last executing test programs: 37.350517579s ago: executing program 1 (id=174): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000002018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000007b110000000000008500000005000000790900000000000045090100d20003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 37.349889886s ago: executing program 1 (id=175): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084040000000000000002"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x20, 0x0, @void, @value}, 0x28) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8936, &(0x7f0000000000)={'nicvf0\x00', 0x0}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMREADTOCHDR(r2, 0x5305, &(0x7f0000000480)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x3c, &(0x7f0000000180)=[{0x0, 0x80}, {0x1, 0x1}]}, 0x10) write$binfmt_script(r3, &(0x7f0000000dc0)={'#! ', './file0', [{0x20, '$'}, {0x20, 'nicvf0\x00'}, {0x20, '-#'}, {0x20, '}'}, {0x20, ',%.}\\#.$\x13\\/:#['}], 0xa, "72dd5b18615f15c8ac104d534f5809f5e751de3ff0f544bd80d23190ad823e8f495753fd24ca831814e2a69596742701a1e238cb8f56452a32c1a8772664a97f336269fc5563de8c4561478898a5a95e901e8ca81e98bf9f095db18a1303898c25a6931bc93fe9f9535a396c22371b6b5a885614f43872312eacb3d37907a1484f771dda73a3f0148ea8adf54277de810fd0361b4ee4e834e7c8b79f4303e10bbb8af2ca7e0a47edf2ec3fb64c3ad7d7428e5c1decfe54d665ec784d3db8cd356bc2d99a23a298687bb91c9d74aa6574683ef36caccaa2906a6f3df1cdf69de9750f120a0e1d6c944ca832ee49588c89ea424ac2a9a2b34f8081f0f6a15dab97dd4c501f9806b47132c98913c359cf08bd6f79c92ffc944565837ac4dc90f4533aea432ce42a29b7b4edcdc5bbf19f94355f2426d4d501c5a11ccded6020728cfc5f0a38d5370a3b4e40e7839e68bf751402449f5e3394c242c6156ee06e365d8e5d06fa37a7f32dc1447e4bb79f5f831fe507e1c106eb5147070bb29fe80ca008d45b78b8e3eb77c933048f57c33a1014184386569b014474e3a164d2027bcb972156c7a8731ea9bcb7a3b99a2577affbc62e8f1ed8b2f11d2d8060f07536e66a793ef698f9fadb9b9b0f9bb76360778c0e7941eda6ba061f6811d5826f62fa706b73c95f27aaecb6ec21d80a04faf5e387d3dd957aa459d42d739f35919099aa3edf8677c8bdbe8d9a14e038575acc19cbe899a368bd9a05d8f68ab13e48773d2ef567d8dc32e0c422cd3314ab4306e95445b1af43f2a6622e1ee9197967363d147f7e1846c95c80c272e12f7e86905d59f130c19e52f9d4044d7e62c97e31526f1ba5ff73fb41d2901a65c6ea641daf6d9df7ef7c657300f2d52bcef62fa9da72e22bac441fff33ed9da126c6e9ae83419feacefe0d1e3872aa2af401436e737d1599e9342747a6bc6b3a0a7c600be923c97460681327066d42b7bc23b19d568ee1f7ce08d1054c5799a2970ce1906fc18e332f0b2b28874e6f88a259acb0efa9e8ede5deba48aecc5d544d61f171cba787c1ad485c91b56e8b64dbeb10b67fd55251e8dc67964514e4bfd90d68d228075ccb84cc9f22ab05e75299068cc68ff3650c3c3cd0395322766b3517b2b0b6319ba2317b6d9d4f02139b2ab195b916fb5e54cf1bd83f4f951c6742a603527888d72920cb964add71b8133edb1663dcae798937760f84c25d1711d831d13ca0cb394aa293b860c54c54f7f6bb3d9e08f29a812118341a61cdb8911d6d8b6409ff99b600ad0ac01c01dbfec29953e60e8d797521d9395c5e20f54993b3775770b71d73cc7ef76a0dbc2a4ca940d9ef69ef1e001c5395d46c84b9fa571ca6d1825d70a2feba59180d5709388aa3ace964ca3a47171b82f45b8bdec74cdd6ac0c9332f3f88e7232f2b50313056c82c8892216f3035cbf1184959282689539b0b7cae65702a9ace85c3c574d53510f3d34c66fdf4c57fa73abebaa09eb5fa7e19d4083553b2f642f0a165f8f8da9712231c29fafac9db67238970da1da024a77841ead9f3ce7374ad6dc23452f9d340ae91580e4ef2de8a23e4f152f16a99a8302fc5471cf1f510155db8e7c94f20a90e6a95321226d5737d82938069a339c227f24ea449c514bf96487fb7d20a84a3c879897db2fdca098a828fe20a7c482ab03fffbe3b1473d30d61ac9e581311e4c9c78c5d1ce6c8bfc9fa2821f1360d5e885d06e60e7c81c796c742af87f086c6814465881ce71db98d06aaf930ff7451302b04b508462439bb6706b6d2c88f4bdd3edecc1973b02ec9eb978a3bacb7d316ac5b96cf9848f2f7868b10e4493bf1f19a5da63379fba01adc5d680be116a06394db9a2c00f0a72f882e4343f762aa6dc2bdf51a316d3ef1bcffb94559cb08ddcaa4eba742256d1d9214d5b609b0da274e933cc2cf360abac151820e5f62a568b5ed24931b91013529cc43ebf7f75f372395d18359c22f6438d3241de102d160400537648d9372c280962faa1b38f3d82350a274659d530f2b65e7fa790ed71c5151b39e7e9315e7fb3ba221e592ac065eb988f6b123f8956b79bd778ae44d849501d6ffaf9f2885164e1f17ad74ab677bf8880827b09b28647fd3cdf47bebd080dd1b88caf1ded68ee1a8bcc9525a5fbea57ad6e27f8197db5c50498540e7bc945b5299976b1a3c8616e4337b86a73c06ca5cb2232e1c5f7c3f856701f00d734e0b00a4eed313ae72e596f3ae8e00052dce23b14782e503ba67f59020612274a0f2fc7e02559c6a41ed30100e86549bff39d42072343db776ba3b5f0aa4bc57d5b304665d9dbbcd803526b71e5335f2cfb2e1e912c2cbc0f0c96af9e67510343f59e9847a9cb3d1c930cbfeb4f425ed893a000140f5b7fb335ab4cfcfc2b135c3fc4471e7da4bc1d260b8e0cdb9bc687460a0a57c08b7f9d84d2c0dba8ec2dccba6d57aecc238554e53430d9733f3b81ac813fdd4231dab1897b8c251709c9eb520424d1ce647e4a81b51dd529844655afd8f1953d37b606570eb2405f3039a5f7ce08e4ab58de2447ab4635b6909af49f278396257341464a8071b41da0f0442edd8d934eac4e3a12bc676eec77151d9d627e7c2a86019586c15966700be2b0ae2d769d6813d4c0a7139be1f6c3f61526d0b702e301f8702cc29ddc7e19c00f795096d69652bc343869f849afb9557b57be77d61feb7972be84108cebfb6cace69dfe2d9baf154ee340d625b90e3d3f135731bf1b88d6fd0837625cabdd1f09175e14326ad124a100811bd80aae9ffc8ffbf13a7f1940c13546e18437321725599f3bb377e3ee0c61c3923051ac5e6719d2a2f3d1b2670287270240f689434bd522ca09146e59d414742d3fb4548bfef5894a7eb70f6734a9016caec29b595b60d9b0dad68ba779b0891d1b7b2fa6253e77392b2434bf95c01f13e48a8ee9eb020f127d98adc4b6383bfb590ed418bfccaf5ff8ad013286374f9bbf1d998f12ff45ff2d9a07eeefb0028dfe9c2607cd085b9bae9571819a85ababefe0729d4bda407a3db486ca59de600a5646e1ea3cb54482c9b85c4a703c8eea175a86fe362b520d55075ac2a7dc2dbf096cec5e499f11a2765bebdacbbe3c42ec47e0484c5edb475708d23cf5d019384ac1f58d02a66965477646588054b671b623c01beb3cd651cb163bf14423a0b8d6b7866f0243782057e023f2eaa31151f99164e043f5a21a5cbf0ecf0a1f471251835561e6ebe536c95494219f8f6171195ac7a0cbb33c97b813632c8d30271e384a99129f557b21816646293c5c8164c5f798ec60929625f54ea99994c9f0e88723c600966c41dc54bf636f5e21b4611252c8bf7ab3f1812e6d2b4bc44b5524b53353ef2efbf0eb2c55401e45fe7252dd3ec5cbff9b1130470773a5c935dbe162807b672c635de69fb0f5dd04da502417f73736190a42d7c17606966d3c93edc69e7f948ba8a9de37db18f0496935843f054facfc6715bf0a8a30ac81ef4a1e49b04df57f1d15de2a68f15259c86de5a664820506633d3ffb9a328a80fa4d00217f894b63a9a4ac61a69fbebfd8342d94c2243345a04195bbf70572d62b79470b07ce9403ab375135d585fbd73171a3ce2ea26e8934f027a1aa893522109b497bc7fac430b7a47716d1542451c421bb457a51be6c2e812e996544428affeec1b662460ff6333589f7a7b5bc10cbcc41ef106701e5b9365af0c3094783d24ee41576eeb7a4f3fe60383dc45ff4c5a803e7408caf5ff8acdbb1b80cc9decf0b8dce0ce4fb0a66c43c548bb70965e849b06be17a66792b75db7f4d85bc1540d5b932ec0ff702c85a4b84c2a89cddacc8530b601d9293d197c7683fc9f8a05be73420551d1cb55802b4448c1bcb322d9b3a0ecc4d89cfcf975382b1234b30c9c2b42c985eceba4ae606e847e4a2b71fd4645aa87dcf66c5a709b3cc69378add873d9a81206dd25742b7e1a7d1c121127e658eeb500af2dee29e5a08128bdbf069cc65b3bbb504e29a479df7f30999e892516d4bd3d5f107097f8d52d2a847f27cf862dbd963f1d45ee90ecd583ee59c41e8531b5299f5a85d8238f676bfdb67de2dd544724deddaffffaf94e4a8c6e543684edd17aa7ad19bb6739b5a51902be3e04e70632c04cb2a2e31f7d139165023d18566e9458d909cb98b0e154bc356d0d0e421f200d2bb07da8ae2acd3ddc9a1f80bfbab8aaaf44988a8a01e6cd822c18d865f5f4c8e84bcb42cb85e0ff712aec462f6110ca7c68859bbb821d4f10e0efdca8a2379ed2da63704889e382580fdeaab63de67c90d12b77cfeee41ef5b0daaf2ca4d09681093dee4ccbcb290b061b642da3e1cd4e8165d32124453a07b30b815cce0cf2818bd1cf74b6a6c4439d61030f7b8b218421285e1d07283f3e6e8b3d0e687478fa5b37b162d0182708c1011ca971f1f04337a0ae004303e6a6ed35ce021bf56453cf98367cef25de15d0b9c4c77a2fb82edf2a1aa28ca06b9622ebf20399158522f58a297d7cfac15b1d7295a902ecf5a85f9c383864a6c390511ea43db66df78c32a846130ca26179f98cfe14b33e7ca090608ad942a20a61cbdc76efab3407ea95481b67cf013328026a8ce130ebf352b506e6c29822cdf02a06cc157e12b736c02ecd572c187cd4ace7aef44e09ca562f925748a34a388fb3a20c6bb5ad1302348978a258bbbfeb7ae091b006cd0daffd80c1eaec55d0e87e4821b5ff6e364e7ac5ad94ddd86813bb53f745356b08ebf6c4fde2a969b3616fdf2a88fb672fd0e490addc6833993d84b436c4ea5fe0d26af67378f548c5007c9baa2eaf4e17656fb5ba2b1d56150d8c46248302cb23537cb538b8a5ace4e4b297150083cb7ee1d359099ad3263ff5bb39c0b041f925f5b9ee5f56a7017ae92ba4a05240420a3a96f0890ebb530088aed750596756c87d655638ae7e0959de5bd6e14639921b2ca08b59d823ce115e984fc9476952e220a6fd81d00ce803f16706529214f037a6f4982664d62988d02d435c3ba9d7ebc00258dfaeace84ee9e1ba2acd145c357ad4d8408216e127d2ae3461c723605d579abe147a88263deb03534686a4ceb6597a3f4c46cbebc7fad5c57782c5c9eb9fd316812fb22de8490398fb9a7dd33de34e670d86c52bc1c23f1996676f77f701fb5c609bc18629491833e1db9580e0ea1059423e431f54cc1be0c84d107d9c98ca42d7df71585dc8190ea3f290f54caf244c29ee5f6af08245b5a6918ca44fa00a317611c21364ad81f9472824b9f3802d6a50306ecf093cea474d1144308641db45f1cd12a2f9eebd7dd96b4fcbaa97159cd328d45c1e2a98209e5b75f1c0fa56bb2ee6798f64334a8a53635def75d8abcf7bfecbce442163fdb0547f099997432dd18a0b9abad9eed18013a9a1631e69496beb510d624776dfcedd0b91fdc6db5eb182242043f2af24230dfb2b4af39fb526e37bbb4f40569034777198206b606102e46998dbf101a2dbf5947d00abcea06dad482e019431b18c4aa4472a6d75a6afb1d0fdba75644c854b1582792b8b73feb8578071a32aa9e4e7a9a230dd6bd1432e941308d3143c95c8bb47cb175e77d6b4b7da6c191b1153d85e99e14273212ed35712cb5f62703ea1f8bc743431b70ede455c51e861b7bd3288058b5e76a0e2467934cf85d79476fd5f5b95f5f796700e2327af8634e101dc36721f264c4d5478d5b840d0c1ae202127f4d294546056020cb884206c0a3a945c82e42ec60b2522ff45b76fc50450f0978a44"}, 0x1029) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x10) ioctl$TCFLSH(r1, 0x404c4701, 0x20000000) close(r1) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x10) 37.301046418s ago: executing program 1 (id=176): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000580)='ext4_es_shrink_scan_exit\x00', r2, 0x0, 0x7}, 0x18) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0xec, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x8c, 0xa8, @random="1b9715ffd6bcb9d0b1cce2c4f1fcc0a59abb754e5ac303cf812b0a6da98379f860b7218588b49247e0d35d1c66cf0b266320e8ac4828f1a96b984f67d268ee02653cc78a9eae188dce3a4c2f3ce62dc07bb0925dd3bd95d84121ecc5371364ad63767acb41e35b256d2b112f39c0696a970365d81b1024771932e980414f332a694ffdaac75d2268"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40084}, 0x40000) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00q\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000080"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r7, 0x8b2a, &(0x7f0000000040)) syz_emit_ethernet(0x4c, 0x0, 0x0) r8 = timerfd_create(0x9, 0x80800) dup2(0xffffffffffffffff, r8) 36.909655434s ago: executing program 1 (id=185): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x1, 0x101) r2 = io_uring_setup(0x48e5, &(0x7f0000001080)={0x0, 0x58e7, 0x1000, 0x2, 0x357}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000009c0)={r0, 0x4, 0x5, 0xd5}) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000b00)={0x0, &(0x7f0000000ac0)}, 0x10) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="6ac363081006000400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080012007e000000"], 0x3c}}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000001100)=r1, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file2\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={0x1, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1e, 0x1f, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}, @generic={0x7, 0x4, 0x3, 0x315}, @jmp={0x5, 0x0, 0x5, 0x8, 0xa, 0x80, 0xfffffffffffffff7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @btf_id={0x18, 0x48fbb4a320f22ddf, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='syzkaller\x00', 0x6, 0xa1, &(0x7f00000007c0)=""/161, 0x40f00, 0x0, '\x00', r6, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0x5, 0xf5e, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000009c0), 0x10, 0x5, @void, @value}, 0x94) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r7 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) setxattr$security_evm(&(0x7f0000000240)='./bus\x00', &(0x7f0000000380), &(0x7f0000000640)=@md5={0x1, "3639622c0648cc7360a2e1b13778ad8f"}, 0x9, 0x3) chdir(&(0x7f0000000140)='./bus\x00') r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) statx(r7, &(0x7f0000000280)='./file1\x00', 0x400, 0x10, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r10, &(0x7f0000000140)='mounts\x00') syz_open_procfs(r10, &(0x7f00000003c0)='net/ip6_flowlabel\x00') getgroups(0x6, &(0x7f00000002c0)=[0xee00, 0xee00, 0x0, 0x0, 0xee00, 0x0]) mount$fuse(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0), 0x3b20830, &(0x7f0000000580)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, r11}, 0x2c, {[{@allow_other}, {@default_permissions}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x39, 0x30, 0x38, 0x37, 0x32, 0x30, 0x63], 0x2d, [0x56, 0x62, 0x66, 0x37], 0x2d, [0x62, 0x61, 0x33, 0x39], 0x2d, [0xe, 0x37, 0x37, 0x61], 0x2d, [0x31, 0x62, 0x64, 0x63, 0x35, 0x31, 0x38, 0x37]}}}]}}) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 36.830462758s ago: executing program 1 (id=188): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="0088a7ef3a73813236a8d3c14af32b5d1fa7e82aaa5cf83aee76afeaa7658e98666d5aef27017f0c27ac1a", @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf252100000009001f0070687930000000000c0005000202aaaaaaaaaaaa0500200001000000"], 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x4000075) 36.568989194s ago: executing program 1 (id=195): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/37, @ANYRES32=0x41424344], 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/37, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=r2, 0x15, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000380), 0x131000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0xae, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x80, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="0f00000038000000000000007d70bc71b57fc5a16f4fadebb51ef826ed1997f1cd47788ec484e6c8f835a6bcd6d455a03c1fa532fa580c9ab49c2ab985cf2b83fb2a81d21414411857d8f324f300ad54e0ab3e8bae", @ANYRES32=r5, @ANYRES64=r3], 0x20) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000300)=@newtaction={0x4c, 0x58, 0x284f, 0x0, 0x0, {}, [{0x38, 0x1, [@m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000300)=@newtaction={0x4c, 0x58, 0x284f, 0x0, 0x0, {}, [{0x38, 0x1, [@m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r9 = fcntl$dupfd(r8, 0x406, r8) bind$rose(r9, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @bcast}, 0x1c) (async) bind$rose(r9, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @bcast}, 0x1c) 36.558282303s ago: executing program 32 (id=195): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/37, @ANYRES32=0x41424344], 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/37, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=r2, 0x15, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000380), 0x131000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0xae, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x80, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="0f00000038000000000000007d70bc71b57fc5a16f4fadebb51ef826ed1997f1cd47788ec484e6c8f835a6bcd6d455a03c1fa532fa580c9ab49c2ab985cf2b83fb2a81d21414411857d8f324f300ad54e0ab3e8bae", @ANYRES32=r5, @ANYRES64=r3], 0x20) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000300)=@newtaction={0x4c, 0x58, 0x284f, 0x0, 0x0, {}, [{0x38, 0x1, [@m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000300)=@newtaction={0x4c, 0x58, 0x284f, 0x0, 0x0, {}, [{0x38, 0x1, [@m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r9 = fcntl$dupfd(r8, 0x406, r8) bind$rose(r9, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @bcast}, 0x1c) (async) bind$rose(r9, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @bcast}, 0x1c) 33.109835687s ago: executing program 4 (id=196): r0 = socket$packet(0x11, 0x2, 0x300) ioperm(0x0, 0x5, 0x4000000000000020) getpriority(0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x5, 0x27a}]}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000004c0)={0xbe, 0x0, 0x1}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000540)={[0x8aba, 0xca26, 0x4, 0xd646, 0x7, 0xf, 0x6, 0x1ff, 0x7ff, 0x8, 0x8000000000000005, 0x2, 0xffff, 0x101, 0x5, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000640)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x0, 0x40, 0xfb, '\x00', 0xd1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) (async) r9 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000080)={r8, r10}) close_range(r5, 0xffffffffffffffff, 0x0) 26.169698146s ago: executing program 4 (id=196): r0 = socket$packet(0x11, 0x2, 0x300) ioperm(0x0, 0x5, 0x4000000000000020) getpriority(0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x5, 0x27a}]}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000004c0)={0xbe, 0x0, 0x1}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000540)={[0x8aba, 0xca26, 0x4, 0xd646, 0x7, 0xf, 0x6, 0x1ff, 0x7ff, 0x8, 0x8000000000000005, 0x2, 0xffff, 0x101, 0x5, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000640)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x0, 0x40, 0xfb, '\x00', 0xd1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) (async) r9 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000080)={r8, r10}) close_range(r5, 0xffffffffffffffff, 0x0) 19.010111533s ago: executing program 4 (id=196): r0 = socket$packet(0x11, 0x2, 0x300) ioperm(0x0, 0x5, 0x4000000000000020) getpriority(0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x5, 0x27a}]}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000004c0)={0xbe, 0x0, 0x1}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000540)={[0x8aba, 0xca26, 0x4, 0xd646, 0x7, 0xf, 0x6, 0x1ff, 0x7ff, 0x8, 0x8000000000000005, 0x2, 0xffff, 0x101, 0x5, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000640)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x0, 0x40, 0xfb, '\x00', 0xd1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) (async) r9 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000080)={r8, r10}) close_range(r5, 0xffffffffffffffff, 0x0) 13.079166254s ago: executing program 4 (id=196): r0 = socket$packet(0x11, 0x2, 0x300) ioperm(0x0, 0x5, 0x4000000000000020) getpriority(0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x5, 0x27a}]}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000004c0)={0xbe, 0x0, 0x1}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000540)={[0x8aba, 0xca26, 0x4, 0xd646, 0x7, 0xf, 0x6, 0x1ff, 0x7ff, 0x8, 0x8000000000000005, 0x2, 0xffff, 0x101, 0x5, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000640)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x0, 0x40, 0xfb, '\x00', 0xd1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) (async) r9 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000080)={r8, r10}) close_range(r5, 0xffffffffffffffff, 0x0) 6.550520443s ago: executing program 4 (id=196): r0 = socket$packet(0x11, 0x2, 0x300) ioperm(0x0, 0x5, 0x4000000000000020) getpriority(0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x5, 0x27a}]}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000004c0)={0xbe, 0x0, 0x1}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000540)={[0x8aba, 0xca26, 0x4, 0xd646, 0x7, 0xf, 0x6, 0x1ff, 0x7ff, 0x8, 0x8000000000000005, 0x2, 0xffff, 0x101, 0x5, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000640)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x0, 0x40, 0xfb, '\x00', 0xd1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) (async) r9 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000080)={r8, r10}) close_range(r5, 0xffffffffffffffff, 0x0) 4.806994939s ago: executing program 2 (id=698): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe00000090582"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) 2.829851732s ago: executing program 2 (id=718): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc8", 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000000c0)=0x1) readv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$sndseq(r0, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0xb, {0x0, 0xb8}, {}, @control={0x9, 0x0, 0xa}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x3ff}, {0x6, 0x4}, {}, @connect={{0x6, 0x2}, {0x0, 0xc}}}], 0x38) 2.769858083s ago: executing program 2 (id=719): r0 = epoll_create1(0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000600)="99bd1395cc8d59a638f8f5456f8b9a08d002ad4b2208642b0e66d78ec6ee0f14d100b15112bb6d70f072594d9266867d8c4d389afbba8250abb8fda346884ce4b04d5bb3d840a3f6b8cdcd896501000000162d328267e6ecdaaf83ea81e83189dd5c1063a38cc8eaa6cacea60efe355a5faf29", 0x73, 0x20008844, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @mcast1, 0x45}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080), 0xc) (async) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000840)='btrfs_convert_extent_bit\x00', r1}, 0x18) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0xa4, 0xfe, 0x3, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x80, 0xfff, 0x3}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32=0x1, @ANYBLOB="8100"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="05000000588933d3f9e20300000001000000000085b2bcc500000000"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r5) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1300000010000000020000000000000000000012", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000100b702000014000000b7020000000000008500000000000000000007000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x0}, 0x10) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = syz_open_dev$hiddev(&(0x7f0000000080), 0x2, 0x82c0) ioctl$HIDIOCSFLAG(r9, 0x4004480f, &(0x7f0000000680)=0x2) r10 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/oss_mixer\x00', 0x298f3cc22e12b39a, 0x0) write$proc_mixer(r10, 0x0, 0xf8) (async) writev(r10, &(0x7f00000023c0)=[{&(0x7f00000020c0)="02a2", 0xfffffffffffffd93}], 0x1) (async) getsockopt$inet_opts(r8, 0x0, 0xd, 0x0, &(0x7f00000000c0)) (async) r11 = epoll_create1(0x0) (async) ioctl$HIDIOCSFLAG(r9, 0x4004480f, &(0x7f0000000180)=0x1) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x61, 0x0, 0x8, 0x3}, {0x6, 0x0, 0x0, 0x7ffffffb}]}) r12 = fcntl$dupfd(r0, 0x0, r10) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r12, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r0, &(0x7f00000001c0)={0x20000001}) 2.769468179s ago: executing program 2 (id=720): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, 0x0, 0x0}, 0x20) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x20, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f1ffffff210000400000000009"]) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffe06) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000005c0)='rtc_alarm_irq_enable\x00', r8}, 0x10) ioctl$RTC_UIE_ON(r7, 0x7003) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r9, 0xc0182101, &(0x7f0000000180)={r10}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f0000000080)={r11, 0x3, r9, 0x5}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f000000c7c0)={0x0, 0x0, &(0x7f000000c780)={&(0x7f00000009c0)=@newtaction={0xe68, 0x32, 0x1, 0x4, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x3, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{}, [{}, {0x0, 0x5}, {0x0, 0x4}, {0x200000}, {}, {}, {}, {0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7b, 0x80000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0xffffffff, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 1.750729725s ago: executing program 2 (id=727): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="f7790066baa00066b86b4266efb8010000000f01d966b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07c4a1157cbd006800000f01d9c4033921820f47a753fd", 0x51}], 0x1, 0x40, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="880000003200090000000000000000000100000008000200", @ANYRES32, @ANYBLOB="0c00018006000000054700005f00cd80bba87ad9d17dc462163e0fea29ddc077b3b66f9160f81e151c454b1523e75216795d0cd256723b4a844eb6431ed67ff61d2a767eb7b9be080017000a010101ff5f064e08004800080000000800fd00", @ANYRES32=r3, @ANYBLOB="08008a00", @ANYRES32=r3, @ANYBLOB='z'], 0x88}}, 0x0) 1.580197767s ago: executing program 2 (id=728): sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x0, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", "", "", "", ""]}, 0x14}}, 0x810) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}}, 0x4040044) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x1, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x810) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40000c0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, 0x0, 0x8, 0xa1de5c5927ed1d32, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffff0}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000640), r0) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000680)) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x48, r5, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040044}, 0x4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xc8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0xfff7}, {0x8, 0x15, 0x60}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x8001}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0xfffffffb}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x9}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x800}, 0x4040004) openat$kvm(0xffffffffffffff9c, &(0x7f0000000980), 0x10b002, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000009c0), r0) r7 = accept4$llc(0xffffffffffffffff, &(0x7f0000000a00)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000a40)=0x10, 0x800) bind$llc(r7, &(0x7f0000000a80)={0x1a, 0x33a, 0x4, 0x3, 0x8, 0x3, @link_local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@getnetconf={0x14, 0x52, 0x20, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x4000000) r8 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_OWNER_UID(r8, 0xb704, &(0x7f0000000bc0)) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20000810}, 0x40001) getsockname$packet(r2, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000cc0)=0x14) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000d00)={0x3, 0x0, [{0xc0000103, 0x0, 0x3}, {0x8a3, 0x0, 0x4}, {0x881, 0x0, 0x2}]}) syz_usb_connect(0x0, 0x104f, &(0x7f0000000d40)={{0x12, 0x1, 0x250, 0xff, 0x92, 0x28, 0xff, 0x148f, 0x3572, 0x1b11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x103d, 0x4, 0x1, 0x2, 0x80, 0x0, [{{0x9, 0x4, 0x91, 0x7, 0x5, 0x67, 0xda, 0x74, 0xb, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xfffffffe, 0x0, 0x3, 0x80}, {0x6, 0x24, 0x1a, 0xfff, 0x28}, [@country_functional={0x10, 0x24, 0x7, 0x13, 0x5, [0xf5, 0x9, 0x7, 0x7bf2, 0xfff8]}]}, @uac_control={{0xa, 0x24, 0x1, 0x9, 0x4}, [@feature_unit={0xd, 0x24, 0x6, 0x1, 0x4, 0x3, [0x1, 0x6, 0x1], 0x3}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x200, 0x3, 0x75, 0x401, 0xf5}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x204, 0x6, 0x48, 0x0, 0xd, 0x3}, @feature_unit={0xd, 0x24, 0x6, 0x5, 0x6, 0x3, [0x0, 0x5, 0x1], 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x1ff, 0x4, 0x2, 0x5}]}], [{{0x9, 0x5, 0xf, 0x0, 0x400, 0x3, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x1000}, @generic={0x16, 0x8, "27bca9fddf060742cbac1c8e0bbf65aa8de1bbc1"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x3e, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x8}]}}, {{0x9, 0x5, 0x80, 0x4, 0x3ff, 0x4, 0x2, 0x7, [@generic={0x80, 0x9, "337bbe5d111f068abdbf8a56a83acc9f75535918f1db1dee757ccc7951468bd281c00396b3f9223280f90d55bd1d0c4c5f93dc82040ac862881319dce4d2f296faf4368e52ecdba1c0b19d6851d90c05dc80927c3e6a1f09311c9383c5d8674c3f860277c552be7d181b85969c4d782c1c34f5fe15b383442156c0446fd7"}, @generic={0x83, 0x23, "b49e114c79ff5d49454275547ff717e313178edf3f22de4ad46b2831222bc737738dbdb9b1999d0863f3b6ad883524d0b0b6d229cc13c11746ffdf17a67e54c9590229da7124738565fe074f16eec8654ad11570a3a5876df5625197af56e0c5057bb0cf3073f07d35e01dd18e08bf42f1a6576e5cd06273cca01924cef7ed4b17"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0xb, 0x9, 0xe9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xd}, @generic={0xef, 0x22, "eb54ff7c11622fe0c3cd94bd3cd1317797598619d204f85a1fe3e912ce790bc163598a0a4d93a93f4ef8fe2f6c82967e2d9a8f7d12a54d6578494ff1263dc0f56bffdd9d2c8e407b5e678ee2c5fc1f1a12c3dd8df3efb88c17f6c6e038b4542a8f5649ce137f910abcd0c23b0f14e305510e4b5eb48077c29b20ca99ed94c68a1d16561fa86a0d71d3d510d62ef5b83b8bb30ec252c9c9792891074f430f405565cb97f1866c2d9a4fd445234434afd78cd970cf833d23e87eaa96cb015650e44f1892ab66a586f9f45524ece41887002cb49b89b18b4e1455bc4786f747a508ba6d898a09fbed504a50b4b10e"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x8, 0x4, 0x7, [@generic={0x94, 0xc, "bcce3f9353b84858517310be070043f6d83ab5a016dcce54add501f12062ec7ca4d4ebb89bc9713829e87c531854ae50dad14fd2cf3327827709b054698486aebc83639dea93cf704b085561e5ea6ad0e7ae552eb11a52069482812381b92730689bee5bc48bd1b56dc1b0d44ddd0fea86cf8cee891db81f958b582ac5754041323ae9fc5305c71d49703f751a66d1ef8078"}, @generic={0xac, 0x4, "e2d3c33aeaab1ea27b4681d47f1cf7112fd8ab46bd2d78491f7eef0df2f824a03a0188b9db64021e2191580db749ad42db7fec5a929da62a16ba2cbefc5d7f8d43a2e9486ca41dbc8409cf12731864529f1c0c7ece0b2f1f26503054fa2811490e79e20a56469535359310a9f4d51eb5cfdee9fc587d17523d13ac1faa3b3ed4f0826ec892dab67f1b9c41dc08a5e2b793ad77168c8507869d40e40a9c3c2fd1cce331630845449e6e90"}]}}]}}, {{0x9, 0x4, 0x4, 0x7, 0xb, 0xb6, 0xe3, 0xc1, 0x9, [], [{{0x9, 0x5, 0x80, 0x10, 0x8, 0x0, 0x7, 0x2, [@generic={0xf4, 0x23, "9e055686ac2a1a175d347efd193bf0c2945a53f61877ef43be5434403620adcfbafb7fd6c11229ebedb95a1f88531bcc9407406fbd8896543bfc85cce83c69db475e9d334e31d842b9b89103891f4d73a8497eab33638cca513203f6096d64a199631c15443361eb19f5e271ec4e5aefdb968937f05dc7e00d30ea4eb48785601ff7c330f6fe06c29378c361540c0a69b85427ddadd2c005301eab02dcbc2ddab6b1af42a73fd9d9d64ca3cecc034b40da2c4702abdd1b1c84dd8e1bcfa8d6a1fd70f8d13223f857b44ebe5f4177a69f5824f21ac891b3270f52461b3239b78bcd72cc85a85c35b846dd9da1edf9687356cf"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x81, 0x9, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x3}]}}, {{0x9, 0x5, 0x9, 0xf, 0x200, 0x8a, 0x2, 0x2}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x8, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x9a}, @generic={0xd9, 0x1394484ec6506231, "5ae03cefd460cea94c80c0f00c80d3fc175cb079c717ae5a79e09521c9236e153a91ff5ef11d262b346b74f2cee4862f0a3d38abd5454ec7638928fa4b9fd877e91516d54b704f2f7726bf7ddd8592a8fa9a80363b294273bd7d55e77c51c54a607fa290825587463110c4f4efde01a6881d910d3ada64bd04dd7427e6711ae2f08425d632db683e4b6c2709a7474b0d004617a7a9713badc149df1add9de2be7675b666e83403f195e944394ff2d07c0043d4e4e23481b8f00e460ebc8ed20d5ce95900cd9939eaeca0365fced89bc1b87e1c54d9533c"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x8, 0x5, 0x2, 0x8}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x9, 0x81, 0xf, [@generic={0xe8, 0xc, "10620411c3792cce46a561db5cac2ba479acace48b2a36880faf9dae14a2247f1245294de5de1d3f750ba0c76f9c320d2ed4937377afd2253997e0d847cb497612c2efe920d2ea8ffb604ec15de30ee947a4db2858c4387ea000122ee538c12e601d7db492c1f22a4281b46593b918f58141e26c90f68f48bce0617df60956d4c0f2992a864b1eedeb65243831703a2563bc1390fb4c17546d8be8423b0f4469bb387386e626495b43d2cfaabec73270cc5260769d8c5da24e8d5164a2bb93ce198ceec1e06af6ce459c3156c2ac55b17e8981030f9edfe495817bc6c0649fe9577f3105a77c"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0xe4c8}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0xec, 0x3, 0x1c}}, {{0x9, 0x5, 0x3, 0x1, 0x8, 0x5, 0x2, 0xb8}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0xe2, 0x2, 0xf3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf8, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x5}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x2b, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xb464}]}}, {{0x9, 0x5, 0xe, 0xc, 0x3ff, 0x0, 0x3, 0x2}}]}}, {{0x9, 0x4, 0x9d, 0x2, 0xd, 0x29, 0xd9, 0xa3, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x401, 0x4}, [@mixer_unit={0xb, 0x24, 0x4, 0x6, 0x80, "17bd1977c890"}, @mixer_unit={0xb, 0x24, 0x4, 0x4, 0x6, "638a5fc22e9c"}, @processing_unit={0xc, 0x24, 0x7, 0x4, 0x2, 0xf8, "81229cffbb"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x206, 0x1, 0xf, 0x8, 0xfe, 0x6}]}], [{{0x9, 0x5, 0xb, 0x0, 0x200, 0xfc, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xb8, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xeb, 0x4}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x2, 0x4, 0x4}}, {{0x9, 0x5, 0x80, 0x10, 0x458, 0xc0, 0x1, 0x8d, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xb, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x6}]}}, {{0x9, 0x5, 0x1, 0x8, 0x10, 0x1, 0x0, 0x4}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x2, 0x6, 0x4}}, {{0x9, 0x5, 0xe, 0x2, 0x10, 0x9, 0x49, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0xfff3}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x7, 0x32, 0x6}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0xc, 0xe, 0x3}}, {{0x9, 0x5, 0x9, 0x8, 0x20, 0x3, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0x1f, 0x9}, @generic={0xca, 0x21, "b83fe388ad26edb4464e3f228ea0d3a49a2bd4dea520e53e0cf1185430fcb64a4ed9bfdf3aa42907377105b4be46fdd20fec5e6e9910a903b3ed8286bfccb9ceb2917fe474ea53296c8a189bf7d5c86f54826dec75ead472027954e84a98b8920ebbb6ef07c6465b6aa01176eae27b654d65a67485d3db01b82e51e325eb3591d9c5764b7e9a81a6afddb0d7a3bc2dbafb3254f46fb8d392d2377ec257dc57929bdd572c2eeff4bbdb9b49b4ade4f974356f938dbb86f73cfd353d41aa7aadbb7df66d6e99c57f27"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0xc, 0xff, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x182, 0xc0, 0x3}]}}, {{0x9, 0x5, 0xc, 0x2, 0x8, 0xfd, 0x9, 0x4}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0x8, 0xf, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0xe}, @generic={0xc2, 0x10, "099850ce5accca1a13e5ab2bb25d41dba0793d6e27cb4a8e6ff8bad7de2efb8c130e6f63627a3f489acfae63723bdc191ecde6496016620d5a59ae1757a8b6cbb177ad8d88213f8aaa610f3e317af3065130ad02d3a1b7a0f9bdb27b057d333dc73591f286f862bd4387282aad34404d5ea72f1ac8b93124343efe921cb531857e0de9426199755df533840f2b68bb714fe03570b08dd2be48935fd89ba22d56eb1fda21764ebcf583b8744d3f4291a6eda64a80a925d20d02c2c6e6a660100e"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x1, 0x0, 0x5}}]}}, {{0x9, 0x4, 0xc1, 0xca, 0xe, 0xbf, 0x52, 0xe4, 0x8e, [@uac_as], [{{0x9, 0x5, 0x5, 0x0, 0x10, 0x4, 0x0, 0xaa, [@generic={0xa3, 0x2, "bd50d0aa7629c7d09a36e39d21d9142861a9d78c2ab505a01918a0bd376072d063c09e6768f126a3af7b28890138b150c137bb6d3b040d90fb92976f4ca0bfed768f54a9c5203aa9e7481a9d560f6acfd7579301b02000b498201271191a23ed7f417f5d2a29237208a82e4f2a9ba025fab6f3cf5c45e0dab6bcbf036ad97c2da9bcd3cf4d2de5e247b6e7667d88af7d43dc13cea9d4425521a69b5ce4bdc627fe"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x4}]}}, {{0x9, 0x5, 0xa, 0x4, 0x20, 0x3, 0x81, 0x8, [@generic={0xa6, 0x11, "bf858278bdae395c2fee8a9209c79f36417e0bbf00f334db7331d747a2370aeca98342e7291ed08925f5da90a75cda077e021c21f59f6fa80968c179f2dcd901e5391c2ef0c1f44a0741dae8a4c3decf0695c306d4fbe5e2bad01d0b9e82c0027907e22e94ca7bc6b7f8faf3882eef324880497371f375d2e0091c4e235fb16b6ec79207830afeab27f7b0be81277f0e5fb327cd8d3cba609d1c7b29611efa3485ae5bd6"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x11b0}]}}, {{0x9, 0x5, 0xf, 0x2, 0x400, 0x5, 0x77, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0xe3b}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x630}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x8, 0x2, 0x29, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x5}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0xf8, 0x2, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x3ff}, @generic={0xe6, 0x23, "77f3099b41421e3dfc38ccfd6879bd5f1a465ba4cf70a1be0c73305ce1978f63a1baed9bcc010cd8202aff0b3914b8c8e6a6dc7797fd8e4b8c22bc619d77d5fe86a16f336007f9381052e6e52535a522d265f81d6b1d06de78362e87c241689f4448c59d3e1b058b5d992efabeb84d6b55a5c92c36137504c216d2c414b8e734b49d4b6d5a7c01a86f4eb5edea37092949c8b8016792ecbb1e995e62d03a8299a6767536c2a462e5fc8d63f651dac508b3539de45978973d1733a3ff5ed49144d3750b2d732e4dfb55f69551bd2427881d64029211131f9e881a0fcb3f25a7f4cb99b4f9"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x40, 0x3, 0x6}}, {{0x9, 0x5, 0x7, 0x3, 0x3ff, 0x7, 0xfe, 0x7f, [@generic={0xb4, 0x23, "e9949ae5741695fec67f249605f4dca6eab09bfff906a1fc1b8dc4cc899747b4092cce4c2436697fa569c80167262c5afb826600842f666fa816164837d927876b293d2aa29c4f5448eba942f3ed95eed987b3dda78dade685dba80f056648b13cd623bc4b5873708f0d7b5efc1ab543cb1dd2e737e6847c0fdc89f8e6354858949395fd967f90c5978245a75e80d17e2aa380f69bfc4308974bbf6e70963671ba6d8f7f1d32c420808661f0a5ec8ff6a2e4"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x7f}]}}, {{0x9, 0x5, 0x3, 0x4, 0x10, 0x8, 0x0, 0x2, [@generic={0x98, 0x10, "f033771756e597d9ec5253f2ea4cf0859a80f55f848fbfe355fc6eb5054fb310a6c15848347a2cd375fd76fa95e030114b30dd2ce0250e52a19a24dee39c622e0dba7d5aa0c40cfe5c5b21d8480dabf6191d5dd29ca9694a98f8bb32fdeca823cec35d71ed0749c945779d6e868434deb8e9a696ddbfeea1c7f9b2b2e9e1a266ae6c8285869c64d7fdc9f9e01ee8cf486e16aeeb915c"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x10, 0x37, 0x10, 0xd7, [@generic={0xf2, 0x4, "899ba7a9ab757c84624331ebab553523ac5d0069919e123272616fbf843501fb391cc84cee5ba895897c6e57eb902bdef8d1a1740e9c33cf24c9a4ba69f03493d86772eca18cdce6a84c2bdc227fc4a88344c914e5d54248e843a770180eb8e5f8f196a3df81dd167d8044755b04725b0d4284f7bd4321a84f1bcacec34a47d297641ad0bad164eace62464a7dbb108c4a63a5d6c9583ab8038bc73a07add165d9022dc53c1032cffa7dfe7143d5ce4d4cd5fb98335ddf5d11841c82fb5edc80ac8aba66d95262f8acb98addbef373390b1cce516d04cb161d16876874b137181611beb71d32e1dbf4e834ccc441b52a"}]}}, {{0x9, 0x5, 0x2, 0x6, 0x200, 0x8, 0x4, 0xfa, [@generic={0xf0, 0x31, "7ab9d1941fc7134334ae70f96a58e6ecce60bef9e26e6521e181f1a52b080d34ef6dd5d33c79a31f9fb21c296a200dac51b4b0a2036f9de3a70e1c5b03db104c5da8e0b44e6fd3bfb7c992b6cd70bdb3284b8fd347b3f3362cdbacf8b49ae93afac2870d39deee3b2eff04f4fb2fbeb24f0386caeb0c6d69946dd6b1b7d6f3813bb03227e230fb7fc31bab2ca2507b4dd588a330ea69c2111a397ee7d44a310e18052e1682c601cf0d31d3daf2f2b52dcd2b3c0961d1980d07737641dc481bb8ea7871cdd9cf29cdadc826a35e2bc27d81910e0ab4bf7b085015ed14d9e190579a879e261780a5061f3516e2bdf1"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x3, 0xc0, 0x7}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0xd, 0x5, 0x50, [@generic={0x3b, 0xe, "ca37e118da157a2928efcb1ac5d49e213ea5393eaa19495924937e9e35c6bca192cc8d124ed9645dc9fc04173c2f41e82947c9f01000e192d5"}, @uac_iso={0x7, 0x25, 0x1, 0x140, 0x40, 0x1}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x4, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x401}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x3, 0x61, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd, 0x8}]}}]}}]}}]}}, &(0x7f0000002040)={0xa, &(0x7f0000001dc0)={0xa, 0x6, 0x300, 0x3, 0x1, 0x0, 0x40, 0x2}, 0x2f, &(0x7f0000001e00)={0x5, 0xf, 0x2f, 0x3, [@ssp_cap={0x20, 0x10, 0xa, 0xff, 0x5, 0x4, 0xf000, 0x5, [0x30, 0xc000, 0xff0000, 0xffc0, 0x3fc0]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0xc}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000001e40)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000001e80)=@lang_id={0x4, 0x3, 0x4034}}, {0xbb, &(0x7f0000001ec0)=@string={0xbb, 0x3, "b932c3e66bd95b8057b1fde2260937d9851a1c0742bd4e4bd308c7c3eb3444f7440645928e166930b9c9e91f918ae6c524c4525ca190c0525e3d49ed841de2b5c6f4a2532ebff067f39d42532db343afe3abadb295c3744be472c26fb9faeb58dd9ae7bef6b6fae1be2e7ddd5aaf466bb51bc455e7d2de2f4d683eea501f31f88a2fd00fb4af45e8325ef90989cfb039a5200687f0ac798212b70ffc241a9fc0a7ff1d6a6e7a828c6445e7199bc4b0916a8d21cbd1a3896fc6"}}, {0x4, &(0x7f0000001f80)=@lang_id={0x4, 0x3, 0x2c69}}, {0x6d, &(0x7f0000001fc0)=@string={0x6d, 0x3, "662688271fe0f01c76746c441a4f8e40e2743ddc1294125d1247d9ebdaa716351cf8cfaba4cda25c8f94300d526e7166856c3a3fcfc8c069a6625f7086974193d3d3f350faf53997d95e6fbdf556e35acf42db958057bb23b94eaa1ba357928a9b6798dd06891b2561386f"}}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000020c0)={'batadv_slave_0\x00'}) r10 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) sendmsg$SOCK_DESTROY(r10, &(0x7f0000002440)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002400)={&(0x7f0000002180)={0x254, 0x15, 0x200, 0x70bd2d, 0x25dfdbfb, {0xb, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xf, 0x1, "440a86c30861f58a62857f"}, @INET_DIAG_REQ_BYTECODE={0x6d, 0x1, "50a451d77197956e5c051e99d60ba974c860052d76adb51db58649e6e58d2113cbc064624145cb75c4ed870db898870f47d29733128b3651eca7f7305bcd8a8bb2e97d6a69c0dace15f86f5ff40fdbc889afc078b965baad2be2887908ed746e902b28e06985814981"}, @INET_DIAG_REQ_BYTECODE={0x2e, 0x1, "a36bb369231fba2a75b8bc1a9aedc589452a2527ada0958dd3b121a15c7c0d7ab8ad84b1ec117e37a504"}, @INET_DIAG_REQ_BYTECODE={0x79, 0x1, "a7a6320b6727adac03118e37d9e9188f2e899fbf646e55786afa2d3461f39e71bcfd0c85b250dd18ec8c61e9dd24ee06cb8633c561fc132309b3425e41b78268a6aec74acc9a20894fbe8b31a4c983419aa34ef1dd54c681da9a471f2163c2a7d238addaf2c8515d7dffc7d29a2c7b05d815fe56e6"}, @INET_DIAG_REQ_BYTECODE={0x22, 0x1, "74d893c264860eb01efbe3708f744b3364a3962cf9d72e8f154b35207418"}, @INET_DIAG_REQ_BYTECODE={0xee, 0x1, "91123e17e14be2587468b0e6b181000c062fabb8716e17e242ec8524f5937a94d082c7a71a2ef23bf11ff212fc233db97edefcb1f7fa84f3f4483f8075caf06024fe119f234d36466e7c3b07b464a9db39ef6cb34c468e90b103471e66bbab0b4e5d2cea61c48024db49ecde810d89f38e929f76ddaf34c90a3c97419c8a475b7e149bc4de8f2d2ebf1ecc5a9ebaf93432448ff15c7fa78975f14bfb1fdf330848d60d62c945b9b836dd575e5e0199490c030d47a55056b645eb882e66771ed49336e6cd6a78d1dc6ee01a5c492628658def7080245c8a5c2cc183b5e289c772e71c96343d1bbecf915d"}]}, 0x254}}, 0x4000006) socket$l2tp6(0xa, 0x2, 0x73) 1.579208135s ago: executing program 0 (id=729): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x2) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x8, 0x1, 0x0, "a701f6dd566a4aff01000000000000a83971e3aece62c53bb500", 0x20385655}) bind$alg(r1, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(blowfish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8042}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r3, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) sendmmsg$sock(r3, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@mark={{0x14, 0x1, 0x24, 0x401}}], 0x18}}], 0x1, 0x80c0) r8 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="e2861f70", 0x4}], 0x1}, 0x4000085) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x6, @sliced={0x1, [0x1, 0x2, 0x7, 0x6, 0x1, 0xf, 0x6, 0x8001, 0x9, 0x0, 0x7, 0xe04, 0xe, 0x401, 0xcb2f, 0x3, 0x8, 0xfffd, 0x0, 0x1081, 0x3, 0x7, 0xfff9, 0x2a49, 0x2800, 0x401, 0x8, 0x8, 0xef, 0x8, 0x1, 0x1ff, 0x2, 0x5d, 0x1, 0x5, 0x8009, 0xdb0, 0x3, 0x7, 0x9, 0xff10, 0x3, 0x401, 0xfffd, 0x211c, 0x4, 0x7ff]}}) 1.490765664s ago: executing program 0 (id=730): syz_open_dev$video(&(0x7f0000000100), 0x7, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x5}, 0x4) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x401) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000400)=""/197, 0x0, 0x2}) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xd13, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000ac0)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077687ad36dfe5f14a7b0ce15c1e6be0e7eca00"}, 0x48, 0x0) syz_clone(0x106800, &(0x7f0000000980)='0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/time\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x30, 0x0, 0x8, 0x381, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r8, 0xc008ae91, &(0x7f0000000600)) connect$inet(r5, &(0x7f00000004c0)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x24, &(0x7f0000000280), 0x8c) io_uring_enter(r0, 0x107f62, 0x3fffffd, 0x0, 0x0, 0x0) 540.505262ms ago: executing program 0 (id=736): r0 = socket$isdn(0x22, 0x3, 0x22) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x8, 0x2, 0x2, {0x4, 0x8, 0x7f, 0x4}}) (async) r2 = accept4(r0, &(0x7f0000000100)=@alg, &(0x7f0000000180)=0x80, 0x80800) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f00000001c0)={0x68}) (async) preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/161, 0xa1}, {&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000300)=""/38, 0x26}, {&(0x7f0000000340)=""/110, 0x6e}], 0x4, 0x9, 0x6) (async) r3 = syz_open_dev$vbi(&(0x7f0000000400), 0x2, 0x2) ioctl$VIDIOC_G_INPUT(r3, 0x80045626, &(0x7f0000000440)) (async) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'veth0_to_bridge\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000500)={0xb, 0x3, 0x7, 0x3b6, 0x3, 0x0, [{0x10, 0x8, 0x0, '\x00', 0x100}, {0x5, 0x3, 0x40, '\x00', 0xc00}, {0x8, 0x0, 0x3, '\x00', 0x1}]}) (async, rerun: 64) r5 = syz_open_dev$ndb(&(0x7f0000000600), 0x0, 0x400840) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x12d, 0x12d, 0xb, [@union={0xe, 0x1, 0x0, 0x5, 0x1, 0xef79, [{0x6, 0x2, 0x4}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x7, 0x2}, {0x7}, {0x0, 0x3}, {0x10}, {0x5, 0x1}]}, @datasec={0xe, 0x1, 0x0, 0xf, 0x1, [{0x4, 0xe723, 0xb6}], "82"}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x4, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x1}}, @enum64={0x6, 0x5, 0x0, 0x13, 0x0, 0x0, [{0xd, 0xda7c, 0x5}, {0xd, 0x2, 0x8}, {0xe, 0x10000, 0x4}, {0x6, 0x40, 0xe}, {0x7, 0xb0, 0x6}]}, @union={0xd, 0x3, 0x0, 0x5, 0x1, 0x63, [{0x6, 0x3, 0x4}, {0x3, 0x3}, {0x8, 0x0, 0x4}]}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x2, 0x3}, @volatile={0x1, 0x0, 0x0, 0x9, 0x2}, @float={0x7, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x5f, 0x0, 0x5f, 0x5f, 0x30, 0x2e, 0x2e, 0x51, 0x0]}}, &(0x7f0000000800)=""/110, 0x153, 0x6e, 0x0, 0x4, 0x0, @void, @value}, 0x28) ioctl$BLKSECTGET(r5, 0x1267, &(0x7f00000008c0)) (async) ioctl$NBD_DO_IT(r1, 0xab03) (async) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x110, r7, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_VENDOR_DATA={0xda, 0x1f, "6eadc3ab34168ff8a774b66971b4c20a62256a6d3fc7b818a9fa556d20afeb05ac6c53b3dd6c3792c0398c13773f76570a4871b7c57c5664ac4b83e818c64a9a009857459ce866062284bd7bb4f25f92ec08a45c0b7cdb2dc9022439bde1693eea82860a421bb5a31835630cd87794c573418949e7dd19456a379a1841e20549eb949459d1018a33e00030a8d912cda1981e8dc4ad3b2832a5125b4522f18e388a7a5a1462e40ba7d31414473c09ce7cd0ab9c35f705b23a564062ec0cc9599252a43cb3b98e5257542f312f45333ee015ef8caabf1e"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x5}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}, @NFC_ATTR_VENDOR_ID={0x8}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x1000}]}, 0x110}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000040) (async) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) (async, rerun: 64) socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) r8 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000b80)) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, 0x1402, 0x8, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) copy_file_range(r3, 0x0, r4, &(0x7f0000000c80)=0x2, 0x1, 0x0) r9 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000d00)=@userptr={0x3, 0xc, 0x4, 0x100800, 0x9, {}, {0x1, 0x8, 0x8, 0x5, 0xc, 0x0, "f8d0eb4a"}, 0x1, 0x2, {&(0x7f0000000cc0)}, 0xb, 0x0, r9}) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000dc0)=0x0) (rerun: 32) sendmsg$NFC_CMD_DISABLE_SE(r10, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x2c, r7, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x404c040) 538.764318ms ago: executing program 0 (id=737): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0xfffffff4, 0x0, 0x0, 0x0, 0x0, "0104004cb0000800000000000000000300"}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0xda90) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}}, &(0x7f0000000580)=0x91) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0x53) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000b3e5aee477f463a13844672a92001000010400090000000004a900000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001800128008000100736974000c000280050009002d000000"], 0x38}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_emit_ethernet(0x56, &(0x7f0000005900)=ANY=[@ANYBLOB="aaaaaaaaaaaa8f064ab6bf7c86dd606410a60020000020010000000000000000000000000001fe8000000000000000000000000000aa0003000000000000050200000710"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="54010000100001000000000000000000ffffffff000000000000000000000000ac1414aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0001000000000000000000480002006563"], 0x154}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, &(0x7f00000001c0)="1955de05b98dc211de645a7210a9a1743d6f8ea5469056d31d57a4c55c805b3d70b0fd14a312d782c1ef9c81196362d674d805d729d8282c7a1df4d51c1cee5f26b291084fa2e1ce043a633afcfda8abb2dc5784362d3876cac98f4d2bd2fd8bd40d0f14a9649ea6d99fdc05c7fc86f4f5da6a7bfcc1c1e920fd57366519296ac888f09a8c441dfbd0c9d06f52ddafc7a837acc3bf565461ac05ccf52f179513b77b4e7b470b08a898f7c28fd8eb50c53b69bc", 0xb3, r7) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x7, 0xfffffffffffffffe, 0x1, 0x2, 0x0, 0xeffffffffbffffff, 0x3, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x1c000, 0x41901}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r8, &(0x7f0000000040)=""/111, 0x6f, 0x6c38) ioctl$HIDIOCGUSAGE(r8, 0xc018480b, &(0x7f00000004c0)={0x1, 0x3, 0xd, 0x7ff, 0x0, 0x4}) 430.204399ms ago: executing program 0 (id=738): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001a000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f030000000000002e100200000000002604fdffff02000014010000030000001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x6b5, 0x41) ioctl$USBDEVFS_GET_SPEED(r4, 0x551f) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x2, 0x0, 0xca, 0x0, 0x0, {0x1}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmmsg$inet6(r0, &(0x7f0000000180), 0x0, 0xc1) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) io_uring_enter(r5, 0x3dd1, 0xad7c, 0x14, &(0x7f0000000340)={[0x6]}, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000180)) (async) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000300)={0x16, 0x18, 0x13, 0x8, 0x0, 0xfffffffe, 0x3, 0xf4, 0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000001ff000000000008000100"], 0x30}}, 0x0) 210.772245ms ago: executing program 3 (id=741): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000080)) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$CDROMREADAUDIO(r1, 0x530e, &(0x7f0000000100)={@msf={0x8, 0xc, 0x40}, 0x2, 0x2e, &(0x7f00000000c0)=""/46}) 209.90862ms ago: executing program 3 (id=742): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x7, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (async) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1d, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}}, 0x14) (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r6 = fanotify_init(0xf00, 0x0) fanotify_mark(r6, 0x105, 0x5000003a, r5, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee01}}, './bus\x00'}) (async) r8 = getegid() (async) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1800}}, {@default_permissions}, {@allow_other}, {@default_permissions}], [{@euid_eq={'euid', 0x3d, r9}}, {@fsname={'fsname', 0x3d, '\x00'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@dont_measure}, {@seclabel}, {@fsmagic={'fsmagic', 0x3d, 0x3}}]}}) splice(r2, 0x0, r1, 0x0, 0x4, 0x5) (async) write$binfmt_misc(r3, &(0x7f00000000c0), 0xfdef) 199.153456ms ago: executing program 3 (id=743): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000003179b7808280c443d200"/29, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00003e1000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x5, @sdr={0x35303553, 0xd93f}}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x150) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}, {@nfs_export_on}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0x80049370, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='netlink_extack\x00', r1}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000040001}) r7 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000000)='\x00', 0x1, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r7, r8, r8}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={'poly1305-generic\x00'}}) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8c, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x4, 0x19ef, 0x3, 0x5, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x3, {0x8, 0xffffffff}, 0xcd, 0x7}}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="380000ac2c000100000000000000ef1208000000", @ANYRES32=r9, @ANYBLOB="0b000080976b64086860300014000180f510625f7eeec35460d9d4c5e964a895"], 0x38}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) 130.635686ms ago: executing program 3 (id=744): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$poke(0x5, r4, &(0x7f00000001c0), 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r5, &(0x7f0000002800)=[{&(0x7f00000023c0)=""/203, 0xcb}, {&(0x7f00000024c0)=""/162, 0xa2}], 0x2, 0x7, 0x7fff) (async) mremap(&(0x7f00002d7000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) (async) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x20000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f00000002c0)={r7, 0xa9ac}, &(0x7f0000000300)=0x8) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) (async) r8 = fcntl$dupfd(r0, 0x0, r0) (async) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x4) ioctl$UFFDIO_CONTINUE(r8, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) (async) creat(&(0x7f0000000080)='./file0\x00', 0x42) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 350.385µs ago: executing program 3 (id=745): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) 0s ago: executing program 3 (id=746): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x24, r2, 0x1, 0x70bd27, 0x5, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x550b, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x2) listen(0xffffffffffffffff, 0x101) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x12, 0x0, 0x31) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, &(0x7f00000000c0)=""/138) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011003000000082505a8a440000102030109020001010400090207010306090501021000000000000000002000020701"], &(0x7f0000000380)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x3, 0x3, 0x7, 0x20, 0x9}, 0x46, &(0x7f0000000240)={0x5, 0xf, 0x46, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0xac, 0x10, 0x9}, @ssp_cap={0x14, 0x10, 0xa, 0xd, 0x2, 0x8, 0x0, 0x6, [0x0, 0x7f80ff]}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x60c, 0xf, 0x401, [0xc000, 0xff3f00, 0xff000f, 0xff0030, 0xffc000]}, @ptm_cap={0x3}]}, 0x1, [{0xb2, &(0x7f00000002c0)=@string={0xb2, 0x3, "f85b3b3d7694703cb19c9d829894261925993eb79008d4ddd53cba1b2063b9f77826dd9ded2bc837a6a4da36e2d2847c90a112a1d1454e724dd3358ec14ae2478a362dc8a5fa8381b0c01c03fdb0c826d82f5eb3ecc5e2acded8d0c0eaedd7558ffc82d954504a2ec578450c566d4c08f109f795facb36733eb1e215ec20b78291a4a2a81ef7aae2978609351561e940967447d146a77c6d1ee002fc0f133dc0e9cc472612495ed7952c97c42e9a7f3f"}}]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) r6 = fsopen(&(0x7f0000000500)='bfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1 1 [ 569.388622][ T5993] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 569.390969][ T5993] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 569.397308][ T5993] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 569.400525][ T5993] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 569.402602][ T5993] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 569.425576][ T6050] usb 5-1: device descriptor read/64, error -71 [ 569.427577][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.496843][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.516046][ T1139] wlan0: Trigger new scan to find an IBSS to join [ 569.517791][ T6738] chnl_net:caif_netlink_parms(): no params data found [ 569.563166][ T6752] tty tty3: ldisc open failed (-12), clearing slot 2 [ 569.571086][ T6738] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.573003][ T6738] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.574894][ T6738] bridge_slave_0: entered allmulticast mode [ 569.577313][ T6738] bridge_slave_0: entered promiscuous mode [ 569.579847][ T6738] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.581858][ T6738] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.583855][ T6738] bridge_slave_1: entered allmulticast mode [ 569.586197][ T6738] bridge_slave_1: entered promiscuous mode [ 569.609503][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.631318][ T6738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.635031][ T6738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.656898][ T6738] team0: Port device team_slave_0 added [ 569.659940][ T6738] team0: Port device team_slave_1 added [ 569.678589][ T6050] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 569.682104][ T6738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.683989][ T6738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.690721][ T6738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.694315][ T6738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.696950][ T6738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.703683][ T6738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.716788][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.740425][ T6738] hsr_slave_0: entered promiscuous mode [ 569.743165][ T6738] hsr_slave_1: entered promiscuous mode [ 569.745390][ T6738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 569.748198][ T6738] Cannot create hsr debugfs directory [ 569.820237][ T11] team0: left allmulticast mode [ 569.821979][ T11] team_slave_0: left allmulticast mode [ 569.824939][ T11] team_slave_1: left allmulticast mode [ 569.825586][ T6050] usb 5-1: device descriptor read/64, error -71 [ 569.827460][ T11] bridge0: port 3(team0) entered disabled state [ 569.834336][ T11] bridge_slave_1: left allmulticast mode [ 569.838181][ T11] bridge_slave_1: left promiscuous mode [ 569.839822][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.842847][ T11] bridge_slave_0: left allmulticast mode [ 569.844346][ T11] bridge_slave_0: left promiscuous mode [ 569.846092][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.935821][ T6050] usb usb5-port1: attempt power cycle [ 570.078356][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.081981][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.085134][ T11] bond0 (unregistering): Released all slaves [ 570.113023][ T6738] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 570.117976][ T6738] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 570.120989][ T6770] ip6t_srh: unknown srh invflags 7D00 [ 570.121036][ T6738] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 570.126502][ T6738] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 570.198178][ T6738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.220335][ T6738] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.224399][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.226312][ T6036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.231516][ T6026] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.233315][ T6026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.285514][ T6050] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 570.285566][ T5352] udevd[5352]: worker [5992] terminated by signal 33 (Unknown signal 33) [ 570.286243][ T6738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 570.292992][ T5352] udevd[5352]: worker [5992] failed while handling '/devices/virtual/net/lapb8' [ 570.307134][ T6738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.309391][ T6050] usb 5-1: device descriptor read/8, error -71 [ 570.349077][ T11] hsr_slave_0: left promiscuous mode [ 570.350925][ T11] hsr_slave_1: left promiscuous mode [ 570.353013][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.354995][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.358014][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.359984][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.374663][ T11] veth1_macvtap: left promiscuous mode [ 570.377043][ T11] veth0_macvtap: left promiscuous mode [ 570.378535][ T11] veth1_vlan: left promiscuous mode [ 570.380002][ T11] veth0_vlan: left promiscuous mode [ 570.565595][ T6050] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 570.586035][ T6050] usb 5-1: device descriptor read/8, error -71 [ 570.598249][ T6796] netlink: 'syz.2.210': attribute type 27 has an invalid length. [ 570.598338][ T6799] netlink: 'syz.2.210': attribute type 27 has an invalid length. [ 570.695823][ T6050] usb usb5-port1: unable to enumerate USB device [ 570.899032][ T11] team_slave_1 (unregistering): left promiscuous mode [ 570.902679][ T11] team0 (unregistering): Port device team_slave_1 removed [ 570.954721][ T11] team_slave_0 (unregistering): left promiscuous mode [ 570.957494][ T11] team0 (unregistering): Port device team_slave_0 removed [ 571.276741][ T5995] Bluetooth: hci3: command 0x0405 tx timeout [ 571.281116][ T5993] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 571.286446][ T5993] Bluetooth: hci0: Injecting HCI hardware error event [ 571.295671][ T5993] Bluetooth: hci0: hardware error 0x00 [ 571.404508][ T6796] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.406731][ T6796] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.445599][ T5995] Bluetooth: hci2: command tx timeout [ 571.492663][ T6796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.502740][ T6796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.560095][ T6796] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.562574][ T6796] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.564889][ T6796] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.567611][ T6796] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.594139][ T6796] bond1: left promiscuous mode [ 571.597550][ T6796] batadv1: left promiscuous mode [ 571.598942][ T6796] batadv1: left allmulticast mode [ 571.601559][ T6796] ipvlan2: left promiscuous mode [ 571.616373][ T6795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.618572][ T6795] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.637135][ T6738] veth0_vlan: entered promiscuous mode [ 571.640383][ T6738] veth1_vlan: entered promiscuous mode [ 571.656830][ T6738] veth0_macvtap: entered promiscuous mode [ 571.660789][ T6738] veth1_macvtap: entered promiscuous mode [ 571.666859][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.669917][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.672473][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.675126][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.679177][ T6738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.683287][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.686904][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.689419][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.692086][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.695184][ T6738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.709765][ T6738] wireguard: wg0: Could not create IPv4 socket [ 571.715787][ T6738] wireguard: wg1: Could not create IPv4 socket [ 571.718545][ T6738] wireguard: wg2: Could not create IPv4 socket [ 571.941968][ T6815] kvm: pic: non byte read [ 571.945722][ T6815] kvm: pic: non byte read [ 572.052862][ T39] kauditd_printk_skb: 80 callbacks suppressed [ 572.052878][ T39] audit: type=1400 audit(1734374626.665:445): avc: denied { listen } for pid=6826 comm="syz.3.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 572.053051][ T5995] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 572.062493][ T39] audit: type=1326 audit(1734374626.675:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6826 comm="syz.3.218" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e5cf85d19 code=0x0 [ 572.064985][ T5995] CPU: 3 UID: 0 PID: 5995 Comm: kworker/u33:5 Not tainted 6.13.0-rc3-syzkaller #0 [ 572.070945][ T39] audit: type=1400 audit(1734374626.675:447): avc: denied { append } for pid=6829 comm="syz.2.219" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 572.073334][ T5995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 572.084063][ T5995] Workqueue: hci3 hci_rx_work [ 572.085613][ T5995] Call Trace: [ 572.086764][ T5995] [ 572.087795][ T5995] dump_stack_lvl+0x16c/0x1f0 [ 572.089422][ T5995] sysfs_warn_dup+0x7f/0xa0 [ 572.090954][ T5995] sysfs_create_dir_ns+0x24d/0x2b0 [ 572.090977][ T5995] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 572.090993][ T5995] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 572.091008][ T5995] ? kobject_add_internal+0x12d/0x990 [ 572.091024][ T5995] ? do_raw_spin_unlock+0x172/0x230 [ 572.091039][ T5995] kobject_add_internal+0x2c8/0x990 [ 572.091057][ T5995] kobject_add+0x16f/0x240 [ 572.091072][ T5995] ? __pfx_kobject_add+0x10/0x10 [ 572.091086][ T5995] ? class_to_subsys+0x3e/0x160 [ 572.091111][ T5995] ? do_raw_spin_unlock+0x172/0x230 [ 572.091126][ T5995] ? kobject_put+0xab/0x5a0 [ 572.091145][ T5995] device_add+0x289/0x1a70 [ 572.091161][ T5995] ? __pfx_dev_set_name+0x10/0x10 [ 572.091179][ T5995] ? __pfx_device_add+0x10/0x10 [ 572.091196][ T5995] ? mgmt_send_event_skb+0x2f2/0x460 [ 572.091214][ T5995] hci_conn_add_sysfs+0x17e/0x230 [ 572.091232][ T5995] le_conn_complete_evt+0x107f/0x1da0 [ 572.091248][ T5995] ? __pfx_lock_release+0x10/0x10 [ 572.091259][ T5995] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 572.091272][ T5995] ? trace_contention_end+0xee/0x140 [ 572.091285][ T5995] ? __mutex_lock+0x1cc/0xa60 [ 572.091303][ T5995] hci_le_conn_complete_evt+0x23c/0x370 [ 572.091319][ T5995] hci_le_meta_evt+0x2e2/0x5d0 [ 572.091333][ T5995] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 572.091348][ T5995] hci_event_packet+0x666/0x1180 [ 572.091361][ T5995] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 572.091375][ T5995] ? __pfx_hci_event_packet+0x10/0x10 [ 572.091388][ T5995] ? mark_held_locks+0x9f/0xe0 [ 572.091400][ T5995] ? kcov_remote_start+0x3cf/0x6e0 [ 572.091413][ T5995] ? lockdep_hardirqs_on+0x7c/0x110 [ 572.091458][ T5995] hci_rx_work+0x2c5/0x16b0 [ 572.091475][ T5995] ? process_one_work+0x921/0x1ba0 [ 572.091490][ T5995] process_one_work+0x9c5/0x1ba0 [ 572.091507][ T5995] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 572.091520][ T5995] ? __pfx_process_one_work+0x10/0x10 [ 572.091531][ T5995] ? rcu_is_watching+0x12/0xc0 [ 572.091550][ T5995] ? assign_work+0x1a0/0x250 [ 572.091562][ T5995] worker_thread+0x6c8/0xf00 [ 572.091579][ T5995] ? __pfx_worker_thread+0x10/0x10 [ 572.091591][ T5995] kthread+0x2c1/0x3a0 [ 572.091604][ T5995] ? _raw_spin_unlock_irq+0x23/0x50 [ 572.091615][ T5995] ? __pfx_kthread+0x10/0x10 [ 572.091629][ T5995] ret_from_fork+0x45/0x80 [ 572.091640][ T5995] ? __pfx_kthread+0x10/0x10 [ 572.091653][ T5995] ret_from_fork_asm+0x1a/0x30 [ 572.091675][ T5995] [ 572.093161][ T5995] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 572.158953][ T5995] Bluetooth: hci3: failed to register connection device [ 572.164193][ T6828] __nla_validate_parse: 3 callbacks suppressed [ 572.164202][ T6828] netlink: 16 bytes leftover after parsing attributes in process `syz.3.218'. [ 572.388200][ T39] audit: type=1400 audit(1734374627.005:448): avc: denied { write } for pid=6844 comm="syz.2.223" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 572.405521][ T6025] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 572.412467][ T39] audit: type=1400 audit(1734374627.025:449): avc: denied { setopt } for pid=6846 comm="syz.2.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 572.414404][ T6847] netlink: 20 bytes leftover after parsing attributes in process `syz.2.224'. [ 572.423120][ T39] audit: type=1400 audit(1734374627.035:450): avc: denied { accept } for pid=6846 comm="syz.2.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 572.429498][ T6847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6847 comm=syz.2.224 [ 572.502900][ T6854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.227'. [ 572.505290][ T6854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.227'. [ 572.536023][ T6025] usb 5-1: device descriptor read/64, error -71 [ 572.579879][ T6854] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 572.786117][ T6025] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 572.888366][ T5995] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 572.892127][ T5995] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 572.896040][ T5995] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 572.901280][ T5995] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 572.904255][ T5995] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 572.907502][ T5995] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 572.927282][ T6870] Failed to initialize the IGMP autojoin socket (err -2) [ 572.935572][ T6025] usb 5-1: device descriptor read/64, error -71 [ 573.045657][ T6025] usb usb5-port1: attempt power cycle [ 573.088681][ T6870] chnl_net:caif_netlink_parms(): no params data found [ 573.190417][ T39] audit: type=1400 audit(1734374627.805:451): avc: denied { bind } for pid=6904 comm="syz.2.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 573.196584][ T39] audit: type=1400 audit(1734374627.805:452): avc: denied { setopt } for pid=6904 comm="syz.2.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 573.198473][ T6906] syz.2.236: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 573.208210][ T6906] CPU: 1 UID: 0 PID: 6906 Comm: syz.2.236 Not tainted 6.13.0-rc3-syzkaller #0 [ 573.210572][ T6906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 573.213414][ T6906] Call Trace: [ 573.214303][ T6906] [ 573.215092][ T6906] dump_stack_lvl+0x16c/0x1f0 [ 573.216410][ T6906] warn_alloc+0x24d/0x3a0 [ 573.217594][ T6906] ? __pfx_warn_alloc+0x10/0x10 [ 573.218930][ T6906] ? __get_vm_area_node+0x1b0/0x2f0 [ 573.220326][ T6906] ? __get_vm_area_node+0x1dc/0x2f0 [ 573.221700][ T6906] __vmalloc_node_range_noprof+0x1105/0x1530 [ 573.223300][ T6906] ? __mutex_trylock_common+0xea/0x250 [ 573.224745][ T6906] ? __pfx___mutex_trylock_common+0x10/0x10 [ 573.226316][ T6906] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 573.227946][ T6906] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 573.229608][ T6906] ? rcu_is_watching+0x12/0xc0 [ 573.230872][ T6906] ? trace_kmalloc+0x2d/0xd0 [ 573.232096][ T6906] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 573.233605][ T6906] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 573.235224][ T6906] __kvmalloc_node_noprof+0x14f/0x1a0 [ 573.236620][ T6906] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 573.238262][ T6906] __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 573.239849][ T6906] vivid_update_format_cap+0x127b/0x2530 [ 573.241319][ T6906] ? __asan_memset+0x23/0x50 [ 573.242567][ T6906] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 573.244184][ T6906] ? vivid_get_format+0x124/0x180 [ 573.245527][ T6906] vivid_s_fmt_vid_cap+0x1a17/0x3310 [ 573.246937][ T6906] ? __asan_memset+0x23/0x50 [ 573.248188][ T6906] ? __pfx_vivid_s_fmt_vid_cap+0x10/0x10 [ 573.249674][ T6906] fmt_sp2mp_func+0xb2/0x3e0 [ 573.250901][ T6906] ? __pfx_fmt_sp2mp_func+0x10/0x10 [ 573.252294][ T6906] ? __pfx_lock_release+0x10/0x10 [ 573.253629][ T6906] ? rcu_is_watching+0x12/0xc0 [ 573.254912][ T6906] ? v4l_sanitize_format+0x18e/0x430 [ 573.256327][ T6906] vidioc_s_fmt_vid_cap+0xa0/0xe0 [ 573.257670][ T6906] vivid_s_fmt_cap+0x76/0xc0 [ 573.258916][ T6906] v4l_s_fmt+0x430/0xf30 [ 573.260079][ T6906] ? find_held_lock+0x2d/0x110 [ 573.261372][ T6906] __video_do_ioctl+0xaf0/0xf00 [ 573.262694][ T6906] ? __pfx___video_do_ioctl+0x10/0x10 [ 573.264110][ T6906] ? __might_fault+0xe3/0x190 [ 573.265374][ T6906] video_usercopy+0x4d2/0x1620 [ 573.266642][ T6906] ? __pfx___video_do_ioctl+0x10/0x10 [ 573.268071][ T6906] ? __pfx_video_usercopy+0x10/0x10 [ 573.269466][ T6906] v4l2_ioctl+0x1ba/0x250 [ 573.270619][ T6906] ? __pfx_v4l2_ioctl+0x10/0x10 [ 573.271951][ T6906] __x64_sys_ioctl+0x190/0x200 [ 573.273260][ T6906] do_syscall_64+0xcd/0x250 [ 573.274478][ T6906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.276063][ T6906] RIP: 0033:0x7f3210d85d19 [ 573.277255][ T6906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.282314][ T6906] RSP: 002b:00007f320ebf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 573.284536][ T6906] RAX: ffffffffffffffda RBX: 00007f3210f76080 RCX: 00007f3210d85d19 [ 573.286602][ T6906] RDX: 0000000020000140 RSI: 00000000c0d05605 RDI: 0000000000000068 [ 573.288693][ T6906] RBP: 00007f3210e01a20 R08: 0000000000000000 R09: 0000000000000000 [ 573.290771][ T6906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.292864][ T6906] R13: 0000000000000000 R14: 00007f3210f76080 R15: 00007ffe34dc2898 [ 573.294930][ T6906] [ 573.297089][ T6906] Mem-Info: [ 573.297963][ T6906] active_anon:6127 inactive_anon:0 isolated_anon:0 [ 573.297963][ T6906] active_file:11473 inactive_file:38689 isolated_file:0 [ 573.297963][ T6906] unevictable:1768 dirty:1100 writeback:0 [ 573.297963][ T6906] slab_reclaimable:7876 slab_unreclaimable:69455 [ 573.297963][ T6906] mapped:23732 shmem:2466 pagetables:869 [ 573.297963][ T6906] sec_pagetables:301 bounce:0 [ 573.297963][ T6906] kernel_misc_reclaimable:0 [ 573.297963][ T6906] free:478630 free_pcp:1877 free_cma:0 [ 573.300305][ T6902] tipc: Started in network mode [ 573.309712][ T6906] Node 0 active_anon:24508kB inactive_anon:0kB active_file:45892kB inactive_file:154684kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:94928kB dirty:4392kB writeback:0kB shmem:6328kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12272kB pagetables:3476kB sec_pagetables:1204kB all_unreclaimable? no [ 573.309744][ T6906] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 573.309767][ T6906] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 573.309798][ T6906] lowmem_reserve[]: 0 1212 0 0 0 [ 573.309823][ T6906] Node 0 DMA32 free:308556kB boost:0kB min:27608kB low:34508kB high:41408kB reserved_highatomic:0KB active_anon:24508kB inactive_anon:0kB active_file:45892kB inactive_file:154684kB unevictable:3536kB writepending:4392kB present:2080628kB managed:1269904kB mlocked:0kB bounce:0kB free_pcp:4540kB local_pcp:984kB free_cma:0kB [ 573.309892][ T6906] lowmem_reserve[]: 0 0 0 0 0 [ 573.311723][ T6902] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 573.319780][ T6906] Node 1 [ 573.328063][ T6902] tipc: Enabling of bearer rejected, failed to enable media [ 573.334253][ T6906] Normal free:1590224kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:3536kB writepending:8kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:3256kB local_pcp:256kB free_cma:0kB [ 573.358468][ T6906] lowmem_reserve[]: 0 0 0 0 0 [ 573.359760][ T6906] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 573.363139][ T6906] Node 0 DMA32: 257*4kB (UM) 483*8kB (UME) 185*16kB (UME) 414*32kB (ME) 242*64kB (UME) 32*128kB (UME) 18*256kB (UME) 13*512kB (UME) 13*1024kB (ME) 7*2048kB (UME) 56*4096kB (UM) = 308972kB [ 573.366712][ T5993] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 573.367517][ T6870] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.367585][ T6870] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.367652][ T6870] bridge_slave_0: entered allmulticast mode [ 573.368115][ T6906] Node 1 [ 573.368205][ T6870] bridge_slave_0: entered promiscuous mode [ 573.377431][ T6906] Normal: 0*4kB 10*8kB (UME) 16*16kB (UME) 107*32kB (UME) 61*64kB (UME) 27*128kB (UME) 8*256kB (UE) 8*512kB (UME) 2*1024kB (UE) 1*2048kB (E) 383*4096kB (M) = 1590128kB [ 573.381894][ T6906] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 573.384407][ T6906] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 573.386919][ T6906] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 573.389455][ T6906] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 573.389686][ T6870] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.391878][ T6906] 52628 total pagecache pages [ 573.391886][ T6906] 0 pages in swap cache [ 573.391890][ T6906] Free swap = 124736kB [ 573.391895][ T6906] Total swap = 124996kB [ 573.391900][ T6906] 1048443 pages RAM [ 573.391904][ T6906] 0 pages HighMem/MovableOnly [ 573.391908][ T6906] 281646 pages reserved [ 573.391912][ T6906] 0 pages cma reserved [ 573.403976][ T6870] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.405618][ T6025] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 573.405957][ T6870] bridge_slave_1: entered allmulticast mode [ 573.410047][ T6870] bridge_slave_1: entered promiscuous mode [ 573.426333][ T6025] usb 5-1: device descriptor read/8, error -71 [ 573.433183][ T39] audit: type=1400 audit(1734374628.045:453): avc: denied { write } for pid=6911 comm="syz.2.237" path="socket:[12980]" dev="sockfs" ino=12980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 573.489914][ T6870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.496779][ T6870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.525385][ T6920] IPVS: Error during creation of socket; terminating [ 573.574066][ T6870] team0: Port device team_slave_0 added [ 573.575332][ T6929] netlink: 'syz.3.242': attribute type 10 has an invalid length. [ 573.588373][ T6870] team0: Port device team_slave_1 added [ 573.596788][ T6929] macvlan0: entered promiscuous mode [ 573.598233][ T6929] macvlan0: entered allmulticast mode [ 573.600832][ T6929] veth1_vlan: entered allmulticast mode [ 573.604429][ T6929] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 573.638246][ T6934] overlayfs: conflicting options: userxattr,metacopy=on [ 573.647795][ T6870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.649663][ T6870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.656599][ T6870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.666986][ T6934] cgroup: Name too long [ 573.671729][ T6870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.674280][ T6870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.676834][ T6025] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 573.684848][ T6870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.696281][ T6025] usb 5-1: device descriptor read/8, error -71 [ 573.696649][ T6938] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 573.712122][ T6938] netlink: 28 bytes leftover after parsing attributes in process `syz.2.246'. [ 573.714574][ T6938] netlink: 28 bytes leftover after parsing attributes in process `syz.2.246'. [ 573.774928][ T6870] hsr_slave_0: entered promiscuous mode [ 573.777474][ T6870] hsr_slave_1: entered promiscuous mode [ 573.779498][ T6870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 573.782227][ T6870] Cannot create hsr debugfs directory [ 573.816298][ T6025] usb usb5-port1: unable to enumerate USB device [ 573.843604][ T6948] bond_slave_0: entered promiscuous mode [ 573.845066][ T6948] bond_slave_1: entered promiscuous mode [ 573.847696][ T6948] macvlan2: entered promiscuous mode [ 573.848921][ T6948] bond0: entered promiscuous mode [ 573.850750][ T6948] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 573.894427][ T6950] bridge0: port 3(syz_tun) entered blocking state [ 573.896472][ T6950] bridge0: port 3(syz_tun) entered disabled state [ 573.898124][ T6950] syz_tun: entered allmulticast mode [ 573.900499][ T6950] syz_tun: entered promiscuous mode [ 573.902876][ T6950] bridge0: port 3(syz_tun) entered blocking state [ 573.904546][ T6950] bridge0: port 3(syz_tun) entered forwarding state [ 573.940840][ T39] audit: type=1400 audit(1734374628.555:454): avc: denied { setopt } for pid=6953 comm="syz.3.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 573.971018][ T6957] 9pnet_virtio: no channels available for device syz [ 573.972840][ T6957] 9pnet_virtio: no channels available for device syz [ 573.974553][ T6957] 9pnet_virtio: no channels available for device syz [ 574.005025][ T6962] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 574.009351][ T6962] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -2 [ 574.071749][ T6969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.256'. [ 574.074614][ T6969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.256'. [ 574.120535][ T6972] bridge_slave_0: default FDB implementation only supports local addresses [ 574.205350][ T6988] netlink: 'syz.3.263': attribute type 10 has an invalid length. [ 574.211136][ T6990] netlink: 24 bytes leftover after parsing attributes in process `syz.2.264'. [ 574.225053][ T6990] ALSA: mixer_oss: invalid index 100000 [ 574.229612][ T6990] Invalid logical block size (7) [ 574.231156][ T6992] overlayfs: missing 'lowerdir' [ 574.548315][ T65] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 574.581289][ T11] bridge_slave_1: left allmulticast mode [ 574.583294][ T11] bridge_slave_1: left promiscuous mode [ 574.585394][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.590405][ T11] bridge_slave_0: left allmulticast mode [ 574.592340][ T11] bridge_slave_0: left promiscuous mode [ 574.594296][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.697048][ T65] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 574.699354][ T65] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 574.702041][ T65] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 574.704428][ T65] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 574.708595][ T65] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 574.713747][ T65] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 574.717793][ T65] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 574.719899][ T65] usb 7-1: Product: syz [ 574.721015][ T65] usb 7-1: Manufacturer: syz [ 574.725740][ T65] cdc_wdm 7-1:1.0: skipping garbage [ 574.727187][ T65] cdc_wdm 7-1:1.0: skipping garbage [ 574.730971][ T65] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 574.732602][ T65] cdc_wdm 7-1:1.0: Unknown control protocol [ 574.801088][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.804757][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.808167][ T11] bond0 (unregistering): Released all slaves [ 574.932702][ T65] usb 7-1: USB disconnect, device number 6 [ 574.956035][ T5993] Bluetooth: hci2: command tx timeout [ 575.010262][ T11] hsr_slave_0: left promiscuous mode [ 575.012093][ T11] hsr_slave_1: left promiscuous mode [ 575.013888][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.015903][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.018073][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.019982][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.038292][ T11] veth1_macvtap: left promiscuous mode [ 575.039724][ T11] veth0_macvtap: left promiscuous mode [ 575.042700][ T11] veth1_vlan: left promiscuous mode [ 575.045550][ T11] veth0_vlan: left promiscuous mode [ 575.435584][ T833] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 575.552568][ T11] team0 (unregistering): Port device team_slave_1 removed [ 575.607355][ T833] usb 5-1: Using ep0 maxpacket: 8 [ 575.611702][ T11] team0 (unregistering): Port device team_slave_0 removed [ 575.611897][ T833] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 575.617155][ T833] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 575.620308][ T833] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 575.622996][ T833] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 575.625348][ T833] usb 5-1: config 250 has no interface number 0 [ 575.627022][ T833] usb 5-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 575.630478][ T833] usb 5-1: config 250 interface 228 has no altsetting 0 [ 575.634652][ T833] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 575.637043][ T833] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 575.639249][ T833] usb 5-1: Product: syz [ 575.640375][ T833] usb 5-1: SerialNumber: syz [ 575.648065][ T833] hub 5-1:250.228: bad descriptor, ignoring hub [ 575.649707][ T833] hub 5-1:250.228: probe with driver hub failed with error -5 [ 575.955627][ T6550] usb 5-1: USB disconnect, device number 10 [ 576.033015][ T7026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.276'. [ 576.153440][ T6870] netdevsim netdevsim4 netdevsim0: renamed from eth6 [ 576.161574][ T6870] netdevsim netdevsim4 netdevsim1: renamed from eth7 [ 576.171686][ T6870] netdevsim netdevsim4 netdevsim2: renamed from eth8 [ 576.193163][ T6870] netdevsim netdevsim4 netdevsim3: renamed from eth9 [ 576.295548][ T6550] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 576.296305][ T6870] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.306382][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.308314][ T6036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.330175][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.332158][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.333047][ T7039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7039 comm=syz.3.281 [ 576.340791][ T7039] netlink: 'syz.3.281': attribute type 4 has an invalid length. [ 576.441373][ T6870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.445792][ T6550] usb 5-1: Using ep0 maxpacket: 32 [ 576.448463][ T6550] usb 5-1: config index 0 descriptor too short (expected 35577, got 36) [ 576.450680][ T6550] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 576.452876][ T6550] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.455400][ T6550] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 576.458704][ T6550] usb 5-1: config 1 has no interface number 0 [ 576.460347][ T6550] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 576.463550][ T6550] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 576.467999][ T6550] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 576.470377][ T6550] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.477340][ T6550] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 576.563021][ T6870] veth0_vlan: entered promiscuous mode [ 576.570722][ T6870] veth1_vlan: entered promiscuous mode [ 576.602402][ T6870] veth0_macvtap: entered promiscuous mode [ 576.609090][ T6870] veth1_macvtap: entered promiscuous mode [ 576.632899][ T6870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.636110][ T6870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.638673][ T6870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.641410][ T6870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.646960][ T6870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.649972][ T6870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.653049][ T6870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.656072][ T6870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.658741][ T6870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.664122][ T6870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.668101][ T6870] net_ratelimit: 7 callbacks suppressed [ 576.668113][ T6870] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 576.676288][ T6550] snd_usb_pod 5-1:1.1: set_interface failed [ 576.678382][ T6550] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 576.680289][ T6550] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 576.682721][ T6870] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 576.683534][ T6550] usb 5-1: USB disconnect, device number 11 [ 576.689556][ T6870] wireguard: wg0: Could not create IPv4 socket [ 576.692182][ T6870] wireguard: wg1: Could not create IPv4 socket [ 576.694784][ T6870] wireguard: wg2: Could not create IPv4 socket [ 576.816896][ T7054] Failed to initialize the IGMP autojoin socket (err -2) [ 576.816896][ T7053] Failed to initialize the IGMP autojoin socket (err -2) [ 576.941846][ T7067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 576.946271][ T7067] overlayfs: failed to clone upperpath [ 577.223753][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 577.223763][ T39] audit: type=1400 audit(1734374631.835:460): avc: denied { ioctl } for pid=7077 comm="syz.0.288" path="socket:[16241]" dev="sockfs" ino=16241 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 577.224840][ T7078] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 577.225936][ T39] audit: type=1400 audit(1734374631.835:461): avc: denied { getopt } for pid=7077 comm="syz.0.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 577.295523][ T5960] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 577.465506][ T5960] usb 7-1: Using ep0 maxpacket: 8 [ 577.467957][ T5960] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 577.470022][ T5960] usb 7-1: config 179 has no interface number 0 [ 577.471699][ T5960] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 577.474519][ T5960] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 577.477467][ T5960] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 577.480409][ T5960] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 577.483358][ T5960] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 577.486973][ T5960] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 577.489336][ T5960] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.497572][ T7069] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 577.535710][ T39] audit: type=1400 audit(1734374632.145:462): avc: denied { mount } for pid=7087 comm="syz.3.291" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 577.571460][ T7091] trusted_key: encrypted_key: insufficient parameters specified [ 577.656442][ T39] audit: type=1400 audit(1734374632.275:463): avc: denied { mount } for pid=7097 comm="syz.3.295" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 577.662259][ T39] audit: type=1400 audit(1734374632.275:464): avc: denied { remount } for pid=7097 comm="syz.3.295" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 577.709203][ T65] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input14 [ 577.716146][ T39] audit: type=1400 audit(1734374632.335:465): avc: denied { ioctl } for pid=5337 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2828 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 577.788517][ T7103] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 577.790187][ T7103] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 577.793108][ T7103] vhci_hcd vhci_hcd.0: Device attached [ 577.922541][ T6550] usb 7-1: USB disconnect, device number 7 [ 577.922631][ C3] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 577.926883][ C3] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 577.929485][ T6550] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 577.965580][ T65] vhci_hcd: vhci_device speed not set [ 578.025537][ T65] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 578.035518][ T5960] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 578.196899][ T5960] usb 5-1: config 0 has no interfaces? [ 578.198472][ T5960] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 578.200811][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.203918][ T5960] usb 5-1: config 0 descriptor?? [ 578.430403][ T7104] vhci_hcd: connection reset by peer [ 578.433415][ T6036] vhci_hcd: stop threads [ 578.434181][ T25] usb 5-1: USB disconnect, device number 12 [ 578.434581][ T6036] vhci_hcd: release socket [ 578.438994][ T6036] vhci_hcd: disconnect device [ 578.480040][ T65] vhci_hcd: vhci_device speed not set [ 578.509912][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 578.509924][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 578.509937][ T7109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.298'. [ 578.513139][ T7108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.298'. [ 578.515335][ T7109] netlink: 'syz.3.298': attribute type 5 has an invalid length. [ 578.519065][ T7108] netlink: 'syz.3.298': attribute type 5 has an invalid length. [ 578.572364][ T7125] gfs2: not a GFS2 filesystem [ 578.577955][ T7127] netlink: 2 bytes leftover after parsing attributes in process `syz.3.302'. [ 578.598188][ T39] audit: type=1400 audit(1734374633.215:466): avc: denied { mount } for pid=7126 comm="syz.3.302" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 578.610677][ T39] audit: type=1400 audit(1734374633.225:467): avc: denied { ioctl } for pid=7130 comm="syz.2.303" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 578.620331][ T39] audit: type=1400 audit(1734374633.235:468): avc: denied { setopt } for pid=7130 comm="syz.2.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 578.642979][ T7138] capability: warning: `syz.3.304' uses 32-bit capabilities (legacy support in use) [ 578.678779][ T7142] Failed to initialize the IGMP autojoin socket (err -2) [ 578.702858][ T7143] mmap: syz.2.305 (7143) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 578.773558][ T39] audit: type=1400 audit(1734374633.385:469): avc: denied { mount } for pid=7146 comm="syz.3.307" name="/" dev="ramfs" ino=16290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 578.948993][ T7160] netlink: 4420 bytes leftover after parsing attributes in process `syz.3.313'. [ 578.990743][ T7162] syzkaller1: entered promiscuous mode [ 578.992170][ T7162] syzkaller1: entered allmulticast mode [ 579.001896][ T7165] overlayfs: failed to resolve './file0': -2 [ 579.145308][ T7174] netlink: 28 bytes leftover after parsing attributes in process `syz.3.318'. [ 579.366501][ T7194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.327'. [ 579.367347][ T7190] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 579.370803][ T7190] overlayfs: failed to set xattr on upper [ 579.372352][ T7190] overlayfs: ...falling back to redirect_dir=nofollow. [ 579.374110][ T7190] overlayfs: ...falling back to index=off. [ 579.376032][ T7190] overlayfs: ...falling back to uuid=null. [ 579.440998][ T7202] overlayfs: disabling nfs_export due to verity=on [ 579.484006][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'. [ 579.489389][ T7208] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 579.778904][ T7227] block device autoloading is deprecated and will be removed. [ 579.791690][ T5303] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 579.794839][ T5303] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 579.800386][ T5303] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 579.802757][ T5303] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 579.805083][ T5303] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 579.809094][ T5303] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 579.816583][ T7226] md2: using deprecated bitmap file support [ 579.818384][ T7226] md2: error: bitmap file must be a regular file [ 579.819448][ T7229] Failed to initialize the IGMP autojoin socket (err -2) [ 580.000886][ T7237] netlink: 60 bytes leftover after parsing attributes in process `syz.3.342'. [ 580.027781][ T7241] veth1_macvtap: entered allmulticast mode [ 580.106165][ T7250] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 580.109493][ T7250] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 580.113337][ T7250] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 580.121176][ T7250] netlink: 'syz.0.346': attribute type 9 has an invalid length. [ 580.210592][ T7256] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.217179][ T7256] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 7256 comm: syz.3.349) [ 580.742379][ T7295] binder: 7294:7295 ioctl c0189373 20000000 returned -22 [ 580.871022][ T7299] fuse: Bad value for 'user_id' [ 580.872401][ T7299] fuse: Bad value for 'user_id' [ 580.876836][ T7299] batman_adv: batadv0: Adding interface: erspan1 [ 580.878574][ T7299] batman_adv: batadv0: Not using interface erspan1 (retrying later): interface not active [ 581.074492][ T7303] ªªªªª: renamed from hsr0 (while UP) [ 581.155666][ T5960] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 581.315604][ T5960] usb 7-1: Using ep0 maxpacket: 8 [ 581.318697][ T5960] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 581.320876][ T5960] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 581.323061][ T5960] usb 7-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 581.326108][ T5960] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 581.330264][ T7318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=7318 comm=syz.0.370 [ 581.332371][ T5960] usb 7-1: config 250 has no interface number 0 [ 581.335096][ T5960] usb 7-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 581.338959][ T5960] usb 7-1: config 250 interface 228 has no altsetting 0 [ 581.343214][ T7318] 8021q: adding VLAN 0 to HW filter on device bond1 [ 581.343563][ T5960] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 581.347502][ T5960] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 581.350210][ T5960] usb 7-1: Product: syz [ 581.351291][ T5960] usb 7-1: SerialNumber: syz [ 581.354578][ T7320] 8021q: adding VLAN 0 to HW filter on device bond1 [ 581.354785][ T5960] hub 7-1:250.228: bad descriptor, ignoring hub [ 581.357654][ T7320] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 581.357846][ T7325] overlayfs: failed to resolve './file0': -2 [ 581.358485][ T5960] hub 7-1:250.228: probe with driver hub failed with error -5 [ 581.361622][ T7320] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 581.486368][ T7348] tipc: Enabling of bearer rejected, failed to enable media [ 581.665709][ T5951] usb 7-1: USB disconnect, device number 8 [ 581.676791][ T7117] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 581.677246][ T7366] openvswitch: netlink: Unexpected mask (mask=4, allowed=10048) [ 581.845721][ T5993] Bluetooth: hci2: command tx timeout [ 582.005611][ T5951] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 582.155631][ T5951] usb 7-1: Using ep0 maxpacket: 32 [ 582.158572][ T5951] usb 7-1: config index 0 descriptor too short (expected 35577, got 36) [ 582.160824][ T5951] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 582.163123][ T5951] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.166038][ T5951] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 582.168394][ T5951] usb 7-1: config 1 has no interface number 0 [ 582.169990][ T5951] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 582.172821][ T5951] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 582.176213][ T5951] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 582.179010][ T5951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.184472][ T5951] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 582.379977][ T7362] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 582.384129][ T7229] netdevsim netdevsim4 netdevsim0: renamed from eth6 [ 582.386368][ T5951] snd_usb_pod 7-1:1.1: set_interface failed [ 582.388188][ T5951] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 582.390372][ T5951] snd_usb_pod 7-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 582.391798][ T7229] netdevsim netdevsim4 netdevsim1: renamed from eth7 [ 582.402054][ T5951] usb 7-1: USB disconnect, device number 9 [ 582.427238][ T7229] netdevsim netdevsim4 netdevsim2: renamed from eth8 [ 582.436061][ T7229] netdevsim netdevsim4 netdevsim3: renamed from eth9 [ 582.629034][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.631774][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.634286][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.638237][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.642283][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.644944][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.647561][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.650234][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.654110][ T7229] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 582.660982][ T7229] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 582.665888][ T7229] wireguard: wg0: Could not create IPv4 socket [ 582.668297][ T7229] wireguard: wg1: Could not create IPv4 socket [ 582.670644][ T7229] wireguard: wg2: Could not create IPv4 socket [ 582.680303][ T7416] overlayfs: conflicting lowerdir path [ 582.732594][ T39] kauditd_printk_skb: 23 callbacks suppressed [ 582.732605][ T39] audit: type=1400 audit(1734374637.345:493): avc: denied { associate } for pid=7422 comm="syz.0.399" name="blkio.bfq.io_wait_time" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 582.745096][ T39] audit: type=1400 audit(1734374637.355:494): avc: denied { lock } for pid=7422 comm="syz.0.399" path="/98/file0/blkio.bfq.io_wait_time" dev="9p" ino=39190869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 582.752409][ T39] audit: type=1400 audit(1734374637.355:495): avc: denied { ioctl } for pid=7422 comm="syz.0.399" path="/98/file0/blkio.bfq.io_wait_time" dev="9p" ino=39190869 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 582.770266][ T39] audit: type=1400 audit(1734374637.385:496): avc: denied { read } for pid=7426 comm="syz.3.401" path="socket:[18742]" dev="sockfs" ino=18742 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 582.911696][ T7434] Failed to initialize the IGMP autojoin socket (err -2) [ 583.052913][ T39] audit: type=1400 audit(1734374637.665:497): avc: denied { ioctl } for pid=7437 comm="syz.2.403" path="socket:[18060]" dev="sockfs" ino=18060 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 583.076010][ T7443] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 583.093332][ T39] audit: type=1400 audit(1734374637.705:498): avc: denied { create } for pid=7442 comm="syz.2.404" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 583.358737][ T7452] block nbd2: shutting down sockets [ 583.389520][ T39] audit: type=1400 audit(1734374638.005:499): avc: denied { write } for pid=7456 comm="syz.2.408" name="fib_trie" dev="proc" ino=4026532940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 583.410552][ T39] audit: type=1400 audit(1734374638.025:500): avc: denied { write } for pid=7458 comm="syz.2.409" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 583.414646][ T7459] binder: 7458:7459 ioctl c018620c 20000180 returned -1 [ 583.417321][ T39] audit: type=1400 audit(1734374638.025:501): avc: denied { setattr } for pid=7458 comm="syz.2.409" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 583.656431][ T7470] bond0: entered promiscuous mode [ 583.657800][ T7470] bond_slave_0: entered promiscuous mode [ 583.659361][ T7470] bond_slave_1: entered promiscuous mode [ 583.685733][ T6050] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 583.742286][ T39] audit: type=1400 audit(1734374638.355:502): avc: denied { getopt } for pid=7475 comm="syz.0.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 583.823937][ T7478] __nla_validate_parse: 10 callbacks suppressed [ 583.823948][ T7478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.416'. [ 583.855575][ T6050] usb 7-1: Using ep0 maxpacket: 8 [ 583.858014][ T6050] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 583.860164][ T6050] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 583.862364][ T6050] usb 7-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 583.865049][ T6050] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 583.867420][ T6050] usb 7-1: config 250 has no interface number 0 [ 583.869056][ T6050] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 583.872008][ T6050] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 583.874688][ T6050] usb 7-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 583.878269][ T6050] usb 7-1: config 250 interface 228 has no altsetting 0 [ 583.881205][ T6050] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 583.883555][ T6050] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 583.885739][ T6050] usb 7-1: Product: syz [ 583.887337][ T6050] usb 7-1: SerialNumber: syz [ 583.891214][ T6050] hub 7-1:250.228: bad descriptor, ignoring hub [ 583.892857][ T6050] hub 7-1:250.228: probe with driver hub failed with error -5 [ 584.205630][ T5951] usb 7-1: USB disconnect, device number 10 [ 584.536012][ T5951] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 584.553578][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.420'. [ 584.708068][ T7501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.423'. [ 584.715529][ T5951] usb 7-1: Using ep0 maxpacket: 32 [ 584.724708][ T5951] usb 7-1: config index 0 descriptor too short (expected 35577, got 36) [ 584.727282][ T5951] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 584.729575][ T5951] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.732255][ T5951] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 584.735529][ T5951] usb 7-1: config 1 has no interface number 0 [ 584.737310][ T5951] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 224, changing to 11 [ 584.740212][ T5951] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59140, setting to 1024 [ 584.743113][ T5951] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 584.747779][ T5951] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 584.750222][ T5951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.756690][ T5951] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 584.759600][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.424'. [ 584.773873][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.424'. [ 584.822010][ T7507] netlink: 256 bytes leftover after parsing attributes in process `syz.0.425'. [ 584.955809][ T5951] snd_usb_pod 7-1:1.1: set_interface failed [ 584.958149][ T5951] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 584.960317][ T5951] snd_usb_pod 7-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 584.964205][ T5951] usb 7-1: USB disconnect, device number 11 [ 585.487560][ T7515] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 585.581667][ T7530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.431'. [ 585.820637][ T7550] netlink: 'syz.0.438': attribute type 9 has an invalid length. [ 585.822726][ T7550] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.438'. [ 585.965061][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.442'. [ 586.232023][ T7577] syzkaller1: entered promiscuous mode [ 586.233776][ T7577] syzkaller1: entered allmulticast mode [ 586.238126][ T7577] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 40 [ 586.242746][ T7577] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 586.444267][ T7585] 9pnet_virtio: no channels available for device 127.0.0.1 [ 586.501770][ T7591] geneve2: entered promiscuous mode [ 586.503139][ T7591] geneve2: entered allmulticast mode [ 586.556897][ T7596] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 586.593508][ T7598] fuse: Bad value for 'fd' [ 586.597820][ T7598] tmpfs: Bad value for 'mpol' [ 586.816100][ T7626] netlink: 16 bytes leftover after parsing attributes in process `syz.2.464'. [ 586.988047][ T5303] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 586.994630][ T5303] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 586.997535][ T5303] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 587.001128][ T5303] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 587.003524][ T5303] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 587.007047][ T5303] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 587.018655][ T7632] Failed to initialize the IGMP autojoin socket (err -2) [ 587.524264][ T7632] netdevsim netdevsim4 netdevsim0: renamed from eth6 [ 587.536016][ T7632] netdevsim netdevsim4 netdevsim1: renamed from eth7 [ 587.546300][ T7648] overlayfs: failed to clone upperpath [ 587.560877][ T7632] netdevsim netdevsim4 netdevsim2: renamed from eth8 [ 587.572717][ T7632] netdevsim netdevsim4 netdevsim3: renamed from eth9 [ 587.791139][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.794162][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.797045][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.799752][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.803822][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.807182][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.810122][ T7674] netlink: 'syz.0.476': attribute type 3 has an invalid length. [ 587.810131][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.810140][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.819235][ T7632] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 587.824782][ T7632] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 587.829833][ T7632] wireguard: wg0: Could not create IPv4 socket [ 587.832514][ T7632] wireguard: wg1: Could not create IPv4 socket [ 587.834963][ T7632] wireguard: wg2: Could not create IPv4 socket [ 587.838392][ T7674] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 587.894340][ T7683] futex_wake_op: syz.0.480 tries to shift op by -1; fix this program [ 587.902544][ T39] kauditd_printk_skb: 23 callbacks suppressed [ 587.902555][ T39] audit: type=1400 audit(1734374642.515:526): avc: denied { append } for pid=7682 comm="syz.0.480" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 587.906677][ T7683] input: syz0 as /devices/virtual/input/input15 [ 587.971469][ T39] audit: type=1400 audit(1734374642.585:527): avc: denied { sqpoll } for pid=7678 comm="syz.3.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 587.976781][ T39] audit: type=1400 audit(1734374642.595:528): avc: denied { ioctl } for pid=7678 comm="syz.3.478" path="socket:[21618]" dev="sockfs" ino=21618 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 588.088767][ T39] audit: type=1400 audit(1734374642.705:529): avc: denied { getopt } for pid=7702 comm="syz.2.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 588.122096][ T7707] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 588.209560][ T7716] netlink: 'syz.0.489': attribute type 1 has an invalid length. [ 588.211907][ T7716] netlink: 'syz.0.489': attribute type 2 has an invalid length. [ 588.376117][ T7726] overlayfs: failed to resolve './file0': -2 [ 588.412724][ T7732] netlink: 'syz.0.494': attribute type 1 has an invalid length. [ 588.414743][ T7732] netlink: 'syz.0.494': attribute type 4 has an invalid length. [ 588.592949][ T7746] devtmpfs: Cannot enable quota on remount [ 588.641166][ T39] audit: type=1400 audit(1734374643.255:530): avc: denied { accept } for pid=7751 comm="syz.0.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 588.661323][ T7754] cgroup: No subsys list or none specified [ 588.666288][ T7754] openvswitch: netlink: Missing key (keys=40, expected=80) [ 588.770588][ T39] audit: type=1400 audit(1734374643.385:531): avc: denied { bind } for pid=7764 comm="syz.3.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 588.773616][ T7765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=7765 comm=syz.3.508 [ 588.783290][ T39] audit: type=1326 audit(1734374643.395:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.3.508" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2e5cf85d19 code=0x0 [ 588.835512][ T5960] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 588.995526][ T5960] usb 7-1: Using ep0 maxpacket: 8 [ 588.998161][ T5960] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 589.000363][ T5960] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 589.002558][ T5960] usb 7-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 589.005291][ T5960] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 589.007759][ T5960] usb 7-1: config 250 has no interface number 0 [ 589.009470][ T5960] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 589.012527][ T5960] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 589.015580][ T5960] usb 7-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 589.019146][ T5960] usb 7-1: config 250 interface 228 has no altsetting 0 [ 589.022350][ T5960] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 589.024696][ T5960] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 589.027381][ T5960] usb 7-1: Product: syz [ 589.028492][ T5960] usb 7-1: SerialNumber: syz [ 589.031645][ T5960] hub 7-1:250.228: bad descriptor, ignoring hub [ 589.033317][ T5960] hub 7-1:250.228: probe with driver hub failed with error -5 [ 589.335662][ T25] usb 7-1: USB disconnect, device number 12 [ 589.675601][ T25] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 589.813005][ T39] audit: type=1400 audit(1734374644.425:533): avc: denied { create } for pid=7774 comm="syz.0.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 589.825526][ T25] usb 7-1: Using ep0 maxpacket: 32 [ 589.828206][ T25] usb 7-1: config index 0 descriptor too short (expected 35577, got 36) [ 589.830465][ T25] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 589.832798][ T25] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 589.835504][ T25] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 589.837871][ T25] usb 7-1: config 1 has no interface number 0 [ 589.839532][ T25] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 224, changing to 11 [ 589.842534][ T25] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59140, setting to 1024 [ 589.845556][ T25] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 589.848965][ T25] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 589.851431][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.857914][ T25] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 590.057895][ T25] snd_usb_pod 7-1:1.1: set_interface failed [ 590.059600][ T25] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 590.061580][ T25] snd_usb_pod 7-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 590.065224][ T25] usb 7-1: USB disconnect, device number 13 [ 590.189374][ T7789] vxcan1: tx address claim with dest, not broadcast [ 590.216164][ T7793] __nla_validate_parse: 11 callbacks suppressed [ 590.216175][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.514'. [ 590.221008][ T7793] netlink: 'syz.3.514': attribute type 1 has an invalid length. [ 590.248135][ T7795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=7795 comm=syz.3.515 [ 590.252057][ T39] audit: type=1400 audit(1734374644.865:534): avc: denied { module_request } for pid=7794 comm="syz.3.515" kmod="ife-meta-unknown" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 590.392395][ T39] audit: type=1400 audit(1734374645.005:535): avc: denied { ioctl } for pid=7799 comm="syz.3.517" path="socket:[22913]" dev="sockfs" ino=22913 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 590.401033][ T7800] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 590.486901][ T7804] netlink: 'syz.3.519': attribute type 3 has an invalid length. [ 590.488901][ T7804] netlink: 558 bytes leftover after parsing attributes in process `syz.3.519'. [ 590.728437][ T7824] binder: 7822:7824 ioctl c0306201 20000140 returned -14 [ 590.755936][ T7831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.527'. [ 590.906598][ T7845] overlayfs: conflicting lowerdir path [ 590.997925][ T7848] binder: 7847:7848 ioctl c0306201 20000580 returned -14 [ 591.034336][ T7848] input: syz0 as /devices/virtual/input/input16 [ 591.087542][ T8] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 591.245541][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 591.250697][ T8] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 591.252843][ T8] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 591.254983][ T8] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 591.257506][ T8] usb 5-1: config 250 has no interface number 0 [ 591.259138][ T8] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 591.262095][ T8] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 591.264748][ T8] usb 5-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 591.268235][ T8] usb 5-1: config 250 interface 228 has no altsetting 0 [ 591.271106][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 591.273440][ T8] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 591.275711][ T8] usb 5-1: Product: syz [ 591.276794][ T8] usb 5-1: SerialNumber: syz [ 591.280575][ T8] hub 5-1:250.228: bad descriptor, ignoring hub [ 591.282258][ T8] hub 5-1:250.228: probe with driver hub failed with error -5 [ 591.295555][ T5960] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 591.445655][ T5960] usb 7-1: Using ep0 maxpacket: 8 [ 591.451618][ T5960] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 591.453767][ T5960] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 591.458096][ T5960] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 591.462536][ T5960] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 591.469582][ T5960] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 591.473891][ T5960] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 591.475903][ T5960] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 591.478764][ T5960] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 591.481876][ T5960] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 591.487701][ T5960] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 591.491733][ T5960] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 591.494432][ T5960] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 591.498799][ T5960] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 591.502708][ T5960] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 591.505896][ T5960] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 591.510873][ T5960] usb 7-1: string descriptor 0 read error: -22 [ 591.512533][ T5960] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 591.515067][ T5960] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.521782][ T5960] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 591.585656][ T834] usb 5-1: USB disconnect, device number 14 [ 591.722348][ T8] usb 7-1: USB disconnect, device number 14 [ 591.726872][ T7862] netlink: 20 bytes leftover after parsing attributes in process `syz.3.538'. [ 591.756335][ T7864] netlink: 20 bytes leftover after parsing attributes in process `syz.3.539'. [ 591.925534][ T834] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 592.085554][ T834] usb 5-1: Using ep0 maxpacket: 32 [ 592.088445][ T834] usb 5-1: config index 0 descriptor too short (expected 35577, got 36) [ 592.091138][ T834] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 592.093772][ T834] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 592.096175][ T834] usb 5-1: config 1 has no interface number 0 [ 592.097778][ T834] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 224, changing to 11 [ 592.100646][ T834] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59140, setting to 1024 [ 592.103667][ T834] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 592.108162][ T834] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 592.111190][ T834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.118965][ T834] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 592.318303][ T834] snd_usb_pod 5-1:1.1: set_interface failed [ 592.319994][ T834] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 592.322003][ T834] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 592.325533][ T834] usb 5-1: USB disconnect, device number 15 [ 592.417632][ T7879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7879 comm=syz.3.544 [ 592.619407][ T7884] bridge0: port 3(syz_tun) entered disabled state [ 592.622897][ T7884] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.625841][ T7884] bridge0: entered allmulticast mode [ 592.631963][ T7884] geneve0: mtu greater than device maximum [ 592.634723][ T7884] bridge0: port 3(syz_tun) entered blocking state [ 592.638162][ T7884] bridge0: port 3(syz_tun) entered forwarding state [ 592.640661][ T7884] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.643147][ T7884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.649570][ T7884] bridge0: entered promiscuous mode [ 592.687936][ T7892] overlayfs: failed to resolve './file0': -2 [ 593.246381][ T7906] overlayfs: failed to clone upperpath [ 593.257027][ T7903] block device autoloading is deprecated and will be removed. [ 593.293727][ T7911] 9pnet_fd: p9_fd_create_tcp (7911): problem creating socket [ 593.300350][ T7904] netlink: 20 bytes leftover after parsing attributes in process `syz.0.550'. [ 593.374318][ T5993] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 593.378750][ T5993] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 593.379322][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 593.379334][ T39] audit: type=1400 audit(1734374647.995:540): avc: denied { write } for pid=7930 comm="syz.2.561" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 593.386261][ T5993] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 593.391059][ T39] audit: type=1400 audit(1734374647.995:541): avc: denied { open } for pid=7930 comm="syz.2.561" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 593.392058][ T5993] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 593.396771][ T39] audit: type=1400 audit(1734374647.995:542): avc: denied { ioctl } for pid=7930 comm="syz.2.561" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 593.407564][ T5993] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 593.409386][ T7927] overlayfs: failed to clone upperpath [ 593.409454][ T7933] overlayfs: failed to clone upperpath [ 593.412862][ T5993] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 593.420016][ T7928] Failed to initialize the IGMP autojoin socket (err -2) [ 593.452040][ T7937] batadv_slave_1: entered promiscuous mode [ 593.454143][ T7934] batadv_slave_1: left promiscuous mode [ 593.565945][ T5951] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 593.715509][ T5951] usb 5-1: Using ep0 maxpacket: 8 [ 593.719294][ T5951] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 593.721481][ T5951] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 593.723660][ T5951] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 593.726042][ T5951] usb 5-1: config 250 has no interface number 0 [ 593.727681][ T5951] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 593.730635][ T5951] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 593.733312][ T5951] usb 5-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 593.737703][ T5951] usb 5-1: config 250 interface 228 has no altsetting 0 [ 593.740655][ T5951] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 593.743834][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 593.747690][ T5951] usb 5-1: Product: syz [ 593.749795][ T5951] usb 5-1: SerialNumber: syz [ 593.754380][ T5951] hub 5-1:250.228: bad descriptor, ignoring hub [ 593.756949][ T5951] hub 5-1:250.228: probe with driver hub failed with error -5 [ 593.947813][ T7928] netdevsim netdevsim4 netdevsim0: renamed from eth6 [ 593.964134][ T7928] netdevsim netdevsim4 netdevsim1: renamed from eth7 [ 593.971977][ T7928] netdevsim netdevsim4 netdevsim2: renamed from eth8 [ 593.982143][ T7928] netdevsim netdevsim4 netdevsim3: renamed from eth9 [ 594.065733][ T65] usb 5-1: USB disconnect, device number 16 [ 594.182225][ T7928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.184943][ T7928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.188489][ T7928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.191563][ T7928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.195380][ T7965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.568'. [ 594.196760][ T7928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.201341][ T7928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.203887][ T7928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.207926][ T7928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.229084][ T7928] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 594.234932][ T7928] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 594.240451][ T7928] wireguard: wg0: Could not create IPv4 socket [ 594.242955][ T7928] wireguard: wg1: Could not create IPv4 socket [ 594.246458][ T7928] wireguard: wg2: Could not create IPv4 socket [ 594.395637][ T65] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 594.481927][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.483812][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.565560][ T65] usb 5-1: Using ep0 maxpacket: 32 [ 594.568162][ T65] usb 5-1: config index 0 descriptor too short (expected 35577, got 36) [ 594.570296][ T65] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 594.572346][ T65] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 594.574574][ T65] usb 5-1: config 1 has no interface number 0 [ 594.576855][ T65] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 224, changing to 11 [ 594.579721][ T65] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59140, setting to 1024 [ 594.582540][ T65] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 594.586888][ T65] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 594.589261][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.593991][ T65] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 594.708853][ T8007] smc: net device bond0 applied user defined pnetid SYZ0 [ 594.710894][ T8007] smc: net device bond0 erased user defined pnetid SYZ0 [ 594.793698][ T65] snd_usb_pod 5-1:1.1: set_interface failed [ 594.795391][ T65] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 594.800536][ T65] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 594.804142][ T65] usb 5-1: USB disconnect, device number 17 [ 594.832740][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.585'. [ 594.839898][ T8019] netlink: 176 bytes leftover after parsing attributes in process `syz.3.585'. [ 594.876358][ T8021] fuse: Bad value for 'fd' [ 595.318970][ T39] audit: type=1400 audit(1734374649.935:543): avc: denied { setattr } for pid=8028 comm="syz.0.590" path="/dev/cec0" dev="devtmpfs" ino=973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 595.386993][ T8041] netlink: 'syz.0.593': attribute type 4 has an invalid length. [ 595.513579][ T39] audit: type=1400 audit(1734374650.125:544): avc: denied { setopt } for pid=8044 comm="syz.3.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 595.579336][ T39] audit: type=1400 audit(1734374650.195:545): avc: denied { bind } for pid=8055 comm="syz.2.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 595.843332][ T8068] usb usb9: usbfs: process 8068 (syz.2.603) did not claim interface 0 before use [ 595.944324][ T8077] netlink: 28 bytes leftover after parsing attributes in process `syz.2.605'. [ 595.947605][ T8077] netlink: 32 bytes leftover after parsing attributes in process `syz.2.605'. [ 596.205599][ T5951] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 596.309995][ T8088] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.609'. [ 596.312677][ T8088] openvswitch: netlink: Flow actions attr not present in new flow. [ 596.341581][ T39] audit: type=1400 audit(1734374650.955:546): avc: denied { create } for pid=8091 comm="syz.0.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 596.349655][ T39] audit: type=1400 audit(1734374650.955:547): avc: denied { bind } for pid=8091 comm="syz.0.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 596.354531][ T39] audit: type=1400 audit(1734374650.965:548): avc: denied { connect } for pid=8091 comm="syz.0.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 596.362948][ T39] audit: type=1400 audit(1734374650.975:549): avc: denied { setopt } for pid=8091 comm="syz.0.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 596.378932][ T5951] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.382004][ T5951] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.384558][ T5951] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 596.388258][ T5951] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 596.390860][ T5951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.393761][ T5951] usb 7-1: config 0 descriptor?? [ 596.719704][ T8123] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 596.729463][ T8123] CIFS mount error: No usable UNC path provided in device string! [ 596.729463][ T8123] [ 596.733329][ T8123] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 596.801151][ T5951] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 596.803250][ T5951] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 596.805164][ T5951] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 596.807307][ T5951] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 596.809239][ T5951] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 596.811153][ T5951] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 596.813053][ T5951] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 596.814959][ T5951] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 596.817041][ T5951] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 596.818956][ T5951] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 596.820913][ T5951] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 596.822839][ T5951] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 596.824825][ T5951] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 596.826923][ T5951] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 596.828848][ T5951] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 596.831426][ T5951] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 596.835574][ T65] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 596.838791][ T5951] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 596.985569][ T65] usb 5-1: Using ep0 maxpacket: 8 [ 596.989279][ T65] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 596.991964][ T65] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 596.994044][ T65] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 596.996390][ T65] usb 5-1: config 250 has no interface number 0 [ 596.998023][ T65] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 597.000872][ T65] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 597.003322][ T65] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 597.005956][ T65] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 597.009190][ T65] usb 5-1: config 250 interface 228 has no altsetting 0 [ 597.012002][ T65] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 597.014164][ T65] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 597.016279][ T65] usb 5-1: Product: syz [ 597.017339][ T65] usb 5-1: SerialNumber: syz [ 597.020656][ T65] hub 5-1:250.228: bad descriptor, ignoring hub [ 597.022278][ T65] hub 5-1:250.228: probe with driver hub failed with error -5 [ 597.066883][ T8082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.069817][ T8082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.099335][ T8152] "syz.3.630" (8152) uses obsolete ecb(arc4) skcipher [ 597.217597][ T8170] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 597.357219][ T8183] overlayfs: failed to clone upperpath [ 597.375738][ T6025] usb 5-1: USB disconnect, device number 18 [ 597.725587][ T65] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 597.875570][ T65] usb 5-1: Using ep0 maxpacket: 32 [ 597.878213][ T65] usb 5-1: config index 0 descriptor too short (expected 35577, got 36) [ 597.880378][ T65] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 597.882547][ T65] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 597.884821][ T65] usb 5-1: config 1 has no interface number 0 [ 597.886539][ T65] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 224, changing to 11 [ 597.889378][ T65] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59140, setting to 1024 [ 597.892227][ T65] usb 5-1: config 1 interface 1 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 597.894928][ T65] usb 5-1: config 1 interface 1 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 597.898335][ T65] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 597.900646][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.907363][ T65] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 598.118942][ T8082] usb 7-1: string descriptor 0 read error: -2 [ 598.123770][ T65] snd_usb_pod 5-1:1.1: set_interface failed [ 598.125425][ T65] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 598.127373][ T65] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 598.130530][ T65] usb 5-1: USB disconnect, device number 19 [ 598.138947][ T8199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.644'. [ 598.430262][ T8220] netlink: 'syz.3.652': attribute type 10 has an invalid length. [ 598.434896][ T8220] syz_tun: left allmulticast mode [ 598.436386][ T8220] syz_tun: left promiscuous mode [ 598.437788][ T8220] bridge0: port 3(syz_tun) entered disabled state [ 598.441992][ T8220] bridge_slave_0: left allmulticast mode [ 598.443584][ T8220] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.447762][ T8220] bridge_slave_1: left promiscuous mode [ 598.449313][ T8220] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.452544][ T8220] bond0: (slave bond_slave_0): Releasing backup interface [ 598.454732][ T8220] bond_slave_0: left promiscuous mode [ 598.460702][ T8220] bond0: (slave bond_slave_1): Releasing backup interface [ 598.462704][ T8220] bond_slave_1: left promiscuous mode [ 598.476481][ T8220] team0: Port device team_slave_0 removed [ 598.478853][ T8220] team0: Port device team_slave_1 removed [ 598.480653][ T8220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.482641][ T8220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.485246][ T8220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.487465][ T8220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.491483][ T8220] bond0: (slave macvlan0): Releasing backup interface [ 598.493966][ T8220] veth1_vlan: left allmulticast mode [ 598.565660][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 598.565675][ T39] audit: type=1400 audit(1734374653.175:555): avc: denied { execute } for pid=8229 comm="syz.3.655" path=2F6D656D66643A25202864656C6574656429 dev="hugetlbfs" ino=24424 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 598.669535][ T8241] netlink: 28 bytes leftover after parsing attributes in process `syz.0.659'. [ 598.860280][ T8256] program syz.0.664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 598.860675][ T8257] program syz.0.664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 598.996098][ T6025] usb 7-1: reset high-speed USB device number 15 using dummy_hcd [ 599.000197][ T6025] usb 7-1: device reset changed ep0 maxpacket size! [ 599.005185][ T6050] usb 7-1: USB disconnect, device number 15 [ 599.136165][ T6050] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 599.185710][ T5959] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 599.296309][ T6050] usb 7-1: Using ep0 maxpacket: 8 [ 599.299987][ T6050] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 599.304252][ T6050] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 599.307642][ T6050] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.311012][ T6050] usb 7-1: config 0 descriptor?? [ 599.345732][ T5959] usb 5-1: Using ep0 maxpacket: 8 [ 599.348531][ T5959] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 599.350844][ T5959] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 599.353152][ T5959] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 599.355917][ T5959] usb 5-1: config 250 has no interface number 0 [ 599.357595][ T5959] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 599.360827][ T5959] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 599.364688][ T5959] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 599.369070][ T5959] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 599.373455][ T5959] usb 5-1: config 250 interface 228 has no altsetting 0 [ 599.376547][ T5959] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 599.378946][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 599.381175][ T5959] usb 5-1: Product: syz [ 599.382388][ T5959] usb 5-1: SerialNumber: syz [ 599.389908][ T5959] hub 5-1:250.228: bad descriptor, ignoring hub [ 599.392302][ T5959] hub 5-1:250.228: probe with driver hub failed with error -5 [ 599.515945][ T6050] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 599.696183][ T6050] usb 5-1: USB disconnect, device number 20 [ 599.715325][ T6050] usb 7-1: USB disconnect, device number 16 [ 599.716936][ C1] iowarrior 7-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 599.910084][ T5303] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 599.913061][ T5303] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 599.916039][ T5303] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 599.919832][ T5303] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 599.923114][ T5303] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 599.925349][ T5303] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 599.936422][ T8277] Failed to initialize the IGMP autojoin socket (err -2) [ 600.000785][ T39] audit: type=1400 audit(1734374654.615:556): avc: denied { setopt } for pid=8281 comm="syz.3.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 600.026495][ T5959] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 600.028285][ T8284] netlink: 700 bytes leftover after parsing attributes in process `syz.3.673'. [ 600.119526][ T8291] tipc: Enabling of bearer rejected, failed to enable media [ 600.179350][ T5959] usb 5-1: Using ep0 maxpacket: 32 [ 600.182625][ T5959] usb 5-1: config index 0 descriptor too short (expected 35577, got 36) [ 600.185886][ T5959] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 600.188073][ T5959] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 600.190310][ T5959] usb 5-1: config 1 has no interface number 0 [ 600.194372][ T5959] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 224, changing to 11 [ 600.197684][ T5959] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59140, setting to 1024 [ 600.200535][ T5959] usb 5-1: config 1 interface 1 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 600.203385][ T5959] usb 5-1: config 1 interface 1 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 600.206846][ T5959] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 600.209220][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.214578][ T5959] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 600.356035][ T39] audit: type=1400 audit(1734374654.965:557): avc: denied { accept } for pid=8297 comm="syz.3.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 600.356538][ T8297] delete_channel: no stack [ 600.413971][ T5959] snd_usb_pod 5-1:1.1: set_interface failed [ 600.415684][ T5959] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 600.417857][ T5959] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 600.420828][ T5959] usb 5-1: USB disconnect, device number 21 [ 600.491659][ T8277] netdevsim netdevsim4 netdevsim0: renamed from eth6 [ 600.505262][ T8277] netdevsim netdevsim4 netdevsim1: renamed from eth7 [ 600.512834][ T8277] netdevsim netdevsim4 netdevsim2: renamed from eth8 [ 600.531073][ T8277] netdevsim netdevsim4 netdevsim3: renamed from eth9 [ 600.545675][ T8307] usb usb9: usbfs: process 8307 (syz.2.682) did not claim interface 0 before use [ 600.661207][ T39] audit: type=1400 audit(1734374655.275:558): avc: denied { connect } for pid=8322 comm="syz.2.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 600.666457][ T39] audit: type=1326 audit(1734374655.275:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8322 comm="syz.2.684" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3210d85d19 code=0x7ffc0000 [ 600.672905][ T39] audit: type=1326 audit(1734374655.275:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8322 comm="syz.2.684" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3210d85d19 code=0x7ffc0000 [ 600.679428][ T39] audit: type=1326 audit(1734374655.275:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8322 comm="syz.2.684" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3210d85d19 code=0x7ffc0000 [ 600.685259][ T39] audit: type=1326 audit(1734374655.275:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8322 comm="syz.2.684" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3210d85d19 code=0x7ffc0000 [ 600.690932][ T39] audit: type=1326 audit(1734374655.275:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8322 comm="syz.2.684" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3210d85d19 code=0x7ffc0000 [ 600.696691][ T39] audit: type=1326 audit(1734374655.275:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8322 comm="syz.2.684" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3210d85d19 code=0x7ffc0000 [ 600.710553][ T8277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.713427][ T8277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.716751][ T8332] netlink: 'syz.2.686': attribute type 10 has an invalid length. [ 600.717371][ T8277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.721443][ T8277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.725170][ T8332] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 600.729761][ T8277] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 600.792683][ T8277] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 600.798031][ T8277] wireguard: wg0: Could not create IPv4 socket [ 600.800585][ T8277] wireguard: wg1: Could not create IPv4 socket [ 600.802984][ T8277] wireguard: wg2: Could not create IPv4 socket [ 600.963036][ T8349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.692'. [ 600.970330][ T8351] netlink: 1268 bytes leftover after parsing attributes in process `syz.2.693'. [ 600.972766][ T8351] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 600.975106][ T8351] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 600.982993][ T8349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.692'. [ 601.013125][ T8358] cgroup2: Unknown parameter 'euid' [ 601.039875][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.697'. [ 601.265781][ T5951] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 601.283048][ T8395] random: crng reseeded on system resumption [ 601.425551][ T5951] usb 7-1: Using ep0 maxpacket: 8 [ 601.428595][ T5951] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 601.430621][ T5951] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 601.432727][ T5951] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 601.435035][ T5951] usb 7-1: config 250 has no interface number 0 [ 601.436931][ T5951] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 601.439935][ T5951] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 601.442638][ T5951] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 601.445289][ T5951] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 601.449935][ T5951] usb 7-1: config 250 interface 228 has no altsetting 0 [ 601.452856][ T5951] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 601.455197][ T5951] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 601.457481][ T5951] usb 7-1: Product: syz [ 601.458600][ T5951] usb 7-1: SerialNumber: syz [ 601.461880][ T5951] hub 7-1:250.228: bad descriptor, ignoring hub [ 601.463553][ T5951] hub 7-1:250.228: probe with driver hub failed with error -5 [ 601.765697][ T5951] usb 7-1: USB disconnect, device number 17 [ 602.108164][ T25] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 602.255951][ T25] usb 7-1: Using ep0 maxpacket: 32 [ 602.260080][ T25] usb 7-1: config index 0 descriptor too short (expected 35577, got 36) [ 602.262165][ T25] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 602.264437][ T25] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 602.266850][ T25] usb 7-1: config 1 has no interface number 0 [ 602.268436][ T25] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 224, changing to 11 [ 602.271306][ T25] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59140, setting to 1024 [ 602.274143][ T25] usb 7-1: config 1 interface 1 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 602.277913][ T25] usb 7-1: config 1 interface 1 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 602.282548][ T25] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 602.285873][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.291865][ T25] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 602.392686][ T8413] netlink: 44 bytes leftover after parsing attributes in process `syz.3.714'. [ 602.491881][ T25] snd_usb_pod 7-1:1.1: set_interface failed [ 602.493603][ T25] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 602.495732][ T25] snd_usb_pod 7-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 602.501133][ T25] usb 7-1: USB disconnect, device number 18 [ 602.925962][ T8419] netlink: 'syz.3.715': attribute type 10 has an invalid length. [ 602.933186][ T8419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.936073][ T8419] batadv0: entered promiscuous mode [ 602.937829][ T8419] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 602.940557][ T8419] netlink: 'syz.3.715': attribute type 10 has an invalid length. [ 602.944416][ T8419] netlink: 'syz.3.715': attribute type 10 has an invalid length. [ 602.946993][ T8419] netlink: 'syz.3.715': attribute type 10 has an invalid length. [ 602.949331][ T8419] netlink: 'syz.3.715': attribute type 10 has an invalid length. [ 602.951406][ T8419] netlink: 'syz.3.715': attribute type 10 has an invalid length. [ 602.953456][ T8419] netlink: 'syz.3.715': attribute type 10 has an invalid length. [ 602.955602][ T8419] netlink: 'syz.3.715': attribute type 10 has an invalid length. [ 602.957641][ T8419] netlink: 'syz.3.715': attribute type 10 has an invalid length. [ 603.051228][ T8429] ALSA: mixer_oss: invalid OSS volume '' [ 603.619673][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 603.643012][ T8447] netlink: 24 bytes leftover after parsing attributes in process `syz.3.721'. [ 603.678042][ T8449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.722'. [ 603.681506][ T8449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.722'. [ 603.710550][ T8451] netlink: 36 bytes leftover after parsing attributes in process `syz.3.723'. [ 603.713077][ T8451] netlink: 16 bytes leftover after parsing attributes in process `syz.3.723'. [ 604.026651][ T39] kauditd_printk_skb: 14 callbacks suppressed [ 604.026662][ T39] audit: type=1400 audit(1734374658.645:579): avc: denied { create } for pid=8460 comm="syz.3.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 604.290007][ T8478] vlan2: entered promiscuous mode [ 604.291553][ T8478] vlan1: entered promiscuous mode [ 604.293076][ T8478] vlan2: entered allmulticast mode [ 604.294440][ T8478] vlan1: entered allmulticast mode [ 604.295932][ T8478] veth0_vlan: entered allmulticast mode [ 604.299527][ T8478] team0: Port device vlan2 added [ 604.475578][ T5951] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 604.615529][ T5951] usb 7-1: device descriptor read/64, error -71 [ 604.865559][ T5951] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 604.996292][ T5951] usb 7-1: device descriptor read/64, error -71 [ 605.105901][ T5951] usb usb7-port1: attempt power cycle [ 605.445565][ T5951] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 605.465970][ T5951] usb 7-1: device descriptor read/8, error -71 [ 605.550997][ T8512] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 605.572780][ T8514] tipc: Enabling of bearer rejected, media not registered [ 605.575035][ T8514] Invalid source name [ 605.576109][ T8514] UBIFS error (pid: 8514): cannot open "/dev/sg0", error -22 [ 605.577159][ T8514] tipc: Enabling of bearer rejected, media not registered [ 605.578013][ T8516] Invalid source name [ 605.582266][ T8516] UBIFS error (pid: 8516): cannot open "/dev/sg0", error -22 [ 605.653432][ T8525] overlayfs: conflicting options: nfs_export=on,index=off [ 605.705676][ T5951] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 605.736572][ T5951] usb 7-1: device descriptor read/8, error -71 [ 605.846816][ T5951] usb usb7-port1: unable to enumerate USB device [ 605.872914][ T8535] validate_nla: 59 callbacks suppressed [ 605.872926][ T8535] netlink: 'syz.0.747': attribute type 10 has an invalid length. [ 605.879673][ T8535] veth0_vlan: left allmulticast mode [ 605.884994][ T8535] vlan1: left allmulticast mode [ 605.888357][ T8535] vlan1: left promiscuous mode [ 605.895065][ T8535] veth0_vlan: left promiscuous mode [ 605.900488][ T8535] veth0_vlan: entered promiscuous mode [ 605.903496][ T8535] vlan1: entered allmulticast mode [ 605.904849][ T8535] veth0_vlan: entered allmulticast mode [ 605.906444][ T8535] vlan1: entered promiscuous mode [ 605.908917][ T8535] [ 605.909570][ T8535] ============================================ [ 605.911176][ T8535] WARNING: possible recursive locking detected [ 605.912790][ T8535] 6.13.0-rc3-syzkaller #0 Not tainted SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 605.915099][ T8535] -------------------------------------------- [ 605.917772][ T8535] syz.0.747/8535 is trying to acquire lock: [ 605.919328][ T8535] ffff88804dce4e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_device_event+0x2c7/0x770 [ 605.921981][ T8535] [ 605.921981][ T8535] but task is already holding lock: [ 605.923890][ T8535] ffff88804dce4e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_add_slave+0x9c/0x20e0 [ 605.926501][ T8535] [ 605.926501][ T8535] other info that might help us debug this: [ 605.928589][ T8535] Possible unsafe locking scenario: [ 605.928589][ T8535] [ 605.930710][ T8535] CPU0 [ 605.931667][ T8535] ---- [ 605.932545][ T8535] lock(team->team_lock_key#2); [ 605.933843][ T8535] lock(team->team_lock_key#2); [ 605.935164][ T8535] [ 605.935164][ T8535] *** DEADLOCK *** [ 605.935164][ T8535] [ 605.937714][ T8535] May be due to missing lock nesting notation [ 605.937714][ T8535] [ 605.939840][ T8535] 2 locks held by syz.0.747/8535: [ 605.941173][ T8535] #0: ffffffff8fedc048 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x5d9/0x1d60 [ 605.943562][ T8535] #1: ffff88804dce4e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_add_slave+0x9c/0x20e0 [ 605.946196][ T8535] [ 605.946196][ T8535] stack backtrace: [ 605.947731][ T8535] CPU: 0 UID: 0 PID: 8535 Comm: syz.0.747 Not tainted 6.13.0-rc3-syzkaller #0 [ 605.950008][ T8535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 605.952786][ T8535] Call Trace: [ 605.953661][ T8535] [ 605.954431][ T8535] dump_stack_lvl+0x116/0x1f0 [ 605.955674][ T8535] print_deadlock_bug+0x2e3/0x410 [ 605.956998][ T8535] __lock_acquire+0x2117/0x3c40 [ 605.958273][ T8535] ? __pfx___lock_acquire+0x10/0x10 [ 605.959592][ T8535] ? __local_bh_enable_ip+0xa4/0x120 [ 605.960985][ T8535] ? __pfx___lock_acquire+0x10/0x10 [ 605.962349][ T8535] ? dev_mc_add+0xd4/0x110 [ 605.963525][ T8535] ? __local_bh_enable_ip+0xa4/0x120 [ 605.964903][ T8535] lock_acquire.part.0+0x11b/0x380 [ 605.966288][ T8535] ? team_device_event+0x2c7/0x770 [ 605.967648][ T8535] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 605.969116][ T8535] ? rcu_is_watching+0x12/0xc0 [ 605.970384][ T8535] ? trace_lock_acquire+0x14e/0x1f0 [ 605.971743][ T8535] ? team_device_event+0x2c7/0x770 [ 605.973069][ T8535] ? lock_acquire+0x2f/0xb0 [ 605.974243][ T8535] ? team_device_event+0x2c7/0x770 [ 605.975585][ T8535] __mutex_lock+0x19b/0xa60 [ 605.976784][ T8535] ? team_device_event+0x2c7/0x770 [ 605.978119][ T8535] ? dev_get_flags+0x1ea/0x250 [ 605.979359][ T8535] ? team_device_event+0x2c7/0x770 [ 605.980701][ T8535] ? __pfx___mutex_lock+0x10/0x10 [ 605.982083][ T8535] ? team_device_event+0x2c7/0x770 [ 605.983420][ T8535] team_device_event+0x2c7/0x770 [ 605.984691][ T8535] notifier_call_chain+0xb7/0x410 [ 605.985998][ T8535] ? __pfx_team_device_event+0x10/0x10 [ 605.987442][ T8535] call_netdevice_notifiers_info+0xbe/0x140 [ 605.989014][ T8535] __dev_notify_flags+0x12d/0x2e0 [ 605.990324][ T8535] ? __pfx___dev_notify_flags+0x10/0x10 [ 605.991787][ T8535] ? __pfx___dev_change_flags+0x10/0x10 [ 605.993221][ T8535] ? __nla_put+0x27/0x40 [ 605.994326][ T8535] dev_change_flags+0x10c/0x160 [ 605.995664][ T8535] vlan_device_event+0xdfc/0x2120 [ 605.997025][ T8535] ? __pfx_phonet_device_notify+0x10/0x10 [ 605.998507][ T8535] ? __pfx_vlan_device_event+0x10/0x10 [ 605.999962][ T8535] ? __pfx_br_device_event+0x10/0x10 [ 606.001951][ T8535] ? raw_notifier+0xa4/0x860 [ 606.003186][ T8535] ? isotp_notifier+0xa4/0x6d0 [ 606.004435][ T8535] ? bcm_notifier+0xa8/0x820 [ 606.005623][ T8535] ? cgw_notifier+0xa2/0x390 [ 606.006799][ T8535] notifier_call_chain+0xb7/0x410 [ 606.008134][ T8535] ? __pfx_vlan_device_event+0x10/0x10 [ 606.009546][ T8535] call_netdevice_notifiers_info+0xbe/0x140 [ 606.011088][ T8535] __dev_notify_flags+0x12d/0x2e0 [ 606.012420][ T8535] ? __pfx___dev_notify_flags+0x10/0x10 [ 606.013850][ T8535] ? __pfx___dev_change_flags+0x10/0x10 [ 606.015262][ T8535] ? __nla_put+0x27/0x40 [ 606.016368][ T8535] dev_change_flags+0x10c/0x160 [ 606.017640][ T8535] vlan_device_event+0xdfc/0x2120 [ 606.018975][ T8535] ? __pfx_phonet_device_notify+0x10/0x10 [ 606.020472][ T8535] ? __pfx_vlan_device_event+0x10/0x10 [ 606.021934][ T8535] ? __pfx_br_device_event+0x10/0x10 [ 606.023313][ T8535] ? raw_notifier+0xa4/0x860 [ 606.024515][ T8535] ? isotp_notifier+0xa4/0x6d0 [ 606.025787][ T8535] ? bcm_notifier+0xa8/0x820 [ 606.027005][ T8535] ? cgw_notifier+0xa2/0x390 [ 606.028236][ T8535] notifier_call_chain+0xb7/0x410 [ 606.029569][ T8535] ? __pfx_vlan_device_event+0x10/0x10 [ 606.030946][ T8535] call_netdevice_notifiers_info+0xbe/0x140 [ 606.032475][ T8535] dev_open+0x144/0x160 [ 606.033672][ T8535] ? __pfx_dev_open+0x10/0x10 [ 606.034924][ T8535] ? __kmalloc_noprof+0x23b/0x510 [ 606.036288][ T8535] team_add_slave+0xacd/0x20e0 [ 606.037545][ T8535] ? __pfx_team_add_slave+0x10/0x10 [ 606.038914][ T8535] ? __lock_acquire+0x15a9/0x3c40 [ 606.040239][ T8535] ? __pfx_validate_linkmsg+0x10/0x10 [ 606.041693][ T8535] ? __pfx_team_add_slave+0x10/0x10 [ 606.043046][ T8535] do_set_master+0x1bc/0x230 [ 606.044206][ T8535] do_setlink.constprop.0+0xb60/0x3f70 [ 606.045614][ T8535] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 606.047175][ T8535] ? lock_acquire.part.0+0x11b/0x380 [ 606.048498][ T8535] ? __mutex_trylock_common+0xea/0x250 [ 606.049934][ T8535] ? __pfx___mutex_trylock_common+0x10/0x10 [ 606.051486][ T8535] ? rtnl_newlink+0x5d9/0x1d60 [ 606.052739][ T8535] ? rcu_is_watching+0x12/0xc0 [ 606.053986][ T8535] ? trace_contention_end+0xee/0x140 [ 606.055363][ T8535] ? __mutex_lock+0x1cc/0xa60 [ 606.056602][ T8535] ? rtnl_newlink+0x5d9/0x1d60 [ 606.057853][ T8535] ? __pfx___mutex_lock+0x10/0x10 [ 606.059171][ T8535] ? __pfx___nla_validate_parse+0x10/0x10 [ 606.060676][ T8535] ? cap_capable+0x1cf/0x240 [ 606.061890][ T8535] rtnl_newlink+0x1303/0x1d60 [ 606.063093][ T8535] ? __pfx_rtnl_newlink+0x10/0x10 [ 606.064423][ T8535] ? __pfx___lock_acquire+0x10/0x10 [ 606.065791][ T8535] ? cred_has_capability.isra.0+0x192/0x2f0 [ 606.067356][ T8535] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 606.068987][ T8535] ? find_held_lock+0x2d/0x110 [ 606.070244][ T8535] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 606.071536][ T8535] ? __pfx_lock_release+0x10/0x10 [ 606.072829][ T8535] ? trace_lock_acquire+0x14e/0x1f0 [ 606.074290][ T8535] ? __pfx_rtnl_newlink+0x10/0x10 [ 606.075669][ T8535] rtnetlink_rcv_msg+0x95b/0xea0 [ 606.076977][ T8535] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 606.078384][ T8535] netlink_rcv_skb+0x16b/0x440 [ 606.079645][ T8535] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 606.081054][ T8535] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 606.082446][ T8535] ? netlink_deliver_tap+0x1ae/0xd30 [ 606.083852][ T8535] netlink_unicast+0x53c/0x7f0 [ 606.085099][ T8535] ? __pfx_netlink_unicast+0x10/0x10 [ 606.086477][ T8535] netlink_sendmsg+0x8b8/0xd70 [ 606.087750][ T8535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 606.089130][ T8535] ____sys_sendmsg+0xaaf/0xc90 [ 606.090386][ T8535] ? copy_msghdr_from_user+0x10b/0x160 [ 606.091814][ T8535] ? __pfx_____sys_sendmsg+0x10/0x10 [ 606.093199][ T8535] ___sys_sendmsg+0x135/0x1e0 [ 606.094430][ T8535] ? __pfx____sys_sendmsg+0x10/0x10 [ 606.095799][ T8535] ? __pfx_lock_release+0x10/0x10 [ 606.097137][ T8535] ? trace_lock_acquire+0x14e/0x1f0 [ 606.098502][ T8535] ? __fget_files+0x206/0x3a0 [ 606.099745][ T8535] __sys_sendmsg+0x16e/0x220 [ 606.100954][ T8535] ? __pfx___sys_sendmsg+0x10/0x10 [ 606.102316][ T8535] ? __x64_sys_futex+0x1e1/0x4c0 [ 606.103617][ T8535] do_syscall_64+0xcd/0x250 [ 606.104818][ T8535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.106367][ T8535] RIP: 0033:0x7f3b2dd85d19 [ 606.107538][ T8535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.112445][ T8535] RSP: 002b:00007f3b2ebe9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 606.114562][ T8535] RAX: ffffffffffffffda RBX: 00007f3b2df75fa0 RCX: 00007f3b2dd85d19 [ 606.116624][ T8535] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000004 [ 606.118685][ T8535] RBP: 00007f3b2de01a20 R08: 0000000000000000 R09: 0000000000000000 [ 606.120778][ T8535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.122835][ T8535] R13: 0000000000000000 R14: 00007f3b2df75fa0 R15: 00007fffacac3e38 [ 606.125045][ T8535] VM DIAGNOSIS: 18:44:20 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851b91a5 RDI=ffffffff9ab0cc20 RBP=ffffffff9ab0cbe0 RSP=ffffc90003aae0d0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6465746e69612e36 R12=0000000000000000 R13=0000000000000065 R14=ffffffff851b9140 R15=0000000000000000 RIP=ffffffff851b91cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f3b2ebe96c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2e5dca56c0 CR3=0000000032608000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000000004c Opmask01=00000000ffffffff Opmask02=00000000fff81000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a4a7579fbe66d7fd 5f5b758c1ae680c7 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 377d8aff34b87bd2 2bac67fb806efe96 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 901bdfc066187f38 a18393cc3f19e2b9 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f4b4acc044b5aa27 6b3ca0c285e3ccff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000ec0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f4d6000096de0000 016fe6310000009c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a39e00005fd00000 87560000989c0000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9aae00000000007c 016fe62c0000003b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 016fe7a7016fe7f6 dc260000016fe4eb ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d292d21479688265 e7875209a4574ae4 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c742943d2c2adf0 0381d5424944eedd ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080000001 RBX=ffffea0000da5f80 RCX=ffffffff81e9ee7e RDX=ffff888022e88000 RSI=ffffffff81e9ee8c RDI=0000000000000007 RBP=ffffea0000da5f80 RSP=ffffc90006487818 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000005beb R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=ffffea0000da5f48 RIP=ffffffff819a1458 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd6f86a7d60 CR3=0000000028850000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6f7b4b6a3 00007fd6f7b4b6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe9e681620 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555848474e8 0000555584847360 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555847d989f 00005555847d9500 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c6c756e5f726568 7069632862636501 fffffffffffffffe ff0808e803040400 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100013800401 0000060806060154 a200080013e00300 100013d003001000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 13c00302100013b0 0305881000129003 0002000a80030008 0009f80338040009 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f40318040009f003 00080009e8030000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000296c ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f434900414e 41445f444c005242 494c444449005f44 4c00574f4e5f444e ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004644 4c0057444c004441 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000ca81c RBX=0000000000000002 RCX=ffffffff8b293679 RDX=ffffed100d506fee RSI=ffffffff8bd1e760 RDI=ffffffff817095a9 RBP=ffffed1003ad4000 RSP=ffffc90000197e08 R8 =0000000000000000 R9 =ffffed100d506fed R10=ffff88806a837f6b R11=0000000000000001 R12=0000000000000002 R13=ffff88801d6a0000 R14=ffffffff905f2c50 R15=0000000000000000 RIP=ffffffff8b294a5f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=00000000359b2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe34dc2c30 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3210e029b2 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3210e029bf ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3210e029b9 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3210e029cd ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3210e02a53 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3210e02b31 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000d0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f434900414e 41445f444c005242 494c444449005f44 4c00574f4e5f444e ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004644 4c0057444c004441 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000ac2d4 RBX=0000000000000003 RCX=ffffffff8b293679 RDX=ffffed100d526fee RSI=ffffffff8bd1e760 RDI=ffffffff817095a9 RBP=ffffed1003ad4488 RSP=ffffc900001a7e08 R8 =0000000000000000 R9 =ffffed100d526fed R10=ffff88806a937f6b R11=0000000000000001 R12=0000000000000003 R13=ffff88801d6a2440 R14=ffffffff905f2c50 R15=0000000000000000 RIP=ffffffff8b294a5f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020001400 CR3=0000000032608000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b2de029b2 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b2de029bf ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b2de029b9 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b2de029cd ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b2de02a53 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b2de02b31 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000206145e 0000003648f8a10b 9fcc723fa72ab6e6 888100100000002e ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9412000080020000 0010000a000e0000 00000206145e0000 003648f8a10b9fcc ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b2eaad100 00007f3b2df4b440 00007f3b2df40004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b2df4b498 00007f3b2df4b490 00007f3b2df4b488 00007f3b2df4b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f434900414e 41445f444c005242 494c444449005f44 4c00574f4e5f444e ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004644 4c0057444c004441 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000