0x69/0x90 [ 1047.851966][T16376] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 1047.857842][T16376] __alloc_skb+0x2b2/0x380 [ 1047.862242][T16376] alloc_skb_with_frags+0xe0/0x860 [ 1047.867338][T16376] sock_alloc_send_pskb+0x7fb/0x990 [ 1047.872526][T16376] unix_dgram_sendmsg+0x3e9/0x17f0 [ 1047.877624][T16376] sock_write_iter+0x4fc/0x5b0 [ 1047.882394][T16376] vfs_write+0x7d3/0x11d0 [ 1047.886708][T16376] ksys_write+0x1f8/0x250 [ 1047.891022][T16376] do_syscall_64+0xcd/0x4c0 [ 1047.895512][T16376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.901390][T16376] [ 1047.903697][T16376] Memory state around the buggy address: [ 1047.909325][T16376] ffff888057df4a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1047.917369][T16376] ffff888057df4b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1047.925408][T16376] >ffff888057df4b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1047.933450][T16376] ^ [ 1047.939058][T16376] ffff888057df4c00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 1047.947098][T16376] ffff888057df4c80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 1047.955140][T16376] ================================================================== [ 1047.963192][ C1] vkms_vblank_simulate: vblank timer overrun [ 1048.069265][T16380] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2512'. [ 1048.080942][T16375] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2512'. [ 1048.107090][T16376] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1048.114326][T16376] CPU: 0 UID: 0 PID: 16376 Comm: syz.0.2511 Not tainted syzkaller #0 PREEMPT(full) [ 1048.123707][T16376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1048.133761][T16376] Call Trace: [ 1048.137030][T16376] [ 1048.139946][T16376] dump_stack_lvl+0x3d/0x1f0 [ 1048.144534][T16376] vpanic+0x6e8/0x7a0 [ 1048.148542][T16376] ? __pfx_vpanic+0x10/0x10 [ 1048.153059][T16376] ? __pfx_vprintk_emit+0x10/0x10 [ 1048.158081][T16376] ? xfrm_state_find+0x7401/0x84c0 [ 1048.163193][T16376] panic+0xca/0xd0 [ 1048.166919][T16376] ? __pfx_panic+0x10/0x10 [ 1048.171333][T16376] ? xfrm_state_find+0x7401/0x84c0 [ 1048.176429][T16376] ? preempt_schedule_common+0x44/0xc0 [ 1048.181874][T16376] ? preempt_schedule_thunk+0x16/0x30 [ 1048.187245][T16376] check_panic_on_warn+0xab/0xb0 [ 1048.192169][T16376] end_report+0x107/0x170 [ 1048.196486][T16376] kasan_report+0xee/0x110 [ 1048.200894][T16376] ? xfrm_state_find+0x7401/0x84c0 [ 1048.205995][T16376] xfrm_state_find+0x7401/0x84c0 [ 1048.210928][T16376] ? __pfx_xfrm_state_find+0x10/0x10 [ 1048.216209][T16376] ? mark_held_locks+0x49/0x80 [ 1048.220971][T16376] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1048.226762][T16376] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1048.232551][T16376] ? stack_depot_save_flags+0x3de/0x9c0 [ 1048.238090][T16376] xfrm_resolve_and_create_bundle+0x4cd/0x3740 [ 1048.244247][T16376] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 1048.250873][T16376] ? find_held_lock+0x2b/0x80 [ 1048.255537][T16376] ? xfrm_expand_policies.constprop.0+0x252/0x6a0 [ 1048.261944][T16376] xfrm_lookup_with_ifid+0x2a0/0x1e40 [ 1048.267309][T16376] ? find_held_lock+0x2b/0x80 [ 1048.271977][T16376] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 1048.277774][T16376] ? ip_route_output_key_hash+0x16b/0x2e0 [ 1048.283492][T16376] ? ip_route_output_key_hash+0x16b/0x2e0 [ 1048.289226][T16376] xfrm_lookup_route+0x3b/0x200 [ 1048.294080][T16376] ip_route_output_flow+0x11e/0x150 [ 1048.299275][T16376] __ip4_datagram_connect+0x8bf/0x14c0 [ 1048.304732][T16376] __ip6_datagram_connect+0xcf0/0x1480 [ 1048.310181][T16376] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 1048.316067][T16376] ? ip6_datagram_connect_v6_only+0x73/0xa0 [ 1048.321952][T16376] ip6_datagram_connect_v6_only+0x73/0xa0 [ 1048.327667][T16376] inet_dgram_connect+0x143/0x200 [ 1048.332685][T16376] ? __pfx_inet_dgram_connect+0x10/0x10 [ 1048.338221][T16376] __sys_connect_file+0x141/0x1a0 [ 1048.343249][T16376] __sys_connect+0x13b/0x160 [ 1048.347834][T16376] ? __pfx___sys_connect+0x10/0x10 [ 1048.352944][T16376] ? xfd_validate_state+0x61/0x180 [ 1048.358049][T16376] ? __sys_setsockopt+0x1c0/0x230 [ 1048.363065][T16376] __x64_sys_connect+0x72/0xb0 [ 1048.367824][T16376] ? lockdep_hardirqs_on+0x7c/0x110 [ 1048.373010][T16376] do_syscall_64+0xcd/0x4c0 [ 1048.377505][T16376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.383385][T16376] RIP: 0033:0x7f8d3c18ebe9 [ 1048.387785][T16376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1048.407485][T16376] RSP: 002b:00007f8d3a3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1048.415898][T16376] RAX: ffffffffffffffda RBX: 00007f8d3c3c5fa0 RCX: 00007f8d3c18ebe9 [ 1048.423854][T16376] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000004 [ 1048.431809][T16376] RBP: 00007f8d3c211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1048.439766][T16376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1048.447720][T16376] R13: 00007f8d3c3c6038 R14: 00007f8d3c3c5fa0 R15: 00007ffeb70b04b8 [ 1048.455686][T16376] [ 1048.458959][T16376] Kernel Offset: disabled [ 1048.463265][T16376] Rebooting in 86400 seconds..